last executing test programs:

5.634134368s ago: executing program 0 (id=802):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x522, &(0x7f0000000a80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61)
truncate(&(0x7f0000000180)='./file1\x00', 0x4)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
socket$nl_generic(0x10, 0x3, 0x10)

3.364029027s ago: executing program 0 (id=822):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000200001030000000000000000021400000000000000000000080001007f0000410c000c400000000044b721ac"], 0x30}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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")
r6 = creat(&(0x7f0000000600)='./file0\x00', 0xe5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
write$qrtrtun(r6, &(0x7f0000001300)="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", 0x5c8)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r11}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r8, 0x0, 0x0}, 0x10)
r12 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r13 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10024, 0x9f, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc, 0xfffe, 0x0, 0x8001, 0x0, 0xffff}, r13, 0x0, 0xffffffffffffffff, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r14}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xffffffffffffff6a, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r5], 0xf50c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.363291137s ago: executing program 4 (id=823):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00'}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

3.075680331s ago: executing program 4 (id=827):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000004200)='t', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYRES32], 0x1c8}}, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680))
syz_emit_ethernet(0x72, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x3c, 0x6, 0x1, @empty, @local, {[@hopopts={0x6c, 0x3, '\x00', [@generic={0x3, 0x17, "1c77ec50c8a5260b9657f14c0b4d5f8413ff4eb8537049"}]}], {{0x4e21, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x13}}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x23100b9, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r4)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3)
sendfile(r1, r0, 0x0, 0x7ffff000)

2.581905207s ago: executing program 1 (id=830):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r0, 0x7)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x100)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x1)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40604, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x5)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, 0x0})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setrlimit(0x8, &(0x7f0000000080))
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

2.442042769s ago: executing program 1 (id=831):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x1000000, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10024, 0x9f, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc, 0xfffe, 0x0, 0x8001, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0xb1b, 0x0, 0x0, 0x0)

2.266468372s ago: executing program 1 (id=832):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r2, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5001}, 0x20000004)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r6, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)

2.160652293s ago: executing program 0 (id=834):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
statx(r1, &(0x7f0000000200)='./file0\x00', 0x800, 0x53d, 0x0)
openat$cgroup_ro(r0, &(0x7f0000001140)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
lgetxattr(&(0x7f0000000f80)='./file1\x00', &(0x7f0000000fc0)=@random={'user.', 'GPL\x00'}, &(0x7f0000001000)=""/214, 0xd6)

2.148632673s ago: executing program 4 (id=835):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x30000, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0)

1.991899575s ago: executing program 0 (id=838):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000980)="a9", 0x1)
flock(0xffffffffffffffff, 0x5)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xc, 0x42, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2000)
lchown(&(0x7f00000006c0)='./file0\x00', r3, 0xee01)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB="100003000006000020"], 0x2c, 0x0)
symlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file1\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001000000000"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x100000001}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file1\x00', r6, &(0x7f00000001c0)='./file0\x00')

1.740759758s ago: executing program 4 (id=842):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930)
r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f00000000c0)=0x99c, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.699218688s ago: executing program 2 (id=844):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

1.668635019s ago: executing program 2 (id=846):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000004200)='t', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYRES32], 0x1c8}}, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680))
syz_emit_ethernet(0x72, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x3c, 0x6, 0x1, @empty, @local, {[@hopopts={0x6c, 0x3, '\x00', [@generic={0x3, 0x17, "1c77ec50c8a5260b9657f14c0b4d5f8413ff4eb8537049"}]}], {{0x4e21, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x13}}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x23100b9, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r4)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.55960086s ago: executing program 3 (id=847):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}], 0x18}}], 0x2, 0x20000050)

1.475332551s ago: executing program 3 (id=848):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40011)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) (fail_nth: 2)

1.108209636s ago: executing program 1 (id=849):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000027b, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='f2fs_bmap\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f0000000100)='./control\x00', 0x8)
rmdir(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x2ae, &(0x7f0000000800)="$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")
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14)
unshare(0x62040200)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xffffff76, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r5}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')

1.061951306s ago: executing program 3 (id=850):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

1.023211467s ago: executing program 3 (id=851):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
setfsgid(0x0)

978.978118ms ago: executing program 0 (id=852):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r2, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5001}, 0x20000004)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r6, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)

944.952658ms ago: executing program 3 (id=853):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40011)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @loopback, @remote}, &(0x7f0000000200)=0xc)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00'}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r3, 0x87, &(0x7f0000000800)}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x24, 0x1, 0x5, 0x4000, r0, 0xe4, '\x00', r2, r6, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)

845.926879ms ago: executing program 3 (id=854):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r3, 0x40087101, 0x80000020011100)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)

701.626601ms ago: executing program 4 (id=855):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setfsgid(0x0)

633.025562ms ago: executing program 2 (id=856):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x40c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, <r9=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r1, r8, 0x2f, 0x28, 0x4, @void, @void, @void, @value=r9}, 0x20)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc)

558.061123ms ago: executing program 4 (id=857):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000980)="a9", 0x1)
flock(0xffffffffffffffff, 0x5)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xc, 0x42, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2000)
lchown(&(0x7f00000006c0)='./file0\x00', r3, 0xee01)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB="100003000006000020"], 0x2c, 0x0)
symlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file1\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001000000000"], 0x50)
r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file1\x00', r5, &(0x7f00000001c0)='./file0\x00')

456.870574ms ago: executing program 2 (id=858):
socket(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x20000014)
poll(&(0x7f0000000000), 0x20000000000000ea, 0x7)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
pipe2(&(0x7f0000001cc0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x34, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r10, 0xffffffffffffffff, 0x0)

341.062346ms ago: executing program 2 (id=859):
socket(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x20000014)
poll(&(0x7f0000000000), 0x20000000000000ea, 0x7)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
pipe2(&(0x7f0000001cc0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x34, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r10, 0xffffffffffffffff, 0x0)

195.940048ms ago: executing program 1 (id=860):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0)

117.989019ms ago: executing program 2 (id=861):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x2, 0xf, 0x0, 0x7, 0x8, "9afce4aeac9acbb49b00541d7d6a304eb7f873", 0xffff, 0x3})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
r7 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f0000000400)=r7, 0x12)
r8 = syz_io_uring_setup(0x1750, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=<r9=>0x0, &(0x7f0000000200)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r8, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

66.71164ms ago: executing program 1 (id=862):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

0s ago: executing program 0 (id=863):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
setfsgid(0x0)

kernel console output (not intermixed with test programs):

suppressed
[   80.431557][ T4081] Buffer I/O error on dev loop7, logical block 0, lost async page write
[   80.435999][ T4539] I/O error, dev loop7, sector 1288 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0
[   80.438799][ T4081] Buffer I/O error on dev loop7, logical block 1, lost async page write
[   80.449350][ T4539] I/O error, dev loop7, sector 1544 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   80.459976][ T4081] Buffer I/O error on dev loop7, logical block 2, lost async page write
[   80.460005][ T4081] Buffer I/O error on dev loop7, logical block 3, lost async page write
[   80.500371][ T4081] Buffer I/O error on dev loop7, logical block 4, lost async page write
[   80.510943][ T4081] Buffer I/O error on dev loop7, logical block 5, lost async page write
[   80.511719][ T4548] process 'syz.0.334' launched './file1' with NULL argv: empty string added
[   80.520754][ T4081] Buffer I/O error on dev loop7, logical block 6, lost async page write
[   80.520823][ T4081] Buffer I/O error on dev loop7, logical block 7, lost async page write
[   80.539351][ T4548] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   80.548044][ T4081] Buffer I/O error on dev loop7, logical block 8, lost async page write
[   80.566529][ T4081] Buffer I/O error on dev loop7, logical block 9, lost async page write
[   80.579938][ T4539] I/O error, dev loop7, sector 1288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.581250][ T4552] loop3: detected capacity change from 0 to 164
[   80.593586][ T4539] I/O error, dev loop7, sector 1288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.622882][ T4539] I/O error, dev loop7, sector 1288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.648375][ T4552] isofs_fill_super: root inode is not a directory. Corrupted media?
[   80.664251][ T4543] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 33 prio class 0
[   80.697098][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[   80.753692][ T4564] loop0: detected capacity change from 0 to 512
[   80.796566][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'.
[   80.811160][ T4565] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   80.882847][ T4574] bridge0: entered promiscuous mode
[   80.906987][ T4574] bridge0: port 3(macvlan2) entered blocking state
[   80.914278][ T4574] bridge0: port 3(macvlan2) entered disabled state
[   80.923754][ T4574] macvlan2: entered allmulticast mode
[   80.930020][ T4574] bridge0: entered allmulticast mode
[   80.939788][ T4574] macvlan2: left allmulticast mode
[   80.945485][ T4574] bridge0: left allmulticast mode
[   80.951322][ T4574] bridge0: left promiscuous mode
[   80.954890][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   81.025110][ T4585] FAULT_INJECTION: forcing a failure.
[   81.025110][ T4585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.039809][ T4585] CPU: 0 UID: 0 PID: 4585 Comm: syz.3.349 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[   81.039845][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   81.039862][ T4585] Call Trace:
[   81.039869][ T4585]  <TASK>
[   81.039881][ T4585]  __dump_stack+0x1d/0x30
[   81.039909][ T4585]  dump_stack_lvl+0xe8/0x140
[   81.039934][ T4585]  dump_stack+0x15/0x1b
[   81.039950][ T4585]  should_fail_ex+0x265/0x280
[   81.039984][ T4585]  should_fail+0xb/0x20
[   81.040087][ T4585]  should_fail_usercopy+0x1a/0x20
[   81.040113][ T4585]  _copy_from_user+0x1c/0xb0
[   81.040142][ T4585]  __x64_sys_epoll_ctl+0x92/0x100
[   81.040189][ T4585]  x64_sys_call+0x26ef/0x2fb0
[   81.040295][ T4585]  do_syscall_64+0xd0/0x1a0
[   81.040324][ T4585]  ? clear_bhb_loop+0x40/0x90
[   81.040352][ T4585]  ? clear_bhb_loop+0x40/0x90
[   81.040424][ T4585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.040450][ T4585] RIP: 0033:0x7f7bb72be969
[   81.040465][ T4585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.040483][ T4585] RSP: 002b:00007f7bb5927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[   81.040560][ T4585] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72be969
[   81.040632][ T4585] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000004
[   81.040686][ T4585] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[   81.040701][ T4585] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.040713][ T4585] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[   81.040730][ T4585]  </TASK>
[   81.306227][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[   81.362980][ T4601] netlink: 188 bytes leftover after parsing attributes in process `syz.3.353'.
[   81.400623][ T4596] hsr_slave_0 (unregistering): left promiscuous mode
[   81.430172][ T4600] netlink: 96 bytes leftover after parsing attributes in process `syz.2.355'.
[   81.444646][ T4607] loop1: detected capacity change from 0 to 512
[   81.469252][ T4607] EXT4-fs (loop1): orphan cleanup on readonly fs
[   81.476392][ T4607] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[   81.499059][ T4609] loop4: detected capacity change from 0 to 512
[   81.526350][ T4607] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   81.573219][ T4611] loop3: detected capacity change from 0 to 164
[   81.585677][ T4609] EXT4-fs (loop4): orphan cleanup on readonly fs
[   81.592549][ T4609] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   81.601251][ T4607] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.356: attempt to clear invalid blocks 2 len 1
[   81.629410][ T4611] isofs_fill_super: root inode is not a directory. Corrupted media?
[   81.637983][ T4609] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   81.690175][ T4609] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.357: attempt to clear invalid blocks 2 len 1
[   81.713216][ T4607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.356: invalid indirect mapped block 1819239214 (level 0)
[   81.747264][ T4609] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.357: invalid indirect mapped block 1819239214 (level 0)
[   81.777635][ T4607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.356: invalid indirect mapped block 1819239214 (level 1)
[   81.786910][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'.
[   81.811018][ T4613] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   81.836266][ T4609] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.357: invalid indirect mapped block 1819239214 (level 1)
[   81.870515][ T4617] can0: slcan on ttyS3.
[   81.879127][ T4609] EXT4-fs (loop4): 1 truncate cleaned up
[   81.897414][ T4617] loop0: detected capacity change from 0 to 512
[   81.915219][ T4607] EXT4-fs (loop1): 1 truncate cleaned up
[   81.921627][ T4609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.921887][ T4607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.971073][ T4617] EXT4-fs (loop0): orphan cleanup on readonly fs
[   81.978272][ T4617] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   81.994872][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   82.038285][ T4609] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.357: Abort forced by user
[   82.050082][ T4617] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   82.058220][ T4609] EXT4-fs (loop4): Remounting filesystem read-only
[   82.064867][ T4609] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[   82.074792][ T4617] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.359: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   82.135335][ T4617] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.359: couldn't read orphan inode 13 (err -117)
[   82.152149][ T4607] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.356: Abort forced by user
[   82.166818][ T4617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   82.296691][ T4617] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   82.328241][ T4607] EXT4-fs (loop1): Remounting filesystem read-only
[   82.334887][ T4607] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   82.345064][ T4616] can0 (unregistered): slcan off ttyS3.
[   82.393136][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.439986][ T4647] loop3: detected capacity change from 0 to 128
[   82.448473][ T4647] FAT-fs (loop3): Directory bread(block 162) failed
[   82.474675][ T4647] FAT-fs (loop3): Directory bread(block 163) failed
[   82.524757][ T4647] FAT-fs (loop3): Directory bread(block 164) failed
[   82.539891][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.544468][ T4647] FAT-fs (loop3): Directory bread(block 165) failed
[   82.566159][ T4647] FAT-fs (loop3): Directory bread(block 166) failed
[   82.574668][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.579238][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[   82.596780][ T4647] FAT-fs (loop3): Directory bread(block 167) failed
[   82.608516][ T4647] FAT-fs (loop3): Directory bread(block 168) failed
[   82.627533][   T29] kauditd_printk_skb: 622 callbacks suppressed
[   82.627579][   T29] audit: type=1326 audit(1748293965.522:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.645319][ T4647] FAT-fs (loop3): Directory bread(block 169) failed
[   82.660565][   T29] audit: type=1326 audit(1748293965.522:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.683868][   T29] audit: type=1326 audit(1748293965.522:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.717511][   T29] audit: type=1326 audit(1748293965.522:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.744201][   T29] audit: type=1326 audit(1748293965.522:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.769726][   T29] audit: type=1326 audit(1748293965.522:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fe67ed2d0 code=0x7ffc0000
[   82.794497][   T29] audit: type=1326 audit(1748293965.522:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7fe67ee56b code=0x7ffc0000
[   82.798572][ T4666] loop4: detected capacity change from 0 to 164
[   82.818803][   T29] audit: type=1326 audit(1748293965.522:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.851696][   T29] audit: type=1326 audit(1748293965.522:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.877602][   T29] audit: type=1326 audit(1748293965.522:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   82.911064][ T4666] isofs_fill_super: root inode is not a directory. Corrupted media?
[   82.926075][ T4647] syz.3.368 (4647): attempted to duplicate a private mapping with mremap.  This is not supported.
[   82.953176][ T4647] FAT-fs (loop3): Directory bread(block 162) failed
[   82.960903][ T4647] FAT-fs (loop3): Directory bread(block 163) failed
[   82.969103][ T4647] syz.3.368: attempt to access beyond end of device
[   82.969103][ T4647] loop3: rw=3, sector=226, nr_sectors = 6 limit=128
[   82.986560][ T4647] syz.3.368: attempt to access beyond end of device
[   82.986560][ T4647] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128
[   83.034869][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   83.046733][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'.
[   83.057710][ T4666] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.102637][ T4680] FAULT_INJECTION: forcing a failure.
[   83.102637][ T4680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.117349][ T4680] CPU: 1 UID: 0 PID: 4680 Comm: syz.4.372 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[   83.117450][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   83.117516][ T4680] Call Trace:
[   83.117526][ T4680]  <TASK>
[   83.117534][ T4680]  __dump_stack+0x1d/0x30
[   83.117611][ T4680]  dump_stack_lvl+0xe8/0x140
[   83.117635][ T4680]  dump_stack+0x15/0x1b
[   83.117651][ T4680]  should_fail_ex+0x265/0x280
[   83.117745][ T4680]  should_fail+0xb/0x20
[   83.117831][ T4680]  should_fail_usercopy+0x1a/0x20
[   83.117858][ T4680]  _copy_from_user+0x1c/0xb0
[   83.117949][ T4680]  ___sys_sendmsg+0xc1/0x1d0
[   83.117999][ T4680]  __x64_sys_sendmsg+0xd4/0x160
[   83.118090][ T4680]  x64_sys_call+0x2999/0x2fb0
[   83.118120][ T4680]  do_syscall_64+0xd0/0x1a0
[   83.118151][ T4680]  ? clear_bhb_loop+0x40/0x90
[   83.118177][ T4680]  ? clear_bhb_loop+0x40/0x90
[   83.118198][ T4680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.118301][ T4680] RIP: 0033:0x7f68ce25e969
[   83.118317][ T4680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.118334][ T4680] RSP: 002b:00007f68cc8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   83.118355][ T4680] RAX: ffffffffffffffda RBX: 00007f68ce485fa0 RCX: 00007f68ce25e969
[   83.118367][ T4680] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000006
[   83.118451][ T4680] RBP: 00007f68cc8c7090 R08: 0000000000000000 R09: 0000000000000000
[   83.118468][ T4680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.118484][ T4680] R13: 0000000000000000 R14: 00007f68ce485fa0 R15: 00007ffe8a5165f8
[   83.118509][ T4680]  </TASK>
[   83.349116][ T4685] netlink: 'syz.2.374': attribute type 12 has an invalid length.
[   83.357778][ T4685] netlink: 'syz.2.374': attribute type 29 has an invalid length.
[   83.366618][ T4685] netlink: 148 bytes leftover after parsing attributes in process `syz.2.374'.
[   83.663358][ T4694] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   84.064880][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.644223][ T4695] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   84.787366][ T4705] loop4: detected capacity change from 0 to 512
[   84.787657][ T4704] loop0: detected capacity change from 0 to 512
[   84.843371][ T4704] EXT4-fs (loop0): orphan cleanup on readonly fs
[   84.850324][ T4704] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[   84.894529][ T4710] ipvlan0: entered promiscuous mode
[   84.905097][ T4704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   84.905889][ T4710] ipvlan0: left promiscuous mode
[   84.932407][ T4704] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.379: attempt to clear invalid blocks 2 len 1
[   84.962859][ T4704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.379: invalid indirect mapped block 1819239214 (level 0)
[   84.963556][ T4705] EXT4-fs (loop4): too many log groups per flexible block group
[   84.987804][ T4705] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   85.001574][ T4705] EXT4-fs (loop4): mount failed
[   85.026702][ T4704] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.379: invalid indirect mapped block 1819239214 (level 1)
[   85.104901][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   85.134926][ T4704] EXT4-fs (loop0): 1 truncate cleaned up
[   85.142258][ T4714] tipc: Started in network mode
[   85.147677][ T4714] tipc: Node identity 4e4cc745f108, cluster identity 4711
[   85.155279][ T4704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.155330][ T4714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.202739][ T4719] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   85.501884][ T4704] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.379: Abort forced by user
[   85.566045][ T4725] netlink: 'syz.4.387': attribute type 12 has an invalid length.
[   85.574325][ T4725] netlink: 'syz.4.387': attribute type 29 has an invalid length.
[   85.582488][ T4725] netlink: 148 bytes leftover after parsing attributes in process `syz.4.387'.
[   85.660396][ T4711] tipc: Resetting bearer <eth:syzkaller0>
[   85.686017][ T4704] EXT4-fs (loop0): Remounting filesystem read-only
[   85.692823][ T4704] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   85.710740][ T4711] tipc: Disabling bearer <eth:syzkaller0>
[   85.805088][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.889451][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'.
[   85.900153][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.934051][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.051082][ T4748] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[   86.098660][ T4752] ipvlan0: entered promiscuous mode
[   86.105021][ T4752] ipvlan0: left promiscuous mode
[   86.144918][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   86.233472][ T4764] loop1: detected capacity change from 0 to 512
[   86.330539][ T4764] EXT4-fs (loop1): orphan cleanup on readonly fs
[   86.337037][ T4764] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[   86.374603][ T4764] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   86.396070][ T4764] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.401: attempt to clear invalid blocks 2 len 1
[   86.411851][ T4769] infiniband syz!: set active
[   86.416971][ T4769] infiniband syz!: added team_slave_0
[   86.425277][ T4770] SELinux:  Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped).
[   86.449557][ T4769] RDS/IB: syz!: added
[   86.453842][ T4769] smc: adding ib device syz! with port count 1
[   86.463840][ T4769] smc:    ib device syz! port 1 has pnetid 
[   86.472434][ T4764] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.401: invalid indirect mapped block 1819239214 (level 0)
[   86.508746][ T4773] loop0: detected capacity change from 0 to 164
[   86.611892][ T4764] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.401: invalid indirect mapped block 1819239214 (level 1)
[   86.697874][ T4764] EXT4-fs (loop1): 1 truncate cleaned up
[   86.767457][ T4764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.855395][ T4764] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.401: Abort forced by user
[   86.883295][ T4781] Invalid ELF header magic: != ELF
[   86.926869][ T4764] EXT4-fs (loop1): Remounting filesystem read-only
[   86.935175][ T4764] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   86.949627][ T4781] dvmrp1: entered allmulticast mode
[   86.985996][ T4781] dvmrp1: left allmulticast mode
[   87.194866][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   87.214190][ T4836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.409'.
[   87.350148][ T4850] ipvlan0: entered promiscuous mode
[   87.360889][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.371153][ T4850] ipvlan0: left promiscuous mode
[   87.660060][ T4868] 9pnet_fd: Insufficient options for proto=fd
[   88.234881][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   88.461835][ T4877] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   88.570011][   T29] kauditd_printk_skb: 266 callbacks suppressed
[   88.570026][   T29] audit: type=1400 audit(1748293971.462:4024): avc:  denied  { create } for  pid=4878 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   88.622933][   T29] audit: type=1400 audit(1748293971.512:4025): avc:  denied  { connect } for  pid=4878 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   88.703127][   T29] audit: type=1400 audit(1748293971.592:4026): avc:  denied  { shutdown } for  pid=4878 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   88.741698][   T29] audit: type=1400 audit(1748293971.632:4027): avc:  denied  { bind } for  pid=4878 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   88.782013][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'.
[   88.791413][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'.
[   88.800988][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'.
[   88.816820][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.824322][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.832381][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.848394][ T4879] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[   88.856279][ T4879] netlink: 224 bytes leftover after parsing attributes in process `syz.1.420'.
[   88.866265][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.874106][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.882132][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.890319][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.897508][ T4893] loop0: detected capacity change from 0 to 512
[   88.898581][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.907739][   T29] audit: type=1326 audit(1748293971.772:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   88.912348][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.912373][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.912394][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.912417][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.936300][   T29] audit: type=1326 audit(1748293971.772:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   88.943793][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.951198][   T29] audit: type=1326 audit(1748293971.772:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   88.951231][   T29] audit: type=1326 audit(1748293971.772:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   88.951262][   T29] audit: type=1326 audit(1748293971.772:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   89.064893][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.077904][   T29] audit: type=1326 audit(1748293971.772:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   89.085583][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.117425][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.125233][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.133367][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.141077][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.149661][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.158119][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.166314][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.174079][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.182561][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.190336][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.198232][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.206330][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.213768][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   89.237292][ T4893] EXT4-fs (loop0): orphan cleanup on readonly fs
[   89.244143][ T4893] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[   89.264885][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   89.273983][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   89.354994][ T4893] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   89.366073][ T4906] fido_id[4906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   89.412271][ T4912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4912 comm=syz.3.431
[   89.441488][ T4912] loop3: detected capacity change from 0 to 512
[   89.474488][ T4912] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   89.484315][ T4912] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.431: inode #1: comm syz.3.431: iget: illegal inode #
[   89.537215][ T4893] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.424: attempt to clear invalid blocks 2 len 1
[   89.620817][ T4912] EXT4-fs (loop3): no journal found
[   89.626628][ T4912] EXT4-fs (loop3): can't get journal size
[   89.638703][ T4914] netlink: 'syz.4.432': attribute type 12 has an invalid length.
[   89.701295][ T4893] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.424: invalid indirect mapped block 1819239214 (level 0)
[   89.906451][ T4912] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   89.946889][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'.
[   89.982038][ T4893] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.424: invalid indirect mapped block 1819239214 (level 1)
[   90.002042][ T4912] EXT4-fs (loop3): failed to initialize system zone (-22)
[   90.072534][ T4912] EXT4-fs (loop3): mount failed
[   90.093557][ T4893] EXT4-fs (loop0): 1 truncate cleaned up
[   90.113404][ T4912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=4912 comm=syz.3.431
[   90.129129][ T4893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   90.144857][ T4893] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.424: Abort forced by user
[   90.164798][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'.
[   90.171015][ T4893] EXT4-fs (loop0): Remounting filesystem read-only
[   90.180498][ T4893] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   90.308518][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   90.441387][ T4948] ipvlan0: entered promiscuous mode
[   90.451901][ T4948] ipvlan0: left promiscuous mode
[   90.467825][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.819522][ T4977] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   90.840356][ T4976] loop4: detected capacity change from 0 to 512
[   90.914521][ T4979] FAULT_INJECTION: forcing a failure.
[   90.914521][ T4979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.928022][ T4979] CPU: 1 UID: 0 PID: 4979 Comm: syz.0.454 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[   90.928061][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   90.928078][ T4979] Call Trace:
[   90.928085][ T4979]  <TASK>
[   90.928094][ T4979]  __dump_stack+0x1d/0x30
[   90.928116][ T4979]  dump_stack_lvl+0xe8/0x140
[   90.928135][ T4979]  dump_stack+0x15/0x1b
[   90.928179][ T4979]  should_fail_ex+0x265/0x280
[   90.928247][ T4979]  should_fail+0xb/0x20
[   90.928316][ T4979]  should_fail_usercopy+0x1a/0x20
[   90.928355][ T4979]  _copy_from_user+0x1c/0xb0
[   90.928382][ T4979]  memdup_user+0x5e/0xd0
[   90.928402][ T4979]  strndup_user+0x68/0xb0
[   90.928491][ T4979]  __se_sys_mount+0x4d/0x2e0
[   90.928528][ T4979]  ? fput+0x8f/0xc0
[   90.928552][ T4979]  ? ksys_write+0x16e/0x1a0
[   90.928581][ T4979]  __x64_sys_mount+0x67/0x80
[   90.928616][ T4979]  x64_sys_call+0xd36/0x2fb0
[   90.928642][ T4979]  do_syscall_64+0xd0/0x1a0
[   90.928673][ T4979]  ? clear_bhb_loop+0x40/0x90
[   90.928772][ T4979]  ? clear_bhb_loop+0x40/0x90
[   90.928800][ T4979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.928821][ T4979] RIP: 0033:0x7f7fe67ee969
[   90.928837][ T4979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.928873][ T4979] RSP: 002b:00007f7fe4e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   90.928898][ T4979] RAX: ffffffffffffffda RBX: 00007f7fe6a15fa0 RCX: 00007f7fe67ee969
[   90.928924][ T4979] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000200000000000
[   90.928936][ T4979] RBP: 00007f7fe4e57090 R08: 0000200000000300 R09: 0000000000000000
[   90.928948][ T4979] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[   90.928960][ T4979] R13: 0000000000000001 R14: 00007f7fe6a15fa0 R15: 00007ffe3d0a5b88
[   90.928986][ T4979]  </TASK>
[   91.221936][ T4976] EXT4-fs (loop4): orphan cleanup on readonly fs
[   91.228454][ T4976] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   91.252256][ T4976] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   91.268126][ T4976] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.452: attempt to clear invalid blocks 2 len 1
[   91.283830][ T4976] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.452: invalid indirect mapped block 1819239214 (level 0)
[   91.300611][ T4976] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.452: invalid indirect mapped block 1819239214 (level 1)
[   91.316927][ T4976] EXT4-fs (loop4): 1 truncate cleaned up
[   91.317523][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   91.326307][ T4976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.350035][ T4976] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.452: Abort forced by user
[   91.381738][ T4976] EXT4-fs (loop4): Remounting filesystem read-only
[   91.388820][ T4976] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[   91.561122][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'.
[   91.623351][ T5009] FAULT_INJECTION: forcing a failure.
[   91.623351][ T5009] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   91.637162][ T5009] CPU: 0 UID: 0 PID: 5009 Comm: syz.0.460 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[   91.637241][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   91.637259][ T5009] Call Trace:
[   91.637268][ T5009]  <TASK>
[   91.637278][ T5009]  __dump_stack+0x1d/0x30
[   91.637301][ T5009]  dump_stack_lvl+0xe8/0x140
[   91.637383][ T5009]  dump_stack+0x15/0x1b
[   91.637403][ T5009]  should_fail_ex+0x265/0x280
[   91.637443][ T5009]  should_fail_alloc_page+0xf2/0x100
[   91.637490][ T5009]  __alloc_frozen_pages_noprof+0xff/0x360
[   91.637600][ T5009]  alloc_pages_mpol+0xb3/0x250
[   91.637627][ T5009]  alloc_pages_noprof+0x90/0x130
[   91.637667][ T5009]  pte_alloc_one+0x2a/0x110
[   91.637688][ T5009]  __pte_alloc+0x32/0x290
[   91.637711][ T5009]  ? mas_state_walk+0x574/0x650
[   91.637734][ T5009]  handle_mm_fault+0x1d74/0x2ae0
[   91.637805][ T5009]  ? mas_walk+0xf2/0x120
[   91.637859][ T5009]  do_user_addr_fault+0x636/0x1090
[   91.637896][ T5009]  exc_page_fault+0x54/0xc0
[   91.637949][ T5009]  asm_exc_page_fault+0x26/0x30
[   91.637970][ T5009] RIP: 0033:0x7f7fe66b0d66
[   91.637986][ T5009] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[   91.638044][ T5009] RSP: 002b:00007f7fe4de84a0 EFLAGS: 00010246
[   91.638060][ T5009] RAX: 0000000000000001 RBX: 00007f7fe4de8540 RCX: 0000000000000101
[   91.638103][ T5009] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f7fe4de85e0
[   91.638116][ T5009] RBP: 0000000000000102 R08: 00007f7fdc9c9000 R09: 0000000000000000
[   91.638128][ T5009] R10: 0000000000000000 R11: 00007f7fe4de8550 R12: 0000000000000001
[   91.638140][ T5009] R13: 00007f7fe688bfc0 R14: 0000000000000000 R15: 00007f7fe4de85e0
[   91.638160][ T5009]  </TASK>
[   91.822309][ T5009] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   91.833639][ T5009] loop0: detected capacity change from 0 to 512
[   91.840798][ T5009] EXT4-fs: Ignoring removed oldalloc option
[   91.857205][ T5009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.873517][ T5009] EXT4-fs (loop0): orphan cleanup on readonly fs
[   91.880819][ T5009] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.460: Failed to acquire dquot type 1
[   91.893061][ T5009] EXT4-fs (loop0): 1 truncate cleaned up
[   91.899354][ T5009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.975656][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.318870][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   93.341241][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   93.736074][   T29] kauditd_printk_skb: 191 callbacks suppressed
[   93.736094][   T29] audit: type=1400 audit(1748293976.531:4223): avc:  denied  { mount } for  pid=5032 comm="syz.1.469" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   93.764675][   T29] audit: type=1400 audit(1748293976.531:4224): avc:  denied  { watch } for  pid=5032 comm="syz.1.469" path="/81/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   93.791030][   T29] audit: type=1400 audit(1748293976.767:4225): avc:  denied  { connect } for  pid=5032 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   93.811184][   T29] audit: type=1400 audit(1748293976.767:4226): avc:  denied  { getopt } for  pid=5032 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   93.831079][   T29] audit: type=1400 audit(1748293976.767:4227): avc:  denied  { ioctl } for  pid=5032 comm="syz.1.469" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   93.875838][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'.
[   93.909278][ T5038] loop3: detected capacity change from 0 to 164
[   94.355549][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   94.694162][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.732821][   T29] audit: type=1326 audit(1748293977.751:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   94.762553][   T29] audit: type=1326 audit(1748293977.781:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   94.786378][   T29] audit: type=1326 audit(1748293977.781:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   94.811509][   T29] audit: type=1326 audit(1748293977.781:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   94.835056][   T29] audit: type=1326 audit(1748293977.781:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   94.871737][ T5039] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   94.920037][ T5043] IPv6: Can't replace route, no match found
[   94.958604][ T5043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'.
[   94.960639][ T5046] loop2: detected capacity change from 0 to 164
[   94.989448][ T5046] isofs_fill_super: root inode is not a directory. Corrupted media?
[   95.156855][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'.
[   95.167234][ T5046] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.304457][ T5069] loop1: detected capacity change from 0 to 128
[   95.333011][ T5069] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   95.345774][ T5069] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.377764][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   95.388551][ T5069] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full
[   95.437678][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.529462][ T5080] loop2: detected capacity change from 0 to 128
[   95.537312][ T5080] vfat: Unknown parameter 'xœìÜÏk+UÀñ“M“”f²EAzÑ�ºÚèZÒ‚°´�Ø
[   95.537312][ T5080] ´�hȘ”L¨DÄÖ•[ñ?pã¢tYpQPÿ�nÜéÆ�»n-�òæ‘ùÑNú&éë´yi_¿(sgÎ'
[   95.574423][ T5078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'.
[   96.379600][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   96.558103][   T10] tipc: Node number set to 3208955717
[   96.645524][ T5099] loop3: detected capacity change from 0 to 164
[   97.398565][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   97.721811][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'.
[   98.080300][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   98.428510][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   98.779477][   T29] kauditd_printk_skb: 338 callbacks suppressed
[   98.779492][   T29] audit: type=1326 audit(1748293981.875:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.229624][   T29] audit: type=1326 audit(1748293982.018:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.254225][   T29] audit: type=1326 audit(1748293982.018:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.278921][   T29] audit: type=1326 audit(1748293982.018:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.303441][   T29] audit: type=1326 audit(1748293982.018:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.327643][   T29] audit: type=1326 audit(1748293982.018:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.353488][   T29] audit: type=1326 audit(1748293982.018:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.377646][   T29] audit: type=1326 audit(1748293982.018:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.401285][   T29] audit: type=1326 audit(1748293982.018:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.425416][   T29] audit: type=1326 audit(1748293982.018:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[   99.450116][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   99.998912][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[  100.050510][ T5159] loop0: detected capacity change from 0 to 512
[  100.061785][ T5159] EXT4-fs: Ignoring removed mblk_io_submit option
[  100.080551][ T5159] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  100.101084][ T5161] loop1: detected capacity change from 0 to 128
[  100.114274][ T5161] FAT-fs (loop1): Directory bread(block 162) failed
[  100.114946][ T5159] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  100.122126][ T5161] FAT-fs (loop1): Directory bread(block 163) failed
[  100.136667][ T5161] FAT-fs (loop1): Directory bread(block 164) failed
[  100.147617][ T5161] FAT-fs (loop1): Directory bread(block 165) failed
[  100.154853][ T5161] FAT-fs (loop1): Directory bread(block 166) failed
[  100.161635][ T5159] EXT4-fs (loop0): orphan cleanup on readonly fs
[  100.162656][ T5161] FAT-fs (loop1): Directory bread(block 167) failed
[  100.169386][ T5159] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.500: Invalid block bitmap block 0 in block_group 0
[  100.188826][ T5159] EXT4-fs (loop0): Remounting filesystem read-only
[  100.195778][ T5159] EXT4-fs (loop0): 1 orphan inode deleted
[  100.199758][ T5161] FAT-fs (loop1): Directory bread(block 168) failed
[  100.208746][ T5161] FAT-fs (loop1): Directory bread(block 169) failed
[  100.210546][ T5159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.240399][ T5161] FAT-fs (loop1): Directory bread(block 162) failed
[  100.247368][ T5161] FAT-fs (loop1): Directory bread(block 163) failed
[  100.254672][ T5161] syz.1.503: attempt to access beyond end of device
[  100.254672][ T5161] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  100.283182][ T5161] syz.1.503: attempt to access beyond end of device
[  100.283182][ T5161] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  100.307622][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'.
[  100.361947][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'.
[  100.402541][ T5175] loop1: detected capacity change from 0 to 128
[  100.410283][ T5175] FAT-fs (loop1): Directory bread(block 162) failed
[  100.417308][ T5175] FAT-fs (loop1): Directory bread(block 163) failed
[  100.424638][ T5175] FAT-fs (loop1): Directory bread(block 164) failed
[  100.431684][ T5175] FAT-fs (loop1): Directory bread(block 165) failed
[  100.439000][ T5175] FAT-fs (loop1): Directory bread(block 166) failed
[  100.446427][ T5175] FAT-fs (loop1): Directory bread(block 167) failed
[  100.460203][ T5175] FAT-fs (loop1): Directory bread(block 168) failed
[  100.468121][ T5175] FAT-fs (loop1): Directory bread(block 169) failed
[  100.472884][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.481361][ T5175] FAT-fs (loop1): Directory bread(block 162) failed
[  100.489016][ T5175] FAT-fs (loop1): Directory bread(block 163) failed
[  100.496159][ T5175] syz.1.508: attempt to access beyond end of device
[  100.496159][ T5175] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  100.509602][ T5175] syz.1.508: attempt to access beyond end of device
[  100.509602][ T5175] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  100.653073][ T5185] netlink: 'syz.1.510': attribute type 39 has an invalid length.
[  100.766132][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.789998][ T5190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'.
[  100.880648][ T5194] loop3: detected capacity change from 0 to 164
[  100.902182][ T5194] isofs_fill_super: root inode is not a directory. Corrupted media?
[  101.018530][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'.
[  101.037771][ T5194] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  101.103517][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'.
[  101.250165][ T5214] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  101.497232][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  101.592462][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[  101.771709][ T5230] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  102.022761][ T5238] bridge0: entered promiscuous mode
[  102.031011][ T5238] bridge0: port 3(macvlan0) entered blocking state
[  102.037634][ T5238] bridge0: port 3(macvlan0) entered disabled state
[  102.044530][ T5238] macvlan0: entered allmulticast mode
[  102.050357][ T5238] bridge0: entered allmulticast mode
[  102.059888][ T5238] macvlan0: left allmulticast mode
[  102.065076][ T5238] bridge0: left allmulticast mode
[  102.072439][ T5238] bridge0: left promiscuous mode
[  102.205622][ T5252] FAULT_INJECTION: forcing a failure.
[  102.205622][ T5252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.219261][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: syz.2.533 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  102.219298][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  102.219377][ T5252] Call Trace:
[  102.219385][ T5252]  <TASK>
[  102.219394][ T5252]  __dump_stack+0x1d/0x30
[  102.219421][ T5252]  dump_stack_lvl+0xe8/0x140
[  102.219449][ T5252]  dump_stack+0x15/0x1b
[  102.219466][ T5252]  should_fail_ex+0x265/0x280
[  102.219507][ T5252]  should_fail+0xb/0x20
[  102.219603][ T5252]  should_fail_usercopy+0x1a/0x20
[  102.219629][ T5252]  _copy_from_user+0x1c/0xb0
[  102.219654][ T5252]  ___sys_sendmsg+0xc1/0x1d0
[  102.219692][ T5252]  __x64_sys_sendmsg+0xd4/0x160
[  102.219717][ T5252]  x64_sys_call+0x2999/0x2fb0
[  102.219794][ T5252]  do_syscall_64+0xd0/0x1a0
[  102.219862][ T5252]  ? clear_bhb_loop+0x40/0x90
[  102.219945][ T5252]  ? clear_bhb_loop+0x40/0x90
[  102.220037][ T5252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.220099][ T5252] RIP: 0033:0x7feeeb85e969
[  102.220117][ T5252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.220203][ T5252] RSP: 002b:00007feee9ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.220229][ T5252] RAX: ffffffffffffffda RBX: 00007feeeba85fa0 RCX: 00007feeeb85e969
[  102.220314][ T5252] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005
[  102.220325][ T5252] RBP: 00007feee9ec7090 R08: 0000000000000000 R09: 0000000000000000
[  102.220336][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.220347][ T5252] R13: 0000000000000000 R14: 00007feeeba85fa0 R15: 00007ffee9b3d438
[  102.220365][ T5252]  </TASK>
[  102.421229][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'.
[  102.521660][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  102.669187][ T5275] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  103.461166][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[  103.470364][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'.
[  103.537680][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  103.574173][ T5295] netlink: 592 bytes leftover after parsing attributes in process `syz.0.550'.
[  103.601596][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'.
[  103.608564][ T5287] netlink: 'syz.2.548': attribute type 12 has an invalid length.
[  103.618539][ T5287] netlink: 'syz.2.548': attribute type 29 has an invalid length.
[  103.626296][ T5287] netlink: 260 bytes leftover after parsing attributes in process `syz.2.548'.
[  103.667924][ T5303] loop2: detected capacity change from 0 to 128
[  103.677280][ T5303] FAT-fs (loop2): Directory bread(block 162) failed
[  103.694278][ T5303] FAT-fs (loop2): Directory bread(block 163) failed
[  103.701262][ T5303] FAT-fs (loop2): Directory bread(block 164) failed
[  103.708308][ T5303] FAT-fs (loop2): Directory bread(block 165) failed
[  103.715121][ T5303] FAT-fs (loop2): Directory bread(block 166) failed
[  103.722707][ T5303] FAT-fs (loop2): Directory bread(block 167) failed
[  103.729485][ T5303] FAT-fs (loop2): Directory bread(block 168) failed
[  103.736301][ T5303] FAT-fs (loop2): Directory bread(block 169) failed
[  103.744545][ T5303] FAT-fs (loop2): Directory bread(block 162) failed
[  103.751484][ T5303] FAT-fs (loop2): Directory bread(block 163) failed
[  103.759661][ T5307] netlink: 'syz.2.554': attribute type 13 has an invalid length.
[  103.767489][ T5307] netlink: 'syz.2.554': attribute type 27 has an invalid length.
[  103.775480][ T5303] netlink: 'syz.2.554': attribute type 13 has an invalid length.
[  103.783323][ T5303] netlink: 'syz.2.554': attribute type 27 has an invalid length.
[  103.829721][ T5307] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.837285][ T5307] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.874349][ T5307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.908872][ T5307] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.918042][ T5307] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.927152][ T5307] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.936310][ T5307] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.504540][ T5319] loop1: detected capacity change from 0 to 128
[  104.534784][   T29] kauditd_printk_skb: 198 callbacks suppressed
[  104.534800][   T29] audit: type=1326 audit(1748293987.682:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.564555][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  104.565109][   T29] audit: type=1326 audit(1748293987.682:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.595703][   T29] audit: type=1326 audit(1748293987.682:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.619486][   T29] audit: type=1326 audit(1748293987.692:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.643040][   T29] audit: type=1326 audit(1748293987.692:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.666842][   T29] audit: type=1326 audit(1748293987.692:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.690304][   T29] audit: type=1326 audit(1748293987.692:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.713855][   T29] audit: type=1326 audit(1748293987.692:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.737497][   T29] audit: type=1326 audit(1748293987.692:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.761260][   T29] audit: type=1326 audit(1748293987.692:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  104.804010][ T5319] FAT-fs (loop1): Directory bread(block 162) failed
[  104.810790][ T5319] FAT-fs (loop1): Directory bread(block 163) failed
[  104.853547][ T5323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.890182][ T5319] FAT-fs (loop1): Directory bread(block 164) failed
[  104.908561][ T5319] FAT-fs (loop1): Directory bread(block 165) failed
[  104.918685][ T5319] FAT-fs (loop1): Directory bread(block 166) failed
[  104.926683][ T5319] FAT-fs (loop1): Directory bread(block 167) failed
[  104.939554][ T5319] FAT-fs (loop1): Directory bread(block 168) failed
[  104.953224][ T5319] FAT-fs (loop1): Directory bread(block 169) failed
[  104.972262][ T5319] FAT-fs (loop1): Directory bread(block 162) failed
[  104.979164][ T5319] FAT-fs (loop1): Directory bread(block 163) failed
[  104.986595][ T5319] syz.1.559: attempt to access beyond end of device
[  104.986595][ T5319] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  105.001835][ T5319] syz.1.559: attempt to access beyond end of device
[  105.001835][ T5319] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  105.029991][ T5323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.060078][ T5340] FAULT_INJECTION: forcing a failure.
[  105.060078][ T5340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.073301][ T5340] CPU: 1 UID: 0 PID: 5340 Comm: syz.2.567 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  105.073333][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  105.073407][ T5340] Call Trace:
[  105.073415][ T5340]  <TASK>
[  105.073425][ T5340]  __dump_stack+0x1d/0x30
[  105.073452][ T5340]  dump_stack_lvl+0xe8/0x140
[  105.073478][ T5340]  dump_stack+0x15/0x1b
[  105.073501][ T5340]  should_fail_ex+0x265/0x280
[  105.073608][ T5340]  should_fail+0xb/0x20
[  105.073793][ T5340]  should_fail_usercopy+0x1a/0x20
[  105.073821][ T5340]  _copy_from_user+0x1c/0xb0
[  105.073884][ T5340]  kstrtouint_from_user+0x69/0xf0
[  105.073966][ T5340]  ? avc_policy_seqno+0x15/0x30
[  105.074019][ T5340]  proc_fail_nth_write+0x50/0x160
[  105.074056][ T5340]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  105.074089][ T5340]  vfs_write+0x266/0x8d0
[  105.074124][ T5340]  ? vfs_read+0x47f/0x6f0
[  105.074217][ T5340]  ? __rcu_read_unlock+0x4f/0x70
[  105.074286][ T5340]  ? __fget_files+0x184/0x1c0
[  105.074392][ T5340]  ksys_write+0xda/0x1a0
[  105.074435][ T5340]  __x64_sys_write+0x40/0x50
[  105.074493][ T5340]  x64_sys_call+0x2cdd/0x2fb0
[  105.074514][ T5340]  do_syscall_64+0xd0/0x1a0
[  105.074545][ T5340]  ? clear_bhb_loop+0x40/0x90
[  105.074574][ T5340]  ? clear_bhb_loop+0x40/0x90
[  105.074603][ T5340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.074669][ T5340] RIP: 0033:0x7feeeb85d41f
[  105.074730][ T5340] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  105.074747][ T5340] RSP: 002b:00007feee9ec7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  105.074769][ T5340] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feeeb85d41f
[  105.074781][ T5340] RDX: 0000000000000001 RSI: 00007feee9ec70a0 RDI: 0000000000000007
[  105.074793][ T5340] RBP: 00007feee9ec7090 R08: 0000000000000000 R09: 0000000000000000
[  105.074874][ T5340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  105.074890][ T5340] R13: 0000000000000000 R14: 00007feeeba85fa0 R15: 00007ffee9b3d438
[  105.074916][ T5340]  </TASK>
[  105.336873][ T5323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.390813][ T5347] loop2: detected capacity change from 0 to 128
[  105.417123][ T5347] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.430677][ T5347] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.436950][ T5323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.506620][ T5323] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.520343][ T5323] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.521298][ T5354] netlink: 592 bytes leftover after parsing attributes in process `syz.1.571'.
[  105.533396][ T5323] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.555531][ T5323] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.592131][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  105.770907][ T5369] FAULT_INJECTION: forcing a failure.
[  105.770907][ T5369] name failslab, interval 1, probability 0, space 0, times 0
[  105.783754][ T5369] CPU: 0 UID: 0 PID: 5369 Comm: syz.3.578 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  105.783789][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  105.783805][ T5369] Call Trace:
[  105.783815][ T5369]  <TASK>
[  105.783891][ T5369]  __dump_stack+0x1d/0x30
[  105.783916][ T5369]  dump_stack_lvl+0xe8/0x140
[  105.783942][ T5369]  dump_stack+0x15/0x1b
[  105.784019][ T5369]  should_fail_ex+0x265/0x280
[  105.784091][ T5369]  should_failslab+0x8c/0xb0
[  105.784124][ T5369]  __kmalloc_noprof+0xa5/0x3e0
[  105.784149][ T5369]  ? alloc_pipe_info+0x1c9/0x350
[  105.784189][ T5369]  alloc_pipe_info+0x1c9/0x350
[  105.784295][ T5369]  splice_direct_to_actor+0x592/0x680
[  105.784327][ T5369]  ? kstrtouint_from_user+0x9f/0xf0
[  105.784368][ T5369]  ? __pfx_direct_splice_actor+0x10/0x10
[  105.784404][ T5369]  ? __rcu_read_unlock+0x4f/0x70
[  105.784472][ T5369]  ? get_pid_task+0x96/0xd0
[  105.784500][ T5369]  ? avc_policy_seqno+0x15/0x30
[  105.784527][ T5369]  do_splice_direct+0xda/0x150
[  105.784550][ T5369]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  105.784692][ T5369]  do_sendfile+0x380/0x640
[  105.784750][ T5369]  __x64_sys_sendfile64+0x105/0x150
[  105.784848][ T5369]  x64_sys_call+0xb39/0x2fb0
[  105.784884][ T5369]  do_syscall_64+0xd0/0x1a0
[  105.784970][ T5369]  ? clear_bhb_loop+0x40/0x90
[  105.784991][ T5369]  ? clear_bhb_loop+0x40/0x90
[  105.785013][ T5369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.785051][ T5369] RIP: 0033:0x7f7bb72be969
[  105.785071][ T5369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.785107][ T5369] RSP: 002b:00007f7bb5927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  105.785132][ T5369] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72be969
[  105.785148][ T5369] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  105.785217][ T5369] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[  105.785228][ T5369] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  105.785240][ T5369] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[  105.785267][ T5369]  </TASK>
[  106.247786][ T5379] FAULT_INJECTION: forcing a failure.
[  106.247786][ T5379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.260946][ T5379] CPU: 1 UID: 0 PID: 5379 Comm: +}[@ Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  106.260983][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  106.260995][ T5379] Call Trace:
[  106.261001][ T5379]  <TASK>
[  106.261008][ T5379]  __dump_stack+0x1d/0x30
[  106.261036][ T5379]  dump_stack_lvl+0xe8/0x140
[  106.261062][ T5379]  dump_stack+0x15/0x1b
[  106.261085][ T5379]  should_fail_ex+0x265/0x280
[  106.261132][ T5379]  should_fail+0xb/0x20
[  106.261174][ T5379]  should_fail_usercopy+0x1a/0x20
[  106.261197][ T5379]  _copy_from_user+0x1c/0xb0
[  106.261220][ T5379]  __sys_bind+0x106/0x2a0
[  106.261256][ T5379]  __x64_sys_bind+0x3f/0x50
[  106.261324][ T5379]  x64_sys_call+0x2086/0x2fb0
[  106.261354][ T5379]  do_syscall_64+0xd0/0x1a0
[  106.261420][ T5379]  ? clear_bhb_loop+0x40/0x90
[  106.261443][ T5379]  ? clear_bhb_loop+0x40/0x90
[  106.261464][ T5379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.261486][ T5379] RIP: 0033:0x7f7bb72be969
[  106.261577][ T5379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.261600][ T5379] RSP: 002b:00007f7bb5927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  106.261655][ T5379] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72be969
[  106.261667][ T5379] RDX: 000000000000006e RSI: 0000200000000240 RDI: 0000000000000006
[  106.261679][ T5379] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[  106.261690][ T5379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.261705][ T5379] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[  106.261730][ T5379]  </TASK>
[  106.603862][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  106.620509][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  107.649602][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  107.816937][ T5420] loop2: detected capacity change from 0 to 1024
[  108.679512][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  108.821032][ T5420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  108.830874][ T5420] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  108.972779][ T5420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  108.994692][ T5420] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.596: lblock 2 mapped to illegal pblock 2 (length 1)
[  109.013676][ T5420] EXT4-fs (loop2): Remounting filesystem read-only
[  109.026296][ T5420] EXT4-fs (loop2): 1 orphan inode deleted
[  109.034950][ T5420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.072774][ T5449] Invalid ELF header magic: != ELF
[  109.113169][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.709991][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  109.903057][ T5466] ipvlan0: entered promiscuous mode
[  109.910982][ T5466] ipvlan0: left promiscuous mode
[  109.968706][   T29] kauditd_printk_skb: 75 callbacks suppressed
[  109.968726][   T29] audit: type=1326 audit(1748293993.219:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.052123][   T29] audit: type=1326 audit(1748293993.250:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.075772][   T29] audit: type=1326 audit(1748293993.250:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.099645][   T29] audit: type=1326 audit(1748293993.250:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.123305][   T29] audit: type=1326 audit(1748293993.250:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.147338][   T29] audit: type=1326 audit(1748293993.250:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.170842][   T29] audit: type=1326 audit(1748293993.250:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.194655][   T29] audit: type=1326 audit(1748293993.250:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.218171][   T29] audit: type=1326 audit(1748293993.250:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.241842][   T29] audit: type=1326 audit(1748293993.250:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe67ee969 code=0x7ffc0000
[  110.250259][ T5472] loop2: detected capacity change from 0 to 164
[  110.309820][ T5472] isofs_fill_super: root inode is not a directory. Corrupted media?
[  110.405803][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[  110.481978][ T5472] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  110.741179][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  110.751163][ T5500] netlink: 'syz.0.621': attribute type 4 has an invalid length.
[  110.907977][ T5502] netlink: 'syz.3.622': attribute type 39 has an invalid length.
[  110.991597][ T5504] loop2: detected capacity change from 0 to 164
[  111.055797][ T5504] isofs_fill_super: root inode is not a directory. Corrupted media?
[  111.605343][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[  111.673828][ T5508] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  111.772816][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  111.880463][ T5527] FAULT_INJECTION: forcing a failure.
[  111.880463][ T5527] name failslab, interval 1, probability 0, space 0, times 0
[  111.893373][ T5527] CPU: 1 UID: 0 PID: 5527 Comm: syz.3.629 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  111.893407][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.893514][ T5527] Call Trace:
[  111.893520][ T5527]  <TASK>
[  111.893528][ T5527]  __dump_stack+0x1d/0x30
[  111.893557][ T5527]  dump_stack_lvl+0xe8/0x140
[  111.893583][ T5527]  dump_stack+0x15/0x1b
[  111.893606][ T5527]  should_fail_ex+0x265/0x280
[  111.893715][ T5527]  should_failslab+0x8c/0xb0
[  111.893756][ T5527]  kmem_cache_alloc_noprof+0x50/0x310
[  111.893783][ T5527]  ? skb_clone+0x151/0x1f0
[  111.893884][ T5527]  skb_clone+0x151/0x1f0
[  111.894025][ T5527]  __netlink_deliver_tap+0x2c9/0x500
[  111.894057][ T5527]  netlink_unicast+0x64c/0x670
[  111.894100][ T5527]  netlink_sendmsg+0x58b/0x6b0
[  111.894185][ T5527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.894206][ T5527]  __sock_sendmsg+0x142/0x180
[  111.894243][ T5527]  ____sys_sendmsg+0x31e/0x4e0
[  111.894323][ T5527]  ___sys_sendmsg+0x17b/0x1d0
[  111.894366][ T5527]  __x64_sys_sendmsg+0xd4/0x160
[  111.894469][ T5527]  x64_sys_call+0x2999/0x2fb0
[  111.894499][ T5527]  do_syscall_64+0xd0/0x1a0
[  111.894633][ T5527]  ? clear_bhb_loop+0x40/0x90
[  111.894719][ T5527]  ? clear_bhb_loop+0x40/0x90
[  111.894749][ T5527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.894777][ T5527] RIP: 0033:0x7f7bb72be969
[  111.894797][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.894851][ T5527] RSP: 002b:00007f7bb5927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.894876][ T5527] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72be969
[  111.894893][ T5527] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  111.894909][ T5527] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[  111.894926][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.894942][ T5527] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[  111.894967][ T5527]  </TASK>
[  112.121902][ T5527] openvswitch: netlink: Message has 6 unknown bytes.
[  112.359944][ T5539] openvswitch: netlink: Message has 6 unknown bytes.
[  112.402888][ T5543] Invalid ELF header magic: != ELF
[  112.709395][ T5563] netlink: 'syz.0.639': attribute type 39 has an invalid length.
[  112.729523][ T5564] vlan2: entered allmulticast mode
[  112.804955][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  112.821826][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'.
[  112.830734][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'.
[  113.041918][ T5579] loop2: detected capacity change from 0 to 512
[  113.085541][ T5579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.146357][ T5579] EXT4-fs (loop2): 1 truncate cleaned up
[  113.175192][ T5579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.636459][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.837742][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.306010][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'.
[  114.338211][ T5613] netlink: 'syz.1.653': attribute type 27 has an invalid length.
[  114.367300][ T5616] loop0: detected capacity change from 0 to 164
[  114.536417][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.543860][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.591574][ T5613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.620955][ T5613] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.630104][ T5613] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.639182][ T5613] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.648168][ T5613] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.785136][ T5634] loop3: detected capacity change from 0 to 512
[  114.808673][ T5634] EXT4-fs (loop3): orphan cleanup on readonly fs
[  114.815321][ T5634] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  114.870903][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.911009][ T5638] netlink: 'syz.4.660': attribute type 39 has an invalid length.
[  114.942001][ T5634] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  115.011363][ T5634] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.659: attempt to clear invalid blocks 2 len 1
[  115.079752][ T5634] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.659: invalid indirect mapped block 1819239214 (level 0)
[  115.127853][   T29] kauditd_printk_skb: 260 callbacks suppressed
[  115.127872][   T29] audit: type=1400 audit(1748293998.408:5129): avc:  denied  { bind } for  pid=5643 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  115.181741][ T5634] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.659: invalid indirect mapped block 1819239214 (level 1)
[  115.195492][   T29] audit: type=1400 audit(1748293998.448:5130): avc:  denied  { read } for  pid=5643 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  115.214988][   T29] audit: type=1400 audit(1748293998.448:5131): avc:  denied  { setopt } for  pid=5643 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  115.308233][ T5634] EXT4-fs (loop3): 1 truncate cleaned up
[  115.318859][ T5634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.460139][   T29] audit: type=1326 audit(1748293998.700:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bb72bd2d0 code=0x7ffc0000
[  115.483548][   T29] audit: type=1326 audit(1748293998.700:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7bb72bd6b7 code=0x7ffc0000
[  115.506957][   T29] audit: type=1326 audit(1748293998.700:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bb72bd2d0 code=0x7ffc0000
[  115.530462][   T29] audit: type=1326 audit(1748293998.700:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  115.553912][   T29] audit: type=1326 audit(1748293998.700:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  115.558897][ T5634] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.659: Abort forced by user
[  115.577302][   T29] audit: type=1326 audit(1748293998.700:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  115.904521][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  116.117062][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'.
[  116.137913][ T5634] EXT4-fs (loop3): Remounting filesystem read-only
[  116.144532][ T5634] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  116.178314][ T5666] loop4: detected capacity change from 0 to 1024
[  116.250963][ T5666] EXT4-fs: Ignoring removed orlov option
[  116.272388][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.286757][ T5669] ipvlan0: entered promiscuous mode
[  116.292730][ T5669] ipvlan0: left promiscuous mode
[  116.300052][ T5666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.431503][   T29] audit: type=1400 audit(1748293999.716:5138): avc:  denied  { connect } for  pid=5674 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  116.689222][ T5692] loop3: detected capacity change from 0 to 512
[  116.725531][ T5692] EXT4-fs (loop3): 1 orphan inode deleted
[  116.746294][ T5692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.749789][   T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1
[  116.771005][ T5692] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.938584][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  117.006730][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.097038][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.130124][ T5707] netlink: 'syz.0.678': attribute type 39 has an invalid length.
[  117.138960][ T5708] Invalid ELF header magic: != ELF
[  117.556562][ T5739] loop4: detected capacity change from 0 to 732
[  117.679696][ T5742] netlink: 'syz.1.691': attribute type 4 has an invalid length.
[  117.748973][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'.
[  117.758246][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[  117.834285][ T5758] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  117.840864][ T5758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  117.848408][ T5758] vhci_hcd vhci_hcd.0: Device attached
[  117.973046][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  118.042688][ T5059] vhci_hcd: vhci_device speed not set
[  118.113145][ T5059] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  118.405544][ T5760] vhci_hcd: connection reset by peer
[  118.411376][ T4105] vhci_hcd: stop threads
[  118.415837][ T4105] vhci_hcd: release socket
[  118.420284][ T4105] vhci_hcd: disconnect device
[  118.619542][ T5783] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  118.703505][ T5787] Invalid ELF header magic: != ELF
[  118.732755][ T5790] loop3: detected capacity change from 0 to 1024
[  118.771143][ T5790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.788016][ T5790] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  118.803305][ T5790] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  118.815585][ T5790] EXT4-fs (loop3): This should not happen!! Data will be lost
[  118.815585][ T5790] 
[  118.825267][ T5790] EXT4-fs (loop3): Total free blocks count 0
[  118.831294][ T5790] EXT4-fs (loop3): Free/Dirty block details
[  118.837206][ T5790] EXT4-fs (loop3): free_blocks=68451041280
[  118.843082][ T5790] EXT4-fs (loop3): dirty_blocks=16
[  118.848213][ T5790] EXT4-fs (loop3): Block reservation details
[  118.854265][ T5790] EXT4-fs (loop3): i_reserved_data_blocks=1
[  118.872899][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.893459][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'.
[  118.902391][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'.
[  119.007819][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  119.247873][ T5799] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  120.043016][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  120.143531][ T5816] Invalid ELF header magic: != ELF
[  120.173850][ T5818] loop0: detected capacity change from 0 to 128
[  120.236623][ T5818] syz.0.716: attempt to access beyond end of device
[  120.236623][ T5818] loop0: rw=2049, sector=129, nr_sectors = 89 limit=128
[  120.244995][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  120.245013][   T29] audit: type=1326 audit(1748294003.545:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.255389][ T5826] bridge0: entered promiscuous mode
[  120.287794][ T5826] bridge0: port 3(macvlan0) entered blocking state
[  120.294510][ T5826] bridge0: port 3(macvlan0) entered disabled state
[  120.294578][   T29] audit: type=1326 audit(1748294003.545:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.301326][ T5826] macvlan0: entered allmulticast mode
[  120.324405][   T29] audit: type=1326 audit(1748294003.595:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.329786][ T5826] bridge0: entered allmulticast mode
[  120.358853][   T29] audit: type=1326 audit(1748294003.595:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.382343][   T29] audit: type=1326 audit(1748294003.595:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.405703][   T29] audit: type=1326 audit(1748294003.595:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.430366][   T29] audit: type=1326 audit(1748294003.595:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.453936][   T29] audit: type=1326 audit(1748294003.595:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.477540][   T29] audit: type=1326 audit(1748294003.595:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.500893][   T29] audit: type=1326 audit(1748294003.595:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.3.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb72be969 code=0x7ffc0000
[  120.524654][ T5827] loop3: detected capacity change from 0 to 512
[  120.532431][ T5826] macvlan0: left allmulticast mode
[  120.537663][ T5826] bridge0: left allmulticast mode
[  120.544361][ T5826] bridge0: left promiscuous mode
[  120.560864][ T5827] EXT4-fs (loop3): orphan cleanup on readonly fs
[  120.567364][ T5827] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  120.596359][ T5827] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  120.634948][ T5827] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.719: attempt to clear invalid blocks 2 len 1
[  120.656002][ T5827] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.719: invalid indirect mapped block 1819239214 (level 0)
[  120.680220][ T5827] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.719: invalid indirect mapped block 1819239214 (level 1)
[  120.713051][ T5827] EXT4-fs (loop3): 1 truncate cleaned up
[  120.721444][ T5842] bridge0: entered promiscuous mode
[  120.721455][ T5827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.728222][ T5842] bridge0: port 3(macvlan0) entered blocking state
[  120.745801][ T5842] bridge0: port 3(macvlan0) entered disabled state
[  120.752857][ T5842] macvlan0: entered allmulticast mode
[  120.758465][ T5842] bridge0: entered allmulticast mode
[  120.782439][ T5827] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.719: Abort forced by user
[  120.793492][ T5842] macvlan0: left allmulticast mode
[  120.794211][ T5827] EXT4-fs (loop3): Remounting filesystem read-only
[  120.798670][ T5842] bridge0: left allmulticast mode
[  120.805259][ T5827] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  120.810835][ T5842] bridge0: left promiscuous mode
[  120.932530][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  120.941642][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'.
[  121.078474][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  121.110739][ T5856] Invalid ELF header magic: != ELF
[  121.487585][ T5857] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  121.901706][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.096552][ T5882] loop2: detected capacity change from 0 to 128
[  122.121642][ T5888] loop0: detected capacity change from 0 to 512
[  122.128214][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  122.136786][ T5888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.149823][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'.
[  122.158773][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  122.252105][ T5888] EXT4-fs (loop0): 1 truncate cleaned up
[  122.258314][ T5888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.448601][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[  122.469616][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.496958][ T5898] team0 (unregistering): Port device team_slave_0 removed
[  122.516141][ T5898] team0 (unregistering): Port device team_slave_1 removed
[  122.761488][ T5903] loop0: detected capacity change from 0 to 164
[  123.148212][ T5910] loop3: detected capacity change from 0 to 512
[  123.154821][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  123.263181][ T5059] usb 9-1: enqueue for inactive port 0
[  123.268802][ T5059] usb 9-1: enqueue for inactive port 0
[  123.389994][ T5915] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  123.532776][ T5059] vhci_hcd: vhci_device speed not set
[  124.154054][ T5910] EXT4-fs (loop3): orphan cleanup on readonly fs
[  124.160530][ T5910] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  124.192745][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  124.285597][ T5918] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  124.312754][ T5910] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  124.338647][ T5910] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.749: attempt to clear invalid blocks 2 len 1
[  124.383125][ T5910] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.749: invalid indirect mapped block 1819239214 (level 0)
[  124.443130][ T5910] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.749: invalid indirect mapped block 1819239214 (level 1)
[  124.504940][ T5910] EXT4-fs (loop3): 1 truncate cleaned up
[  124.535099][ T5910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.559282][ T5922] bridge0: port 3(macvlan2) entered blocking state
[  124.565926][ T5922] bridge0: port 3(macvlan2) entered disabled state
[  124.584467][ T5910] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.749: Abort forced by user
[  124.603957][ T5922] macvlan2: entered allmulticast mode
[  124.609419][ T5922] bridge0: entered allmulticast mode
[  124.614976][ T5910] EXT4-fs (loop3): Remounting filesystem read-only
[  124.621505][ T5910] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  124.664229][ T5922] macvlan2: left allmulticast mode
[  124.669462][ T5922] bridge0: left allmulticast mode
[  124.855141][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'.
[  124.891860][ T5934] loop1: detected capacity change from 0 to 512
[  124.898593][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.909587][ T5934] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  124.926528][ T5932] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.955345][ T5934] EXT4-fs (loop1): 1 truncate cleaned up
[  125.021348][ T5942] veth0: entered promiscuous mode
[  125.034595][ T5942] FAULT_INJECTION: forcing a failure.
[  125.034595][ T5942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.048105][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: syz.4.761 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  125.048141][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.048271][ T5942] Call Trace:
[  125.048278][ T5942]  <TASK>
[  125.048289][ T5942]  __dump_stack+0x1d/0x30
[  125.048315][ T5942]  dump_stack_lvl+0xe8/0x140
[  125.048337][ T5942]  dump_stack+0x15/0x1b
[  125.048360][ T5942]  should_fail_ex+0x265/0x280
[  125.048406][ T5942]  should_fail+0xb/0x20
[  125.048470][ T5942]  should_fail_usercopy+0x1a/0x20
[  125.048497][ T5942]  _copy_from_iter+0xcf/0xdd0
[  125.048598][ T5942]  ? __build_skb_around+0x1a0/0x200
[  125.048679][ T5942]  ? __alloc_skb+0x223/0x320
[  125.048725][ T5942]  netlink_sendmsg+0x471/0x6b0
[  125.048753][ T5942]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.048778][ T5942]  __sock_sendmsg+0x142/0x180
[  125.048852][ T5942]  ____sys_sendmsg+0x31e/0x4e0
[  125.048883][ T5942]  ___sys_sendmsg+0x17b/0x1d0
[  125.048917][ T5942]  __x64_sys_sendmsg+0xd4/0x160
[  125.048945][ T5942]  x64_sys_call+0x2999/0x2fb0
[  125.048997][ T5942]  do_syscall_64+0xd0/0x1a0
[  125.049030][ T5942]  ? clear_bhb_loop+0x40/0x90
[  125.049114][ T5942]  ? clear_bhb_loop+0x40/0x90
[  125.049144][ T5942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.049175][ T5942] RIP: 0033:0x7f68ce25e969
[  125.049195][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.049214][ T5942] RSP: 002b:00007f68cc8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.049233][ T5942] RAX: ffffffffffffffda RBX: 00007f68ce485fa0 RCX: 00007f68ce25e969
[  125.049245][ T5942] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000004
[  125.049307][ T5942] RBP: 00007f68cc8c7090 R08: 0000000000000000 R09: 0000000000000000
[  125.049324][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.049340][ T5942] R13: 0000000000000000 R14: 00007f68ce485fa0 R15: 00007ffe8a5165f8
[  125.049365][ T5942]  </TASK>
[  125.051141][ T5934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.159408][ T5941] veth0: left promiscuous mode
[  125.242723][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  125.305893][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  125.305977][   T29] audit: type=1326 audit(1748294521.624:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.348703][   T29] audit: type=1326 audit(1748294521.624:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.372312][   T29] audit: type=1326 audit(1748294521.654:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.396005][   T29] audit: type=1326 audit(1748294521.654:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.419648][   T29] audit: type=1326 audit(1748294521.654:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.422305][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.443369][   T29] audit: type=1326 audit(1748294521.664:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.475459][   T29] audit: type=1326 audit(1748294521.664:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.498790][   T29] audit: type=1326 audit(1748294521.664:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.522843][ T5948] loop4: detected capacity change from 0 to 164
[  125.530352][   T29] audit: type=1326 audit(1748294521.764:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.553864][   T29] audit: type=1326 audit(1748294521.764:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce25e969 code=0x7ffc0000
[  125.644453][ T5948] isofs_fill_super: root inode is not a directory. Corrupted media?
[  125.816726][ T5956] loop3: detected capacity change from 0 to 164
[  125.825441][ T5956] isofs_fill_super: root inode is not a directory. Corrupted media?
[  125.841608][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'.
[  125.894523][ T5946] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  126.011218][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'.
[  126.059533][ T5956] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  126.195558][ T5966] loop3: detected capacity change from 0 to 512
[  126.202359][ T5966] EXT4-fs: Ignoring removed oldalloc option
[  126.209320][ T5966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.220730][ T5966] EXT4-fs (loop3): orphan cleanup on readonly fs
[  126.227773][ T5966] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.766: Failed to acquire dquot type 1
[  126.240748][ T5966] EXT4-fs (loop3): 1 truncate cleaned up
[  126.247218][ T5966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  126.282724][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  126.500000][ T5969] loop2: detected capacity change from 0 to 128
[  126.514048][ T5969] FAT-fs (loop2): Directory bread(block 162) failed
[  126.534493][ T5969] FAT-fs (loop2): Directory bread(block 163) failed
[  126.543745][ T5969] FAT-fs (loop2): Directory bread(block 164) failed
[  126.550667][ T5969] FAT-fs (loop2): Directory bread(block 165) failed
[  126.557567][ T5969] FAT-fs (loop2): Directory bread(block 166) failed
[  126.564464][ T5969] FAT-fs (loop2): Directory bread(block 167) failed
[  126.571161][ T5969] FAT-fs (loop2): Directory bread(block 168) failed
[  126.577945][ T5969] FAT-fs (loop2): Directory bread(block 169) failed
[  126.586996][ T5969] FAT-fs (loop2): Directory bread(block 162) failed
[  126.595859][ T5969] FAT-fs (loop2): Directory bread(block 163) failed
[  126.603002][ T5969] syz.2.767: attempt to access beyond end of device
[  126.603002][ T5969] loop2: rw=3, sector=226, nr_sectors = 6 limit=128
[  126.617476][ T5969] syz.2.767: attempt to access beyond end of device
[  126.617476][ T5969] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128
[  126.875079][ T5978] loop2: detected capacity change from 0 to 512
[  126.897251][ T5980] Invalid ELF header magic: != ELF
[  126.991890][ T5984] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  127.003878][ T5984] loop1: detected capacity change from 0 to 128
[  127.312730][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  127.360759][ T5978] EXT4-fs (loop2): orphan cleanup on readonly fs
[  127.367253][ T5978] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  127.404877][ T5978] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  127.419869][ T5978] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.770: attempt to clear invalid blocks 2 len 1
[  127.436095][ T5978] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.770: invalid indirect mapped block 1819239214 (level 0)
[  127.451206][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.460750][ T5978] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.770: invalid indirect mapped block 1819239214 (level 1)
[  127.476440][ T5978] EXT4-fs (loop2): 1 truncate cleaned up
[  127.503003][ T5978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.525428][ T5978] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.770: Abort forced by user
[  127.571840][ T5978] EXT4-fs (loop2): Remounting filesystem read-only
[  127.578538][ T5978] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  127.662793][ T6001] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15)
[  127.669446][ T6001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  127.676981][ T6001] vhci_hcd vhci_hcd.0: Device attached
[  127.718984][ T6003] vhci_hcd: connection closed
[  127.719142][ T4830] vhci_hcd: stop threads
[  127.728269][ T4830] vhci_hcd: release socket
[  127.732773][ T4830] vhci_hcd: disconnect device
[  127.935707][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.027827][ T6018] xt_hashlimit: max too large, truncated to 1048576
[  128.082709][ T6022] ipvlan0: entered promiscuous mode
[  128.088922][ T6022] ipvlan0: left promiscuous mode
[  128.123099][ T6023] netlink: 'syz.3.783': attribute type 39 has an invalid length.
[  128.261186][ T6030] bridge0: entered promiscuous mode
[  128.285345][ T6030] bridge0: port 3(macvlan2) entered blocking state
[  128.291963][ T6030] bridge0: port 3(macvlan2) entered disabled state
[  128.336225][ T6038] loop4: detected capacity change from 0 to 128
[  128.352768][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  128.367980][ T6030] macvlan2: entered allmulticast mode
[  128.373545][ T6030] bridge0: entered allmulticast mode
[  128.390261][ T6030] macvlan2: left allmulticast mode
[  128.395574][ T6030] bridge0: left allmulticast mode
[  128.403236][ T6030] bridge0: left promiscuous mode
[  128.408890][ T6038] FAT-fs (loop4): Directory bread(block 162) failed
[  128.420769][ T6038] FAT-fs (loop4): Directory bread(block 163) failed
[  128.427556][ T6038] FAT-fs (loop4): Directory bread(block 164) failed
[  128.434522][ T6038] FAT-fs (loop4): Directory bread(block 165) failed
[  128.446534][ T6038] FAT-fs (loop4): Directory bread(block 166) failed
[  128.453548][ T6038] FAT-fs (loop4): Directory bread(block 167) failed
[  128.460575][ T6038] FAT-fs (loop4): Directory bread(block 168) failed
[  128.467427][ T6038] FAT-fs (loop4): Directory bread(block 169) failed
[  128.675441][ T6031] FAT-fs (loop4): Directory bread(block 162) failed
[  128.699108][ T6031] FAT-fs (loop4): Directory bread(block 163) failed
[  128.784424][ T6031] syz.4.790: attempt to access beyond end of device
[  128.784424][ T6031] loop4: rw=3, sector=226, nr_sectors = 6 limit=128
[  128.971666][ T6031] syz.4.790: attempt to access beyond end of device
[  128.971666][ T6031] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128
[  129.038393][ T6060] loop0: detected capacity change from 0 to 128
[  129.060968][ T6060] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  129.084338][ T6063] xt_hashlimit: max too large, truncated to 1048576
[  129.106269][ T6068] program syz.3.801 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.158960][ T6070] program syz.1.803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.222639][ T6072] loop0: detected capacity change from 0 to 2048
[  129.254260][ T6072] No source specified
[  129.262439][ T6072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.359422][ T6084] loop3: detected capacity change from 0 to 128
[  129.378120][ T6072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.392796][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  129.403867][ T6084] syz.3.807: attempt to access beyond end of device
[  129.403867][ T6084] loop3: rw=2049, sector=129, nr_sectors = 89 limit=128
[  129.971698][ T6072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.105251][ T6092] loop2: detected capacity change from 0 to 512
[  130.133968][ T6096] xt_hashlimit: max too large, truncated to 1048576
[  130.142228][ T6092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  130.176265][ T6072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.194990][ T6098] FAULT_INJECTION: forcing a failure.
[  130.194990][ T6098] name failslab, interval 1, probability 0, space 0, times 0
[  130.207709][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.3.814 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  130.207771][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  130.207793][ T6098] Call Trace:
[  130.207801][ T6098]  <TASK>
[  130.207810][ T6098]  __dump_stack+0x1d/0x30
[  130.207832][ T6098]  dump_stack_lvl+0xe8/0x140
[  130.207853][ T6098]  dump_stack+0x15/0x1b
[  130.207947][ T6098]  should_fail_ex+0x265/0x280
[  130.207993][ T6098]  should_failslab+0x8c/0xb0
[  130.208029][ T6098]  kmem_cache_alloc_node_noprof+0x57/0x320
[  130.208059][ T6098]  ? __alloc_skb+0x101/0x320
[  130.208129][ T6098]  __alloc_skb+0x101/0x320
[  130.208163][ T6098]  netlink_alloc_large_skb+0xba/0xf0
[  130.208222][ T6098]  netlink_sendmsg+0x3cf/0x6b0
[  130.208309][ T6098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.208336][ T6098]  __sock_sendmsg+0x142/0x180
[  130.208374][ T6098]  ____sys_sendmsg+0x31e/0x4e0
[  130.208400][ T6098]  ___sys_sendmsg+0x17b/0x1d0
[  130.208522][ T6098]  __x64_sys_sendmsg+0xd4/0x160
[  130.208608][ T6098]  x64_sys_call+0x2999/0x2fb0
[  130.208635][ T6098]  do_syscall_64+0xd0/0x1a0
[  130.208667][ T6098]  ? clear_bhb_loop+0x40/0x90
[  130.208703][ T6098]  ? clear_bhb_loop+0x40/0x90
[  130.208733][ T6098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.208825][ T6098] RIP: 0033:0x7f7bb72be969
[  130.208840][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.208859][ T6098] RSP: 002b:00007f7bb5927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.208924][ T6098] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72be969
[  130.208941][ T6098] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  130.208955][ T6098] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[  130.208967][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.208979][ T6098] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[  130.209034][ T6098]  </TASK>
[  130.442816][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  130.594248][ T6092] EXT4-fs (loop2): 1 truncate cleaned up
[  130.600496][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.609532][ T6106] ipvlan0: entered promiscuous mode
[  130.619397][   T29] kauditd_printk_skb: 544 callbacks suppressed
[  130.619442][   T29] audit: type=1400 audit(1748294526.934:5801): avc:  denied  { listen } for  pid=6102 comm="syz.4.815" lport=52632 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  130.650628][ T6106] ipvlan0: left promiscuous mode
[  130.682371][   T29] audit: type=1400 audit(1748294526.974:5802): avc:  denied  { accept } for  pid=6102 comm="syz.4.815" lport=52632 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  130.705432][   T29] audit: type=1400 audit(1748294526.974:5803): avc:  denied  { setopt } for  pid=6102 comm="syz.4.815" lport=52632 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  130.804425][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.879370][ T6072] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.898797][ T6112] loop4: detected capacity change from 0 to 164
[  130.956563][ T6072] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.979106][ T6112] syz.4.820: attempt to access beyond end of device
[  130.979106][ T6112] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  131.063541][ T6072] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.072537][ T6112] syz.4.820: attempt to access beyond end of device
[  131.072537][ T6112] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  131.090949][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.098523][   T29] audit: type=1326 audit(1748294527.344:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.122606][   T29] audit: type=1326 audit(1748294527.344:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.145968][   T29] audit: type=1326 audit(1748294527.344:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.169642][   T29] audit: type=1326 audit(1748294527.344:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.193184][   T29] audit: type=1326 audit(1748294527.344:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.205665][ T6112] sg_read: process 463 (syz.4.820) changed security contexts after opening file descriptor, this is not allowed.
[  131.216759][   T29] audit: type=1326 audit(1748294527.344:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.252449][   T29] audit: type=1326 audit(1748294527.354:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.1.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81620ae969 code=0x7ffc0000
[  131.317648][ T6072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.423799][ T6121] FAULT_INJECTION: forcing a failure.
[  131.423799][ T6121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.436973][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.3.824 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  131.437008][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  131.437024][ T6121] Call Trace:
[  131.437033][ T6121]  <TASK>
[  131.437043][ T6121]  __dump_stack+0x1d/0x30
[  131.437078][ T6121]  dump_stack_lvl+0xe8/0x140
[  131.437105][ T6121]  dump_stack+0x15/0x1b
[  131.437127][ T6121]  should_fail_ex+0x265/0x280
[  131.437242][ T6121]  should_fail+0xb/0x20
[  131.437303][ T6121]  should_fail_usercopy+0x1a/0x20
[  131.437332][ T6121]  _copy_to_user+0x20/0xa0
[  131.437385][ T6121]  simple_read_from_buffer+0xb5/0x130
[  131.437413][ T6121]  proc_fail_nth_read+0x100/0x140
[  131.437470][ T6121]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.437542][ T6121]  vfs_read+0x19d/0x6f0
[  131.437626][ T6121]  ? __rcu_read_unlock+0x4f/0x70
[  131.437704][ T6121]  ? __fget_files+0x184/0x1c0
[  131.437748][ T6121]  ksys_read+0xda/0x1a0
[  131.437785][ T6121]  __x64_sys_read+0x40/0x50
[  131.437820][ T6121]  x64_sys_call+0x2d77/0x2fb0
[  131.437929][ T6121]  do_syscall_64+0xd0/0x1a0
[  131.437967][ T6121]  ? clear_bhb_loop+0x40/0x90
[  131.437992][ T6121]  ? clear_bhb_loop+0x40/0x90
[  131.438031][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.438059][ T6121] RIP: 0033:0x7f7bb72bd37c
[  131.438080][ T6121] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  131.438103][ T6121] RSP: 002b:00007f7bb5927030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.438122][ T6121] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72bd37c
[  131.438210][ T6121] RDX: 000000000000000f RSI: 00007f7bb59270a0 RDI: 0000000000000005
[  131.438223][ T6121] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[  131.438235][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.438255][ T6121] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[  131.438278][ T6121]  </TASK>
[  131.639221][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  131.647114][ T6125] syz.0.822: attempt to access beyond end of device
[  131.647114][ T6125] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  131.685571][ T6127] loop3: detected capacity change from 0 to 128
[  131.735693][ T6125] loop0: detected capacity change from 0 to 1024
[  131.742427][ T6125] EXT4-fs: Ignoring removed bh option
[  131.748054][ T6125] EXT4-fs: inline encryption not supported
[  131.756557][ T6125] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  131.770976][ T6131] loop1: detected capacity change from 0 to 512
[  131.784029][ T6133] loop4: detected capacity change from 0 to 512
[  131.791272][ T6131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.793285][ T6127] syz.3.825: attempt to access beyond end of device
[  131.793285][ T6127] loop3: rw=2049, sector=129, nr_sectors = 89 limit=128
[  131.831913][ T6131] EXT4-fs (loop1): 1 truncate cleaned up
[  131.850203][ T6133] EXT4-fs (loop4): orphan cleanup on readonly fs
[  131.856739][ T6133] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  131.866543][ T6131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.882270][ T6133] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  131.896837][ T6125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  131.917841][ T6125] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.822: lblock 2 mapped to illegal pblock 2 (length 1)
[  131.919150][ T6131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.931959][ T6133] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.827: attempt to clear invalid blocks 2 len 1
[  131.953637][ T6125] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.822: lblock 0 mapped to illegal pblock 48 (length 1)
[  131.969174][ T6133] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.827: invalid indirect mapped block 1819239214 (level 0)
[  131.983514][ T6125] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.822: Failed to acquire dquot type 0
[  131.998618][ T6133] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.827: invalid indirect mapped block 1819239214 (level 1)
[  132.013882][ T6125] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  132.031153][ T6133] EXT4-fs (loop4): 1 truncate cleaned up
[  132.046909][ T6133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.060227][ T6125] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.822: mark_inode_dirty error
[  132.090764][ T6133] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.827: Abort forced by user
[  132.101750][ T6125] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[  132.135345][ T6139] xt_hashlimit: max too large, truncated to 1048576
[  132.160673][ T6125] EXT4-fs (loop0): 1 orphan inode deleted
[  132.167095][ T6125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.179737][ T4830] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  132.201400][ T6142] loop3: detected capacity change from 0 to 512
[  132.203848][ T6133] EXT4-fs (loop4): Remounting filesystem read-only
[  132.214297][ T6133] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  132.225118][ T4830] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0
[  132.238750][ T6142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  132.250127][ T6125] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.822: lblock 0 mapped to illegal pblock 16 (length 1)
[  132.267846][ T6144] capability: warning: `GPL' uses deprecated v2 capabilities in a way that may be insecure
[  132.312105][ T6142] EXT4-fs (loop3): 1 truncate cleaned up
[  132.343643][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.362751][ T6125] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.822: lblock 0 mapped to illegal pblock 16 (length 1)
[  132.391223][ T6151] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.822: lblock 0 mapped to illegal pblock 16 (length 1)
[  132.406905][ T6151] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.822: lblock 0 mapped to illegal pblock 16 (length 1)
[  132.437242][ T6125] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.822: lblock 0 mapped to illegal pblock 16 (length 1)
[  132.486537][ T6125] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.822: lblock 0 mapped to illegal pblock 16 (length 1)
[  132.524107][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.584990][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.603429][ T3323] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[  132.628461][ T3323] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem
[  132.629440][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.672765][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  132.681257][ T6157] binfmt_misc: register: failed to install interpreter file ./file0
[  132.699976][ T6159] loop0: detected capacity change from 0 to 512
[  132.722374][ T6159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  132.741076][ T6161] loop4: detected capacity change from 0 to 512
[  132.752765][ T6159] EXT4-fs (loop0): 1 truncate cleaned up
[  132.759305][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.795322][ T6161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  132.810187][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.890161][ T6161] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  132.895793][ T6170] loop3: detected capacity change from 0 to 1024
[  132.936899][ T6170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.962519][ T6161] EXT4-fs (loop4): 1 truncate cleaned up
[  132.972791][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'.
[  132.991021][ T6161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.005410][ T6161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'.
[  133.026314][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.079047][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.153049][ T6188] netlink: 'syz.3.845': attribute type 12 has an invalid length.
[  133.160848][ T6188] netlink: 'syz.3.845': attribute type 29 has an invalid length.
[  133.168643][ T6188] netlink: 148 bytes leftover after parsing attributes in process `syz.3.845'.
[  133.206802][ T6190] loop2: detected capacity change from 0 to 512
[  133.233208][ T6192] netlink: 'syz.4.842': attribute type 39 has an invalid length.
[  133.268393][ T6190] EXT4-fs (loop2): orphan cleanup on readonly fs
[  133.274850][ T6190] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  133.312968][ T6190] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  133.328145][ T6190] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.846: attempt to clear invalid blocks 2 len 1
[  133.354571][ T6190] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.846: invalid indirect mapped block 1819239214 (level 0)
[  133.391187][ T6190] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.846: invalid indirect mapped block 1819239214 (level 1)
[  133.408491][ T6198] FAULT_INJECTION: forcing a failure.
[  133.408491][ T6198] name failslab, interval 1, probability 0, space 0, times 0
[  133.421224][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.3.848 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  133.421251][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  133.421264][ T6198] Call Trace:
[  133.421273][ T6198]  <TASK>
[  133.421283][ T6198]  __dump_stack+0x1d/0x30
[  133.421323][ T6198]  dump_stack_lvl+0xe8/0x140
[  133.421342][ T6198]  dump_stack+0x15/0x1b
[  133.421361][ T6198]  should_fail_ex+0x265/0x280
[  133.421426][ T6198]  should_failslab+0x8c/0xb0
[  133.421458][ T6198]  kmem_cache_alloc_node_noprof+0x57/0x320
[  133.421481][ T6198]  ? __alloc_skb+0x101/0x320
[  133.421581][ T6198]  __alloc_skb+0x101/0x320
[  133.421622][ T6198]  ? audit_log_start+0x365/0x6c0
[  133.421657][ T6198]  audit_log_start+0x380/0x6c0
[  133.421832][ T6198]  audit_seccomp+0x48/0x100
[  133.421861][ T6198]  ? __seccomp_filter+0x68c/0x10d0
[  133.421889][ T6198]  __seccomp_filter+0x69d/0x10d0
[  133.421921][ T6198]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  133.421966][ T6198]  ? vfs_write+0x75e/0x8d0
[  133.421992][ T6198]  ? __rcu_read_unlock+0x4f/0x70
[  133.422021][ T6198]  ? __fget_files+0x184/0x1c0
[  133.422114][ T6198]  __secure_computing+0x82/0x150
[  133.422148][ T6198]  syscall_trace_enter+0xcf/0x1e0
[  133.422182][ T6198]  do_syscall_64+0xaa/0x1a0
[  133.422206][ T6198]  ? clear_bhb_loop+0x40/0x90
[  133.422232][ T6198]  ? clear_bhb_loop+0x40/0x90
[  133.422319][ T6198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.422346][ T6198] RIP: 0033:0x7f7bb72be969
[  133.422444][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.422464][ T6198] RSP: 002b:00007f7bb5927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  133.422486][ T6198] RAX: ffffffffffffffda RBX: 00007f7bb74e5fa0 RCX: 00007f7bb72be969
[  133.422504][ T6198] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000
[  133.422521][ T6198] RBP: 00007f7bb5927090 R08: 0000000000000000 R09: 0000000000000000
[  133.422544][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.422614][ T6198] R13: 0000000000000000 R14: 00007f7bb74e5fa0 R15: 00007ffd97917178
[  133.422639][ T6198]  </TASK>
[  133.652358][ T6190] EXT4-fs (loop2): 1 truncate cleaned up
[  133.672554][ T6190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.722716][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  133.734348][ T6201] loop1: detected capacity change from 0 to 128
[  133.741033][ T6190] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.846: Abort forced by user
[  133.753188][ T6190] EXT4-fs (loop2): Remounting filesystem read-only
[  133.759766][ T6190] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  133.820615][ T6201] FAT-fs (loop1): Directory bread(block 162) failed
[  133.838796][ T6201] FAT-fs (loop1): Directory bread(block 163) failed
[  133.876817][ T6201] FAT-fs (loop1): Directory bread(block 164) failed
[  133.917136][ T6201] FAT-fs (loop1): Directory bread(block 165) failed
[  133.947341][ T6201] FAT-fs (loop1): Directory bread(block 166) failed
[  133.978039][ T6201] FAT-fs (loop1): Directory bread(block 167) failed
[  134.010972][ T6201] FAT-fs (loop1): Directory bread(block 168) failed
[  134.068699][ T6201] FAT-fs (loop1): Directory bread(block 169) failed
[  134.091912][ T6201] FAT-fs (loop1): Directory bread(block 162) failed
[  134.108798][ T6201] FAT-fs (loop1): Directory bread(block 163) failed
[  134.134418][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.147682][ T6201] syz.1.849: attempt to access beyond end of device
[  134.147682][ T6201] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  134.219539][ T6201] syz.1.849: attempt to access beyond end of device
[  134.219539][ T6201] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  134.339754][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  134.348759][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'.
[  134.471493][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  134.480426][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'.
[  134.752723][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  134.769842][ T4830] ==================================================================
[  134.777982][ T4830] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  134.786621][ T4830] 
[  134.788970][ T4830] write to 0xffff8881190a3508 of 44 bytes by task 6234 on cpu 0:
[  134.796717][ T4830]  tty_set_termios+0xc0/0x8c0
[  134.801414][ T4830]  set_termios+0x35b/0x4e0
[  134.805850][ T4830]  tty_mode_ioctl+0x379/0x5c0
[  134.810553][ T4830]  n_tty_ioctl_helper+0x91/0x210
[  134.815509][ T4830]  n_tty_ioctl+0x101/0x200
[  134.819955][ T4830]  tty_ioctl+0x845/0xb80
[  134.824224][ T4830]  __se_sys_ioctl+0xce/0x140
[  134.828831][ T4830]  __x64_sys_ioctl+0x43/0x50
[  134.833526][ T4830]  x64_sys_call+0x19a8/0x2fb0
[  134.838228][ T4830]  do_syscall_64+0xd0/0x1a0
[  134.842757][ T4830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.848664][ T4830] 
[  134.850997][ T4830] read to 0xffff8881190a3521 of 1 bytes by task 4830 on cpu 1:
[  134.858548][ T4830]  n_tty_receive_char_flow_ctrl+0x23/0x1a0
[  134.864368][ T4830]  n_tty_lookahead_flow_ctrl+0xed/0x130
[  134.869940][ T4830]  tty_port_default_lookahead_buf+0x91/0xc0
[  134.875868][ T4830]  flush_to_ldisc+0x318/0x410
[  134.880567][ T4830]  process_scheduled_works+0x4cb/0x9d0
[  134.886076][ T4830]  worker_thread+0x582/0x770
[  134.890778][ T4830]  kthread+0x486/0x510
[  134.894867][ T4830]  ret_from_fork+0x4b/0x60
[  134.899298][ T4830]  ret_from_fork_asm+0x1a/0x30
[  134.904083][ T4830] 
[  134.906501][ T4830] value changed: 0x11 -> 0x9b
[  134.911181][ T4830] 
[  134.913516][ T4830] Reported by Kernel Concurrency Sanitizer on:
[  134.919672][ T4830] CPU: 1 UID: 0 PID: 4830 Comm: kworker/u8:12 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) 
[  134.930271][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.940339][ T4830] Workqueue: events_unbound flush_to_ldisc
[  134.946198][ T4830] ==================================================================
[  135.792748][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  136.832718][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  137.872721][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  138.922739][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  139.952751][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  140.992736][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  142.032753][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  143.072776][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  144.112734][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available