last executing test programs:

2.867100035s ago: executing program 2 (id=351):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfff, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0xa, 0x88)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]})
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
pidfd_getfd(r7, r7, 0x0)

2.768330258s ago: executing program 2 (id=352):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'erspan0\x00', <r0=>0x0, 0x8000, 0x700, 0xffffffff, 0x8, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x1b, 0x1, [{0x5, 0x12, "bf561a5c4ef9dd4aec4da941f2efe989"}, {0x0, 0x3, "1c"}]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x8, "b9243f982cdf"}, @timestamp={0x44, 0x10, 0x89, 0x0, 0x5, [0x6, 0xb8, 0xc]}]}}}}})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0xd, 0x8, 0x1, 0x9, 0x6}}}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0xb, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5e, '\x00', r0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f0000000c80)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x3b, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
setns(r4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa2000000d8efe6b0020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x40}, 0x50)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_mark_inode_dirty\x00', r9, 0x0, 0xa91}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
timer_delete(0x0)
sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="6085c1b5", @ANYRES16=r7, @ANYBLOB="00022dbd7000fcdbdf250300000005000d0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

2.742813051s ago: executing program 3 (id=353):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

2.546510947s ago: executing program 2 (id=359):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18)
syz_clone3(&(0x7f00000004c0)={0x41000, &(0x7f0000000000), 0x0, &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/90, 0x5a, &(0x7f00000001c0)=""/14, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040))
r6 = syz_pidfd_open(r1, 0x0)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044940, &(0x7f00000010c0))
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)
pidfd_send_signal(r6, 0x2, 0x0, 0x0)
r11 = signalfd4(r0, &(0x7f0000000080)={[0x3]}, 0x8, 0x80800)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000140)=0x9, 0x4)

2.410041795s ago: executing program 1 (id=361):
syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1220414, &(0x7f0000002880), 0x0, 0x5fd, &(0x7f0000002ec0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x38, 0x1403, 0x80d, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048d0}, 0x60000c4)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00')
openat$cgroup(r7, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r8, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x8000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
syz_clone3(&(0x7f00000008c0)={0x10000000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r9=>0x0, {0x2a}, &(0x7f0000000740)=""/238, 0xee, &(0x7f0000001040)=""/4096, &(0x7f0000000840)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r2}}, 0x58)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000940)=r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

2.244117917s ago: executing program 3 (id=364):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")

1.904920831s ago: executing program 3 (id=368):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd", @ANYRES32=0x0, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
socket(0x10, 0x803, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884)

1.823121832s ago: executing program 2 (id=369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x208}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x800)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000100)=0x57bb, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f00000000c0), 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.662461513s ago: executing program 0 (id=372):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8, @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x406}], 0x2, 0x0, 0x0, 0x10040000}, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000852)
recvmmsg(r6, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0)
socketpair(0x11, 0x6, 0xdc7d, &(0x7f0000000280))
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)

1.520517111s ago: executing program 4 (id=373):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1.460148289s ago: executing program 0 (id=374):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x6, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x5}, 0xc00a, 0xffffffff00000000, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x125001, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
kexec_load(0x0, 0x0, 0x0, 0x0)

1.316993688s ago: executing program 3 (id=375):
syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1220414, &(0x7f0000002880), 0x0, 0x5fd, &(0x7f0000002ec0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x38, 0x1403, 0x80d, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048d0}, 0x60000c4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00')
openat$cgroup(r6, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r7, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x8000000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
syz_clone3(&(0x7f00000008c0)={0x10000000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r8=>0x0, {0x2a}, &(0x7f0000000740)=""/238, 0xee, &(0x7f0000001040)=""/4096, &(0x7f0000000840)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r2}}, 0x58)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000940)=r8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

1.307814209s ago: executing program 2 (id=376):
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x72, "42dbe15e45c3a1077845c9662f976ccf078f14c54009aabdc0a0db7880a1ba509c96acee86af54e17cc25389ca45b958d70e294754f5abc6df9bc864670bce8999b73b14e5ad255e7291a62965ec1992646de5ed481de45e3c201a828e6b5a1922f03b8f537c26fedc8cdbcb63a328155069"}, &(0x7f0000000080)=0x7a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={r3, 0x1c, "e4dc1e3fe07fff517bc3e7a8b37e081d27864f106e450ceecddd670d"}, &(0x7f0000000340)=0x24)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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")

1.286775441s ago: executing program 4 (id=377):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000}, 0x28)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='sched_switch\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x2, 0x3, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0xf, 0xa})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="23072400000000dbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYRES32=r7], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0)
r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

902.843872ms ago: executing program 4 (id=378):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfff, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0xa, 0x88)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]})
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
pidfd_getfd(r7, r7, 0x0)

852.751098ms ago: executing program 1 (id=379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = syz_io_uring_setup(0x2e43, &(0x7f0000000000)={0x0, 0x3164, 0x40, 0x1, 0x108}, &(0x7f0000000240), &(0x7f00000000c0))
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="d8979cc710", @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$hidraw(0x0, 0x0, 0x14a042)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100), 0x100000000000001a)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000008f35be1d27916568474a6400000000", @ANYRES64, @ANYRES8=r6], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390a8393}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
msgget$private(0x0, 0x0)

647.816175ms ago: executing program 1 (id=380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"})

594.871742ms ago: executing program 1 (id=381):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000004c0)={0x3, 0x57, "903f946d3bcc3c15d9339f86d65afdac0dbb071b51c717b63c8fe7c017c0391eb1e89de7f6775394c667dc030c3d367ec1dfdc0ca8b7b658d347eb7fca0830c1cec702f51e009ce8b22f9e75b374cc5ef1f206bc6ed2e0"})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

571.703345ms ago: executing program 4 (id=382):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x2]}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fb3}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18)
syz_emit_ethernet(0xf6, &(0x7f0000000400)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00', 0xc0, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "ef7cc1", 0x0, 0x0, 0x0, @private0, @dev, [@dstopts={0x33, 0x10, '\x00', [@ra={0x5, 0x2, 0x3ff}, @generic={0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0xa, [0x2ad, 0x9]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0xd, [0x3, 0x50]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7, 0x7, [0x3, 0x1, 0x8, 0xf6c2, 0x1000, 0x5, 0x1000]}}]}]}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
mkdir(&(0x7f0000000180)='./control\x00', 0x5)
close(r1)
inotify_init1(0x800)
fcntl$setstatus(r1, 0x4, 0x2c00)
r7 = gettid()
fcntl$setown(r1, 0x8, r7)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000000c0), 0x10)
r10 = dup3(r9, r8, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r12=>0x0})
r13 = socket$unix(0x1, 0x5, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r13, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r10, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r12, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000)
sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="00000000010000000000000000000000ce7ffe681c735b5719cfc914234834162f4d55e5827a4fb30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d000000"], 0x80}}, 0x0)

564.346586ms ago: executing program 0 (id=383):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
fchdir(r1)
symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000400), 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x2, @perf_bp={0x0, 0xd}, 0x1216, 0x2010000, 0x2, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xf888, 0xc000, 0x1, 0x51})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800)
io_uring_enter(0xffffffffffffffff, 0x2219, 0xf43e, 0x0, 0x0, 0x0)
lseek(r7, 0x8000000000000001, 0x3)
r9 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88)
getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1a, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000001480)={'wg2\x00', <r12=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r11, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r12, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

439.590582ms ago: executing program 4 (id=384):
personality(0x500006)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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")
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000940), &(0x7f0000000980), 0x2, 0x1)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000900))
lseek(0xffffffffffffffff, 0x47, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600))
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")

427.521174ms ago: executing program 3 (id=385):
ioprio_set$pid(0x3, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
socket$inet6(0xa, 0x3, 0xff)

340.699345ms ago: executing program 2 (id=386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x208}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x800)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000100)=0x57bb, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x10)
write$binfmt_elf64(r4, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f00000000c0), 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

260.004156ms ago: executing program 0 (id=387):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

207.770312ms ago: executing program 3 (id=388):
mount(0x0, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000000)='devpts\x00', 0x5, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
unshare(0x62040200)
r0 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="24000000000094d900000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0xffffffffffffffb5)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f00000001c0)={0x40000, 0x3}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x100)
move_mount(r6, 0x0, r6, &(0x7f0000000100)='./mnt\x00', 0x137)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xb)

170.324747ms ago: executing program 1 (id=389):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

167.857687ms ago: executing program 0 (id=390):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000}, 0x28)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='sched_switch\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x2, 0x3, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

66.712331ms ago: executing program 0 (id=391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"})

40.497534ms ago: executing program 4 (id=392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = syz_io_uring_setup(0x2e43, &(0x7f0000000000)={0x0, 0x3164, 0x40, 0x1, 0x108}, &(0x7f0000000240), &(0x7f00000000c0))
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="d8979cc710", @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$hidraw(0x0, 0x0, 0x14a042)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100), 0x100000000000001a)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000008f35be1d27916568474a6400000000", @ANYRES64, @ANYRES8=r6], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390a8393}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
msgget$private(0x0, 0x0)

0s ago: executing program 1 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x6, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x5}, 0xc00a, 0xffffffff00000000, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x125001, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
kexec_load(0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts.
[   33.487684][   T29] audit: type=1400 audit(1768348209.557:62): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.510738][   T29] audit: type=1400 audit(1768348209.577:63): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.533645][ T3304] cgroup: Unknown subsys name 'net'
[   33.539169][   T29] audit: type=1400 audit(1768348209.607:64): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.675016][ T3304] cgroup: Unknown subsys name 'cpuset'
[   33.681311][ T3304] cgroup: Unknown subsys name 'rlimit'
[   33.812712][   T29] audit: type=1400 audit(1768348209.877:65): avc:  denied  { setattr } for  pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.837131][   T29] audit: type=1400 audit(1768348209.887:66): avc:  denied  { create } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.857663][   T29] audit: type=1400 audit(1768348209.887:67): avc:  denied  { write } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.866165][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   33.878201][   T29] audit: type=1400 audit(1768348209.887:68): avc:  denied  { read } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   33.906987][   T29] audit: type=1400 audit(1768348209.897:69): avc:  denied  { mounton } for  pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.931789][   T29] audit: type=1400 audit(1768348209.897:70): avc:  denied  { mount } for  pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   33.934315][ T3304] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   33.960166][   T29] audit: type=1400 audit(1768348209.957:71): avc:  denied  { relabelto } for  pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   36.078541][ T3322] chnl_net:caif_netlink_parms(): no params data found
[   36.112681][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   36.162515][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   36.219100][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   36.239952][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.247097][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.254353][ T3321] bridge_slave_0: entered allmulticast mode
[   36.260836][ T3321] bridge_slave_0: entered promiscuous mode
[   36.270312][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.277474][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.284698][ T3322] bridge_slave_0: entered allmulticast mode
[   36.290946][ T3322] bridge_slave_0: entered promiscuous mode
[   36.305193][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.312266][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.319646][ T3321] bridge_slave_1: entered allmulticast mode
[   36.326151][ T3321] bridge_slave_1: entered promiscuous mode
[   36.336450][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.343522][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.350647][ T3322] bridge_slave_1: entered allmulticast mode
[   36.357000][ T3322] bridge_slave_1: entered promiscuous mode
[   36.400703][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.411716][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   36.421839][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.430990][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.438143][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.445300][ T3316] bridge_slave_0: entered allmulticast mode
[   36.451688][ T3316] bridge_slave_0: entered promiscuous mode
[   36.459202][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.475549][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.484804][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.491871][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.499280][ T3316] bridge_slave_1: entered allmulticast mode
[   36.505818][ T3316] bridge_slave_1: entered promiscuous mode
[   36.553507][ T3322] team0: Port device team_slave_0 added
[   36.564151][ T3321] team0: Port device team_slave_0 added
[   36.573151][ T3321] team0: Port device team_slave_1 added
[   36.584143][ T3322] team0: Port device team_slave_1 added
[   36.590994][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.607115][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.614244][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.621366][ T3314] bridge_slave_0: entered allmulticast mode
[   36.628124][ T3314] bridge_slave_0: entered promiscuous mode
[   36.640084][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.657045][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.664144][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.671408][ T3314] bridge_slave_1: entered allmulticast mode
[   36.677844][ T3314] bridge_slave_1: entered promiscuous mode
[   36.698325][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.705381][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.731353][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.746671][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.753617][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.779660][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.800194][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.807194][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.833132][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.849181][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.856183][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.882104][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.893683][ T3316] team0: Port device team_slave_0 added
[   36.899468][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.906569][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.913841][ T3317] bridge_slave_0: entered allmulticast mode
[   36.920413][ T3317] bridge_slave_0: entered promiscuous mode
[   36.930741][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.943005][ T3316] team0: Port device team_slave_1 added
[   36.948738][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.955866][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.963055][ T3317] bridge_slave_1: entered allmulticast mode
[   36.969574][ T3317] bridge_slave_1: entered promiscuous mode
[   36.983582][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.002989][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.010053][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.036004][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.053609][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.064555][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.079138][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.086134][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.112243][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.168346][ T3314] team0: Port device team_slave_0 added
[   37.176844][ T3321] hsr_slave_0: entered promiscuous mode
[   37.182906][ T3321] hsr_slave_1: entered promiscuous mode
[   37.191024][ T3322] hsr_slave_0: entered promiscuous mode
[   37.197191][ T3322] hsr_slave_1: entered promiscuous mode
[   37.203024][ T3322] debugfs: 'hsr0' already exists in 'hsr'
[   37.208816][ T3322] Cannot create hsr debugfs directory
[   37.215181][ T3317] team0: Port device team_slave_0 added
[   37.221642][ T3314] team0: Port device team_slave_1 added
[   37.240589][ T3317] team0: Port device team_slave_1 added
[   37.279744][ T3316] hsr_slave_0: entered promiscuous mode
[   37.286024][ T3316] hsr_slave_1: entered promiscuous mode
[   37.291873][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   37.297675][ T3316] Cannot create hsr debugfs directory
[   37.310585][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.317696][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.343720][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.359920][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.366928][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.392985][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.406401][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.413355][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.439353][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.453151][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.460240][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.486250][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.570133][ T3314] hsr_slave_0: entered promiscuous mode
[   37.576295][ T3314] hsr_slave_1: entered promiscuous mode
[   37.582125][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   37.587957][ T3314] Cannot create hsr debugfs directory
[   37.602512][ T3317] hsr_slave_0: entered promiscuous mode
[   37.608909][ T3317] hsr_slave_1: entered promiscuous mode
[   37.614940][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   37.620676][ T3317] Cannot create hsr debugfs directory
[   37.745558][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.759482][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.775506][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.786636][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.814104][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.825596][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.834965][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.844560][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.879306][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.893423][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.902374][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.912361][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.946572][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.956547][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.966010][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.975304][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.999042][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.029022][ T3322] 8021q: adding VLAN 0 to HW filter on device team0
[   38.049245][ T1694] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.056406][ T1694] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.065423][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.074534][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.087040][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.095819][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.109907][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.116966][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.128508][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.161420][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   38.181238][  T408] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.188381][  T408] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.203078][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.211457][  T408] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.218658][  T408] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.231045][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.260274][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   38.283932][  T417] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.291002][  T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.305678][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.316404][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.326832][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.342639][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.349829][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.362349][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   38.385850][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.392951][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.402851][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.409969][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.433756][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.466347][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.476733][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   38.497196][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.504301][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.518273][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.525389][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.576701][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.629324][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.663248][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.709097][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.736295][ T3322] veth0_vlan: entered promiscuous mode
[   38.750179][ T3322] veth1_vlan: entered promiscuous mode
[   38.765531][ T3321] veth0_vlan: entered promiscuous mode
[   38.791622][ T3321] veth1_vlan: entered promiscuous mode
[   38.805379][ T3322] veth0_macvtap: entered promiscuous mode
[   38.815807][ T3322] veth1_macvtap: entered promiscuous mode
[   38.847652][ T3321] veth0_macvtap: entered promiscuous mode
[   38.861785][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.874993][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.889726][ T3321] veth1_macvtap: entered promiscuous mode
[   38.905453][  T417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.914214][  T417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.924912][  T417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.933785][  T417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.952081][ T3316] veth0_vlan: entered promiscuous mode
[   38.962103][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.983071][ T3316] veth1_vlan: entered promiscuous mode
[   38.991052][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.007266][   T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.019417][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   39.019449][   T29] audit: type=1400 audit(1768348215.087:85): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/root/syzkaller.iJLIvx/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.050155][ T3314] veth0_vlan: entered promiscuous mode
[   39.056443][   T29] audit: type=1400 audit(1768348215.127:86): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.081543][   T29] audit: type=1400 audit(1768348215.127:87): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/root/syzkaller.iJLIvx/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.106773][   T29] audit: type=1400 audit(1768348215.127:88): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.128684][   T29] audit: type=1400 audit(1768348215.127:89): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/root/syzkaller.iJLIvx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.155289][   T29] audit: type=1400 audit(1768348215.127:90): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/root/syzkaller.iJLIvx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.182715][   T29] audit: type=1400 audit(1768348215.127:91): avc:  denied  { unmount } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.202234][   T29] audit: type=1400 audit(1768348215.147:92): avc:  denied  { mounton } for  pid=3322 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.225011][   T29] audit: type=1400 audit(1768348215.147:93): avc:  denied  { mount } for  pid=3322 comm="syz-executor" name="/" dev="gadgetfs" ino=3783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.248233][   T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.265562][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.282137][   T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.297362][   T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.308140][ T3314] veth1_vlan: entered promiscuous mode
[   39.318019][   T29] audit: type=1400 audit(1768348215.387:94): avc:  denied  { read write } for  pid=3322 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.368118][ T3316] veth0_macvtap: entered promiscuous mode
[   39.377915][ T3316] veth1_macvtap: entered promiscuous mode
[   39.391938][ T3317] veth0_vlan: entered promiscuous mode
[   39.402643][ T3314] veth0_macvtap: entered promiscuous mode
[   39.416212][ T3314] veth1_macvtap: entered promiscuous mode
[   39.427543][ T3317] veth1_vlan: entered promiscuous mode
[   39.436003][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.445889][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.467460][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.495375][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.504795][ T3317] veth0_macvtap: entered promiscuous mode
[   39.511210][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.520188][ T3499] FAULT_INJECTION: forcing a failure.
[   39.520188][ T3499] name failslab, interval 1, probability 0, space 0, times 1
[   39.532872][ T3499] CPU: 1 UID: 0 PID: 3499 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.532899][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   39.532915][ T3499] Call Trace:
[   39.532925][ T3499]  <TASK>
[   39.532983][ T3499]  __dump_stack+0x1d/0x30
[   39.533013][ T3499]  dump_stack_lvl+0x95/0xd0
[   39.533089][ T3500] loop1: detected capacity change from 0 to 512
[   39.533132][ T3499]  dump_stack+0x15/0x1b
[   39.533276][ T3499]  should_fail_ex+0x265/0x280
[   39.533363][ T3499]  should_failslab+0x8c/0xb0
[   39.533475][ T3499]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   39.533560][ T3499]  ? __alloc_skb+0x2ff/0x4b0
[   39.533714][ T3499]  __alloc_skb+0x2ff/0x4b0
[   39.533784][ T3499]  ? __alloc_skb+0x228/0x4b0
[   39.533855][ T3499]  netlink_alloc_large_skb+0xbf/0xf0
[   39.533945][ T3499]  netlink_sendmsg+0x3cf/0x6b0
[   39.534094][ T3499]  ? __pfx_netlink_sendmsg+0x10/0x10
[   39.534193][ T3499]  __sock_sendmsg+0x145/0x180
[   39.534258][ T3499]  ____sys_sendmsg+0x31e/0x4a0
[   39.534337][ T3499]  ___sys_sendmsg+0x17b/0x1d0
[   39.534495][ T3499]  __x64_sys_sendmsg+0xd4/0x160
[   39.534593][ T3499]  x64_sys_call+0x17ba/0x3000
[   39.534672][ T3499]  do_syscall_64+0xca/0x2b0
[   39.534845][ T3499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.534914][ T3499] RIP: 0033:0x7fc3f295f749
[   39.534964][ T3499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.535017][ T3499] RSP: 002b:00007fc3f13bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   39.535078][ T3499] RAX: ffffffffffffffda RBX: 00007fc3f2bb5fa0 RCX: 00007fc3f295f749
[   39.535184][ T3499] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[   39.535224][ T3499] RBP: 00007fc3f13bf090 R08: 0000000000000000 R09: 0000000000000000
[   39.535257][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.535282][ T3499] R13: 00007fc3f2bb6038 R14: 00007fc3f2bb5fa0 R15: 00007ffc398d6318
[   39.535375][ T3499]  </TASK>
[   39.608004][ T3317] veth1_macvtap: entered promiscuous mode
[   39.646556][ T3503] loop3: detected capacity change from 0 to 1024
[   39.674704][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.757060][ T3503] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   39.768053][ T3503] EXT4-fs (loop3): group descriptors corrupted!
[   39.776489][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.791157][ T3500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.814670][ T3500] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.826571][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.834046][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.851851][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.861962][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.871970][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.881519][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.900150][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.917019][   T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.939266][   T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.970778][   T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.013558][   T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.083207][ T3522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'.
[   40.095020][ T3522] Zero length message leads to an empty skb
[   40.108287][ T3530] capability: warning: `syz.4.9' uses deprecated v2 capabilities in a way that may be insecure
[   40.133768][ T3528] loop2: detected capacity change from 0 to 512
[   40.140969][ T3528] =======================================================
[   40.140969][ T3528] WARNING: The mand mount option has been deprecated and
[   40.140969][ T3528]          and is ignored by this kernel. Remove the mand
[   40.140969][ T3528]          option from the mount to silence this warning.
[   40.140969][ T3528] =======================================================
[   40.179135][ T3528] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   40.192358][ T3528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   40.205609][ T3528] EXT4-fs (loop2): 1 truncate cleaned up
[   40.211882][ T3528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.311416][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.337671][ T3539] loop0: detected capacity change from 0 to 1024
[   40.391027][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.474729][ T3543] loop2: detected capacity change from 0 to 512
[   40.503023][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   40.518565][ T3543] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   40.541512][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.549204][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0
[   40.558950][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.566520][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.569664][ T3539] infiniband syz1: set active
[   40.575452][ T3543] EXT4-fs (loop2): mount failed
[   40.578687][ T3539] infiniband syz1: added veth0_to_bond
[   40.616104][ T3539] RDS/IB: syz1: added
[   40.631262][ T3539] smc: adding ib device syz1 with port count 1
[   40.639023][ T3539] smc:    ib device syz1 port 1 has no pnetid
[   40.675938][ T3554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'.
[   40.684905][ T3554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'.
[   40.766814][ T3558] x_tables: unsorted underflow at hook 2
[   40.861229][ T3561] loop2: detected capacity change from 0 to 512
[   40.877120][ T3561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.893187][ T3561] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.910854][ T3557] smc: removing ib device syz1
[   40.918770][ T3559] wg1 speed is unknown, defaulting to 1000
[   40.925130][ T3559] wg1 speed is unknown, defaulting to 1000
[   40.931478][ T3559] wg1 speed is unknown, defaulting to 1000
[   40.993487][ T3559] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   41.006923][ T3559] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   41.040316][ T3559] wg1 speed is unknown, defaulting to 1000
[   41.069090][ T3559] wg1 speed is unknown, defaulting to 1000
[   41.084030][ T3559] wg1 speed is unknown, defaulting to 1000
[   41.090923][ T3559] wg1 speed is unknown, defaulting to 1000
[   41.098237][ T3559] wg1 speed is unknown, defaulting to 1000
[   41.106860][ T3559] wg1 speed is unknown, defaulting to 1000
[   41.138935][ T3539] syz.0.12 (3539) used greatest stack depth: 10152 bytes left
[   41.246818][ T3569] loop0: detected capacity change from 0 to 164
[   41.265911][ T3569] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.299688][ T3569] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.324165][ T3569] Symlink component flag not implemented
[   41.329945][ T3569] Symlink component flag not implemented
[   41.346507][ T3569] Symlink component flag not implemented (7)
[   41.352679][ T3569] Symlink component flag not implemented (116)
[   41.368937][ T3580] loop3: detected capacity change from 0 to 1024
[   41.384098][ T3580] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.411751][ T3580] JBD2: no valid journal superblock found
[   41.414589][ T3585] loop0: detected capacity change from 0 to 164
[   41.417906][ T3580] EXT4-fs (loop3): Could not load journal inode
[   41.439690][ T3585] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.472283][ T3580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22'.
[   41.472359][ T3585] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.491708][ T3585] Symlink component flag not implemented
[   41.497493][ T3585] Symlink component flag not implemented
[   41.504784][ T3585] Symlink component flag not implemented (7)
[   41.510887][ T3585] Symlink component flag not implemented (116)
[   41.542932][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.571107][ T3591] loop3: detected capacity change from 0 to 1024
[   41.612604][ T3591] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.637837][ T3591] JBD2: no valid journal superblock found
[   41.643646][ T3591] EXT4-fs (loop3): Could not load journal inode
[   41.703197][ T3591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.27'.
[   41.759429][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.780123][ T3602] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.011057][ T3599] wg1 speed is unknown, defaulting to 1000
[   42.052051][ T3621] x_tables: unsorted underflow at hook 2
[   42.063807][ T3617] netlink: 48 bytes leftover after parsing attributes in process `syz.3.35'.
[   42.116391][ T3623] x_tables: unsorted underflow at hook 2
[   42.153297][ T3620] wg1 speed is unknown, defaulting to 1000
[   42.247111][ T3627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'.
[   42.325224][ T3627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'.
[   42.427351][ T3630] macvlan2: entered promiscuous mode
[   42.432794][ T3630] macvlan2: entered allmulticast mode
[   42.536513][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.611467][ T3639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'.
[   42.788246][ T3643] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.798228][ T3642] siw: device registration error -23
[   42.815631][ T3647] FAULT_INJECTION: forcing a failure.
[   42.815631][ T3647] name failslab, interval 1, probability 0, space 0, times 0
[   42.828412][ T3647] CPU: 1 UID: 0 PID: 3647 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.828469][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   42.828484][ T3647] Call Trace:
[   42.828492][ T3647]  <TASK>
[   42.828500][ T3647]  __dump_stack+0x1d/0x30
[   42.828530][ T3647]  dump_stack_lvl+0x95/0xd0
[   42.828585][ T3647]  dump_stack+0x15/0x1b
[   42.828668][ T3647]  should_fail_ex+0x265/0x280
[   42.828697][ T3647]  should_failslab+0x8c/0xb0
[   42.828720][ T3647]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   42.828823][ T3647]  ? perf_event_alloc+0x159/0x18d0
[   42.828910][ T3647]  perf_event_alloc+0x159/0x18d0
[   42.828940][ T3647]  ? __fget_files+0x184/0x1c0
[   42.828972][ T3647]  __se_sys_perf_event_open+0x603/0x1210
[   42.829066][ T3647]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   42.829109][ T3647]  __x64_sys_perf_event_open+0x67/0x80
[   42.829219][ T3647]  x64_sys_call+0x78c/0x3000
[   42.829251][ T3647]  do_syscall_64+0xca/0x2b0
[   42.829376][ T3647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.829403][ T3647] RIP: 0033:0x7f895843f749
[   42.829423][ T3647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.829508][ T3647] RSP: 002b:00007f8956e9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   42.829573][ T3647] RAX: ffffffffffffffda RBX: 00007f8958695fa0 RCX: 00007f895843f749
[   42.829588][ T3647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   42.829599][ T3647] RBP: 00007f8956e9f090 R08: 0000000000000000 R09: 0000000000000000
[   42.829612][ T3647] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[   42.829636][ T3647] R13: 00007f8958696038 R14: 00007f8958695fa0 R15: 00007ffff6dca5b8
[   42.829658][ T3647]  </TASK>
[   43.055271][ T3642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.078337][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.085917][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.085926][ T3642] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.122750][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.130357][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.191136][ T3658] bond_slave_0: entered promiscuous mode
[   43.196886][ T3658] bond_slave_1: entered promiscuous mode
[   43.206950][ T3658] macvtap1: entered allmulticast mode
[   43.212446][ T3658] bond0: entered allmulticast mode
[   43.217740][ T3658] bond_slave_0: entered allmulticast mode
[   43.223501][ T3658] bond_slave_1: entered allmulticast mode
[   43.230970][ T3658] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   43.352119][ T3667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.384046][ T3667] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.427366][ T3673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.454155][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.484589][ T3666] wg1 speed is unknown, defaulting to 1000
[   43.532894][ T3677] x_tables: unsorted underflow at hook 2
[   43.593538][ T3676] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   43.620241][ T3687] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.621721][ T3676] EXT4-fs (loop3): mount failed
[   43.631910][ T3687] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.643356][ T3687] Symlink component flag not implemented
[   43.649069][ T3687] Symlink component flag not implemented
[   43.655317][ T3687] Symlink component flag not implemented (7)
[   43.661380][ T3687] Symlink component flag not implemented (116)
[   43.671871][ T3688] x_tables: unsorted underflow at hook 2
[   43.686097][ T3674] wg1 speed is unknown, defaulting to 1000
[   43.697231][ T3690] FAULT_INJECTION: forcing a failure.
[   43.697231][ T3690] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   43.710499][ T3690] CPU: 1 UID: 0 PID: 3690 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.710526][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   43.710616][ T3690] Call Trace:
[   43.710625][ T3690]  <TASK>
[   43.710634][ T3690]  __dump_stack+0x1d/0x30
[   43.710663][ T3690]  dump_stack_lvl+0x95/0xd0
[   43.710684][ T3690]  dump_stack+0x15/0x1b
[   43.710744][ T3690]  should_fail_ex+0x265/0x280
[   43.710771][ T3690]  should_fail+0xb/0x20
[   43.710793][ T3690]  should_fail_usercopy+0x1a/0x20
[   43.710821][ T3690]  _copy_from_user+0x1c/0xb0
[   43.710892][ T3690]  __copy_msghdr+0x244/0x300
[   43.710927][ T3690]  ___sys_sendmsg+0x109/0x1d0
[   43.711130][ T3690]  __sys_sendmmsg+0x178/0x300
[   43.711203][ T3690]  __x64_sys_sendmmsg+0x57/0x70
[   43.711233][ T3690]  x64_sys_call+0x1e28/0x3000
[   43.711292][ T3690]  do_syscall_64+0xca/0x2b0
[   43.711385][ T3690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.711406][ T3690] RIP: 0033:0x7f895843f749
[   43.711448][ T3690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.711520][ T3690] RSP: 002b:00007f8956e9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   43.711536][ T3690] RAX: ffffffffffffffda RBX: 00007f8958695fa0 RCX: 00007f895843f749
[   43.711547][ T3690] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000006
[   43.711560][ T3690] RBP: 00007f8956e9f090 R08: 0000000000000000 R09: 0000000000000000
[   43.711625][ T3690] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[   43.711635][ T3690] R13: 00007f8958696038 R14: 00007f8958695fa0 R15: 00007ffff6dca5b8
[   43.711652][ T3690]  </TASK>
[   43.939125][ T3693] EXT4-fs (loop1): too many log groups per flexible block group
[   43.951506][ T3693] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   43.958544][ T3693] EXT4-fs (loop1): mount failed
[   44.032539][ T3702] EXT4-fs: Ignoring removed orlov option
[   44.042426][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.056785][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.090075][   T29] kauditd_printk_skb: 568 callbacks suppressed
[   44.090093][   T29] audit: type=1400 audit(1768348220.157:661): avc:  denied  { create } for  pid=3701 comm="syz.3.59" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.133277][   T29] audit: type=1400 audit(1768348220.167:662): avc:  denied  { read open } for  pid=3701 comm="syz.3.59" path="/15/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.155990][   T29] audit: type=1400 audit(1768348220.167:663): avc:  denied  { create } for  pid=3701 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   44.175485][   T29] audit: type=1400 audit(1768348220.167:664): avc:  denied  { setattr } for  pid=3701 comm="syz.3.59" name="NFC_LLCP" dev="sockfs" ino=6177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   44.262809][ T3706] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   44.299966][ T3706] JBD2: no valid journal superblock found
[   44.305892][ T3706] EXT4-fs (loop4): Could not load journal inode
[   44.383949][   T29] audit: type=1326 audit(1768348220.447:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   44.511995][ T3713] macvlan2: entered promiscuous mode
[   44.517413][ T3713] macvlan2: entered allmulticast mode
[   44.601004][ T3716] set_capacity_and_notify: 10 callbacks suppressed
[   44.601092][ T3716] loop1: detected capacity change from 0 to 2048
[   44.718249][   T29] audit: type=1326 audit(1768348220.447:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   44.741699][   T29] audit: type=1326 audit(1768348220.457:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   44.765071][   T29] audit: type=1326 audit(1768348220.457:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   44.788229][   T29] audit: type=1326 audit(1768348220.457:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   44.811498][   T29] audit: type=1326 audit(1768348220.457:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   44.956750][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.968872][ T3716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.007147][ T3716] openvswitch: netlink: Missing key (keys=40, expected=100)
[   45.040551][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.074620][ T3735] FAULT_INJECTION: forcing a failure.
[   45.074620][ T3735] name failslab, interval 1, probability 0, space 0, times 0
[   45.087343][ T3735] CPU: 1 UID: 0 PID: 3735 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.087369][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.087427][ T3735] Call Trace:
[   45.087433][ T3735]  <TASK>
[   45.087441][ T3735]  __dump_stack+0x1d/0x30
[   45.087469][ T3735]  dump_stack_lvl+0x95/0xd0
[   45.087493][ T3735]  dump_stack+0x15/0x1b
[   45.087521][ T3735]  should_fail_ex+0x265/0x280
[   45.087540][ T3735]  should_failslab+0x8c/0xb0
[   45.087558][ T3735]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   45.087600][ T3735]  ? dup_task_struct+0x5b/0x950
[   45.087673][ T3735]  dup_task_struct+0x5b/0x950
[   45.087765][ T3735]  ? copy_process+0x36c/0x1ef0
[   45.087799][ T3735]  copy_process+0x37d/0x1ef0
[   45.087818][ T3735]  ? copy_clone_args_from_user+0x3ce/0x490
[   45.087910][ T3735]  kernel_clone+0x16c/0x5c0
[   45.087931][ T3735]  __se_sys_clone3+0x1c2/0x200
[   45.087960][ T3735]  __x64_sys_clone3+0x31/0x40
[   45.087978][ T3735]  x64_sys_call+0x2c0f/0x3000
[   45.087999][ T3735]  do_syscall_64+0xca/0x2b0
[   45.088095][ T3735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.088112][ T3735] RIP: 0033:0x7fc3f295f749
[   45.088125][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.088186][ T3735] RSP: 002b:00007fc3f13bef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[   45.088201][ T3735] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc3f295f749
[   45.088211][ T3735] RDX: 00007fc3f13bef20 RSI: 0000000000000058 RDI: 00007fc3f13bef20
[   45.088220][ T3735] RBP: 00007fc3f13bf090 R08: 0000000000000000 R09: 0000000000000058
[   45.088230][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.088277][ T3735] R13: 00007fc3f2bb6038 R14: 00007fc3f2bb5fa0 R15: 00007ffc398d6318
[   45.088352][ T3735]  </TASK>
[   45.272327][ T3736] loop4: detected capacity change from 0 to 1024
[   45.292819][ T3731] wg1 speed is unknown, defaulting to 1000
[   45.339980][ T3736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.392496][ T3750] loop3: detected capacity change from 0 to 512
[   45.413585][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.418520][ T3753] __nla_validate_parse: 9 callbacks suppressed
[   45.418565][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'.
[   45.452273][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.460964][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.468810][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.476329][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.493551][ T3750] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.540986][ T3741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.71'.
[   45.557513][ T3761] loop1: detected capacity change from 0 to 512
[   45.577442][ T3761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   45.613055][ T3761] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8842c018, mo2=0002]
[   45.623004][ T3761] EXT4-fs (loop1): too many log groups per flexible block group
[   45.631176][ T3761] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   45.638109][ T3761] EXT4-fs (loop1): mount failed
[   45.705739][ T3770] loop0: detected capacity change from 0 to 1024
[   45.712962][ T3770] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   45.723932][ T3770] JBD2: no valid journal superblock found
[   45.729895][ T3770] EXT4-fs (loop0): Could not load journal inode
[   45.732923][ T3773] netlink: 168 bytes leftover after parsing attributes in process `syz.1.75'.
[   45.763148][ T3770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.78'.
[   45.796872][ T3777] loop0: detected capacity change from 0 to 1024
[   45.804795][ T3777] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   45.815737][ T3774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'.
[   45.826087][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.836826][ T3777] JBD2: no valid journal superblock found
[   45.842603][ T3777] EXT4-fs (loop0): Could not load journal inode
[   45.859347][ T3777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.79'.
[   45.895739][ T3780] loop4: detected capacity change from 0 to 1024
[   45.910938][ T3780] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.80: bad orphan inode 134217728
[   45.935844][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.084244][    C0] hrtimer: interrupt took 47377 ns
[   46.186969][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.280067][ T3799] wg1 speed is unknown, defaulting to 1000
[   46.324713][ T3801] x_tables: unsorted underflow at hook 2
[   46.362385][ T3802] FAULT_INJECTION: forcing a failure.
[   46.362385][ T3802] name failslab, interval 1, probability 0, space 0, times 0
[   46.375117][ T3802] CPU: 0 UID: 0 PID: 3802 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.375150][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.375246][ T3802] Call Trace:
[   46.375254][ T3802]  <TASK>
[   46.375264][ T3802]  __dump_stack+0x1d/0x30
[   46.375292][ T3802]  dump_stack_lvl+0x95/0xd0
[   46.375319][ T3802]  dump_stack+0x15/0x1b
[   46.375343][ T3802]  should_fail_ex+0x265/0x280
[   46.375379][ T3802]  should_failslab+0x8c/0xb0
[   46.375408][ T3802]  kmem_cache_alloc_noprof+0x69/0x4b0
[   46.375436][ T3802]  ? skb_clone+0x151/0x1f0
[   46.375515][ T3802]  skb_clone+0x151/0x1f0
[   46.375559][ T3802]  __netlink_deliver_tap+0x2c9/0x500
[   46.375607][ T3802]  netlink_unicast+0x66b/0x690
[   46.375646][ T3802]  netlink_sendmsg+0x58b/0x6b0
[   46.375761][ T3802]  ? __pfx_netlink_sendmsg+0x10/0x10
[   46.375802][ T3802]  __sock_sendmsg+0x145/0x180
[   46.375858][ T3802]  ____sys_sendmsg+0x31e/0x4a0
[   46.375927][ T3802]  ___sys_sendmsg+0x17b/0x1d0
[   46.375976][ T3802]  __x64_sys_sendmsg+0xd4/0x160
[   46.376088][ T3802]  x64_sys_call+0x17ba/0x3000
[   46.376117][ T3802]  do_syscall_64+0xca/0x2b0
[   46.376235][ T3802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.376255][ T3802] RIP: 0033:0x7fc3f295f749
[   46.376268][ T3802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.376287][ T3802] RSP: 002b:00007fc3f137d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   46.376315][ T3802] RAX: ffffffffffffffda RBX: 00007fc3f2bb6180 RCX: 00007fc3f295f749
[   46.376330][ T3802] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000b
[   46.376345][ T3802] RBP: 00007fc3f137d090 R08: 0000000000000000 R09: 0000000000000000
[   46.376359][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.376373][ T3802] R13: 00007fc3f2bb6218 R14: 00007fc3f2bb6180 R15: 00007ffc398d6318
[   46.376391][ T3802]  </TASK>
[   46.376451][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'.
[   46.623442][ T3802] team0 (unregistering): Port device team_slave_0 removed
[   46.670357][ T3802] team0 (unregistering): Port device team_slave_1 removed
[   47.131168][ T3818] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   47.144392][ T3820] netlink: 'syz.3.91': attribute type 10 has an invalid length.
[   47.154003][ T3818] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   47.169077][ T3820] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   47.187834][ T3816] wg1 speed is unknown, defaulting to 1000
[   47.224571][ T3823] x_tables: unsorted underflow at hook 2
[   47.237015][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.273695][ T3820] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.282295][ T3825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'.
[   47.301617][ T3818] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.90' sets config #-7
[   47.322454][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'.
[   47.333932][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.341405][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.350581][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.358302][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.410043][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'.
[   47.535980][ T3844] loop4: detected capacity change from 0 to 128
[   47.596396][ T3844] syz.4.99: attempt to access beyond end of device
[   47.596396][ T3844] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128
[   47.614181][ T3844] syz.4.99: attempt to access beyond end of device
[   47.614181][ T3844] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128
[   47.628285][ T3844] Buffer I/O error on dev loop4, logical block 79, lost async page write
[   47.637394][ T3844] syz.4.99: attempt to access beyond end of device
[   47.637394][ T3844] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128
[   47.651921][ T3844] Buffer I/O error on dev loop4, logical block 80, lost async page write
[   47.660603][ T3844] syz.4.99: attempt to access beyond end of device
[   47.660603][ T3844] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128
[   47.680110][ T3844] syz.4.99: attempt to access beyond end of device
[   47.680110][ T3844] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128
[   47.697574][ T3844] syz.4.99: attempt to access beyond end of device
[   47.697574][ T3844] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128
[   47.712539][ T3844] Buffer I/O error on dev loop4, logical block 95, lost async page write
[   47.723179][ T3844] syz.4.99: attempt to access beyond end of device
[   47.723179][ T3844] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128
[   47.738341][ T3844] Buffer I/O error on dev loop4, logical block 96, lost async page write
[   47.750164][ T3844] syz.4.99: attempt to access beyond end of device
[   47.750164][ T3844] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128
[   47.767261][ T3844] syz.4.99: attempt to access beyond end of device
[   47.767261][ T3844] loop4: rw=8390657, sector=198, nr_sectors = 2 limit=128
[   47.782200][ T3844] Buffer I/O error on dev loop4, logical block 99, lost async page write
[   47.791858][ T3844] syz.4.99: attempt to access beyond end of device
[   47.791858][ T3844] loop4: rw=8390657, sector=200, nr_sectors = 2 limit=128
[   47.807245][ T3844] Buffer I/O error on dev loop4, logical block 100, lost async page write
[   47.821492][ T3844] Buffer I/O error on dev loop4, logical block 111, lost async page write
[   47.841412][ T3846] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   47.847842][ T3846] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   47.854939][ T3844] Buffer I/O error on dev loop4, logical block 112, lost async page write
[   47.871920][ T3844] Buffer I/O error on dev loop4, logical block 115, lost async page write
[   47.882622][ T3844] Buffer I/O error on dev loop4, logical block 116, lost async page write
[   47.896072][ T3856] loop1: detected capacity change from 0 to 512
[   47.908302][ T3857] loop2: detected capacity change from 0 to 164
[   47.915940][ T3857] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   47.939338][ T3856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.954367][ T3857] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   47.962966][ T3856] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.963016][ T3857] Symlink component flag not implemented
[   47.979172][ T3857] Symlink component flag not implemented
[   47.985209][ T3857] Symlink component flag not implemented (7)
[   47.991211][ T3857] Symlink component flag not implemented (116)
[   48.069700][ T3864] EXT4-fs (loop2): too many log groups per flexible block group
[   48.084602][ T3864] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   48.091433][ T3864] EXT4-fs (loop2): mount failed
[   48.134945][ T3875] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   48.145735][ T3875] JBD2: no valid journal superblock found
[   48.151508][ T3875] EXT4-fs (loop3): Could not load journal inode
[   48.192040][ T3874] EXT4-fs (loop2): unsupported inode size: 61867
[   48.198557][ T3874] EXT4-fs (loop2): blocksize: 1024
[   48.253570][ T3883] EXT4-fs: Ignoring removed i_version option
[   48.259755][ T3883] EXT4-fs: Ignoring removed nobh option
[   48.266611][ T3883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   48.282883][ T3883] EXT4-fs (loop2): 1 truncate cleaned up
[   48.289252][ T3883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.317493][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.339988][ T3890] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.349552][ T3890] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.358084][ T3890] Symlink component flag not implemented
[   48.363855][ T3890] Symlink component flag not implemented
[   48.369744][ T3890] Symlink component flag not implemented (7)
[   48.375847][ T3890] Symlink component flag not implemented (116)
[   48.463400][ T3898] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.485431][ T3898] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.495803][ T3898] Symlink component flag not implemented
[   48.501482][ T3898] Symlink component flag not implemented
[   48.507806][ T3898] Symlink component flag not implemented (7)
[   48.513880][ T3898] Symlink component flag not implemented (116)
[   48.520349][ T3899] syzkaller0: entered promiscuous mode
[   48.525845][ T3899] syzkaller0: entered allmulticast mode
[   48.628781][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.721078][ T3915] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.736583][ T3915] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.747016][ T3916] syz.1.121 (3916) used greatest stack depth: 9824 bytes left
[   48.768077][ T3915] Symlink component flag not implemented
[   48.773747][ T3915] Symlink component flag not implemented
[   48.799906][ T3915] Symlink component flag not implemented (7)
[   48.806059][ T3915] Symlink component flag not implemented (116)
[   48.887976][ T3927] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   48.914361][ T3927] JBD2: no valid journal superblock found
[   48.920178][ T3927] EXT4-fs (loop2): Could not load journal inode
[   49.079055][ T3923] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   49.085485][ T3923] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   49.106553][ T3940] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   49.134393][ T3940] JBD2: no valid journal superblock found
[   49.140179][ T3940] EXT4-fs (loop3): Could not load journal inode
[   49.205593][   T29] kauditd_printk_skb: 592 callbacks suppressed
[   49.205612][   T29] audit: type=1326 audit(1768348225.237:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   49.235293][   T29] audit: type=1326 audit(1768348225.237:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   49.258643][   T29] audit: type=1326 audit(1768348225.247:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   49.282027][   T29] audit: type=1400 audit(1768348225.247:1266): avc:  denied  { kexec_image_load } for  pid=3929 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   49.301898][   T29] audit: type=1326 audit(1768348225.247:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   49.325256][   T29] audit: type=1326 audit(1768348225.247:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8eeaf749 code=0x7ffc0000
[   49.348585][   T29] audit: type=1326 audit(1768348225.257:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958472005 code=0x7ffc0000
[   49.381007][   T29] audit: type=1326 audit(1768348225.447:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3922 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958472005 code=0x7ffc0000
[   49.404474][   T29] audit: type=1326 audit(1768348225.447:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97b0af749 code=0x7ffc0000
[   49.427838][   T29] audit: type=1326 audit(1768348225.447:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97b0af749 code=0x7ffc0000
[   49.494944][ T3944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.508041][ T3944] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.867285][ T3968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3968 comm=syz.1.134
[   49.880394][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.899916][ T3965] set_capacity_and_notify: 11 callbacks suppressed
[   49.899934][ T3965] loop4: detected capacity change from 0 to 1024
[   49.937639][ T3965] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   49.948692][ T3965] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   49.990220][ T3965] JBD2: no valid journal superblock found
[   49.996192][ T3965] EXT4-fs (loop4): Could not load journal inode
[   50.008108][ T3975] FAULT_INJECTION: forcing a failure.
[   50.008108][ T3975] name failslab, interval 1, probability 0, space 0, times 0
[   50.020881][ T3975] CPU: 1 UID: 0 PID: 3975 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.020911][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   50.020926][ T3975] Call Trace:
[   50.020933][ T3975]  <TASK>
[   50.020942][ T3975]  __dump_stack+0x1d/0x30
[   50.021021][ T3975]  dump_stack_lvl+0x95/0xd0
[   50.021048][ T3975]  dump_stack+0x15/0x1b
[   50.021073][ T3975]  should_fail_ex+0x265/0x280
[   50.021154][ T3975]  should_failslab+0x8c/0xb0
[   50.021179][ T3975]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[   50.021280][ T3975]  ? __d_alloc+0x37/0x340
[   50.021306][ T3975]  __d_alloc+0x37/0x340
[   50.021336][ T3975]  ? selinux_socket_post_create+0x212/0x2a0
[   50.021404][ T3975]  d_alloc_pseudo+0x1e/0x80
[   50.021500][ T3975]  alloc_file_pseudo+0x71/0x160
[   50.021533][ T3975]  ? alloc_fd+0x38a/0x3c0
[   50.021553][ T3975]  sock_alloc_file+0x9c/0x1e0
[   50.021590][ T3975]  __sys_socket+0x116/0x180
[   50.021698][ T3975]  __x64_sys_socket+0x3f/0x50
[   50.021719][ T3975]  x64_sys_call+0x127b/0x3000
[   50.021740][ T3975]  do_syscall_64+0xca/0x2b0
[   50.021824][ T3975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.021854][ T3975] RIP: 0033:0x7fe97b0b1667
[   50.021868][ T3975] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.021884][ T3975] RSP: 002b:00007fe979b0dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   50.021902][ T3975] RAX: ffffffffffffffda RBX: 00007fe97b305fa0 RCX: 00007fe97b0b1667
[   50.021913][ T3975] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   50.021932][ T3975] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   50.021943][ T3975] R10: 0000200000001880 R11: 0000000000000286 R12: 0000000000000001
[   50.021954][ T3975] R13: 00007fe97b306038 R14: 00007fe97b305fa0 R15: 00007ffdf61d8868
[   50.022002][ T3975]  </TASK>
[   50.023527][ T3976] netlink: 'syz.3.138': attribute type 10 has an invalid length.
[   50.226173][ T3965] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   50.309008][ T3982] loop2: detected capacity change from 0 to 512
[   50.326556][ T3982] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   50.363693][   T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   50.372106][   T36] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   50.392905][ T3982] EXT4-fs (loop2): mount failed
[   50.447304][ T3984] __nla_validate_parse: 8 callbacks suppressed
[   50.447319][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'.
[   50.662097][ T4002] loop2: detected capacity change from 0 to 164
[   50.679992][ T4002] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.689307][ T4002] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.834584][ T4002] Symlink component flag not implemented
[   50.840429][ T4002] Symlink component flag not implemented
[   50.853964][ T4002] Symlink component flag not implemented (7)
[   50.860039][ T4002] Symlink component flag not implemented (116)
[   51.108493][ T4006] loop3: detected capacity change from 0 to 1024
[   51.164476][ T4006] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   51.250741][ T4006] JBD2: no valid journal superblock found
[   51.256553][ T4006] EXT4-fs (loop3): Could not load journal inode
[   51.280031][ T4010] loop2: detected capacity change from 0 to 1024
[   51.324983][ T4010] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   51.434398][ T4010] JBD2: no valid journal superblock found
[   51.440226][ T4010] EXT4-fs (loop2): Could not load journal inode
[   51.471827][ T4020] wg1 speed is unknown, defaulting to 1000
[   51.489187][ T4010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'.
[   51.584912][ T4030] loop0: detected capacity change from 0 to 1024
[   51.620339][ T4030] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   51.662934][ T4030] JBD2: no valid journal superblock found
[   51.668764][ T4030] EXT4-fs (loop0): Could not load journal inode
[   51.807547][ T4045] loop3: detected capacity change from 0 to 512
[   51.837310][ T4045] EXT4-fs (loop3): too many log groups per flexible block group
[   51.857576][ T4045] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   51.864509][ T4045] EXT4-fs (loop3): mount failed
[   51.969050][ T4060] capability: warning: `syz.4.158' uses 32-bit capabilities (legacy support in use)
[   51.989734][ T4061] loop0: detected capacity change from 0 to 1024
[   52.002284][ T3963] syz.1.134 (3963) used greatest stack depth: 7408 bytes left
[   52.016688][ T4061] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   52.037654][ T4060] program syz.4.158 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.047318][ T4061] JBD2: no valid journal superblock found
[   52.053086][ T4061] EXT4-fs (loop0): Could not load journal inode
[   52.082391][ T4063] loop3: detected capacity change from 0 to 512
[   52.219592][ T4073] loop0: detected capacity change from 0 to 1024
[   52.264509][ T4073] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   52.292274][ T4073] JBD2: no valid journal superblock found
[   52.298131][ T4073] EXT4-fs (loop0): Could not load journal inode
[   52.343804][ T4079] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.379573][ T4079] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.389381][ T4063] EXT4-fs (loop3): too many log groups per flexible block group
[   52.404325][ T4063] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   52.411277][ T4063] EXT4-fs (loop3): mount failed
[   52.416373][ T4079] Symlink component flag not implemented
[   52.422031][ T4079] Symlink component flag not implemented
[   52.447144][ T4073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'.
[   52.456831][ T4079] Symlink component flag not implemented (7)
[   52.462850][ T4079] Symlink component flag not implemented (116)
[   52.582197][ T4087] EXT4-fs (loop3): inodes count not valid: 15 vs 32
[   52.684360][ T4093] process 'syz.1.170' launched '/dev/fd/7' with NULL argv: empty string added
[   52.756062][ T4093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   52.864463][ T4100] EXT4-fs (loop2): too many log groups per flexible block group
[   52.875270][ T4100] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   52.882095][ T4100] EXT4-fs (loop2): mount failed
[   52.990512][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'.
[   53.001520][ T4119] wg1 speed is unknown, defaulting to 1000
[   53.054522][ T4122] x_tables: unsorted underflow at hook 2
[   53.064705][ T4127] FAULT_INJECTION: forcing a failure.
[   53.064705][ T4127] name failslab, interval 1, probability 0, space 0, times 0
[   53.077474][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.077572][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.077589][ T4127] Call Trace:
[   53.077597][ T4127]  <TASK>
[   53.077603][ T4127]  __dump_stack+0x1d/0x30
[   53.077628][ T4127]  dump_stack_lvl+0x95/0xd0
[   53.077653][ T4127]  dump_stack+0x15/0x1b
[   53.077672][ T4127]  should_fail_ex+0x265/0x280
[   53.077719][ T4127]  should_failslab+0x8c/0xb0
[   53.077748][ T4127]  kmem_cache_alloc_noprof+0x69/0x4b0
[   53.077776][ T4127]  ? getname_flags+0x80/0x3b0
[   53.077798][ T4127]  ? should_fail_ex+0xdb/0x280
[   53.077819][ T4127]  getname_flags+0x80/0x3b0
[   53.077912][ T4127]  user_path_at+0x28/0x130
[   53.077941][ T4127]  __se_sys_mount+0x25b/0x2e0
[   53.077961][ T4127]  ? fput+0x8f/0xc0
[   53.078040][ T4127]  __x64_sys_mount+0x67/0x80
[   53.078079][ T4127]  x64_sys_call+0x2cca/0x3000
[   53.078103][ T4127]  do_syscall_64+0xca/0x2b0
[   53.078150][ T4127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.078176][ T4127] RIP: 0033:0x7f895843f749
[   53.078257][ T4127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.078321][ T4127] RSP: 002b:00007f8956e9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   53.078342][ T4127] RAX: ffffffffffffffda RBX: 00007f8958695fa0 RCX: 00007f895843f749
[   53.078358][ T4127] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000
[   53.078375][ T4127] RBP: 00007f8956e9f090 R08: 0000200000000600 R09: 0000000000000000
[   53.078388][ T4127] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001
[   53.078475][ T4127] R13: 00007f8958696038 R14: 00007f8958695fa0 R15: 00007ffff6dca5b8
[   53.078494][ T4127]  </TASK>
[   53.286495][ T4142] netlink: 'syz.2.186': attribute type 10 has an invalid length.
[   53.318473][ T4142] team0: Failed to send options change via netlink (err -105)
[   53.318499][ T4142] team0: Port device dummy0 added
[   53.323980][ T4142] netlink: 14 bytes leftover after parsing attributes in process `syz.2.186'.
[   53.494890][ T4155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'.
[   53.510047][ T4155] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   53.521041][ T4155] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   53.533442][ T4155] JBD2: no valid journal superblock found
[   53.539417][ T4155] EXT4-fs (loop0): Could not load journal inode
[   53.595916][ T4159] EXT4-fs (loop0): too many log groups per flexible block group
[   53.603980][ T4159] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   53.611059][ T4159] EXT4-fs (loop0): mount failed
[   53.652941][ T4164] FAULT_INJECTION: forcing a failure.
[   53.652941][ T4164] name failslab, interval 1, probability 0, space 0, times 0
[   53.665671][ T4164] CPU: 1 UID: 0 PID: 4164 Comm: syz.0.194 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.665831][ T4164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.665847][ T4164] Call Trace:
[   53.665857][ T4164]  <TASK>
[   53.665923][ T4164]  __dump_stack+0x1d/0x30
[   53.665947][ T4164]  dump_stack_lvl+0x95/0xd0
[   53.666048][ T4164]  dump_stack+0x15/0x1b
[   53.666086][ T4164]  should_fail_ex+0x265/0x280
[   53.666121][ T4164]  should_failslab+0x8c/0xb0
[   53.666144][ T4164]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   53.666206][ T4164]  ? __alloc_skb+0x2ff/0x4b0
[   53.666285][ T4164]  __alloc_skb+0x2ff/0x4b0
[   53.666409][ T4164]  ? __alloc_skb+0x228/0x4b0
[   53.666438][ T4164]  audit_log_start+0x3a0/0x720
[   53.666519][ T4164]  ? kstrtouint+0x76/0xc0
[   53.666536][ T4164]  audit_seccomp+0x48/0x100
[   53.666607][ T4164]  ? __seccomp_filter+0x832/0x1260
[   53.666631][ T4164]  __seccomp_filter+0x843/0x1260
[   53.666730][ T4164]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.666764][ T4164]  ? vfs_write+0x7e8/0x960
[   53.666785][ T4164]  ? __rcu_read_unlock+0x4f/0x70
[   53.666878][ T4164]  ? __fget_files+0x184/0x1c0
[   53.666926][ T4164]  __secure_computing+0x82/0x150
[   53.666952][ T4164]  syscall_trace_enter+0xcf/0x1e0
[   53.667043][ T4164]  do_syscall_64+0xa4/0x2b0
[   53.667077][ T4164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.667132][ T4164] RIP: 0033:0x7fe97b0af749
[   53.667150][ T4164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.667235][ T4164] RSP: 002b:00007fe979b0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[   53.667259][ T4164] RAX: ffffffffffffffda RBX: 00007fe97b305fa0 RCX: 00007fe97b0af749
[   53.667274][ T4164] RDX: 0000000000000000 RSI: 0000200000001e80 RDI: 0000200000000000
[   53.667366][ T4164] RBP: 00007fe979b0f090 R08: 0000000000000000 R09: 0000000000000000
[   53.667380][ T4164] R10: 00000000043d9ef1 R11: 0000000000000246 R12: 0000000000000001
[   53.667396][ T4164] R13: 00007fe97b306038 R14: 00007fe97b305fa0 R15: 00007ffdf61d8868
[   53.667420][ T4164]  </TASK>
[   53.926319][ T4167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.950458][ T4167] mmap: syz.4.195 (4167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   54.028087][ T4180] EXT4-fs (loop0): too many log groups per flexible block group
[   54.041651][ T4180] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   54.049202][ T4180] EXT4-fs (loop0): mount failed
[   54.080178][ T4184] netlink: 'syz.1.201': attribute type 21 has an invalid length.
[   54.147729][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.148068][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.175473][ T4189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.193563][ T4190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.201'.
[   54.218479][   T29] kauditd_printk_skb: 641 callbacks suppressed
[   54.218522][   T29] audit: type=1326 audit(1768348230.287:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97b0af749 code=0x7ffc0000
[   54.277579][   T29] audit: type=1326 audit(1768348230.317:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe97b0af783 code=0x7ffc0000
[   54.301008][   T29] audit: type=1326 audit(1768348230.317:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe97b0af807 code=0x7ffc0000
[   54.301042][   T29] audit: type=1326 audit(1768348230.317:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe97b066bdd code=0x7ffc0000
[   54.301083][   T29] audit: type=1326 audit(1768348230.317:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe97b0e3e89 code=0x7ffc0000
[   54.301187][   T29] audit: type=1326 audit(1768348230.317:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe97b066c47 code=0x7ffc0000
[   54.301220][   T29] audit: type=1326 audit(1768348230.317:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97b0af749 code=0x7ffc0000
[   54.301250][   T29] audit: type=1326 audit(1768348230.317:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97b0af749 code=0x7ffc0000
[   54.301284][   T29] audit: type=1326 audit(1768348230.317:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe97b066357 code=0x7ffc0000
[   54.301373][   T29] audit: type=1326 audit(1768348230.317:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe97b0663b6 code=0x7ffc0000
[   54.778305][ T4200] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   54.778515][ T4200] EXT4-fs (loop2): mount failed
[   54.810646][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.859329][ T4205] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   54.876631][ T4205] JBD2: no valid journal superblock found
[   54.882439][ T4205] EXT4-fs (loop2): Could not load journal inode
[   54.891053][ T4207] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   54.926605][ T4207] JBD2: no valid journal superblock found
[   54.930219][ T4209] pimreg: entered allmulticast mode
[   54.932435][ T4207] EXT4-fs (loop4): Could not load journal inode
[   54.946377][ T4209] pimreg: left allmulticast mode
[   55.098809][ T4234] netlink: 'syz.3.213': attribute type 10 has an invalid length.
[   55.130224][ T4234] netlink: 14 bytes leftover after parsing attributes in process `syz.3.213'.
[   55.152018][ T4237] set_capacity_and_notify: 11 callbacks suppressed
[   55.152034][ T4237] loop0: detected capacity change from 0 to 512
[   55.157613][ T4237] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   55.191881][ T4237] EXT4-fs (loop0): mount failed
[   55.226556][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'.
[   55.257231][ T4213] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   55.263733][ T4213] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   55.297407][ T4261] loop1: detected capacity change from 0 to 164
[   55.313658][ T4261] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   55.328965][ T4261] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   55.356966][ T4261] Symlink component flag not implemented
[   55.362670][ T4261] Symlink component flag not implemented
[   55.376335][ T4261] Symlink component flag not implemented (7)
[   55.382472][ T4261] Symlink component flag not implemented (116)
[   55.520890][ T4283] FAULT_INJECTION: forcing a failure.
[   55.520890][ T4283] name failslab, interval 1, probability 0, space 0, times 0
[   55.533604][ T4283] CPU: 0 UID: 0 PID: 4283 Comm: syz.0.234 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.533633][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.533647][ T4283] Call Trace:
[   55.533654][ T4283]  <TASK>
[   55.533712][ T4283]  __dump_stack+0x1d/0x30
[   55.533742][ T4283]  dump_stack_lvl+0x95/0xd0
[   55.533767][ T4283]  dump_stack+0x15/0x1b
[   55.533790][ T4283]  should_fail_ex+0x265/0x280
[   55.533825][ T4283]  should_failslab+0x8c/0xb0
[   55.533851][ T4283]  __kmalloc_cache_noprof+0x65/0x4c0
[   55.533892][ T4283]  ? rtnl_newlink+0x5c/0x1360
[   55.533914][ T4283]  ? __pfx_rtnl_newlink+0x10/0x10
[   55.534014][ T4283]  rtnl_newlink+0x5c/0x1360
[   55.534036][ T4283]  ? htab_map_hash+0x15f/0x1d0
[   55.534069][ T4283]  ? htab_map_delete_elem+0x2da/0x460
[   55.534103][ T4283]  ? __rcu_read_unlock+0x34/0x70
[   55.534128][ T4283]  ? bpf_trace_run3+0x12c/0x1e0
[   55.534237][ T4283]  ? xas_load+0x413/0x430
[   55.534269][ T4283]  ? __kfree_skb+0x109/0x150
[   55.534298][ T4283]  ? __rcu_read_unlock+0x4f/0x70
[   55.534321][ T4283]  ? __rcu_read_unlock+0x4f/0x70
[   55.534344][ T4283]  ? avc_has_perm_noaudit+0xab/0x130
[   55.534469][ T4283]  ? cred_has_capability+0x210/0x280
[   55.534592][ T4283]  ? selinux_capable+0x31/0x40
[   55.534619][ T4283]  ? security_capable+0x83/0x90
[   55.534659][ T4283]  ? ns_capable+0x7d/0xb0
[   55.534744][ T4283]  ? __pfx_rtnl_newlink+0x10/0x10
[   55.534791][ T4283]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   55.534820][ T4283]  netlink_rcv_skb+0x123/0x220
[   55.534867][ T4283]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   55.534933][ T4283]  rtnetlink_rcv+0x1c/0x30
[   55.535020][ T4283]  netlink_unicast+0x5c0/0x690
[   55.535056][ T4283]  netlink_sendmsg+0x58b/0x6b0
[   55.535137][ T4283]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.535175][ T4283]  __sock_sendmsg+0x145/0x180
[   55.535199][ T4283]  ____sys_sendmsg+0x31e/0x4a0
[   55.535251][ T4283]  ___sys_sendmsg+0x17b/0x1d0
[   55.535299][ T4283]  __x64_sys_sendmsg+0xd4/0x160
[   55.535337][ T4283]  x64_sys_call+0x17ba/0x3000
[   55.535387][ T4283]  do_syscall_64+0xca/0x2b0
[   55.535470][ T4283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.535496][ T4283] RIP: 0033:0x7fe97b0af749
[   55.535513][ T4283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.535599][ T4283] RSP: 002b:00007fe979b0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.535678][ T4283] RAX: ffffffffffffffda RBX: 00007fe97b305fa0 RCX: 00007fe97b0af749
[   55.535768][ T4283] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[   55.535830][ T4283] RBP: 00007fe979b0f090 R08: 0000000000000000 R09: 0000000000000000
[   55.535841][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.535861][ T4283] R13: 00007fe97b306038 R14: 00007fe97b305fa0 R15: 00007ffdf61d8868
[   55.535884][ T4283]  </TASK>
[   55.822743][ T4277] __nla_validate_parse: 1 callbacks suppressed
[   55.822760][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'.
[   55.856268][ T4292] syz_tun: entered allmulticast mode
[   55.862578][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'.
[   55.876240][ T4292] syz_tun (unregistering): left allmulticast mode
[   55.912472][ T4296] loop0: detected capacity change from 0 to 512
[   56.007169][ T4296] EXT4-fs (loop0): too many log groups per flexible block group
[   56.020965][ T4296] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   56.030104][ T4296] EXT4-fs (loop0): mount failed
[   56.053671][ T4313] loop4: detected capacity change from 0 to 164
[   56.080060][ T4313] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   56.089538][ T4313] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   56.098184][ T4313] Symlink component flag not implemented
[   56.103889][ T4313] Symlink component flag not implemented
[   56.110017][ T4313] Symlink component flag not implemented (7)
[   56.116253][ T4313] Symlink component flag not implemented (116)
[   56.137434][ T4316] loop0: detected capacity change from 0 to 512
[   56.208771][ T4316] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   56.249089][ T4316] EXT4-fs (loop0): mount failed
[   56.273726][ T4327] FAULT_INJECTION: forcing a failure.
[   56.273726][ T4327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.286906][ T4327] CPU: 0 UID: 0 PID: 4327 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.287004][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   56.287017][ T4327] Call Trace:
[   56.287024][ T4327]  <TASK>
[   56.287031][ T4327]  __dump_stack+0x1d/0x30
[   56.287053][ T4327]  dump_stack_lvl+0x95/0xd0
[   56.287103][ T4327]  dump_stack+0x15/0x1b
[   56.287126][ T4327]  should_fail_ex+0x265/0x280
[   56.287172][ T4327]  should_fail+0xb/0x20
[   56.287259][ T4327]  should_fail_usercopy+0x1a/0x20
[   56.287339][ T4327]  _copy_from_user+0x1c/0xb0
[   56.287365][ T4327]  __sys_bpf+0x183/0x7c0
[   56.287392][ T4327]  __x64_sys_bpf+0x41/0x50
[   56.287510][ T4327]  x64_sys_call+0x28e1/0x3000
[   56.287534][ T4327]  do_syscall_64+0xca/0x2b0
[   56.287574][ T4327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.287594][ T4327] RIP: 0033:0x7f895843f749
[   56.287609][ T4327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.287658][ T4327] RSP: 002b:00007f8956e9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   56.287678][ T4327] RAX: ffffffffffffffda RBX: 00007f8958695fa0 RCX: 00007f895843f749
[   56.287690][ T4327] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[   56.287705][ T4327] RBP: 00007f8956e9f090 R08: 0000000000000000 R09: 0000000000000000
[   56.287721][ T4327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.287810][ T4327] R13: 00007f8958696038 R14: 00007f8958695fa0 R15: 00007ffff6dca5b8
[   56.287859][ T4327]  </TASK>
[   56.467817][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'.
[   56.483265][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.490772][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.501550][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.509062][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.517146][ T4332] netlink: 'syz.4.250': attribute type 10 has an invalid length.
[   56.535617][ T4332] team0: Failed to send options change via netlink (err -105)
[   56.543159][ T4332] team0: Port device dummy0 added
[   56.552828][ T4332] netlink: 14 bytes leftover after parsing attributes in process `syz.4.250'.
[   56.691539][ T4346] loop2: detected capacity change from 0 to 1024
[   56.702061][ T4356] loop0: detected capacity change from 0 to 512
[   56.714716][ T4346] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   56.725736][ T4346] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   56.745460][ T4346] JBD2: no valid journal superblock found
[   56.751319][ T4346] EXT4-fs (loop2): Could not load journal inode
[   56.759115][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.772559][ T4356] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.793647][ T4346] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   57.425085][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.504342][ T4383] loop0: detected capacity change from 0 to 512
[   57.525923][ T4381] loop3: detected capacity change from 0 to 1024
[   57.528037][ T4383] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.542473][ T4386] loop2: detected capacity change from 0 to 1024
[   57.553862][ T4381] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   57.571626][ T4386] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   57.575163][ T4383] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   57.582512][ T4381] JBD2: no valid journal superblock found
[   57.597507][ T4381] EXT4-fs (loop3): Could not load journal inode
[   57.604557][ T4386] JBD2: no valid journal superblock found
[   57.610347][ T4386] EXT4-fs (loop2): Could not load journal inode
[   57.625073][ T4381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.267'.
[   57.650538][ T4383] EXT4-fs (loop0): 1 truncate cleaned up
[   57.658697][ T4386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'.
[   57.674917][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.713126][ T4383] FAULT_INJECTION: forcing a failure.
[   57.713126][ T4383] name failslab, interval 1, probability 0, space 0, times 0
[   57.725917][ T4383] CPU: 1 UID: 0 PID: 4383 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.725948][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.726002][ T4383] Call Trace:
[   57.726010][ T4383]  <TASK>
[   57.726018][ T4383]  __dump_stack+0x1d/0x30
[   57.726047][ T4383]  dump_stack_lvl+0x95/0xd0
[   57.726085][ T4383]  dump_stack+0x15/0x1b
[   57.726106][ T4383]  should_fail_ex+0x265/0x280
[   57.726182][ T4383]  should_failslab+0x8c/0xb0
[   57.726208][ T4383]  kmem_cache_alloc_noprof+0x69/0x4b0
[   57.726354][ T4383]  ? ext4_mb_new_blocks+0x79f/0x2080
[   57.726385][ T4383]  ext4_mb_new_blocks+0x79f/0x2080
[   57.726424][ T4383]  ? folio_mark_accessed+0x240/0x3a0
[   57.726487][ T4383]  ? ext4_ind_map_blocks+0x838/0x14f0
[   57.726509][ T4383]  ? ext4_get_branch+0x321/0x3a0
[   57.726535][ T4383]  ext4_ind_map_blocks+0xb86/0x14f0
[   57.726608][ T4383]  ext4_map_blocks+0x5e3/0xd20
[   57.726646][ T4383]  _ext4_get_block+0x10a/0x350
[   57.726692][ T4383]  ? folio_alloc_buffers+0x2e5/0x310
[   57.726773][ T4383]  ? _raw_spin_lock+0x52/0xa0
[   57.726797][ T4383]  ext4_get_block+0x39/0x50
[   57.726826][ T4383]  ext4_block_write_begin+0x650/0xcf0
[   57.726924][ T4383]  ? __pfx_ext4_get_block+0x10/0x10
[   57.726964][ T4383]  ext4_convert_inline_data_to_extent+0x3e2/0x7d0
[   57.727000][ T4383]  ext4_try_to_write_inline_data+0x54/0x90
[   57.727048][ T4383]  ext4_write_begin+0x1a3/0xe90
[   57.727075][ T4383]  ? __ext4_mark_inode_dirty+0x2fe/0x3f0
[   57.727105][ T4383]  ? inode_to_bdi+0x47/0xa0
[   57.727123][ T4383]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[   57.727168][ T4383]  generic_perform_write+0x184/0x490
[   57.727201][ T4383]  ext4_buffered_write_iter+0x1ee/0x3c0
[   57.727238][ T4383]  ext4_file_write_iter+0x387/0xf60
[   57.727334][ T4383]  ? kstrtouint_from_user+0x9f/0xf0
[   57.727357][ T4383]  ? 0xffffffff81000000
[   57.727370][ T4383]  ? __rcu_read_unlock+0x4f/0x70
[   57.727390][ T4383]  ? avc_policy_seqno+0x15/0x30
[   57.727477][ T4383]  ? selinux_file_permission+0x1e2/0x320
[   57.727512][ T4383]  ? __pfx_ext4_file_write_iter+0x10/0x10
[   57.727604][ T4383]  vfs_write+0x52a/0x960
[   57.727628][ T4383]  __x64_sys_pwrite64+0xfd/0x150
[   57.727650][ T4383]  x64_sys_call+0x9f7/0x3000
[   57.727710][ T4383]  do_syscall_64+0xca/0x2b0
[   57.727803][ T4383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.727825][ T4383] RIP: 0033:0x7fe97b0af749
[   57.727840][ T4383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.727903][ T4383] RSP: 002b:00007fe979b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[   57.727923][ T4383] RAX: ffffffffffffffda RBX: 00007fe97b305fa0 RCX: 00007fe97b0af749
[   57.727936][ T4383] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004
[   57.727948][ T4383] RBP: 00007fe979b0f090 R08: 0000000000000000 R09: 0000000000000000
[   57.727967][ T4383] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001
[   57.727979][ T4383] R13: 00007fe97b306038 R14: 00007fe97b305fa0 R15: 00007ffdf61d8868
[   57.728050][ T4383]  </TASK>
[   58.060613][ T4401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.275'.
[   58.069581][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'.
[   58.100963][ T4404] FAULT_INJECTION: forcing a failure.
[   58.100963][ T4404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.112855][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.114168][ T4404] CPU: 1 UID: 0 PID: 4404 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.114295][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.114423][ T4404] Call Trace:
[   58.114444][ T4404]  <TASK>
[   58.114465][ T4404]  __dump_stack+0x1d/0x30
[   58.114544][ T4404]  dump_stack_lvl+0x95/0xd0
[   58.114614][ T4404]  dump_stack+0x15/0x1b
[   58.114667][ T4404]  should_fail_ex+0x265/0x280
[   58.114734][ T4404]  should_fail+0xb/0x20
[   58.114852][ T4404]  should_fail_usercopy+0x1a/0x20
[   58.114939][ T4404]  _copy_from_user+0x1c/0xb0
[   58.115050][ T4404]  __copy_msghdr+0x244/0x300
[   58.115139][ T4404]  ___sys_sendmsg+0x109/0x1d0
[   58.115267][ T4404]  __x64_sys_sendmsg+0xd4/0x160
[   58.115423][ T4404]  x64_sys_call+0x17ba/0x3000
[   58.115567][ T4404]  do_syscall_64+0xca/0x2b0
[   58.115669][ T4404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.115767][ T4404] RIP: 0033:0x7fc3f295f749
[   58.115836][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.115899][ T4404] RSP: 002b:00007fc3f13bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.115973][ T4404] RAX: ffffffffffffffda RBX: 00007fc3f2bb5fa0 RCX: 00007fc3f295f749
[   58.116012][ T4404] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   58.116110][ T4404] RBP: 00007fc3f13bf090 R08: 0000000000000000 R09: 0000000000000000
[   58.116150][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.116190][ T4404] R13: 00007fc3f2bb6038 R14: 00007fc3f2bb5fa0 R15: 00007ffc398d6318
[   58.116289][ T4404]  </TASK>
[   58.213912][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.236922][ T4405] siw: device registration error -23
[   58.323274][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'.
[   58.338537][ T4409] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.354051][ T4400] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   58.361109][ T4412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'.
[   58.388795][ T4400] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[   58.401230][ T4400] EXT4-fs (loop2): This should not happen!! Data will be lost
[   58.401230][ T4400] 
[   58.410986][ T4400] EXT4-fs (loop2): Total free blocks count 0
[   58.417023][ T4400] EXT4-fs (loop2): Free/Dirty block details
[   58.422943][ T4400] EXT4-fs (loop2): free_blocks=2415919504
[   58.428912][ T4400] EXT4-fs (loop2): dirty_blocks=64
[   58.434061][ T4400] EXT4-fs (loop2): Block reservation details
[   58.440122][ T4400] EXT4-fs (loop2): i_reserved_data_blocks=3
[   58.443444][ T4409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.461555][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.475207][ T4405] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.477864][ T4409] EXT4-fs (loop3): 1 truncate cleaned up
[   58.492626][ T4416] siw: device registration error -23
[   58.501750][   T53] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   58.517021][ T4409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.537580][ T4416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.557958][ T4416] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.721591][ T4434] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   58.750997][ T4434] JBD2: no valid journal superblock found
[   58.756829][ T4434] EXT4-fs (loop1): Could not load journal inode
[   58.809578][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.855998][ T4442] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   58.866171][ T4442] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   58.876893][ T4442] Symlink component flag not implemented
[   58.882639][ T4442] Symlink component flag not implemented
[   58.889875][ T4442] Symlink component flag not implemented (7)
[   58.895947][ T4442] Symlink component flag not implemented (116)
[   58.923065][ T4440] EXT4-fs (loop1): too many log groups per flexible block group
[   58.931775][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.942888][ T4440] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   58.949874][ T4440] EXT4-fs (loop1): mount failed
[   58.992347][ T4449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.056365][ T4449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.082185][ T4449] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.178202][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.187730][   T23] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   59.221359][ T4466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.245149][   T29] kauditd_printk_skb: 1016 callbacks suppressed
[   59.245167][   T29] audit: type=1400 audit(1768348235.317:2932): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   59.272902][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.285811][ T4467] fido_id[4467]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   59.303920][   T29] audit: type=1400 audit(1768348235.367:2933): avc:  denied  { create } for  pid=4446 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   59.338453][   T29] audit: type=1400 audit(1768348235.367:2934): avc:  denied  { ioctl } for  pid=4446 comm="syz.4.288" path="socket:[8249]" dev="sockfs" ino=8249 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   59.363693][   T29] audit: type=1400 audit(1768348235.367:2935): avc:  denied  { write } for  pid=4446 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   59.383058][   T29] audit: type=1400 audit(1768348235.367:2936): avc:  denied  { create } for  pid=4446 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   59.402389][   T29] audit: type=1400 audit(1768348235.397:2937): avc:  denied  { write } for  pid=4470 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   59.421693][   T29] audit: type=1400 audit(1768348235.397:2938): avc:  denied  { create } for  pid=4470 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   59.441264][   T29] audit: type=1400 audit(1768348235.397:2939): avc:  denied  { write } for  pid=4470 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   59.465744][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.507793][ T4466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.517371][   T29] audit: type=1400 audit(1768348235.547:2940): avc:  denied  { create } for  pid=4473 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   59.538852][   T29] audit: type=1400 audit(1768348235.547:2941): avc:  denied  { open } for  pid=4473 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   59.587455][ T4466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.601190][ T4476] siw: device registration error -23
[   59.639243][ T4485] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   59.650257][ T4485] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   59.665930][ T4476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.694781][ T4476] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.706193][ T4466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.720547][ T4485] Symlink component flag not implemented
[   59.726252][ T4485] Symlink component flag not implemented
[   59.758170][ T4485] Symlink component flag not implemented (7)
[   59.764246][ T4485] Symlink component flag not implemented (116)
[   59.803961][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.816400][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.837007][  T417] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.850891][  T417] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.162677][ T4512] wg1 speed is unknown, defaulting to 1000
[   60.223433][ T4512] set_capacity_and_notify: 11 callbacks suppressed
[   60.223450][ T4512] loop0: detected capacity change from 0 to 512
[   60.252700][ T4512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   60.316136][ T4512] EXT4-fs (loop0): 1 truncate cleaned up
[   60.322742][ T4512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.446354][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.662153][ T4509] loop4: detected capacity change from 0 to 1024
[   60.669822][ T4528] loop3: detected capacity change from 0 to 512
[   60.687711][ T4531] FAULT_INJECTION: forcing a failure.
[   60.687711][ T4531] name failslab, interval 1, probability 0, space 0, times 0
[   60.700503][ T4531] CPU: 1 UID: 0 PID: 4531 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.700591][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.700607][ T4531] Call Trace:
[   60.700615][ T4531]  <TASK>
[   60.700624][ T4531]  __dump_stack+0x1d/0x30
[   60.700654][ T4531]  dump_stack_lvl+0x95/0xd0
[   60.700681][ T4531]  dump_stack+0x15/0x1b
[   60.700707][ T4531]  should_fail_ex+0x265/0x280
[   60.700773][ T4531]  should_failslab+0x8c/0xb0
[   60.700801][ T4531]  __kvmalloc_node_noprof+0x149/0x6b0
[   60.700832][ T4531]  ? __se_sys_add_key+0x1ee/0x350
[   60.700919][ T4531]  __se_sys_add_key+0x1ee/0x350
[   60.701106][ T4531]  __x64_sys_add_key+0x67/0x80
[   60.701145][ T4531]  x64_sys_call+0x2ea3/0x3000
[   60.701177][ T4531]  do_syscall_64+0xca/0x2b0
[   60.701263][ T4531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.701312][ T4531] RIP: 0033:0x7f531ba1f749
[   60.701332][ T4531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.701354][ T4531] RSP: 002b:00007f531a487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   60.701379][ T4531] RAX: ffffffffffffffda RBX: 00007f531bc75fa0 RCX: 00007f531ba1f749
[   60.701441][ T4531] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280
[   60.701459][ T4531] RBP: 00007f531a487090 R08: ffffffffffffffff R09: 0000000000000000
[   60.701475][ T4531] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[   60.701491][ T4531] R13: 00007f531bc76038 R14: 00007f531bc75fa0 R15: 00007fff1da30158
[   60.701513][ T4531]  </TASK>
[   60.863538][ T4509] EXT4-fs: dax option not supported
[   60.885458][ T4528] EXT4-fs (loop3): too many log groups per flexible block group
[   60.893197][ T4528] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   60.914328][ T4528] EXT4-fs (loop3): mount failed
[   60.946400][ T4525] __nla_validate_parse: 7 callbacks suppressed
[   60.946416][ T4525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.315'.
[   60.962267][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.019490][ T4539] netlink: 68 bytes leftover after parsing attributes in process `syz.0.318'.
[   61.065101][ T4541] loop2: detected capacity change from 0 to 2048
[   61.088495][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'.
[   61.123021][ T4547] loop1: detected capacity change from 0 to 1024
[   61.131502][ T4552] loop3: detected capacity change from 0 to 128
[   61.149659][ T4541] Alternate GPT is invalid, using primary GPT.
[   61.155118][ T4547] ext4: Unknown parameter 'fowner<18446744073709551615'
[   61.156135][ T4541]  loop2: p1 p2 p3
[   61.166756][ T4541] loop2: partition table partially beyond EOD, truncated
[   61.215781][ T4560] loop0: detected capacity change from 0 to 164
[   61.224838][ T4560] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   61.282560][ T4560] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   61.308542][ T4560] Symlink component flag not implemented
[   61.314272][ T4560] Symlink component flag not implemented
[   61.329871][ T4560] Symlink component flag not implemented (7)
[   61.335954][ T4560] Symlink component flag not implemented (116)
[   61.350545][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   61.358611][ T4569] loop3: detected capacity change from 0 to 512
[   61.368100][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   61.379845][ T4562] udevd[4562]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   61.385272][ T4569] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.396251][ T4569] EXT4-fs: Ignoring removed bh option
[   61.413586][ T4570] wg1 speed is unknown, defaulting to 1000
[   61.471868][ T4569] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   61.525024][ T4569] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.327: corrupted inode contents
[   61.563551][ T4577] loop1: detected capacity change from 0 to 736
[   61.582259][ T4569] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #11: comm syz.3.327: mark_inode_dirty error
[   61.598868][ T4577] iso9660: Unknown parameter '0000000000000000000001777777777777777777777'
[   61.619378][ T4569] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.327: invalid indirect mapped block 1 (level 1)
[   61.664029][ T4576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.331'.
[   61.681033][ T4569] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.327: corrupted inode contents
[   61.702640][ T4569] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   61.712479][ T4569] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.327: corrupted inode contents
[   61.739874][ T4569] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.327: mark_inode_dirty error
[   61.786850][ T4581] loop1: detected capacity change from 0 to 512
[   61.804469][ T4569] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   61.832440][ T4569] EXT4-fs (loop3): 1 truncate cleaned up
[   61.916887][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[   61.921718][ T4569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.949865][ T4581] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   61.990084][ T4569] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.327: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[   62.023466][ T4581] EXT4-fs (loop1): mount failed
[   62.164944][ T4600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   62.177098][ T4601] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   62.192649][ T4601] EXT4-fs (loop1): mount failed
[   62.198743][ T4600] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   62.213253][ T4594] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   62.224228][ T4594] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   62.234144][ T4600] EXT4-fs (loop4): 1 truncate cleaned up
[   62.249720][ T4594] JBD2: no valid journal superblock found
[   62.255547][ T4594] EXT4-fs (loop0): Could not load journal inode
[   62.262276][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.320370][ T4594] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   62.357965][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.391084][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.444634][ T4617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.457751][ T4615] wg1 speed is unknown, defaulting to 1000
[   62.475918][ T4617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.494550][ T4617] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   62.601310][ T4628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.628048][ T4635] netlink: 92 bytes leftover after parsing attributes in process `syz.1.343'.
[   62.637162][ T4628] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.660873][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.738307][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'.
[   62.758782][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.790609][ T4641] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   62.807354][ T4641] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   62.816419][ T4641] Symlink component flag not implemented
[   62.822103][ T4641] Symlink component flag not implemented
[   62.828469][ T4641] Symlink component flag not implemented (7)
[   62.834524][ T4641] Symlink component flag not implemented (116)
[   62.893584][ T4650] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   62.908820][ T4650] EXT4-fs (loop3): mount failed
[   62.966799][ T4656] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   63.202212][ T4664] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   63.213321][ T4664] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   63.223485][ T4664] JBD2: no valid journal superblock found
[   63.229381][ T4664] EXT4-fs (loop2): Could not load journal inode
[   63.238688][ T4664] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   63.292615][ T4668] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   63.319988][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.324339][ T4668] JBD2: no valid journal superblock found
[   63.335323][ T4668] EXT4-fs (loop2): Could not load journal inode
[   63.339125][ T4672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[   63.350568][ T4672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.355'.
[   63.359583][ T4672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[   63.369381][ T4671] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.379245][ T4671] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.397119][ T4671] Symlink component flag not implemented
[   63.402799][ T4671] Symlink component flag not implemented
[   63.437109][ T4676] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.437623][ T4671] Symlink component flag not implemented (7)
[   63.451418][ T4671] Symlink component flag not implemented (116)
[   63.478744][ T4678] EXT4-fs (loop0): too many log groups per flexible block group
[   63.488513][ T4678] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   63.496133][ T4676] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.549380][ T4678] EXT4-fs (loop0): mount failed
[   63.584993][ T4676] Symlink component flag not implemented
[   63.590715][ T4676] Symlink component flag not implemented
[   63.643870][ T4676] Symlink component flag not implemented (7)
[   63.650021][ T4676] Symlink component flag not implemented (116)
[   63.721761][ T4694] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   63.732937][ T4694] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   63.749177][ T4693] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   63.870720][ T4693] EXT4-fs (loop0): mount failed
[   63.885918][ T4702] EXT4-fs (loop3): too many log groups per flexible block group
[   63.925221][ T4694] JBD2: no valid journal superblock found
[   63.931007][ T4694] EXT4-fs (loop4): Could not load journal inode
[   63.953932][ T4702] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   64.004426][ T4702] EXT4-fs (loop3): mount failed
[   64.017049][ T4694] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   64.032215][ T4691] infiniband syz1: set active
[   64.037078][ T4691] infiniband syz1: added veth0_to_bond
[   64.169299][ T4691] RDS/IB: syz1: added
[   64.173349][ T4691] smc: adding ib device syz1 with port count 1
[   64.195669][ T4691] smc:    ib device syz1 port 1 has no pnetid
[   64.231980][ T4713] EXT4-fs (loop0): too many log groups per flexible block group
[   64.246563][ T4715] netlink: 'syz.4.367': attribute type 12 has an invalid length.
[   64.251138][ T4713] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   64.273391][   T29] kauditd_printk_skb: 608 callbacks suppressed
[   64.273403][   T29] audit: type=1400 audit(1768348240.337:3546): avc:  denied  { sys_module } for  pid=4718 comm="syz.2.369" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   64.284514][ T4713] EXT4-fs (loop0): mount failed
[   64.356001][ T4714] macvlan2: entered promiscuous mode
[   64.361349][ T4714] macvlan2: entered allmulticast mode
[   64.376866][   T29] audit: type=1400 audit(1768348240.407:3547): avc:  denied  { create } for  pid=4711 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   64.397183][   T29] audit: type=1400 audit(1768348240.447:3548): avc:  denied  { write } for  pid=4718 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   64.445361][ T4714] bond2: entered promiscuous mode
[   64.452800][ T4714] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   64.464630][   T29] audit: type=1400 audit(1768348240.487:3549): avc:  denied  { mount } for  pid=4729 comm="syz.4.371" name="/" dev="ramfs" ino=8179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   64.486864][   T29] audit: type=1400 audit(1768348240.497:3550): avc:  denied  { mount } for  pid=4729 comm="syz.4.371" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   64.509066][ T4714] bond2: left promiscuous mode
[   64.512089][   T29] audit: type=1400 audit(1768348240.537:3551): avc:  denied  { unmount } for  pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   64.540497][   T29] audit: type=1400 audit(1768348240.607:3552): avc:  denied  { create } for  pid=4730 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.644198][   T29] audit: type=1400 audit(1768348240.607:3553): avc:  denied  { ioctl } for  pid=4730 comm="syz.0.372" path="socket:[8188]" dev="sockfs" ino=8188 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.668971][   T29] audit: type=1400 audit(1768348240.607:3554): avc:  denied  { create } for  pid=4730 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   64.688309][   T29] audit: type=1400 audit(1768348240.607:3555): avc:  denied  { connect } for  pid=4730 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   64.837762][ T4744] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.844469][ T4744] EXT4-fs: Ignoring removed bh option
[   64.896265][ T4744] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   64.925328][ T4744] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #11: comm syz.2.376: corrupted inode contents
[   64.969288][ T4744] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #11: comm syz.2.376: mark_inode_dirty error
[   65.108007][ T4744] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.376: invalid indirect mapped block 1 (level 1)
[   65.124157][ T4741] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[   65.224729][ T4744] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #11: comm syz.2.376: corrupted inode contents
[   65.275833][ T4753] set_capacity_and_notify: 20 callbacks suppressed
[   65.275852][ T4753] loop4: detected capacity change from 0 to 1024
[   65.304767][ T4744] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   65.315025][ T4744] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #11: comm syz.2.376: corrupted inode contents
[   65.328047][ T4753] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   65.335055][ T4744] EXT4-fs error (device loop2): ext4_truncate:4635: inode #11: comm syz.2.376: mark_inode_dirty error
[   65.339004][ T4753] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   65.375424][ T4753] JBD2: no valid journal superblock found
[   65.381213][ T4753] EXT4-fs (loop4): Could not load journal inode
[   65.387969][ T4744] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   65.402703][ T4751] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   65.474535][ T4744] EXT4-fs (loop2): 1 truncate cleaned up
[   65.490571][ T4744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.610936][ T4774] loop4: detected capacity change from 0 to 512
[   65.663426][ T4776] loop3: detected capacity change from 0 to 164
[   65.670202][ T4774] EXT4-fs: inline encryption not supported
[   65.693397][ T4774] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   65.694042][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.711136][ T4774] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.384: invalid indirect mapped block 2683928664 (level 1)
[   65.733379][ T4776] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.737497][ T4774] EXT4-fs (loop4): 1 truncate cleaned up
[   65.758190][ T4774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.771959][ T4776] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.780953][ T4776] Symlink component flag not implemented
[   65.786661][ T4776] Symlink component flag not implemented
[   65.792896][ T4776] Symlink component flag not implemented (7)
[   65.798999][ T4776] Symlink component flag not implemented (116)
[   65.844821][ T4781] wg1 speed is unknown, defaulting to 1000
[   65.880139][ T4785] loop1: detected capacity change from 0 to 164
[   65.907172][ T4785] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.951695][ T4785] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.974785][ T4785] Symlink component flag not implemented
[   65.980456][ T4785] Symlink component flag not implemented
[   65.994979][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.005751][ T4785] Symlink component flag not implemented (7)
[   66.005760][ T4785] Symlink component flag not implemented (116)
[   66.012641][ T4792] __nla_validate_parse: 7 callbacks suppressed
[   66.012691][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'.
[   66.018398][ T3004] ==================================================================
[   66.018439][ T3004] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current
[   66.018477][ T3004] 
[   66.018482][ T3004] write to 0xffff88811bbef538 of 8 bytes by task 3534 on cpu 0:
[   66.018497][ T3004]  inode_set_ctime_current+0x524/0x760
[   66.018531][ T3004]  simple_unlink+0x2d/0x80
[   66.018569][ T3004]  shmem_unlink+0x12d/0x140
[   66.018604][ T3004]  vfs_unlink+0x28b/0x440
[   66.018620][ T3004]  do_unlinkat+0x1cd/0x4b0
[   66.018639][ T3004]  __x64_sys_unlink+0x2e/0x40
[   66.018661][ T3004]  x64_sys_call+0x2f48/0x3000
[   66.018691][ T3004]  do_syscall_64+0xca/0x2b0
[   66.018730][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.018750][ T3004] 
[   66.018755][ T3004] read to 0xffff88811bbef538 of 8 bytes by task 3004 on cpu 1:
[   66.018769][ T3004]  atime_needs_update+0x2ef/0x3e0
[   66.018794][ T3004]  touch_atime+0x4a/0x340
[   66.018819][ T3004]  do_readlinkat+0x134/0x320
[   66.018853][ T3004]  __x64_sys_readlink+0x47/0x60
[   66.018886][ T3004]  x64_sys_call+0x2af1/0x3000
[   66.018916][ T3004]  do_syscall_64+0xca/0x2b0
[   66.018955][ T3004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.018981][ T3004] 
[   66.018986][ T3004] value changed: 0x000000006966da51 -> 0x000000006966da52
[   66.019001][ T3004] 
[   66.019005][ T3004] Reported by Kernel Concurrency Sanitizer on:
[   66.019019][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   66.019048][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   66.019064][ T3004] ==================================================================