last executing test programs:

1m48.725032148s ago: executing program 3 (id=29):
r0 = socket(0x11, 0x800000003, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
personality(0x4000000)
pipe(0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x8, &(0x7f0000000080)=[{0x2, 0x8, 0x4, 0x101}, {0xff80, 0x7, 0x92, 0xf526}, {0x9, 0x4, 0xfc, 0xfeb}, {0x0, 0x6, 0xcb, 0x6}, {0xfffd, 0x3, 0x2, 0x3}, {0x4000, 0x5, 0x5, 0x6}, {0xf4f, 0xff, 0x9, 0xc}, {0x4, 0x3, 0xc, 0x7ff}]}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f00000000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
execve(0x0, 0x0, 0x0)

1m48.406475613s ago: executing program 3 (id=32):
socket$kcm(0x2, 0x5, 0x84)
socket(0x10, 0x4, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
personality(0x4000000)
pipe(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x6}, 0x8)
mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

1m48.264311915s ago: executing program 3 (id=34):
pipe2$watch_queue(&(0x7f0000000080), 0x80)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x58901, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x28101)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100))
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c)
r3 = getpid()
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB="dfe9602dd7f97bf8ee3f0d2ac5898894a976d65716396a2c7bbdc45d456592033ce9131701aa41aafb463d66460af87663f9626b0b2cda18af16578003f94f5fb075cacc2e7e26bbbca49a0ede27a51123ba15364f49f4890a5c49d6e479c30d88b644f8923066719521d2dcec3be077f30e67cf5d76d23033872f", @ANYRESHEX=r3, @ANYRESDEC=r3, @ANYRES32=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r6, 0xa, 0x13)
fcntl$setlease(r6, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setrlimit(0x1, &(0x7f0000000000))
fallocate(r7, 0x0, 0x11, 0x1afd)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x3000000)

1m47.392372546s ago: executing program 3 (id=46):
r0 = memfd_secret(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x1ff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m47.241590238s ago: executing program 4 (id=48):
r0 = socket(0x11, 0x800000003, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
personality(0x4000000)
pipe(0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x8, &(0x7f0000000080)=[{0x2, 0x8, 0x4, 0x101}, {0xff80, 0x7, 0x92, 0xf526}, {0x9, 0x4, 0xfc, 0xfeb}, {0x0, 0x6, 0xcb, 0x6}, {0xfffd, 0x3, 0x2, 0x3}, {0x4000, 0x5, 0x5, 0x6}, {0xf4f, 0xff, 0x9, 0xc}, {0x4, 0x3, 0xc, 0x7ff}]}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
execve(0x0, 0x0, 0x0)

1m46.946472062s ago: executing program 4 (id=51):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00"/135], 0xa8}}, 0x0)

1m46.780190176s ago: executing program 4 (id=52):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0})
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x100000000000000)

1m46.683888984s ago: executing program 4 (id=53):
r0 = memfd_secret(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x1ff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r3 = syz_io_uring_setup(0x347c, &(0x7f00000002c0)={0x0, 0x2000000, 0x10100, 0x2}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m46.531268086s ago: executing program 3 (id=55):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
read$hiddev(r1, &(0x7f0000000600)=""/98, 0x62)
socket(0x400000000010, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10)
write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x14, 0x0, 0x0)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)

1m45.524144878s ago: executing program 4 (id=58):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x52, 0x1, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
llistxattr(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
close(r1)

1m43.011528013s ago: executing program 4 (id=64):
r0 = memfd_secret(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x1ff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r3 = syz_io_uring_setup(0x347c, &(0x7f00000002c0)={0x0, 0x2000000, 0x10100, 0x2}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m43.011087913s ago: executing program 3 (id=65):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r6 = dup(r5)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

1m42.960670077s ago: executing program 32 (id=64):
r0 = memfd_secret(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x1ff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
dup(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r3 = syz_io_uring_setup(0x347c, &(0x7f00000002c0)={0x0, 0x2000000, 0x10100, 0x2}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m42.92067062s ago: executing program 33 (id=65):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r6 = dup(r5)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

3.851443387s ago: executing program 6 (id=1485):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

3.040196553s ago: executing program 5 (id=1500):
r0 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
listen(r1, 0x0)
accept4$nfc_llcp(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
getpid()

2.229848049s ago: executing program 5 (id=1502):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9", 0x36e}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed", 0x22}], 0x2}}], 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.97289136s ago: executing program 6 (id=1503):
r0 = socket$kcm(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x40084)

1.856870169s ago: executing program 2 (id=1505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000)

1.835988561s ago: executing program 1 (id=1506):
syz_emit_ethernet(0x44, &(0x7f0000000000)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "d000cbb00fe0"}}}}}, 0x0)

1.835403941s ago: executing program 2 (id=1507):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0xffffffff, 0x4, 0x6}]}]}}, &(0x7f0000000f40)=""/4084, 0x32, 0xff4, 0x7, 0x7ff}, 0x28)

1.833433121s ago: executing program 1 (id=1508):
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2a020400)

1.803523604s ago: executing program 2 (id=1509):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)

1.715611701s ago: executing program 2 (id=1510):
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345})
io_uring_enter(r0, 0x47ba, 0xda2a, 0x62, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

1.507563928s ago: executing program 2 (id=1513):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
setresuid(0xee01, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x1bc, 0x1000)
syz_emit_ethernet(0x57, &(0x7f00000013c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$MSR(0x0, 0x3ff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

1.35659094s ago: executing program 0 (id=1516):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

1.299316055s ago: executing program 5 (id=1517):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/igmp6\x00')
pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0x80)

1.247204199s ago: executing program 5 (id=1518):
syz_emit_ethernet(0x44, &(0x7f0000000000)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "d000cbb00fe0"}}}}}, 0x0)

1.176186435s ago: executing program 0 (id=1519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000)

1.057212314s ago: executing program 1 (id=1520):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005"], 0x7c}}, 0x80)

1.057076675s ago: executing program 6 (id=1521):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)

1.056733725s ago: executing program 5 (id=1522):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[])
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})

1.012241058s ago: executing program 0 (id=1523):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

994.48325ms ago: executing program 1 (id=1524):
setpriority(0x0, 0x0, 0x2a14b58)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xc001, 0x0, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x2, 0x4)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)

933.426585ms ago: executing program 6 (id=1525):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102389, 0xd60794739b269937)

933.200075ms ago: executing program 6 (id=1526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

928.916385ms ago: executing program 0 (id=1527):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="d5", 0x1}], 0x1)

919.959766ms ago: executing program 2 (id=1528):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@resgid}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x497, &(0x7f0000001540)="$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")
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x1a, 0x0, 0x1, 0x9}, 0x28)

845.610732ms ago: executing program 0 (id=1529):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

825.709293ms ago: executing program 6 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

577.982543ms ago: executing program 5 (id=1531):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r1, 0x11, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

443.778814ms ago: executing program 0 (id=1532):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

128.71086ms ago: executing program 1 (id=1533):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)

0s ago: executing program 1 (id=1534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000)

kernel console output (not intermixed with test programs):

ill be lost
[   76.098411][  T588] 
[   76.121182][  T588] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   76.267941][  T588] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28
[   76.280405][  T588] EXT4-fs (loop0): This should not happen!! Data will be lost
[   76.280405][  T588] 
[   76.290173][  T588] EXT4-fs (loop0): Total free blocks count 0
[   76.296467][  T588] EXT4-fs (loop0): Free/Dirty block details
[   76.302623][  T588] EXT4-fs (loop0): free_blocks=4293918720
[   76.308440][  T588] EXT4-fs (loop0): dirty_blocks=16
[   76.313889][  T588] EXT4-fs (loop0): Block reservation details
[   76.768342][ T5996] loop1: detected capacity change from 0 to 4096
[   76.882481][ T6002] tmpfs: Bad value for 'mpol'
[   76.908269][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.340971][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.544'.
[   77.372324][ T6051] tmpfs: Bad value for 'mpol'
[   77.450353][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.490784][ T6068] FAULT_INJECTION: forcing a failure.
[   77.490784][ T6068] name failslab, interval 1, probability 0, space 0, times 0
[   77.503659][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.2.549 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   77.503694][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   77.503705][ T6068] Call Trace:
[   77.503712][ T6068]  <TASK>
[   77.503721][ T6068]  __dump_stack+0x1d/0x30
[   77.503744][ T6068]  dump_stack_lvl+0xe8/0x140
[   77.503764][ T6068]  dump_stack+0x15/0x1b
[   77.503782][ T6068]  should_fail_ex+0x265/0x280
[   77.503891][ T6068]  should_failslab+0x8c/0xb0
[   77.503919][ T6068]  __kmalloc_noprof+0xa5/0x3e0
[   77.503943][ T6068]  ? qrtr_tun_write_iter+0x87/0x150
[   77.503967][ T6068]  qrtr_tun_write_iter+0x87/0x150
[   77.504000][ T6068]  aio_write+0x2e2/0x410
[   77.504035][ T6068]  io_submit_one+0xacd/0x11d0
[   77.504068][ T6068]  __se_sys_io_submit+0xfb/0x280
[   77.504155][ T6068]  __x64_sys_io_submit+0x43/0x50
[   77.504176][ T6068]  x64_sys_call+0x2d5d/0x2ff0
[   77.504266][ T6068]  do_syscall_64+0xd2/0x200
[   77.504292][ T6068]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   77.504324][ T6068]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   77.504344][ T6068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.504365][ T6068] RIP: 0033:0x7f1394d1eb69
[   77.504438][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.504456][ T6068] RSP: 002b:00007f1393387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   77.504477][ T6068] RAX: ffffffffffffffda RBX: 00007f1394f45fa0 RCX: 00007f1394d1eb69
[   77.504490][ T6068] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f1395a84000
[   77.504502][ T6068] RBP: 00007f1393387090 R08: 0000000000000000 R09: 0000000000000000
[   77.504593][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.504606][ T6068] R13: 0000000000000000 R14: 00007f1394f45fa0 R15: 00007ffed0a820d8
[   77.504624][ T6068]  </TASK>
[   77.751000][ T6070] loop1: detected capacity change from 0 to 512
[   77.780633][ T6070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   77.797889][ T6070] EXT4-fs (loop1): 1 truncate cleaned up
[   77.805457][ T6070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.833815][ T6070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.956018][ T6095] tmpfs: Bad value for 'mpol'
[   78.281814][ T6137] tmpfs: Bad value for 'mpol'
[   78.290533][ T6134] loop6: detected capacity change from 0 to 128
[   78.316969][ T6134] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   78.339675][ T6134] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   78.573131][ T6154] FAULT_INJECTION: forcing a failure.
[   78.573131][ T6154] name failslab, interval 1, probability 0, space 0, times 0
[   78.586124][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: syz.6.568 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   78.586156][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   78.586169][ T6154] Call Trace:
[   78.586175][ T6154]  <TASK>
[   78.586182][ T6154]  __dump_stack+0x1d/0x30
[   78.586203][ T6154]  dump_stack_lvl+0xe8/0x140
[   78.586248][ T6154]  dump_stack+0x15/0x1b
[   78.586267][ T6154]  should_fail_ex+0x265/0x280
[   78.586305][ T6154]  should_failslab+0x8c/0xb0
[   78.586342][ T6154]  kmem_cache_alloc_node_noprof+0x57/0x320
[   78.586373][ T6154]  ? __alloc_skb+0x101/0x320
[   78.586406][ T6154]  __alloc_skb+0x101/0x320
[   78.586450][ T6154]  alloc_uevent_skb+0x5c/0x120
[   78.586478][ T6154]  kobject_uevent_net_broadcast+0x23c/0x410
[   78.586618][ T6154]  kobject_uevent_env+0x43d/0x570
[   78.586644][ T6154]  ? device_pm_check_callbacks+0x683/0x6a0
[   78.586671][ T6154]  kobject_uevent+0x1d/0x30
[   78.586737][ T6154]  device_del+0x710/0x790
[   78.586758][ T6154]  device_unregister+0x15/0x40
[   78.586778][ T6154]  bdi_unregister+0x307/0x3a0
[   78.586807][ T6154]  __del_gendisk+0x2c3/0x570
[   78.586914][ T6154]  del_gendisk+0xac/0xf0
[   78.586938][ T6154]  loop_remove+0x26/0x80
[   78.586966][ T6154]  loop_control_ioctl+0x3b3/0x3f0
[   78.586997][ T6154]  ? __pfx_loop_control_ioctl+0x10/0x10
[   78.587076][ T6154]  __se_sys_ioctl+0xcb/0x140
[   78.587112][ T6154]  __x64_sys_ioctl+0x43/0x50
[   78.587143][ T6154]  x64_sys_call+0x1816/0x2ff0
[   78.587161][ T6154]  do_syscall_64+0xd2/0x200
[   78.587202][ T6154]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   78.587228][ T6154]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   78.587252][ T6154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.587276][ T6154] RIP: 0033:0x7f66352ceb69
[   78.587346][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.587374][ T6154] RSP: 002b:00007f66338ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   78.587393][ T6154] RAX: ffffffffffffffda RBX: 00007f66354f6160 RCX: 00007f66352ceb69
[   78.587405][ T6154] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003
[   78.587418][ T6154] RBP: 00007f66338ed090 R08: 0000000000000000 R09: 0000000000000000
[   78.587432][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.587525][ T6154] R13: 0000000000000000 R14: 00007f66354f6160 R15: 00007ffdc01b3b18
[   78.587542][ T6154]  </TASK>
[   79.068922][ T6176] tmpfs: Bad value for 'mpol'
[   79.180691][ T6188] loop1: detected capacity change from 0 to 512
[   79.214210][ T6188] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.582: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   79.242357][ T6188] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.582: Bad quota inode: 3, type: 0
[   79.293470][ T6188] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   79.355218][ T6188] EXT4-fs (loop1): mount failed
[   79.567910][ T6231] loop5: detected capacity change from 0 to 128
[   79.585253][ T6231] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   79.609546][ T6231] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   80.204865][ T6233] syzkaller0: entered promiscuous mode
[   80.211559][ T6233] syzkaller0: entered allmulticast mode
[   80.364291][ T6263] FAULT_INJECTION: forcing a failure.
[   80.364291][ T6263] name failslab, interval 1, probability 0, space 0, times 0
[   80.377201][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.6.603 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   80.377304][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   80.377316][ T6263] Call Trace:
[   80.377322][ T6263]  <TASK>
[   80.377330][ T6263]  __dump_stack+0x1d/0x30
[   80.377353][ T6263]  dump_stack_lvl+0xe8/0x140
[   80.377374][ T6263]  dump_stack+0x15/0x1b
[   80.377433][ T6263]  should_fail_ex+0x265/0x280
[   80.377516][ T6263]  ? rtnl_newlink+0x5c/0x12d0
[   80.377540][ T6263]  should_failslab+0x8c/0xb0
[   80.377566][ T6263]  __kmalloc_cache_noprof+0x4c/0x320
[   80.377600][ T6263]  rtnl_newlink+0x5c/0x12d0
[   80.377702][ T6263]  ? css_rstat_updated+0xb7/0x240
[   80.377776][ T6263]  ? try_charge_memcg+0x200/0x9e0
[   80.377796][ T6263]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[   80.377844][ T6263]  ? __memcg_slab_free_hook+0x135/0x230
[   80.377881][ T6263]  ? __rcu_read_unlock+0x4f/0x70
[   80.377909][ T6263]  ? avc_has_perm_noaudit+0x1b1/0x200
[   80.377930][ T6263]  ? cred_has_capability+0x210/0x280
[   80.377982][ T6263]  ? selinux_capable+0x31/0x40
[   80.378009][ T6263]  ? security_capable+0x83/0x90
[   80.378099][ T6263]  ? ns_capable+0x7d/0xb0
[   80.378179][ T6263]  ? __pfx_rtnl_newlink+0x10/0x10
[   80.378199][ T6263]  rtnetlink_rcv_msg+0x5fb/0x6d0
[   80.378355][ T6263]  netlink_rcv_skb+0x123/0x220
[   80.378390][ T6263]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   80.378416][ T6263]  rtnetlink_rcv+0x1c/0x30
[   80.378435][ T6263]  netlink_unicast+0x5bd/0x690
[   80.378476][ T6263]  netlink_sendmsg+0x58b/0x6b0
[   80.378512][ T6263]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.378621][ T6263]  __sock_sendmsg+0x142/0x180
[   80.378682][ T6263]  ____sys_sendmsg+0x31e/0x4e0
[   80.378719][ T6263]  ___sys_sendmsg+0x17b/0x1d0
[   80.378766][ T6263]  __x64_sys_sendmsg+0xd4/0x160
[   80.378872][ T6263]  x64_sys_call+0x191e/0x2ff0
[   80.378926][ T6263]  do_syscall_64+0xd2/0x200
[   80.378951][ T6263]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   80.379014][ T6263]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   80.379036][ T6263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.379055][ T6263] RIP: 0033:0x7f66352ceb69
[   80.379070][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.379166][ T6263] RSP: 002b:00007f663392f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   80.379225][ T6263] RAX: ffffffffffffffda RBX: 00007f66354f5fa0 RCX: 00007f66352ceb69
[   80.379234][ T6263] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003
[   80.379242][ T6263] RBP: 00007f663392f090 R08: 0000000000000000 R09: 0000000000000000
[   80.379250][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.379258][ T6263] R13: 0000000000000000 R14: 00007f66354f5fa0 R15: 00007ffdc01b3b18
[   80.379270][ T6263]  </TASK>
[   80.678141][   T29] kauditd_printk_skb: 614 callbacks suppressed
[   80.678159][   T29] audit: type=1400 audit(1754128948.321:4617): avc:  denied  { allowed } for  pid=6268 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   80.704259][   T29] audit: type=1400 audit(1754128948.611:4618): avc:  denied  { create } for  pid=6268 comm="syz.0.605" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   80.783799][   T29] audit: type=1400 audit(1754128948.721:4619): avc:  denied  { unmount } for  pid=3737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   80.822880][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   80.838089][   T29] audit: type=1400 audit(1754128948.751:4620): avc:  denied  { create } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   80.858855][   T29] audit: type=1400 audit(1754128948.761:4621): avc:  denied  { write } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   80.929395][   T29] audit: type=1400 audit(1754128948.821:4622): avc:  denied  { create } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   80.949227][   T29] audit: type=1400 audit(1754128948.821:4623): avc:  denied  { create } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   80.970750][   T29] audit: type=1400 audit(1754128948.821:4624): avc:  denied  { create } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.990630][   T29] audit: type=1400 audit(1754128948.821:4625): avc:  denied  { setopt } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.011211][   T29] audit: type=1400 audit(1754128948.821:4626): avc:  denied  { sqpoll } for  pid=6276 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   81.070624][ T6292] loop5: detected capacity change from 0 to 1024
[   81.122900][ T6292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.151200][ T6292] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.180709][ T6297] loop2: detected capacity change from 0 to 512
[   81.323063][ T6297] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   81.354745][ T6297] EXT4-fs (loop2): 1 truncate cleaned up
[   81.435567][ T6297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.500495][ T3516] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 7)
[   81.518910][ T3516] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   81.531376][ T3516] EXT4-fs (loop5): This should not happen!! Data will be lost
[   81.531376][ T3516] 
[   81.626946][ T3516] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   81.646374][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'.
[   81.663968][ T3516] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   81.676489][ T3516] EXT4-fs (loop5): This should not happen!! Data will be lost
[   81.676489][ T3516] 
[   81.686329][ T3516] EXT4-fs (loop5): Total free blocks count 0
[   81.693129][ T3516] EXT4-fs (loop5): Free/Dirty block details
[   81.699049][ T3516] EXT4-fs (loop5): free_blocks=4293918720
[   81.704898][ T3516] EXT4-fs (loop5): dirty_blocks=32
[   81.710385][ T3516] EXT4-fs (loop5): Block reservation details
[   83.925191][ T6390] loop6: detected capacity change from 0 to 1024
[   83.987102][ T6390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.030364][ T6390] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.065170][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.198192][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.633'.
[   84.286539][   T49] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 7)
[   84.336308][   T49] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   84.349046][   T49] EXT4-fs (loop6): This should not happen!! Data will be lost
[   84.349046][   T49] 
[   84.379334][   T49] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   84.401907][   T49] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   84.414560][   T49] EXT4-fs (loop6): This should not happen!! Data will be lost
[   84.414560][   T49] 
[   84.424825][   T49] EXT4-fs (loop6): Total free blocks count 0
[   84.430829][   T49] EXT4-fs (loop6): Free/Dirty block details
[   84.436935][   T49] EXT4-fs (loop6): free_blocks=4293918720
[   84.442745][   T49] EXT4-fs (loop6): dirty_blocks=32
[   84.447889][   T49] EXT4-fs (loop6): Block reservation details
[   84.496050][ T6462] FAULT_INJECTION: forcing a failure.
[   84.496050][ T6462] name failslab, interval 1, probability 0, space 0, times 0
[   84.508843][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.6.636 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   84.508872][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.508929][ T6462] Call Trace:
[   84.508937][ T6462]  <TASK>
[   84.508946][ T6462]  __dump_stack+0x1d/0x30
[   84.508967][ T6462]  dump_stack_lvl+0xe8/0x140
[   84.508987][ T6462]  dump_stack+0x15/0x1b
[   84.509071][ T6462]  should_fail_ex+0x265/0x280
[   84.509160][ T6462]  should_failslab+0x8c/0xb0
[   84.509184][ T6462]  __kmalloc_noprof+0xa5/0x3e0
[   84.509280][ T6462]  ? io_cache_alloc_new+0x2a/0xb0
[   84.509306][ T6462]  io_cache_alloc_new+0x2a/0xb0
[   84.509329][ T6462]  __io_prep_rw+0xcf/0x660
[   84.509408][ T6462]  ? __rcu_read_unlock+0x4f/0x70
[   84.509429][ T6462]  io_prep_rwv+0x33/0x230
[   84.509459][ T6462]  io_prep_readv+0x1f/0x30
[   84.509504][ T6462]  io_submit_sqes+0x5db/0x1050
[   84.509540][ T6462]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   84.509625][ T6462]  ? 0xffffffff81000000
[   84.509639][ T6462]  ? __rcu_read_unlock+0x4f/0x70
[   84.509659][ T6462]  ? get_pid_task+0x96/0xd0
[   84.509679][ T6462]  ? proc_fail_nth_write+0x13b/0x160
[   84.509703][ T6462]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   84.509789][ T6462]  ? vfs_write+0x75e/0x8e0
[   84.509809][ T6462]  ? __rcu_read_unlock+0x4f/0x70
[   84.509849][ T6462]  ? __fget_files+0x184/0x1c0
[   84.509872][ T6462]  ? fput+0x8f/0xc0
[   84.509900][ T6462]  __x64_sys_io_uring_enter+0x78/0x90
[   84.509940][ T6462]  x64_sys_call+0x2de1/0x2ff0
[   84.509961][ T6462]  do_syscall_64+0xd2/0x200
[   84.510001][ T6462]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   84.510024][ T6462]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   84.510045][ T6462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.510066][ T6462] RIP: 0033:0x7f66352ceb69
[   84.510082][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.510105][ T6462] RSP: 002b:00007f663392f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   84.510125][ T6462] RAX: ffffffffffffffda RBX: 00007f66354f5fa0 RCX: 00007f66352ceb69
[   84.510138][ T6462] RDX: 0000000000002000 RSI: 00000000000847ba RDI: 0000000000000005
[   84.510194][ T6462] RBP: 00007f663392f090 R08: 0000000000000000 R09: 0000000000000000
[   84.510207][ T6462] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001
[   84.510219][ T6462] R13: 0000000000000000 R14: 00007f66354f5fa0 R15: 00007ffdc01b3b18
[   84.510237][ T6462]  </TASK>
[   84.518363][ T6466] loop2: detected capacity change from 0 to 512
[   84.526680][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[   84.774655][ T6474] sd 0:0:1:0: device reset
[   84.779093][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'.
[   84.794769][ T6466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   84.805748][ T6476] loop5: detected capacity change from 0 to 1024
[   84.828751][ T6466] EXT4-fs (loop2): 1 truncate cleaned up
[   84.848239][ T6476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.853476][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.883299][ T6472] 9pnet: Could not find request transport: r
[   84.883984][ T6476] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.977546][ T6472] Zero length message leads to an empty skb
[   85.008059][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.642'.
[   85.131321][ T6510] FAULT_INJECTION: forcing a failure.
[   85.131321][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.144651][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.0.656 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   85.144683][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   85.144697][ T6510] Call Trace:
[   85.144703][ T6510]  <TASK>
[   85.144711][ T6510]  __dump_stack+0x1d/0x30
[   85.144750][ T6510]  dump_stack_lvl+0xe8/0x140
[   85.144770][ T6510]  dump_stack+0x15/0x1b
[   85.144789][ T6510]  should_fail_ex+0x265/0x280
[   85.144822][ T6510]  should_fail+0xb/0x20
[   85.144897][ T6510]  should_fail_usercopy+0x1a/0x20
[   85.144918][ T6510]  _copy_from_iter+0xcf/0xe40
[   85.144941][ T6510]  ? __kmalloc_large_node_noprof+0x16/0xa0
[   85.144973][ T6510]  ? __kvmalloc_node_noprof+0xa5/0x4e0
[   85.145044][ T6510]  ? proc_sys_call_handler+0x243/0x4a0
[   85.145092][ T6510]  proc_sys_call_handler+0x26c/0x4a0
[   85.145179][ T6510]  ? __pfx_proc_sys_write+0x10/0x10
[   85.145231][ T6510]  proc_sys_write+0x22/0x30
[   85.145296][ T6510]  vfs_write+0x4a0/0x8e0
[   85.145324][ T6510]  ksys_write+0xda/0x1a0
[   85.145348][ T6510]  __x64_sys_write+0x40/0x50
[   85.145371][ T6510]  x64_sys_call+0x27fe/0x2ff0
[   85.145412][ T6510]  do_syscall_64+0xd2/0x200
[   85.145438][ T6510]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   85.145464][ T6510]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   85.145486][ T6510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.145558][ T6510] RIP: 0033:0x7fa8d346eb69
[   85.145575][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.145594][ T6510] RSP: 002b:00007fa8d1ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   85.145694][ T6510] RAX: ffffffffffffffda RBX: 00007fa8d3695fa0 RCX: 00007fa8d346eb69
[   85.145708][ T6510] RDX: 000000000000fda5 RSI: 00002000000000c0 RDI: 0000000000000008
[   85.145722][ T6510] RBP: 00007fa8d1ad7090 R08: 0000000000000000 R09: 0000000000000000
[   85.145748][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.145761][ T6510] R13: 0000000000000000 R14: 00007fa8d3695fa0 R15: 00007fff48ab5818
[   85.145781][ T6510]  </TASK>
[   85.430915][   T41] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 7)
[   85.453397][   T41] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   85.466145][   T41] EXT4-fs (loop5): This should not happen!! Data will be lost
[   85.466145][   T41] 
[   85.498076][ T3516] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   85.518459][ T6523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.661'.
[   85.533078][ T3516] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   85.545589][ T3516] EXT4-fs (loop5): This should not happen!! Data will be lost
[   85.545589][ T3516] 
[   85.555460][ T3516] EXT4-fs (loop5): Total free blocks count 0
[   85.561690][ T3516] EXT4-fs (loop5): Free/Dirty block details
[   85.567840][ T3516] EXT4-fs (loop5): free_blocks=4293918720
[   85.573589][ T3516] EXT4-fs (loop5): dirty_blocks=32
[   85.578706][ T3516] EXT4-fs (loop5): Block reservation details
[   85.639694][ T6534] FAULT_INJECTION: forcing a failure.
[   85.639694][ T6534] name failslab, interval 1, probability 0, space 0, times 0
[   85.652456][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.1.665 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   85.652485][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   85.652499][ T6534] Call Trace:
[   85.652506][ T6534]  <TASK>
[   85.652513][ T6534]  __dump_stack+0x1d/0x30
[   85.652535][ T6534]  dump_stack_lvl+0xe8/0x140
[   85.652557][ T6534]  dump_stack+0x15/0x1b
[   85.652618][ T6534]  should_fail_ex+0x265/0x280
[   85.652655][ T6534]  should_failslab+0x8c/0xb0
[   85.652681][ T6534]  kmem_cache_alloc_noprof+0x50/0x310
[   85.652711][ T6534]  ? skb_clone+0x151/0x1f0
[   85.652734][ T6534]  skb_clone+0x151/0x1f0
[   85.652862][ T6534]  __netlink_deliver_tap+0x2c9/0x500
[   85.652898][ T6534]  netlink_unicast+0x66b/0x690
[   85.652964][ T6534]  netlink_sendmsg+0x58b/0x6b0
[   85.653012][ T6534]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.653111][ T6534]  __sock_sendmsg+0x142/0x180
[   85.653137][ T6534]  ____sys_sendmsg+0x31e/0x4e0
[   85.653173][ T6534]  ___sys_sendmsg+0x17b/0x1d0
[   85.653219][ T6534]  __x64_sys_sendmsg+0xd4/0x160
[   85.653302][ T6534]  x64_sys_call+0x191e/0x2ff0
[   85.653325][ T6534]  do_syscall_64+0xd2/0x200
[   85.653350][ T6534]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   85.653452][ T6534]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   85.653474][ T6534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.653497][ T6534] RIP: 0033:0x7fa88a96eb69
[   85.653516][ T6534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.653562][ T6534] RSP: 002b:00007fa888fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.653584][ T6534] RAX: ffffffffffffffda RBX: 00007fa88ab95fa0 RCX: 00007fa88a96eb69
[   85.653598][ T6534] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[   85.653610][ T6534] RBP: 00007fa888fcf090 R08: 0000000000000000 R09: 0000000000000000
[   85.653623][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.653636][ T6534] R13: 0000000000000000 R14: 00007fa88ab95fa0 R15: 00007fff6172d748
[   85.653655][ T6534]  </TASK>
[   85.882074][   T29] kauditd_printk_skb: 588 callbacks suppressed
[   85.882092][   T29] audit: type=1326 audit(1754128953.621:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   85.887454][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.665'.
[   85.888705][   T29] audit: type=1326 audit(1754128953.621:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   85.945151][   T29] audit: type=1326 audit(1754128953.621:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   85.969101][   T29] audit: type=1326 audit(1754128953.621:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   85.993077][   T29] audit: type=1326 audit(1754128953.621:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   86.017137][   T29] audit: type=1326 audit(1754128953.621:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   86.042107][   T29] audit: type=1326 audit(1754128953.621:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   86.066464][   T29] audit: type=1326 audit(1754128953.621:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   86.090162][   T29] audit: type=1326 audit(1754128953.621:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   86.113736][   T29] audit: type=1326 audit(1754128953.621:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[   86.138546][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.182651][ T6546] loop5: detected capacity change from 0 to 1024
[   86.227176][ T6546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.245667][ T6546] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.336958][ T6562] netlink: 'syz.6.676': attribute type 4 has an invalid length.
[   86.367347][ T6562] loop6: detected capacity change from 0 to 512
[   86.381345][ T6562] EXT4-fs: Ignoring removed i_version option
[   86.401550][ T6562] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   86.427270][ T6562] EXT4-fs (loop6): 1 truncate cleaned up
[   86.433954][ T6562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.457521][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'.
[   86.490788][ T6573] atomic_op ffff8881040e1928 conn xmit_atomic 0000000000000000
[   86.498750][   T31] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 7)
[   86.539781][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.549115][   T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   86.562088][   T31] EXT4-fs (loop5): This should not happen!! Data will be lost
[   86.562088][   T31] 
[   86.593841][   T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   86.611011][   T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   86.623706][   T31] EXT4-fs (loop5): This should not happen!! Data will be lost
[   86.623706][   T31] 
[   86.633501][   T31] EXT4-fs (loop5): Total free blocks count 0
[   86.639710][   T31] EXT4-fs (loop5): Free/Dirty block details
[   86.645896][   T31] EXT4-fs (loop5): free_blocks=4293918720
[   86.651762][   T31] EXT4-fs (loop5): dirty_blocks=32
[   86.657145][   T31] EXT4-fs (loop5): Block reservation details
[   86.900272][ T6605] FAULT_INJECTION: forcing a failure.
[   86.900272][ T6605] name failslab, interval 1, probability 0, space 0, times 0
[   86.913228][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.5.690 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   86.913260][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   86.913272][ T6605] Call Trace:
[   86.913278][ T6605]  <TASK>
[   86.913286][ T6605]  __dump_stack+0x1d/0x30
[   86.913376][ T6605]  dump_stack_lvl+0xe8/0x140
[   86.913459][ T6605]  dump_stack+0x15/0x1b
[   86.913475][ T6605]  should_fail_ex+0x265/0x280
[   86.913572][ T6605]  should_failslab+0x8c/0xb0
[   86.913597][ T6605]  kmem_cache_alloc_noprof+0x50/0x310
[   86.913624][ T6605]  ? security_inode_alloc+0x37/0x100
[   86.913658][ T6605]  security_inode_alloc+0x37/0x100
[   86.913679][ T6605]  inode_init_always_gfp+0x4b7/0x500
[   86.913749][ T6605]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   86.913771][ T6605]  alloc_inode+0x58/0x170
[   86.913789][ T6605]  new_inode+0x1d/0xe0
[   86.913814][ T6605]  shmem_get_inode+0x244/0x750
[   86.913907][ T6605]  shmem_mknod+0x46/0x180
[   86.913931][ T6605]  shmem_create+0x34/0x50
[   86.913957][ T6605]  ? __pfx_shmem_create+0x10/0x10
[   86.913982][ T6605]  path_openat+0x1102/0x2170
[   86.914075][ T6605]  do_filp_open+0x109/0x230
[   86.914098][ T6605]  do_sys_openat2+0xa6/0x110
[   86.914126][ T6605]  __x64_sys_openat+0xf2/0x120
[   86.914159][ T6605]  x64_sys_call+0x2e9c/0x2ff0
[   86.914251][ T6605]  do_syscall_64+0xd2/0x200
[   86.914272][ T6605]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   86.914300][ T6605]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   86.914325][ T6605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.914350][ T6605] RIP: 0033:0x7ff875edeb69
[   86.914371][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.914389][ T6605] RSP: 002b:00007ff87453f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   86.914411][ T6605] RAX: ffffffffffffffda RBX: 00007ff876105fa0 RCX: 00007ff875edeb69
[   86.914426][ T6605] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c
[   86.914441][ T6605] RBP: 00007ff87453f090 R08: 0000000000000000 R09: 0000000000000000
[   86.914486][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.914544][ T6605] R13: 0000000000000000 R14: 00007ff876105fa0 R15: 00007ffe77feefb8
[   86.914560][ T6605]  </TASK>
[   87.465343][ T6650] veth1_macvtap: left promiscuous mode
[   87.486547][ T6650] veth1_macvtap: entered promiscuous mode
[   87.492414][ T6650] macsec0: entered promiscuous mode
[   87.497751][ T6650] macsec0: entered allmulticast mode
[   87.503189][ T6650] veth1_macvtap: entered allmulticast mode
[   87.752476][ T6686] tipc: Started in network mode
[   87.757424][ T6686] tipc: Node identity 56ff9a3b0cb2, cluster identity 4711
[   87.764760][ T6686] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.786144][ T6681] tipc: Resetting bearer <eth:syzkaller0>
[   87.822689][ T6682] tipc: Disabling bearer <eth:syzkaller0>
[   87.853761][ T6692] FAULT_INJECTION: forcing a failure.
[   87.853761][ T6692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   87.867173][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.6.722 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   87.867238][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   87.867252][ T6692] Call Trace:
[   87.867259][ T6692]  <TASK>
[   87.867267][ T6692]  __dump_stack+0x1d/0x30
[   87.867291][ T6692]  dump_stack_lvl+0xe8/0x140
[   87.867311][ T6692]  dump_stack+0x15/0x1b
[   87.867329][ T6692]  should_fail_ex+0x265/0x280
[   87.867414][ T6692]  should_fail+0xb/0x20
[   87.867491][ T6692]  should_fail_usercopy+0x1a/0x20
[   87.867511][ T6692]  _copy_from_user+0x1c/0xb0
[   87.867673][ T6692]  ____sys_sendmsg+0x1c5/0x4e0
[   87.867713][ T6692]  ___sys_sendmsg+0x17b/0x1d0
[   87.867760][ T6692]  __sys_sendmmsg+0x178/0x300
[   87.867797][ T6692]  __x64_sys_sendmmsg+0x57/0x70
[   87.867856][ T6692]  x64_sys_call+0x1c4a/0x2ff0
[   87.867878][ T6692]  do_syscall_64+0xd2/0x200
[   87.867957][ T6692]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   87.867979][ T6692]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   87.867999][ T6692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.868020][ T6692] RIP: 0033:0x7f66352ceb69
[   87.868037][ T6692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.868093][ T6692] RSP: 002b:00007f663392f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   87.868116][ T6692] RAX: ffffffffffffffda RBX: 00007f66354f5fa0 RCX: 00007f66352ceb69
[   87.868129][ T6692] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[   87.868143][ T6692] RBP: 00007f663392f090 R08: 0000000000000000 R09: 0000000000000000
[   87.868154][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.868166][ T6692] R13: 0000000000000000 R14: 00007f66354f5fa0 R15: 00007ffdc01b3b18
[   87.868185][ T6692]  </TASK>
[   88.144997][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.727'.
[   88.156697][ T6704] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ'
[   88.165634][ T6704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6704 comm=syz.6.727
[   88.256125][ T6709] syz.1.718 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   89.593748][ T6762] netlink: 'syz.2.742': attribute type 3 has an invalid length.
[   89.707511][ T6755] mmap: syz.6.743 (6755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   90.241989][ T6788] sch_fq: defrate 4294967295 ignored.
[   90.248558][ T6788] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.261207][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.754'.
[   90.270181][ T6788] bridge_slave_1: left allmulticast mode
[   90.276221][ T6788] bridge_slave_1: left promiscuous mode
[   90.282347][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.296714][ T6788] bridge_slave_0: left allmulticast mode
[   90.302554][ T6788] bridge_slave_0: left promiscuous mode
[   90.308502][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.602219][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.763'.
[   90.615742][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.765'.
[   91.063766][   T29] kauditd_printk_skb: 651 callbacks suppressed
[   91.063786][   T29] audit: type=1400 audit(1754128959.001:5876): avc:  denied  { read } for  pid=6821 comm="+}[@" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   91.091265][   T29] audit: type=1400 audit(1754128959.001:5877): avc:  denied  { open } for  pid=6821 comm="+}[@" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   91.269247][ T6823] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[   91.509706][   T29] audit: type=1400 audit(1754128959.061:5878): avc:  denied  { create } for  pid=6821 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.529528][   T29] audit: type=1400 audit(1754128959.191:5879): avc:  denied  { create } for  pid=6825 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   91.549790][   T29] audit: type=1400 audit(1754128959.191:5880): avc:  denied  { create } for  pid=6821 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   91.570751][   T29] audit: type=1400 audit(1754128959.191:5881): avc:  denied  { write } for  pid=6821 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   91.591494][   T29] audit: type=1400 audit(1754128959.191:5882): avc:  denied  { read } for  pid=6821 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   91.611797][   T29] audit: type=1326 audit(1754128959.221:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.5.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[   91.635586][   T29] audit: type=1326 audit(1754128959.221:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.5.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[   91.659583][   T29] audit: type=1326 audit(1754128959.221:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6825 comm="syz.5.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[   91.846179][ T6755] syz.6.743 (6755) used greatest stack depth: 7528 bytes left
[   92.113536][ T6840] sch_fq: defrate 4294967295 ignored.
[   92.263834][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[   92.390655][ T6840] bridge_slave_1: left allmulticast mode
[   92.396597][ T6840] bridge_slave_1: left promiscuous mode
[   92.402434][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.420728][ T6840] bridge_slave_0: left allmulticast mode
[   92.426700][ T6840] bridge_slave_0: left promiscuous mode
[   92.432703][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.568848][ T6855] loop6: detected capacity change from 0 to 2048
[   92.615383][ T6855]  loop6: p1 < > p4
[   92.621779][ T6855] loop6: p4 size 8388608 extends beyond EOD, truncated
[   92.644024][ T2989]  loop6: p1 < > p4
[   92.648643][ T2989] loop6: p4 size 8388608 extends beyond EOD, truncated
[   92.799929][ T6887] loop6: detected capacity change from 0 to 1024
[   92.827949][ T6887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.841398][ T6887] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.994264][ T6906] sch_fq: defrate 4294967295 ignored.
[   93.004087][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[   93.013425][ T6906] bridge_slave_1: left allmulticast mode
[   93.019227][ T6906] bridge_slave_1: left promiscuous mode
[   93.025287][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.037146][ T6906] bridge_slave_0: left allmulticast mode
[   93.042888][ T6906] bridge_slave_0: left promiscuous mode
[   93.049017][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.084253][ T3516] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 7)
[   93.101606][ T3516] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   93.114119][ T3516] EXT4-fs (loop6): This should not happen!! Data will be lost
[   93.114119][ T3516] 
[   93.125951][ T3516] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   93.141793][ T3516] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   93.154351][ T3516] EXT4-fs (loop6): This should not happen!! Data will be lost
[   93.154351][ T3516] 
[   93.164682][ T3516] EXT4-fs (loop6): Total free blocks count 0
[   93.170854][ T3516] EXT4-fs (loop6): Free/Dirty block details
[   93.176795][ T3516] EXT4-fs (loop6): free_blocks=4293918720
[   93.182552][ T3516] EXT4-fs (loop6): dirty_blocks=32
[   93.187775][ T3516] EXT4-fs (loop6): Block reservation details
[   93.611148][ T6966] loop6: detected capacity change from 0 to 1024
[   93.644859][ T6966] EXT4-fs: Ignoring removed nobh option
[   93.650982][ T6966] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   93.662389][ T6966] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   93.702183][ T6966] JBD2: no valid journal superblock found
[   93.707952][ T6966] EXT4-fs (loop6): Could not load journal inode
[   93.771021][ T6966] loop6: detected capacity change from 0 to 128
[   93.917491][ T6966] ’: attempt to access beyond end of device
[   93.917491][ T6966] loop6: rw=2049, sector=169, nr_sectors = 16 limit=128
[   93.934895][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.829'.
[   93.935243][ T6966] ’: attempt to access beyond end of device
[   93.935243][ T6966] loop6: rw=2049, sector=193, nr_sectors = 24 limit=128
[   93.989001][ T6966] ’: attempt to access beyond end of device
[   93.989001][ T6966] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128
[   94.003249][ T6966] ’: attempt to access beyond end of device
[   94.003249][ T6966] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128
[   94.040625][ T6966] ’: attempt to access beyond end of device
[   94.040625][ T6966] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128
[   94.070734][ T6966] ’: attempt to access beyond end of device
[   94.070734][ T6966] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128
[   94.094186][ T6966] ’: attempt to access beyond end of device
[   94.094186][ T6966] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128
[   94.128470][ T6966] ’: attempt to access beyond end of device
[   94.128470][ T6966] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128
[   94.153750][ T6966] ’: attempt to access beyond end of device
[   94.153750][ T6966] loop6: rw=2049, sector=321, nr_sectors = 8 limit=128
[   94.167707][ T6966] ’: attempt to access beyond end of device
[   94.167707][ T6966] loop6: rw=2049, sector=337, nr_sectors = 8 limit=128
[   94.220843][ T7017] netlink: 'syz.5.831': attribute type 3 has an invalid length.
[   94.240921][ T7024] loop6: detected capacity change from 0 to 1024
[   94.257427][ T7024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.269949][ T7024] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.416912][ T3516] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 7)
[   94.453210][ T3516] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   94.465763][ T3516] EXT4-fs (loop6): This should not happen!! Data will be lost
[   94.465763][ T3516] 
[   94.498317][   T31] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   94.516098][   T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   94.528427][   T31] EXT4-fs (loop6): This should not happen!! Data will be lost
[   94.528427][   T31] 
[   94.538405][   T31] EXT4-fs (loop6): Total free blocks count 0
[   94.544590][   T31] EXT4-fs (loop6): Free/Dirty block details
[   94.550960][   T31] EXT4-fs (loop6): free_blocks=4293918720
[   94.557532][   T31] EXT4-fs (loop6): dirty_blocks=32
[   94.562913][   T31] EXT4-fs (loop6): Block reservation details
[   94.623293][ T7036] loop6: detected capacity change from 0 to 256
[   94.636194][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'.
[   94.669126][ T7036] FAT-fs (loop6): codepage cp861 not found
[   94.872789][ T7051] loop6: detected capacity change from 0 to 512
[   94.963729][ T7051] EXT4-fs (loop6): revision level too high, forcing read-only mode
[   95.007563][ T7051] EXT4-fs (loop6): orphan cleanup on readonly fs
[   95.038803][ T7051] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.846: corrupted inode contents
[   95.053624][ T7062] FAULT_INJECTION: forcing a failure.
[   95.053624][ T7062] name failslab, interval 1, probability 0, space 0, times 0
[   95.066723][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.1.850 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   95.066753][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   95.066763][ T7062] Call Trace:
[   95.066769][ T7062]  <TASK>
[   95.066776][ T7062]  __dump_stack+0x1d/0x30
[   95.066801][ T7062]  dump_stack_lvl+0xe8/0x140
[   95.066823][ T7062]  dump_stack+0x15/0x1b
[   95.066874][ T7062]  should_fail_ex+0x265/0x280
[   95.066910][ T7062]  should_failslab+0x8c/0xb0
[   95.066934][ T7062]  kmem_cache_alloc_node_noprof+0x57/0x320
[   95.066963][ T7062]  ? __alloc_skb+0x101/0x320
[   95.067032][ T7062]  __alloc_skb+0x101/0x320
[   95.067086][ T7062]  netlink_alloc_large_skb+0xba/0xf0
[   95.067117][ T7062]  netlink_sendmsg+0x3cf/0x6b0
[   95.067153][ T7062]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.067186][ T7062]  __sock_sendmsg+0x142/0x180
[   95.067260][ T7062]  ____sys_sendmsg+0x31e/0x4e0
[   95.067297][ T7062]  ___sys_sendmsg+0x17b/0x1d0
[   95.067417][ T7062]  __x64_sys_sendmsg+0xd4/0x160
[   95.067456][ T7062]  x64_sys_call+0x191e/0x2ff0
[   95.067478][ T7062]  do_syscall_64+0xd2/0x200
[   95.067502][ T7062]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   95.067560][ T7062]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   95.067582][ T7062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.067609][ T7062] RIP: 0033:0x7fa88a96eb69
[   95.067626][ T7062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.067642][ T7062] RSP: 002b:00007fa888fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.067673][ T7062] RAX: ffffffffffffffda RBX: 00007fa88ab95fa0 RCX: 00007fa88a96eb69
[   95.067687][ T7062] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[   95.067699][ T7062] RBP: 00007fa888fcf090 R08: 0000000000000000 R09: 0000000000000000
[   95.067713][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.067727][ T7062] R13: 0000000000000000 R14: 00007fa88ab95fa0 R15: 00007fff6172d748
[   95.067780][ T7062]  </TASK>
[   95.286430][ T7051] EXT4-fs (loop6): Remounting filesystem read-only
[   95.293324][ T7051] EXT4-fs (loop6): 1 truncate cleaned up
[   95.299155][ T3516] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   95.309935][ T3516] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   95.322241][ T3516] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[   95.335469][ T7051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.360563][ T7051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.512879][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'.
[   95.542944][ T7082] FAULT_INJECTION: forcing a failure.
[   95.542944][ T7082] name failslab, interval 1, probability 0, space 0, times 0
[   95.557610][ T7084] loop6: detected capacity change from 0 to 512
[   95.558174][ T7084] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   95.582104][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.1.856 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   95.582134][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   95.582152][ T7082] Call Trace:
[   95.582159][ T7082]  <TASK>
[   95.582166][ T7082]  __dump_stack+0x1d/0x30
[   95.582271][ T7082]  dump_stack_lvl+0xe8/0x140
[   95.582291][ T7082]  dump_stack+0x15/0x1b
[   95.582309][ T7082]  should_fail_ex+0x265/0x280
[   95.582342][ T7082]  ? rtnl_newlink+0x5c/0x12d0
[   95.582379][ T7082]  should_failslab+0x8c/0xb0
[   95.582405][ T7082]  __kmalloc_cache_noprof+0x4c/0x320
[   95.582448][ T7082]  ? hrtimer_reprogram+0x1d4/0x220
[   95.582527][ T7082]  rtnl_newlink+0x5c/0x12d0
[   95.582551][ T7082]  ? perf_event_update_userpage+0x416/0x450
[   95.582577][ T7082]  ? task_clock_event_add+0x134/0x150
[   95.582610][ T7082]  ? xas_load+0x413/0x430
[   95.582687][ T7082]  ? cmp_ex_search+0x25/0x40
[   95.582711][ T7082]  ? bsearch+0x95/0xc0
[   95.582739][ T7082]  ? __pfx_cmp_ex_search+0x10/0x10
[   95.582817][ T7082]  ? __get_user_nocheck_8+0x6/0x20
[   95.582847][ T7082]  ? search_extable+0x53/0x80
[   95.582872][ T7082]  ? __get_user_nocheck_8+0x6/0x20
[   95.582907][ T7082]  ? sysvec_apic_timer_interrupt+0x44/0x80
[   95.582947][ T7082]  ? __rcu_read_unlock+0x4f/0x70
[   95.582977][ T7082]  ? avc_has_perm_noaudit+0x1b1/0x200
[   95.582999][ T7082]  ? cred_has_capability+0x210/0x280
[   95.583112][ T7082]  ? selinux_capable+0x31/0x40
[   95.583138][ T7082]  ? security_capable+0x83/0x90
[   95.583161][ T7082]  ? ns_capable+0x7d/0xb0
[   95.583182][ T7082]  ? __pfx_rtnl_newlink+0x10/0x10
[   95.583219][ T7082]  rtnetlink_rcv_msg+0x5fb/0x6d0
[   95.583273][ T7082]  ? netlink_rcv_skb+0x3f/0x220
[   95.583333][ T7082]  netlink_rcv_skb+0x123/0x220
[   95.583372][ T7082]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   95.583403][ T7082]  rtnetlink_rcv+0x1c/0x30
[   95.583426][ T7082]  netlink_unicast+0x5bd/0x690
[   95.583468][ T7082]  netlink_sendmsg+0x58b/0x6b0
[   95.583498][ T7082]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.583532][ T7082]  __sock_sendmsg+0x142/0x180
[   95.583557][ T7082]  ____sys_sendmsg+0x31e/0x4e0
[   95.583705][ T7082]  ___sys_sendmsg+0x17b/0x1d0
[   95.583809][ T7082]  __x64_sys_sendmsg+0xd4/0x160
[   95.583839][ T7082]  x64_sys_call+0x191e/0x2ff0
[   95.583862][ T7082]  do_syscall_64+0xd2/0x200
[   95.583913][ T7082]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   95.583968][ T7082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.583988][ T7082] RIP: 0033:0x7fa88a96eb69
[   95.584002][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.584074][ T7082] RSP: 002b:00007fa888fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.584097][ T7082] RAX: ffffffffffffffda RBX: 00007fa88ab96080 RCX: 00007fa88a96eb69
[   95.584111][ T7082] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000c
[   95.584194][ T7082] RBP: 00007fa888fae090 R08: 0000000000000000 R09: 0000000000000000
[   95.584207][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.584237][ T7082] R13: 0000000000000000 R14: 00007fa88ab96080 R15: 00007fff6172d748
[   95.584253][ T7082]  </TASK>
[   95.589275][ T7084] EXT4-fs (loop6): 1 truncate cleaned up
[   95.810379][ T7090] loop2: detected capacity change from 0 to 4096
[   95.818183][ T7084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.843220][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.967004][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.858'.
[   96.074864][ T7098] loop5: detected capacity change from 0 to 4096
[   96.091195][ T7098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.258906][ T7101] netlink: 'syz.0.863': attribute type 4 has an invalid length.
[   96.301831][ T7101] netlink: 'syz.0.863': attribute type 4 has an invalid length.
[   96.338101][   T29] kauditd_printk_skb: 1008 callbacks suppressed
[   96.338118][   T29] audit: type=1400 audit(1754128964.271:6888): avc:  denied  { create } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.366654][   T29] audit: type=1400 audit(1754128964.281:6889): avc:  denied  { getopt } for  pid=7100 comm="syz.0.863" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   96.389306][   T29] audit: type=1400 audit(1754128964.301:6890): avc:  denied  { bind } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.410389][   T29] audit: type=1400 audit(1754128964.341:6891): avc:  denied  { write } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.431292][   T29] audit: type=1400 audit(1754128964.341:6892): avc:  denied  { read } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.497700][   T29] audit: type=1400 audit(1754128964.391:6893): avc:  denied  { getopt } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   96.517841][   T29] audit: type=1400 audit(1754128964.391:6894): avc:  denied  { connect } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   96.537453][   T29] audit: type=1400 audit(1754128964.391:6895): avc:  denied  { name_connect } for  pid=7102 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   96.557716][   T29] audit: type=1400 audit(1754128964.421:6896): avc:  denied  { create } for  pid=7105 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   96.559575][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.577922][   T29] audit: type=1400 audit(1754128964.421:6897): avc:  denied  { write } for  pid=7105 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   96.609302][ T7110] block device autoloading is deprecated and will be removed.
[   96.636767][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.757355][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'.
[   96.807237][ T7123] netlink: 256 bytes leftover after parsing attributes in process `syz.1.871'.
[   96.864556][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.011291][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'.
[   97.079072][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'.
[   97.421403][ T7175] loop5: detected capacity change from 0 to 1024
[   97.457762][ T7175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.476979][ T7175] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.579465][ T7185] loop6: detected capacity change from 0 to 4096
[   97.593636][ T7185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.612643][   T31] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 7)
[   97.632718][   T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   97.645470][   T31] EXT4-fs (loop5): This should not happen!! Data will be lost
[   97.645470][   T31] 
[   97.659505][   T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   97.674798][   T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   97.687355][   T31] EXT4-fs (loop5): This should not happen!! Data will be lost
[   97.687355][   T31] 
[   97.691661][ T7188] loop2: detected capacity change from 0 to 1024
[   97.697258][   T31] EXT4-fs (loop5): Total free blocks count 0
[   97.709809][   T31] EXT4-fs (loop5): Free/Dirty block details
[   97.715991][   T31] EXT4-fs (loop5): free_blocks=4293918720
[   97.721789][   T31] EXT4-fs (loop5): dirty_blocks=32
[   97.727199][   T31] EXT4-fs (loop5): Block reservation details
[   97.734360][ T7188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.746700][ T7188] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.776822][ T7192] loop5: detected capacity change from 0 to 1024
[   97.795755][ T7192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.808154][ T7192] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.903938][   T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   97.920430][   T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28
[   97.932823][   T12] EXT4-fs (loop5): This should not happen!! Data will be lost
[   97.932823][   T12] 
[   97.942516][   T12] EXT4-fs (loop5): Total free blocks count 0
[   97.948614][   T12] EXT4-fs (loop5): Free/Dirty block details
[   97.954782][   T12] EXT4-fs (loop5): free_blocks=4293918720
[   97.960513][   T12] EXT4-fs (loop5): dirty_blocks=16
[   97.965715][   T12] EXT4-fs (loop5): Block reservation details
[   97.971693][   T12] EXT4-fs (loop5): i_reserved_data_blocks=1
[   97.980927][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.043342][ T7200] netlink: 44 bytes leftover after parsing attributes in process `syz.5.895'.
[   98.062572][ T7200] netlink: 84 bytes leftover after parsing attributes in process `syz.5.895'.
[   98.075479][ T7200] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   98.079562][   T12] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 7)
[   98.082129][ T7200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   98.082228][ T7200] vhci_hcd vhci_hcd.0: Device attached
[   98.104699][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   98.122547][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[   98.122547][   T12] 
[   98.154311][   T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   98.169679][ T7205] vhci_hcd: connection closed
[   98.169987][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   98.187182][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[   98.187182][   T12] 
[   98.197565][   T12] EXT4-fs (loop2): Total free blocks count 0
[   98.203647][   T12] EXT4-fs (loop2): Free/Dirty block details
[   98.209691][   T12] EXT4-fs (loop2): free_blocks=4293918720
[   98.215666][   T12] EXT4-fs (loop2): dirty_blocks=32
[   98.220800][   T12] EXT4-fs (loop2): Block reservation details
[   98.222304][   T31] vhci_hcd: stop threads
[   98.231166][   T31] vhci_hcd: release socket
[   98.235647][   T31] vhci_hcd: disconnect device
[   98.290014][ T7220] loop1: detected capacity change from 0 to 1024
[   98.313466][ T7220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.325596][ T7220] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.348876][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.490614][   T12] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 7)
[   98.512561][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   98.524901][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[   98.524901][   T12] 
[   98.536637][   T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   98.552091][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   98.564603][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[   98.564603][   T12] 
[   98.574470][   T12] EXT4-fs (loop1): Total free blocks count 0
[   98.580469][   T12] EXT4-fs (loop1): Free/Dirty block details
[   98.586451][   T12] EXT4-fs (loop1): free_blocks=4293918720
[   98.592325][   T12] EXT4-fs (loop1): dirty_blocks=32
[   98.592513][ T7236] loop6: detected capacity change from 0 to 4096
[   98.597503][   T12] EXT4-fs (loop1): Block reservation details
[   98.612526][ T7236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.716136][ T7248] loop1: detected capacity change from 0 to 1024
[   98.737398][ T7248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.771533][ T7248] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.941753][  T588] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 7)
[   98.957113][  T588] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[   98.970056][  T588] EXT4-fs (loop1): This should not happen!! Data will be lost
[   98.970056][  T588] 
[   98.980759][  T588] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   98.996517][  T588] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[   99.009351][  T588] EXT4-fs (loop1): This should not happen!! Data will be lost
[   99.009351][  T588] 
[   99.019356][  T588] EXT4-fs (loop1): Total free blocks count 0
[   99.025407][  T588] EXT4-fs (loop1): Free/Dirty block details
[   99.031286][  T588] EXT4-fs (loop1): free_blocks=4293918720
[   99.037042][  T588] EXT4-fs (loop1): dirty_blocks=32
[   99.042292][  T588] EXT4-fs (loop1): Block reservation details
[   99.137029][ T7264] loop1: detected capacity change from 0 to 4096
[   99.146328][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.244744][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.919'.
[   99.380775][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.448240][ T7288] loop6: detected capacity change from 0 to 2048
[   99.473815][ T7288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.495928][ T7296] loop5: detected capacity change from 0 to 512
[   99.521017][ T7296] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   99.545017][ T7288] netlink: 'syz.6.927': attribute type 4 has an invalid length.
[   99.555216][ T7296] EXT4-fs (loop5): 1 truncate cleaned up
[   99.568428][ T7296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.590810][ T7288] netlink: 'syz.6.927': attribute type 4 has an invalid length.
[   99.669330][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.720012][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.930'.
[   99.906272][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.946481][ T7320] loop2: detected capacity change from 0 to 4096
[   99.961861][ T7320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.278529][ T7352] loop1: detected capacity change from 0 to 2048
[  100.294871][ T7352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.330910][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.342859][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.718308][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.739003][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'.
[  100.828372][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'.
[  100.907593][ T7382] loop2: detected capacity change from 0 to 1024
[  100.955013][ T7382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.008848][ T7382] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.302517][ T3332] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 7)
[  101.327474][ T7410] loop1: detected capacity change from 0 to 4096
[  101.343646][ T3332] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  101.356468][ T3332] EXT4-fs (loop2): This should not happen!! Data will be lost
[  101.356468][ T3332] 
[  101.393450][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.975'.
[  101.403985][ T7410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.408441][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.975'.
[  101.436044][  T588] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  101.457810][  T588] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[  101.473471][  T588] EXT4-fs (loop2): This should not happen!! Data will be lost
[  101.473471][  T588] 
[  101.483486][  T588] EXT4-fs (loop2): Total free blocks count 0
[  101.489580][  T588] EXT4-fs (loop2): Free/Dirty block details
[  101.495907][  T588] EXT4-fs (loop2): free_blocks=4293918720
[  101.501906][  T588] EXT4-fs (loop2): dirty_blocks=32
[  101.507211][  T588] EXT4-fs (loop2): Block reservation details
[  101.608016][   T29] kauditd_printk_skb: 964 callbacks suppressed
[  101.608034][   T29] audit: type=1326 audit(1754128969.541:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.642084][   T29] audit: type=1326 audit(1754128969.581:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.666021][   T29] audit: type=1326 audit(1754128969.581:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.689700][   T29] audit: type=1326 audit(1754128969.581:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.713747][   T29] audit: type=1326 audit(1754128969.581:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.737556][   T29] audit: type=1326 audit(1754128969.581:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.761643][   T29] audit: type=1326 audit(1754128969.581:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.785710][   T29] audit: type=1326 audit(1754128969.581:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.809483][   T29] audit: type=1326 audit(1754128969.581:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  101.833055][   T29] audit: type=1326 audit(1754128969.581:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff875edeb69 code=0x7ffc0000
[  102.062358][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.140690][ T7455] loop1: detected capacity change from 0 to 1024
[  102.227191][ T7455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.257352][ T7455] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.278088][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'.
[  102.316121][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'.
[  102.621182][ T7501] loop2: detected capacity change from 0 to 2048
[  102.642712][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.677472][ T3332] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 7)
[  102.681488][ T7505] loop5: detected capacity change from 0 to 2048
[  102.702232][ T3332] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  102.715036][ T3332] EXT4-fs (loop1): This should not happen!! Data will be lost
[  102.715036][ T3332] 
[  102.737320][ T3516] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  102.755058][ T3516] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[  102.763290][ T7505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.768106][ T3516] EXT4-fs (loop1): This should not happen!! Data will be lost
[  102.768106][ T3516] 
[  102.790567][ T3516] EXT4-fs (loop1): Total free blocks count 0
[  102.796771][ T3516] EXT4-fs (loop1): Free/Dirty block details
[  102.802994][ T3516] EXT4-fs (loop1): free_blocks=4293918720
[  102.809105][ T3516] EXT4-fs (loop1): dirty_blocks=32
[  102.814468][ T3516] EXT4-fs (loop1): Block reservation details
[  102.825061][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.825142][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.941045][ T7517] loop5: detected capacity change from 0 to 512
[  102.963287][ T7517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  103.008522][ T7517] EXT4-fs (loop5): 1 truncate cleaned up
[  103.027767][ T7517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.132504][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'.
[  103.158105][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1006'.
[  103.216302][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'.
[  103.344624][ T7546] loop6: detected capacity change from 0 to 2048
[  103.377409][ T7546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.439200][ T7559] loop2: detected capacity change from 0 to 512
[  103.478550][ T7559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  103.497271][ T7559] EXT4-fs (loop2): 1 truncate cleaned up
[  103.516911][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.520074][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.636048][ T7574] loop1: detected capacity change from 0 to 4096
[  103.645554][ T7574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.660886][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'.
[  103.768357][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.867263][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  103.916836][ T7591] loop6: detected capacity change from 0 to 2048
[  103.930741][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  103.965890][ T7591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.034348][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.089641][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'.
[  104.115049][ T7599] loop6: detected capacity change from 0 to 764
[  104.131899][ T7599] ISOFS: unable to read i-node block
[  104.137418][ T7599] isofs_fill_super: get root inode failed
[  104.227108][ T7609] loop6: detected capacity change from 0 to 512
[  104.277280][ T7609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.302328][ T7609] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.415716][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.438679][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.465670][ T7628] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm kmem_cache_free: iget: bad i_size value: 2533274857506816
[  104.489110][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'.
[  104.551756][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'.
[  104.568857][ T7631] loop2: detected capacity change from 0 to 2048
[  104.608092][ T7631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.631908][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'.
[  104.648825][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.669870][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.679907][ T7641] loop1: detected capacity change from 0 to 764
[  104.744138][ T7641] ISOFS: unable to read i-node block
[  104.749934][ T7641] isofs_fill_super: get root inode failed
[  104.823556][ T7658] loop6: detected capacity change from 0 to 2048
[  104.956163][ T7658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.974092][ T7666] loop1: detected capacity change from 0 to 1024
[  105.044432][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.094992][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.117022][ T7674] loop2: detected capacity change from 0 to 512
[  105.155796][ T7674] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.169521][ T7666] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.201396][ T7674] EXT4-fs (loop2): 1 truncate cleaned up
[  105.230375][ T7674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.247068][ T7678] tmpfs: Bad value for 'mpol'
[  105.443705][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.975402][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.998124][ T7694] loop5: detected capacity change from 0 to 512
[  106.028585][ T7694] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  106.059996][ T7694] EXT4-fs (loop5): 1 truncate cleaned up
[  106.078694][ T7694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.161100][ T7700] loop2: detected capacity change from 0 to 512
[  106.197538][ T7700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.243748][ T7700] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.375394][ T7725] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm kmem_cache_free: iget: bad i_size value: 2533274857506816
[  106.459422][ T7736] tmpfs: Bad value for 'mpol'
[  106.591573][ T7750] loop1: detected capacity change from 0 to 1024
[  106.601832][ T7750] EXT4-fs: Ignoring removed nobh option
[  106.614299][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.627918][ T7750] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  106.638949][ T7750] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  106.660765][ T7750] JBD2: no valid journal superblock found
[  106.666686][ T7750] EXT4-fs (loop1): Could not load journal inode
[  106.716544][ T7750] loop1: detected capacity change from 0 to 128
[  106.725420][   T29] kauditd_printk_skb: 516 callbacks suppressed
[  106.725438][   T29] audit: type=1400 audit(1754128974.661:8388): avc:  denied  { mount } for  pid=7749 comm=ACED name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  106.769599][   T29] audit: type=1400 audit(1754128974.701:8389): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  106.807657][   T29] audit: type=1400 audit(1754128974.741:8390): avc:  denied  { unmount } for  pid=3739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  106.842061][   T29] audit: type=1326 audit(1754128974.771:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  106.865985][   T29] audit: type=1326 audit(1754128974.771:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  106.889465][   T29] audit: type=1326 audit(1754128974.771:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  106.912864][   T29] audit: type=1326 audit(1754128974.771:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  106.936779][   T29] audit: type=1326 audit(1754128974.771:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  106.960455][   T29] audit: type=1326 audit(1754128974.771:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  106.984121][   T29] audit: type=1326 audit(1754128974.771:8397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.6.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  107.080461][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.213669][ T7787] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  107.248308][ T7789] loop6: detected capacity change from 0 to 1024
[  107.261399][ T7789] EXT4-fs: Ignoring removed nobh option
[  107.275199][ T7789] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  107.286372][ T7789] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  107.315621][ T7789] JBD2: no valid journal superblock found
[  107.321413][ T7789] EXT4-fs (loop6): Could not load journal inode
[  107.460286][ T7804] loop6: detected capacity change from 0 to 512
[  107.492176][ T7804] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  107.509579][ T7804] EXT4-fs (loop6): 1 truncate cleaned up
[  107.520217][ T7804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.948269][ T7838] loop2: detected capacity change from 0 to 512
[  107.962684][ T7838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  107.980470][ T7838] EXT4-fs (loop2): 1 truncate cleaned up
[  107.993671][ T7838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.076572][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.085275][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.101994][ T7845] siw: device registration error -23
[  108.165459][ T7847] __nla_validate_parse: 12 callbacks suppressed
[  108.165479][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'.
[  108.602603][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  108.633294][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  108.741112][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'.
[  109.070771][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'.
[  109.370372][ T7881] loop2: detected capacity change from 0 to 1024
[  109.380372][ T7881] EXT4-fs: Ignoring removed nobh option
[  109.398798][ T7881] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  109.411837][ T7881] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  109.424259][ T7881] JBD2: no valid journal superblock found
[  109.430139][ T7881] EXT4-fs (loop2): Could not load journal inode
[  109.633765][ T7881] loop2: detected capacity change from 0 to 128
[  109.649178][ T7886] loop5: detected capacity change from 0 to 1024
[  109.659480][ T7886] EXT4-fs: Ignoring removed nobh option
[  109.691729][ T7886] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  109.703167][ T7886] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  109.713306][ T7886] JBD2: no valid journal superblock found
[  109.719133][ T7886] EXT4-fs (loop5): Could not load journal inode
[  109.728513][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1128'.
[  109.785079][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1128'.
[  110.199813][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  110.238001][ T7914] syzkaller0: entered promiscuous mode
[  110.243932][ T7914] syzkaller0: entered allmulticast mode
[  110.887890][ T7940] loop1: detected capacity change from 0 to 512
[  110.928579][ T7940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.942909][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  110.960848][ T7942] loop5: detected capacity change from 0 to 512
[  110.986175][ T7942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  111.085972][ T7940] EXT4-fs (loop1): 1 truncate cleaned up
[  111.093280][ T7942] EXT4-fs (loop5): 1 truncate cleaned up
[  111.181932][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'.
[  111.397717][ T7958] loop1: detected capacity change from 0 to 1024
[  111.535415][ T7958] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.758124][   T29] kauditd_printk_skb: 522 callbacks suppressed
[  111.758140][   T29] audit: type=1400 audit(1754128979.691:8920): avc:  denied  { tracepoint } for  pid=7967 comm="syz.6.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  112.066347][   T29] audit: type=1400 audit(1754128979.781:8921): avc:  denied  { ioctl } for  pid=7967 comm="syz.6.1154" path="socket:[21321]" dev="sockfs" ino=21321 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  112.093225][   T29] audit: type=1400 audit(1754128979.871:8922): avc:  denied  { read write } for  pid=7972 comm="syz.0.1156" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.116762][   T29] audit: type=1400 audit(1754128979.871:8923): avc:  denied  { open } for  pid=7972 comm="syz.0.1156" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  112.196676][   T29] audit: type=1326 audit(1754128980.081:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  112.220492][   T29] audit: type=1326 audit(1754128980.081:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7956 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  112.337350][   T12] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 7)
[  112.396851][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  112.409855][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[  112.409855][   T12] 
[  112.430867][   T29] audit: type=1400 audit(1754128980.361:8926): avc:  denied  { module_request } for  pid=7982 comm="syz.5.1159" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  112.463243][   T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  112.501021][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[  112.513764][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[  112.513764][   T12] 
[  112.524120][   T12] EXT4-fs (loop1): Total free blocks count 0
[  112.530259][   T12] EXT4-fs (loop1): Free/Dirty block details
[  112.536204][   T12] EXT4-fs (loop1): free_blocks=4293918720
[  112.542244][   T12] EXT4-fs (loop1): dirty_blocks=32
[  112.547465][   T12] EXT4-fs (loop1): Block reservation details
[  112.553954][   T12] EXT4-fs (loop1): i_reserved_data_blocks=2
[  112.631523][   T29] audit: type=1326 audit(1754128980.561:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.6.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  112.655226][   T29] audit: type=1326 audit(1754128980.561:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.6.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  112.678636][   T29] audit: type=1326 audit(1754128980.561:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.6.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66352ceb69 code=0x7ffc0000
[  113.210270][ T8033] __nla_validate_parse: 4 callbacks suppressed
[  113.210287][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'.
[  114.283562][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1186'.
[  114.405231][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'.
[  114.477937][ T8088] loop5: detected capacity change from 0 to 764
[  114.494757][ T8088] ISOFS: unable to read i-node block
[  114.500533][ T8088] isofs_fill_super: get root inode failed
[  114.707645][ T8109] loop2: detected capacity change from 0 to 4096
[  114.738043][ T8115] loop5: detected capacity change from 0 to 1024
[  114.746373][ T8115] EXT4-fs: Ignoring removed nobh option
[  114.756714][ T8115] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  114.768120][ T8115] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  114.842340][ T8115] JBD2: no valid journal superblock found
[  114.848160][ T8115] EXT4-fs (loop5): Could not load journal inode
[  114.852861][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'.
[  115.054641][ T8128] loop1: detected capacity change from 0 to 512
[  115.130040][ T8128] journal_path: Non-blockdev passed as './bus'
[  115.136461][ T8128] EXT4-fs: error: could not find journal device path
[  115.242515][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.251160][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.275618][ T8130] siw: device registration error -23
[  115.556344][ T8134] loop1: detected capacity change from 0 to 1024
[  115.660994][ T8134] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.937522][  T368] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 7)
[  115.971285][  T368] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  115.983829][  T368] EXT4-fs (loop1): This should not happen!! Data will be lost
[  115.983829][  T368] 
[  116.036922][  T368] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  116.080940][  T368] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[  116.093350][  T368] EXT4-fs (loop1): This should not happen!! Data will be lost
[  116.093350][  T368] 
[  116.103324][  T368] EXT4-fs (loop1): Total free blocks count 0
[  116.109518][  T368] EXT4-fs (loop1): Free/Dirty block details
[  116.115705][  T368] EXT4-fs (loop1): free_blocks=4293918720
[  116.122438][  T368] EXT4-fs (loop1): dirty_blocks=32
[  116.127562][  T368] EXT4-fs (loop1): Block reservation details
[  116.133598][  T368] EXT4-fs (loop1): i_reserved_data_blocks=2
[  116.235514][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'.
[  116.412434][ T8167] loop1: detected capacity change from 0 to 512
[  116.433176][ T8169] loop2: detected capacity change from 0 to 764
[  116.449387][ T8167] journal_path: Non-blockdev passed as './bus'
[  116.455725][ T8167] EXT4-fs: error: could not find journal device path
[  116.465320][ T8169] ISOFS: unable to read i-node block
[  116.470741][ T8169] isofs_fill_super: get root inode failed
[  116.567754][ T8172] loop2: detected capacity change from 0 to 2048
[  116.910854][ T8198] loop1: detected capacity change from 0 to 764
[  116.918260][ T8198] ISOFS: unable to read i-node block
[  116.923840][ T8198] isofs_fill_super: get root inode failed
[  117.011024][ T8201] loop1: detected capacity change from 0 to 512
[  117.021017][ T8201] journal_path: Non-blockdev passed as './bus'
[  117.027406][ T8201] EXT4-fs: error: could not find journal device path
[  117.109081][   T29] kauditd_printk_skb: 370 callbacks suppressed
[  117.109096][   T29] audit: type=1326 audit(1754128985.041:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.178867][   T29] audit: type=1326 audit(1754128985.081:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.202592][   T29] audit: type=1326 audit(1754128985.081:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.226244][   T29] audit: type=1326 audit(1754128985.081:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.249814][   T29] audit: type=1326 audit(1754128985.081:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.274484][   T29] audit: type=1326 audit(1754128985.081:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.297938][   T29] audit: type=1326 audit(1754128985.081:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.321870][   T29] audit: type=1326 audit(1754128985.081:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.345801][   T29] audit: type=1326 audit(1754128985.081:9308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.369552][   T29] audit: type=1326 audit(1754128985.081:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa88a96eb69 code=0x7ffc0000
[  117.448322][ T8211] loop1: detected capacity change from 0 to 1024
[  117.475124][ T8211] EXT4-fs: Ignoring removed nobh option
[  117.484258][ T8211] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  117.495295][ T8211] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  117.505739][ T8211] JBD2: no valid journal superblock found
[  117.511709][ T8211] EXT4-fs (loop1): Could not load journal inode
[  117.648747][ T8225] loop1: detected capacity change from 0 to 512
[  117.656026][ T8225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.668471][ T8225] EXT4-fs (loop1): 1 truncate cleaned up
[  117.788802][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1240'.
[  117.985126][ T8244] loop2: detected capacity change from 0 to 2048
[  118.104391][ T8253] loop2: detected capacity change from 0 to 1024
[  118.115515][ T8253] EXT4-fs: Ignoring removed nobh option
[  118.128800][ T8256] loop6: detected capacity change from 0 to 1024
[  118.135828][ T8256] EXT4-fs: Ignoring removed nobh option
[  118.150616][ T8256] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  118.161801][ T8256] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  118.186643][ T8253] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  118.198170][ T8253] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  118.214856][ T8256] JBD2: no valid journal superblock found
[  118.219081][ T8262] loop5: detected capacity change from 0 to 1024
[  118.220723][ T8256] EXT4-fs (loop6): Could not load journal inode
[  118.234712][ T8253] JBD2: no valid journal superblock found
[  118.240489][ T8253] EXT4-fs (loop2): Could not load journal inode
[  118.255969][ T8262] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.442415][ T3516] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 7)
[  118.464747][ T3516] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  118.477487][ T3516] EXT4-fs (loop5): This should not happen!! Data will be lost
[  118.477487][ T3516] 
[  118.500803][   T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  118.517752][   T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 4 with error 28
[  118.530226][   T31] EXT4-fs (loop5): This should not happen!! Data will be lost
[  118.530226][   T31] 
[  118.532498][ T8278] loop6: detected capacity change from 0 to 2048
[  118.540709][   T31] EXT4-fs (loop5): Total free blocks count 0
[  118.553390][   T31] EXT4-fs (loop5): Free/Dirty block details
[  118.559294][   T31] EXT4-fs (loop5): free_blocks=4293918720
[  118.565184][   T31] EXT4-fs (loop5): dirty_blocks=32
[  118.570608][   T31] EXT4-fs (loop5): Block reservation details
[  118.576849][   T31] EXT4-fs (loop5): i_reserved_data_blocks=2
[  118.678643][ T8288] loop5: detected capacity change from 0 to 764
[  118.707390][ T8288] ISOFS: unable to read i-node block
[  118.712829][ T8288] isofs_fill_super: get root inode failed
[  118.759892][ T8300] loop6: detected capacity change from 0 to 1024
[  118.782730][ T8300] EXT4-fs: Ignoring removed nobh option
[  118.790861][ T8300] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  118.801933][ T8300] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  118.843069][ T8300] JBD2: no valid journal superblock found
[  118.848922][ T8300] EXT4-fs (loop6): Could not load journal inode
[  118.910002][ T8309] loop5: detected capacity change from 0 to 512
[  118.937549][ T8309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  118.959638][ T8316] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  118.973855][ T8309] EXT4-fs (loop5): 1 truncate cleaned up
[  118.978798][ T8314] loop2: detected capacity change from 0 to 2048
[  119.110735][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1270'.
[  119.198297][ T8338] loop6: detected capacity change from 0 to 764
[  119.215673][ T8338] ISOFS: unable to read i-node block
[  119.221324][ T8338] isofs_fill_super: get root inode failed
[  119.290889][ T8347] loop6: detected capacity change from 0 to 2048
[  119.313137][ T8346] loop1: detected capacity change from 0 to 1024
[  119.338062][ T8346] EXT4-fs: Ignoring removed nobh option
[  119.347385][ T8346] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  119.358756][ T8346] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  119.390432][ T8346] JBD2: no valid journal superblock found
[  119.396459][ T8346] EXT4-fs (loop1): Could not load journal inode
[  119.426623][ T8362] loop6: detected capacity change from 0 to 512
[  119.448955][ T8362] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  119.474101][ T8362] EXT4-fs (loop6): 1 truncate cleaned up
[  119.538739][ T8372] loop6: detected capacity change from 0 to 512
[  119.546531][ T8372] journal_path: Non-blockdev passed as './bus'
[  119.552983][ T8372] EXT4-fs: error: could not find journal device path
[  119.636279][ T8378] loop2: detected capacity change from 0 to 764
[  119.655139][ T8378] ISOFS: unable to read i-node block
[  119.660496][ T8378] isofs_fill_super: get root inode failed
[  119.779714][ T8391] loop6: detected capacity change from 0 to 4096
[  119.791774][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1306'.
[  119.870427][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1306'.
[  119.959752][ T8408] loop5: detected capacity change from 0 to 1024
[  119.967653][ T8408] EXT4-fs: Ignoring removed nobh option
[  119.980625][ T8408] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  119.991675][ T8408] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  120.027428][ T8408] JBD2: no valid journal superblock found
[  120.033558][ T8408] EXT4-fs (loop5): Could not load journal inode
[  121.206908][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.238430][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1316'.
[  121.329031][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.589974][ T8448] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1322'.
[  121.986308][ T8468] loop2: detected capacity change from 0 to 4096
[  122.983180][   T29] kauditd_printk_skb: 239 callbacks suppressed
[  122.983196][   T29] audit: type=1400 audit(1754128990.921:9549): avc:  denied  { read append open } for  pid=8467 comm="syz.2.1331" path="/283/file0/memory.numa_stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  123.025370][   T29] audit: type=1400 audit(1754128990.961:9550): avc:  denied  { read } for  pid=8463 comm="syz.0.1329" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  123.046892][   T29] audit: type=1400 audit(1754128990.961:9551): avc:  denied  { open } for  pid=8463 comm="syz.0.1329" path="net:[4026532493]" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  123.070405][   T29] audit: type=1400 audit(1754128990.961:9552): avc:  denied  { create } for  pid=8463 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  123.074868][ T8483] syz_tun: entered allmulticast mode
[  123.135856][   T29] audit: type=1400 audit(1754128991.011:9553): avc:  denied  { setopt } for  pid=8482 comm="syz.5.1335" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  123.247901][ T8482] syz_tun: left allmulticast mode
[  123.313349][   T29] audit: type=1400 audit(1754128991.251:9554): avc:  denied  { append } for  pid=8490 comm="syz.2.1338" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  123.337354][   T29] audit: type=1400 audit(1754128991.251:9555): avc:  denied  { write } for  pid=8490 comm="syz.2.1338" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  123.360502][   T29] audit: type=1400 audit(1754128991.251:9556): avc:  denied  { create } for  pid=8491 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  123.380205][   T29] audit: type=1400 audit(1754128991.251:9557): avc:  denied  { write } for  pid=8491 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  123.400357][   T29] audit: type=1400 audit(1754128991.251:9558): avc:  denied  { create } for  pid=8494 comm="syz.6.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  123.459420][ T8505] bridge: RTM_NEWNEIGH with invalid ether address
[  123.710555][ T8523] loop2: detected capacity change from 0 to 512
[  124.759891][ T8550] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  125.192725][ T8565] syz_tun: entered promiscuous mode
[  125.279369][ T8565] syz_tun: left promiscuous mode
[  125.403871][ T8567] loop6: detected capacity change from 0 to 4096
[  125.410769][ T8567] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.417478][ T8567] EXT4-fs: test_dummy_encryption option not supported
[  125.469276][ T8575] loop2: detected capacity change from 0 to 2048
[  126.514789][ T3304] EXT4-fs unmount: 35 callbacks suppressed
[  126.514808][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.290012][ T8604] dvmrp5: entered allmulticast mode
[  127.311097][ T8604] dvmrp5: left allmulticast mode
[  127.350710][ T3490] IPVS: starting estimator thread 0...
[  127.356451][ T8603] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  127.512096][ T8608] IPVS: using max 2352 ests per chain, 117600 per kthread
[  128.438260][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  128.438326][   T29] audit: type=1400 audit(1754128996.371:9583): avc:  denied  { ioctl } for  pid=8628 comm="syz.2.1387" path="socket:[23742]" dev="sockfs" ino=23742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  128.472677][ T8630] batadv_slave_0: entered promiscuous mode
[  128.483096][ T8628] batadv_slave_0: left promiscuous mode
[  128.966441][ T8643] loop2: detected capacity change from 0 to 512
[  128.987276][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.000472][ T8643] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.235288][   T29] audit: type=1400 audit(1754128997.171:9584): avc:  denied  { read write } for  pid=8650 comm="syz.1.1394" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  129.259760][   T29] audit: type=1400 audit(1754128997.171:9585): avc:  denied  { open } for  pid=8650 comm="syz.1.1394" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  129.436285][ T8658] loop6: detected capacity change from 0 to 128
[  129.455665][ T8657] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  129.489287][ T8658] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.572200][ T8658] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.782335][   T29] audit: type=1400 audit(1754128997.521:9586): avc:  denied  { cmd } for  pid=8660 comm="syz.1.1397" path="socket:[24635]" dev="sockfs" ino=24635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  129.929201][   T29] audit: type=1400 audit(1754128997.721:9587): avc:  denied  { create } for  pid=8655 comm="syz.6.1396" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  129.950291][   T29] audit: type=1400 audit(1754128997.731:9588): avc:  denied  { add_name } for  pid=8655 comm="syz.6.1396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  129.958166][ T3739] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.972100][   T29] audit: type=1400 audit(1754128997.731:9589): avc:  denied  { create } for  pid=8655 comm="syz.6.1396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  130.002610][   T29] audit: type=1400 audit(1754128997.751:9590): avc:  denied  { connect } for  pid=8662 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.022475][   T29] audit: type=1400 audit(1754128997.751:9591): avc:  denied  { bind } for  pid=8662 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.041947][   T29] audit: type=1400 audit(1754128997.751:9592): avc:  denied  { write } for  pid=8662 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.069759][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.221963][ T8682] xfrm0: entered promiscuous mode
[  130.227325][ T8682] xfrm0: entered allmulticast mode
[  130.504532][ T8691] loop6: detected capacity change from 0 to 512
[  130.511916][ T8691] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  130.543979][ T8691] EXT4-fs (loop6): 1 truncate cleaned up
[  130.550430][ T8691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.019589][ T3739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.040256][ T8700] loop5: detected capacity change from 0 to 2048
[  131.079136][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'.
[  131.079414][ T8708] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  131.088209][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  131.148197][ T8700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.163535][ T8700] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.177623][ T8699] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.1413: bit already cleared for inode 15
[  131.207625][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.466804][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1428'.
[  132.540775][ T8758] 9pnet_fd: Insufficient options for proto=fd
[  132.577102][ T8760] loop5: detected capacity change from 0 to 1024
[  132.794911][ T8763] syzkaller1: entered promiscuous mode
[  132.800565][ T8763] syzkaller1: entered allmulticast mode
[  132.817364][ T8760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.844061][ T8772] loop6: detected capacity change from 0 to 128
[  132.854841][ T8772] EXT4-fs: Ignoring removed nobh option
[  132.867443][ T8772] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.909524][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'.
[  132.923607][ T8772] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  132.935770][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'.
[  132.944778][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'.
[  132.995837][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.004729][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.041801][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.096835][ T3739] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.123031][ T8797] syz_tun: entered allmulticast mode
[  133.134743][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.134997][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.649267][ T8826] cgroup: No subsys list or none specified
[  133.850700][ T8835] loop5: detected capacity change from 0 to 128
[  134.241707][ T8835] bio_check_eod: 97 callbacks suppressed
[  134.241801][ T8835] syz.5.1462: attempt to access beyond end of device
[  134.241801][ T8835] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  135.071074][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  135.071096][   T29] audit: type=1400 audit(1754129002.251:9623): avc:  denied  { mount } for  pid=8842 comm="syz.6.1465" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  135.292547][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.292547][ T8835] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  135.331534][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.331534][ T8835] loop5: rw=2049, sector=201, nr_sectors = 24 limit=128
[  135.386773][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.386773][ T8835] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[  135.418553][   T29] audit: type=1400 audit(1754129003.031:9624): avc:  denied  { nlmsg_write } for  pid=8840 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  135.441029][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.441029][ T8835] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[  135.454584][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.454584][ T8835] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[  135.468498][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.468498][ T8835] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128
[  135.482926][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.482926][ T8835] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128
[  135.496800][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.496800][ T8835] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128
[  135.510798][ T8835] syz.5.1462: attempt to access beyond end of device
[  135.510798][ T8835] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128
[  135.653458][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'.
[  135.730866][ T8856] loop6: detected capacity change from 0 to 128
[  136.896325][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.914249][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.678642][ T8911] lo: entered allmulticast mode
[  137.699554][ T8911] tunl0: entered allmulticast mode
[  137.721176][ T8911] gre0: entered allmulticast mode
[  137.789986][ T8911] gretap0: entered allmulticast mode
[  137.945306][ T8911] erspan0: entered allmulticast mode
[  137.958803][ T8911] ip_vti0: entered allmulticast mode
[  137.974012][ T8911] ip6_vti0: entered allmulticast mode
[  138.040576][ T8911] sit0: entered allmulticast mode
[  138.118973][ T8911] ip6tnl0: entered allmulticast mode
[  138.219110][ T8911] ip6gre0: entered allmulticast mode
[  138.249990][ T8911] syz_tun: entered allmulticast mode
[  138.284403][ T8911] ip6gretap0: entered allmulticast mode
[  138.315304][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.322683][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.330045][ T8911] bridge0: entered allmulticast mode
[  138.342274][   T29] audit: type=1400 audit(1754129006.271:9625): avc:  denied  { listen } for  pid=8940 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  138.347643][ T8911] bond0: entered allmulticast mode
[  138.361884][   T29] audit: type=1400 audit(1754129006.281:9626): avc:  denied  { accept } for  pid=8940 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  138.367151][ T8911] bond_slave_0: entered allmulticast mode
[  138.392649][ T8911] bond_slave_1: entered allmulticast mode
[  138.435764][ T8911] team0: entered allmulticast mode
[  138.440948][ T8911] team_slave_0: entered allmulticast mode
[  138.446761][ T8911] team_slave_1: entered allmulticast mode
[  138.635791][ T8911] dummy0: entered allmulticast mode
[  138.655377][ T8911] nlmon0: entered allmulticast mode
[  138.685285][ T8911] caif0: entered allmulticast mode
[  138.690861][ T8911] batadv0: entered allmulticast mode
[  138.716570][ T8911] vxcan0: entered allmulticast mode
[  138.754337][ T8911] vxcan1: entered allmulticast mode
[  138.770949][ T8911] veth0: entered allmulticast mode
[  138.790306][ T8911] veth1: entered allmulticast mode
[  138.840433][ T8911] wg0: entered allmulticast mode
[  138.864365][ T8911] wg1: entered allmulticast mode
[  138.877618][ T8911] wg2: entered allmulticast mode
[  138.892614][ T8911] veth0_to_bridge: entered allmulticast mode
[  138.938771][ T8911] veth1_to_bridge: entered allmulticast mode
[  138.962238][ T8911] veth0_to_bond: entered allmulticast mode
[  138.982907][ T8911] veth1_to_bond: entered allmulticast mode
[  139.004522][ T8911] veth0_to_team: entered allmulticast mode
[  139.014698][ T8911] veth1_to_team: entered allmulticast mode
[  139.025382][ T8911] veth0_to_batadv: entered allmulticast mode
[  139.034059][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.041628][ T8911] batadv_slave_0: entered allmulticast mode
[  139.058211][ T8911] veth1_to_batadv: entered allmulticast mode
[  139.066950][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.074968][ T8911] batadv_slave_1: entered allmulticast mode
[  139.083032][ T8911] xfrm0: entered allmulticast mode
[  139.094034][ T8911] veth0_to_hsr: entered allmulticast mode
[  139.103319][ T8911] hsr_slave_0: entered allmulticast mode
[  139.111255][ T8911] veth1_to_hsr: entered allmulticast mode
[  139.122814][ T8911] hsr_slave_1: entered allmulticast mode
[  139.130408][ T8911] hsr0: entered allmulticast mode
[  139.139046][ T8911] veth1_virt_wifi: entered allmulticast mode
[  139.147330][ T8911] veth0_virt_wifi: entered allmulticast mode
[  139.156930][ T8911] veth1_vlan: entered allmulticast mode
[  139.164565][ T8911] veth0_vlan: entered allmulticast mode
[  139.184777][ T8911] vlan0: entered allmulticast mode
[  139.190054][ T8911] vlan1: entered allmulticast mode
[  139.210828][ T8911] macvlan0: entered allmulticast mode
[  139.220685][ T8911] macvlan1: entered allmulticast mode
[  139.228570][ T8911] ipvlan0: entered allmulticast mode
[  139.234134][ T8911] ipvlan1: entered allmulticast mode
[  139.240759][ T8911] veth1_macvtap: entered allmulticast mode
[  139.249572][ T8911] veth0_macvtap: entered allmulticast mode
[  139.258769][ T8911] macvtap0: entered allmulticast mode
[  139.267248][ T8911] macsec0: entered allmulticast mode
[  139.275228][ T8911] geneve0: entered allmulticast mode
[  139.284082][ T8911] geneve1: entered allmulticast mode
[  139.290693][ T8911] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  139.300268][ T8911] netdevsim netdevsim6 netdevsim1: entered allmulticast mode
[  139.310434][ T8911] netdevsim netdevsim6 netdevsim2: entered allmulticast mode
[  139.318836][ T8911] netdevsim netdevsim6 netdevsim3: entered allmulticast mode
[  139.328836][ T8911] veth2: entered allmulticast mode
[  139.334248][ T8911] veth3: entered allmulticast mode
[  139.339583][ T8911] veth4: entered allmulticast mode
[  139.344951][ T8911] veth5: entered allmulticast mode
[  139.350132][ T8911] veth6: entered allmulticast mode
[  139.355351][ T8911] veth7: entered allmulticast mode
[  139.362388][ T8911] gre1: entered allmulticast mode
[  139.368171][ T8911] veth8: entered allmulticast mode
[  139.373540][ T8911] veth9: entered allmulticast mode
[  139.380083][ T8911] gre2: entered allmulticast mode
[  139.409305][   T31] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.419655][ T8943] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  139.425122][   T29] audit: type=1400 audit(1754129007.351:9627): avc:  denied  { firmware_load } for  pid=8935 comm="syz.2.1499" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  139.429022][ T8943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  139.522584][   T31] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.531654][   T31] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.541601][   T31] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.982126][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  140.059207][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'.
[  140.068169][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'.
[  140.388775][ T9011] loop5: detected capacity change from 0 to 128
[  140.455174][ T9011] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.482590][ T9011] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.539423][   T29] audit: type=1400 audit(1754129008.471:9628): avc:  denied  { relabelfrom } for  pid=9009 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  140.561448][   T29] audit: type=1400 audit(1754129008.471:9629): avc:  denied  { relabelto } for  pid=9009 comm="syz.5.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  140.564806][ T9032] loop2: detected capacity change from 0 to 512
[  140.738150][ T9032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  140.762617][ T9032] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.1528: Unimplemented hash flags: 0x0001
[  140.774362][ T9032] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1528: Corrupt directory, running e2fsck is recommended
[  140.788087][ T9032] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1528: path /320/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  140.852524][ T3737] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.496861][ T9048] ==================================================================
[  141.505209][ T9048] BUG: KCSAN: data-race in fifo_open / wait_for_partner
[  141.512169][ T9048] 
[  141.514496][ T9048] read-write to 0xffff8881156542ac of 4 bytes by task 9043 on cpu 1:
[  141.522555][ T9048]  fifo_open+0x86/0x5d0
[  141.526722][ T9048]  do_dentry_open+0x649/0xa20
[  141.531438][ T9048]  vfs_open+0x37/0x1e0
[  141.535696][ T9048]  path_openat+0x1c5e/0x2170
[  141.540293][ T9048]  do_filp_open+0x109/0x230
[  141.544803][ T9048]  do_sys_openat2+0xa6/0x110
[  141.549592][ T9048]  __x64_sys_openat+0xf2/0x120
[  141.554366][ T9048]  x64_sys_call+0x2e9c/0x2ff0
[  141.559054][ T9048]  do_syscall_64+0xd2/0x200
[  141.563562][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.569461][ T9048] 
[  141.571796][ T9048] read to 0xffff8881156542ac of 4 bytes by task 9048 on cpu 0:
[  141.579789][ T9048]  wait_for_partner+0xb5/0x1c0
[  141.584584][ T9048]  fifo_open+0x462/0x5d0
[  141.589016][ T9048]  do_dentry_open+0x649/0xa20
[  141.593710][ T9048]  vfs_open+0x37/0x1e0
[  141.597794][ T9048]  path_openat+0x1c5e/0x2170
[  141.602394][ T9048]  do_filp_open+0x109/0x230
[  141.606890][ T9048]  do_sys_openat2+0xa6/0x110
[  141.611532][ T9048]  __x64_sys_open+0xe6/0x110
[  141.616225][ T9048]  x64_sys_call+0x1457/0x2ff0
[  141.620911][ T9048]  do_syscall_64+0xd2/0x200
[  141.625421][ T9048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.631325][ T9048] 
[  141.633740][ T9048] value changed: 0x00000001 -> 0x00000002
[  141.639467][ T9048] 
[  141.641786][ T9048] Reported by Kernel Concurrency Sanitizer on:
[  141.647944][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.0.1532 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[  141.660108][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  141.670164][ T9048] ==================================================================
[  141.963415][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.