last executing test programs:

2.286390114s ago: executing program 3 (id=226):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={<r1=>0x0, 0x3}, &(0x7f0000000140)=0x8)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/mem_sleep', 0x2000, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', <r3=>0x0})
r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/65, 0x41, <r6=>0x0, &(0x7f00000008c0)=""/236, 0xec}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x1f, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f5}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', r3, @fallback=0x19, r4, 0x8, &(0x7f0000000480)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xb, 0x9bf6, 0xa}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000780)=[r7, r8], &(0x7f0000000900)=[{0x1, 0x5, 0x4, 0x1}, {0x3, 0x3, 0x7, 0x3}, {0x5, 0x2, 0xa, 0x7}, {0x0, 0x2, 0xa, 0x3}, {0x4, 0x3, 0x8, 0x7}, {0x5, 0x4, 0xe, 0x4}], 0x10, 0x3, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0x8000}, 0x8)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r10 = dup(r9)
ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e24, @multicast2}})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$rtc(&(0x7f0000000080), 0x7fff, 0x20100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x76}, 0x18)
socket$pppl2tp(0x18, 0x1, 0x1)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="00000000000800ffb704000008ed00008500000000950000deffffff00000000746154d5d4673ee1b33059a9ba63316b09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r13}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)

2.177151344s ago: executing program 3 (id=227):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async)
socket$kcm(0x11, 0xa, 0x300) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='kfree\x00') (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="10000000000000008400000008000000180000010000000084000000000000006200000000000000"], 0x28}, 0x41)

2.149674824s ago: executing program 3 (id=228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a000000030000000500000f0100000004000000010000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000081000000000100ffff03000000000000000000000000000000032a0800000061"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0xfffffffe, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x13, 0x8, 0x7, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (fail_nth: 13)

1.740475763s ago: executing program 3 (id=234):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$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")
open(&(0x7f0000000580)='./file1\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250f000000040001801861703000"/42], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000060000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000480), &(0x7f00000004c0)='%ps    \x00'}, 0x20)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0)

1.702903203s ago: executing program 4 (id=236):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = timerfd_create(0x0, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000)

1.622903373s ago: executing program 3 (id=239):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000200001811000046c8d4b816c282a2dca588c5a3417461c22c0e2554a35117fd84cadbbd50d73a94fc964be826ab3b3fec6bfc4e49e68997f34c7d9e3f270f61ab020eddc15ee2468fc3d4401197badf46b8fd8454831fb38166b54f1af65e4a81060691d0870491f78ed265df63a373ffd8beabc6ec5f2b242d9ec0c47075d3e30e679b07847a069e08bd169e65aca78eacec048a2395b167e697a996b9cbe218032f8e40703fd2747762930928876a3be186fcbb684a19cb095fd3c72dd9ba1c28757e0cd77b", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0)
mbind(&(0x7f00002c8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000014c0), 0x1)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3c, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x1180, 0x27e, 0xffffffff, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, 0x0, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)

1.364324872s ago: executing program 1 (id=245):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000001140)=""/4096, 0x2007ffb}], 0x1, 0x10000, 0x0, 0x1d)

1.267990502s ago: executing program 1 (id=248):
socketpair(0xf, 0x6, 0x101, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='rxrpc_rx_rwind_change\x00', r0, 0x0, 0x2000000000000000}, 0x18)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000000001000000000000002786d4b1d310f4b6fd4a6db503b96dec9b27331fd399931ff373adcf9f9dbb7f7140cdcdfb9b329e0982e2097e538e1143cf9b9062d002", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r3, 0x1, 0x3c, 0x0, &(0x7f0000000540))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000008}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

1.147706862s ago: executing program 1 (id=250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$eJzs3U9oHOfZAPBn9Emxo4AJ+T7yGeM4Yzsf2HyusrtKlIoc0s1qJE0i7YrdVbEpJQmxXIyVP8SENj408SVpS0vpqcc015BLb4UeCj20PRWaQy89FAI5lRRaKC2loDKzu9ZK1j/Hkp2kv5+I3tl3nnnnmdnJPDtr7WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJE0ZiqVanIkIpbPp9trzLRbizvMH4z3iw3NDuuNSIr/4vDhONrrOvo/67MfLH6diuO9R8fjcNEcjmv3PXj/k/89OjJYfoeEPq2Te4xLIt4qkrrywurqymsHkMgd9L2f3/Ii/1grfs9lzbzTyhfrc1mad1rp9NRU5dH52U46my9knQudbraYNtpZvdtqp2caZ9Pq9PRkmk1caC0352bqC9mg84kv1SqVqfSZiaWs3u60mo8+M9FpzOcLC3lzroypVb4ZRcwTxYH4bN5Nu1l9MU0vXV5dmdwt1SKouqHn0IYD5/gj93/8+kd/vbxSHJDbDZL0D8xatVqrVacen378iUpltFapbeyobBI3ImIkoog4kIOWz5H9O3nDbRrp1f+IhcijGctxPtJIY6T8vf4zFodjJtrRisXi8e/HNs2/qf7/36N//u1O6x2u/4Mqf3R99rEo6/+J3qMT29T/4qS8OY+D+2l+0MtmuO9qvBHX4kq8EKuxGivx2h3M51P9jOzveHORRTPy6EQr8liMetmT9nvSmI6pmIpKPBfzMRudSGM28liILDpxITrRjaw8ohrRjizq0Y1WtCONM9GIs5FGNaZjOiYjjSwm4kK0YjmaMRczUS9HuRSXy/0+uSmvB7/9fPLW7z5+t5i+EVTdYUOS4sVcEfSXHYL6xfzh2FP9v7d/LG+MUP+/aA73n+e9xu/XqRtu21pZ/0fvdhoAAADAAUrKd9+TiBiLh8qp2Xwh+9rdTgsAAADYR+XfNR8vmrFi6qFIiuv/yhaRH97x3AAAAID9kZSfsUsiYjwe7k0NPi611ZsAAAAAwOdQ+e//J4pmPOLNssP1PwAAAHzBfGe7e+x/dE//Hr2dpUPJf/Wjl84/krxUL6bqL/X7+s1Xb4zYnT2WHOkPUjZTo9fuSyJitJEdTwZ3v/zXoV77STnCsfUbEG53r/+k3R5Lrm+fQOycQPkovh8nezEnL/bai4M5vbWMz+YL2USjtfBkNem/OdJ9/eXL34oo1v7d5uKRJC5dXl2ZePGV1YtlLteLUa6/1L89fHILuaz190A8tPUWj5UfxOivd7y33srw9o/0Fh/ZeZ3J8DrfjlO9mFPjvXZ84/YfLtZZnXiyGvX6kZFudr77+trQ1vezqN7mlr8dp3sxp8+c7jVbZFHbkMXLN2dRG85ib/tiz1m8e/LN83/7VSvJJnfLYvI2swC4Wy6Vd/1Zr0L3llXon2s9Rf3fVHcHdzW/pbPcpfVXGYPlh2rdaOxPdX87zvRizvReT4we26KuVLY4o796+dVf98/oj73/4598/cRvfrp9dVtLds7i/TjbC+w38cAvb8qiGKJa7tkfbKqq7xVLvLdtVe0s1JIYi5HenMHslW+svFyrTU5VHqtUHq/FWPlSod+oPQBsYdfv2NnDt/A8tvVVdQwq3gM3/qRgIl6MV2I1Lsa58tMGEfHw1qOOD/0ZwrldrlrHh77h5dwu15brsbXNsYdOJ7FN7OTQHvvfH5XN3w/uOQGAg3Zqlzq8l/p/bpfr7o21/Gzvi3MHV8exfS3fypcPeocAwH+ArP1JMt59J2m386XnqtPT1Xp3PkvbrcazaTufmcvSvNnN2o35enMuS5farW6rMXjjeCbrpJ3lpaVWu5vOttrpUquTny+/+T3tf/V7J1usN7t5o7O0kNU7WdpoNbv1RjedyTuNdGn56YW8M5+1y4U7S1kjn80b9W7eaqad1nK7kU2kaSfLhgLzmazZzWfzYrKZLrXzxXr7ekQsLC9m6UzWabTzpW6rN+BgXXlzttVeLIeduHnz/3Sn9zcAfBZcfePalRdWV1de2zixlmzu2XriD3uIuRqxdrc3EwAYMlylAQAAAAAAAAAAAACAz6abP65X9O76kb7hibG4heBNE4fi0yz1xZ34/w96T8t+DHg749y74Tm9p3+w3P39c8sTzz/11JXtYp5+8+j8H7OI3cfZ+v+Uq/fddPTGO0ci7vnZD3s9X7lTW/ph9LYiRm9p8bVkh5i7dkoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG39OwAA///BfU8u")
open(&(0x7f0000000580)='./file1\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250f000000040001801861703000"/42], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000060000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0)

947.125242ms ago: executing program 0 (id=252):
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[], 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c)

945.196772ms ago: executing program 1 (id=253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_get$pid(0x0, r2)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x80, 0x1, 0x800, 0x4e6c, {{0xf, 0x4, 0x0, 0x28, 0x3c, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, {[@generic={0x89, 0x11, "c369bcf881aed64893f5c2550713a1"}, @ra={0x94, 0x4}, @generic={0x44, 0x10, "d9bd435702f0a4fd38fb960be079"}, @end, @generic={0x86, 0x2}]}}}}})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xfe, r7}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0xffffffff, 0x871, 0x1}}]}, 0x3c}}, 0x0)

921.677932ms ago: executing program 2 (id=254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x800}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
listen(r0, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0)

908.878851ms ago: executing program 0 (id=255):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a170060"])

868.211111ms ago: executing program 0 (id=256):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000500)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6aab, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1d5}, &(0x7f0000000000)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)

867.724071ms ago: executing program 2 (id=257):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000480)=[{{0x0, 0x1, 0x1}, {0x4}}, {{0x3, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff0000000017"], 0x5c}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r8 = shmat(r7, &(0x7f0000000000/0x2000)=nil, 0x5000)
fsopen(&(0x7f0000000440)='smb3\x00', 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'caif0\x00', {}, 0x562})
shmctl$SHM_LOCK(r7, 0xb)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
shmctl$SHM_UNLOCK(r7, 0xc)
shmdt(r8)

820.617601ms ago: executing program 2 (id=258):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000001140)=""/4096, 0x2007ffb}], 0x1, 0x10000, 0x0, 0x1d)

767.676832ms ago: executing program 4 (id=259):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRES64, @ANYRESHEX], 0xfe, 0x667, &(0x7f0000000d40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

715.369561ms ago: executing program 3 (id=260):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7, 0xfffffff8}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x6, 0x30}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x11, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = request_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280)='\x80', 0xfffffffffffffffc)
keyctl$search(0xa, 0x0, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000200)='sched_switch\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$inet(0x2, 0x4000000000000001, 0x100)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000640)={0xffffffffffffffff, 0x401, {0x0, 0x0, 0x0, 0x7, 0xf2, 0x0, 0xa, 0x4, 0x34, "1da96a765f5f84495818a0277dfbd02de15069b1f8f3aab52dcc767c331bd280b69eb2d44637768e3bef0c9743866f16cad19505541caf4629a07cf64411f3f4", "f329e1bcd440d5e0b1a1017c1fc7abf4fb69eeb285abe6a09b84aa93de0dec2baa76267fdeb4f371f289df8119f4eb9c643686203dad8427d9503b213c7f71c8", "b21a9676097f5608c386f4634029cad108f5c38b3fc19b4b4b756b90c9e2f1f3", [0x8, 0xd0]}})
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
add_key$user(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="d841d3f724f7e47d03fbfad41b938cf1a94bbdbf44f7bf9c9cd7e9f4c1a1c519c73c0808b3e4c622390c6a4bbca13b86b88347fce62e6f4c00a18de47eafb5eb68ea4564c2407e7e4c4f90517f385c541b", 0x51, 0xfffffffffffffffb)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb01a0c200000077d86556"], 0x0)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1, 0x22, @vifc_lcl_ifindex, @remote}, 0x10)
r4 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000007c0)='xprtrdma_nomrs_err\x00', r6}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})

692.976321ms ago: executing program 2 (id=261):
memfd_secret(0x80000)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext, 0x0, 0x19fbcc0a, 0x0, 0x0, 0x10000000000, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)

668.222661ms ago: executing program 4 (id=262):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = io_uring_setup(0x3698, &(0x7f0000000340)={0x0, 0x6faf, 0x1, 0x0, 0x2e3})
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000200), 0xc)
read(r4, &(0x7f0000000540)=""/67, 0x43)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x8, 0x0, 0x0, 0x0)

640.924291ms ago: executing program 0 (id=263):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfdf, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x800, 0x740, 0x22, "0000000000000000010000000000f7ffffff00"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r6, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)

602.634971ms ago: executing program 2 (id=264):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000200001811000046c8d4b816c282a2dca588c5a3417461c22c0e2554a35117fd84cadbbd50d73a94fc964be826ab3b3fec6bfc4e49e68997f34c7d9e3f270f61ab020eddc15ee2468fc3d4401197badf46b8fd8454831fb38166b54f1af65e4a81060691d0870491f78ed265df63a373ffd8beabc6ec5f2b242d9ec0c47075d3e30e679b07847a069e08bd169e65aca78eacec048a2395b167e697a996b9cbe218032f8e40703fd2747762930928876a3be186fcbb684a19cb095fd3c72dd9ba1c28757e0cd77b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0)
mbind(&(0x7f00002c8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

602.058011ms ago: executing program 2 (id=265):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x20000000009, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0xca, 0x0, 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=")
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000018c0)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000004c0)='./bus/file0\x00', 0x408000, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, &(0x7f0000000400))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000845}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

546.226481ms ago: executing program 4 (id=266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014", 0x1d, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00cdb7d274a02346417a0be2e319c7e000cda798c6a7e92aae1d71ff4f6701eec69fe35bca5eb0efec69a096e77262e2750001747e47426dfe89bd6f1f5baf556eac6b4e20d9fdb8a918d070d6d2c9f998f1772c44281f45bfc61b6e448002f48046e45df9a98b017d4e1b465dae75b374"], 0x1, 0x35b, &(0x7f0000000000)="$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")
r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\t\t'}]}, 0xe)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r5, &(0x7f0000001600)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)

461.110401ms ago: executing program 4 (id=267):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x800}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
listen(r0, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0)

397.55732ms ago: executing program 4 (id=268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x1000000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
sendmmsg$inet(r6, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001a40)='!', 0x1}], 0x1}}], 0x1, 0x4008040)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000007e9deed70014000780080011400005000100123e3336050005000a00000005000400000000000900420073797a320000000010000300686173683a69afd552b40122064cc792d102857e76e3ba6c80f52decf431c50ef284d7e7f9929bb5dbd3d3d710f1907747d14f2b0b6f281db711b660253c44eb681c43fe852a4cc9b31de980407d1698ed89a63099474f741b26ea074fa05cd0d92d03f5e0011c7ddbad9f85fabe8c98e3ddaebe4cd872783db81ba5b3c1ecf2954ddc8e2ddc55a87fedac19d523b6d4c27fee26bb5c00"/230], 0x5c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
io_setup(0x9, &(0x7f0000000180))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0)

312.39924ms ago: executing program 0 (id=269):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0a0009000180c2000000000008000b"], 0x30}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x4000}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffd, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}}]}]}, @IFLA_MTU={0x8}]}, 0x58}}, 0x48000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan0\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=<r10=>0x0, &(0x7f00000006c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40c4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r14 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)

197.73199ms ago: executing program 0 (id=270):
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0)
r1 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x48581, 0x0)
r2 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x1c})
openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@grpid}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000ae0013020000000000"], &(0x7f0000000240)=""/220, 0x26, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x20)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendfile(r3, r3, 0x0, 0xc3)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket(0x1e, 0x2, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x6, 0x3, 0x7, 0x1, 0x8, 0xffdc, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), r5)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x60000001)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = socket$inet(0x2, 0x80002, 0x1)
getsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f00000001c0)={@private, @local, @local}, &(0x7f00000003c0)=0xc)
r10 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB='c *:*@'], 0xa)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

36.3257ms ago: executing program 1 (id=271):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = io_uring_setup(0x1de0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000580)="70c986421b0bf24c", 0x8, 0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

0s ago: executing program 1 (id=272):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
shutdown(0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")

kernel console output (not intermixed with test programs):

[   20.333132][   T29] audit: type=1400 audit(1736665723.195:81): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts.
[   27.509418][   T29] audit: type=1400 audit(1736665730.375:82): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.510682][ T3287] cgroup: Unknown subsys name 'net'
[   27.532193][   T29] audit: type=1400 audit(1736665730.375:83): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.559581][   T29] audit: type=1400 audit(1736665730.405:84): avc:  denied  { unmount } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.698891][ T3287] cgroup: Unknown subsys name 'cpuset'
[   27.705117][ T3287] cgroup: Unknown subsys name 'rlimit'
[   27.816592][   T29] audit: type=1400 audit(1736665730.675:85): avc:  denied  { setattr } for  pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.839952][   T29] audit: type=1400 audit(1736665730.675:86): avc:  denied  { create } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.860502][   T29] audit: type=1400 audit(1736665730.675:87): avc:  denied  { write } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.865568][ T3291] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.880947][   T29] audit: type=1400 audit(1736665730.675:88): avc:  denied  { read } for  pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.904953][ T3287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.909759][   T29] audit: type=1400 audit(1736665730.675:89): avc:  denied  { mounton } for  pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.943460][   T29] audit: type=1400 audit(1736665730.675:90): avc:  denied  { mount } for  pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   27.966812][   T29] audit: type=1400 audit(1736665730.765:91): avc:  denied  { relabelto } for  pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.091152][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   29.146272][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   29.204521][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.211610][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.218753][ T3304] bridge_slave_0: entered allmulticast mode
[   29.225122][ T3304] bridge_slave_0: entered promiscuous mode
[   29.233053][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.240134][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.247317][ T3304] bridge_slave_1: entered allmulticast mode
[   29.253854][ T3304] bridge_slave_1: entered promiscuous mode
[   29.268643][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   29.285803][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   29.327073][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.337242][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.353341][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.360491][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.367603][ T3303] bridge_slave_0: entered allmulticast mode
[   29.374129][ T3303] bridge_slave_0: entered promiscuous mode
[   29.382756][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.389829][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.397298][ T3303] bridge_slave_1: entered allmulticast mode
[   29.403894][ T3303] bridge_slave_1: entered promiscuous mode
[   29.421817][ T3297] chnl_net:caif_netlink_parms(): no params data found
[   29.465179][ T3304] team0: Port device team_slave_0 added
[   29.488490][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.510365][ T3304] team0: Port device team_slave_1 added
[   29.525255][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.532433][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.539766][ T3301] bridge_slave_0: entered allmulticast mode
[   29.546205][ T3301] bridge_slave_0: entered promiscuous mode
[   29.553266][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.562377][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.569521][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.576647][ T3301] bridge_slave_1: entered allmulticast mode
[   29.583342][ T3301] bridge_slave_1: entered promiscuous mode
[   29.618566][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.625521][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.651898][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.667377][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.674499][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.681715][ T3302] bridge_slave_0: entered allmulticast mode
[   29.688341][ T3302] bridge_slave_0: entered promiscuous mode
[   29.695591][ T3303] team0: Port device team_slave_0 added
[   29.702050][ T3303] team0: Port device team_slave_1 added
[   29.713573][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.722897][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.729879][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.756452][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.772177][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.779382][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.786527][ T3297] bridge_slave_0: entered allmulticast mode
[   29.793060][ T3297] bridge_slave_0: entered promiscuous mode
[   29.799795][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.806865][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.814009][ T3302] bridge_slave_1: entered allmulticast mode
[   29.820548][ T3302] bridge_slave_1: entered promiscuous mode
[   29.832613][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.844041][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.851166][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.858401][ T3297] bridge_slave_1: entered allmulticast mode
[   29.864705][ T3297] bridge_slave_1: entered promiscuous mode
[   29.890359][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.897359][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.923818][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.939991][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.954670][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.974090][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.981074][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.007061][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.021237][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.031531][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.041154][ T3301] team0: Port device team_slave_0 added
[   30.069887][ T3302] team0: Port device team_slave_0 added
[   30.076050][ T3301] team0: Port device team_slave_1 added
[   30.088298][ T3304] hsr_slave_0: entered promiscuous mode
[   30.094279][ T3304] hsr_slave_1: entered promiscuous mode
[   30.107425][ T3297] team0: Port device team_slave_0 added
[   30.120828][ T3302] team0: Port device team_slave_1 added
[   30.140711][ T3297] team0: Port device team_slave_1 added
[   30.148485][ T3303] hsr_slave_0: entered promiscuous mode
[   30.154488][ T3303] hsr_slave_1: entered promiscuous mode
[   30.160552][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.168148][ T3303] Cannot create hsr debugfs directory
[   30.183094][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.190115][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.216132][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.227254][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.234260][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.260350][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.290757][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.297733][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.323830][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.337250][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.344261][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.370218][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.385598][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.392665][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.418668][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.448650][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.455625][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.481632][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.503268][ T3301] hsr_slave_0: entered promiscuous mode
[   30.509518][ T3301] hsr_slave_1: entered promiscuous mode
[   30.515458][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.523052][ T3301] Cannot create hsr debugfs directory
[   30.595518][ T3302] hsr_slave_0: entered promiscuous mode
[   30.602132][ T3302] hsr_slave_1: entered promiscuous mode
[   30.608464][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.616030][ T3302] Cannot create hsr debugfs directory
[   30.623555][ T3297] hsr_slave_0: entered promiscuous mode
[   30.629685][ T3297] hsr_slave_1: entered promiscuous mode
[   30.635573][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.643252][ T3297] Cannot create hsr debugfs directory
[   30.671479][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.690554][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.711247][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.733331][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.787229][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.797153][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.823785][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.845989][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.874695][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.886372][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.895102][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.911897][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.965745][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.975708][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.985118][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.995211][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.010104][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.018885][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.030308][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   31.050316][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.057463][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.075359][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.084189][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.093527][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.109249][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.119098][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.126245][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.138904][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.150956][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   31.164791][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.171888][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.187392][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   31.197343][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.204419][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.225857][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.236290][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.249886][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.257001][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.282299][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.289399][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.332299][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.363565][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.385810][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.402400][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   31.422158][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.436082][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   31.450776][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.458126][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.470260][  T332] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.477490][  T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.489311][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.496445][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.509816][  T332] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.516879][  T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.526649][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.537122][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.564674][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.575149][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.692067][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.744396][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.761370][ T3303] veth0_vlan: entered promiscuous mode
[   31.786754][ T3301] veth0_vlan: entered promiscuous mode
[   31.797214][ T3303] veth1_vlan: entered promiscuous mode
[   31.814382][ T3301] veth1_vlan: entered promiscuous mode
[   31.833039][ T3301] veth0_macvtap: entered promiscuous mode
[   31.848716][ T3301] veth1_macvtap: entered promiscuous mode
[   31.865961][ T3304] veth0_vlan: entered promiscuous mode
[   31.881655][ T3303] veth0_macvtap: entered promiscuous mode
[   31.891157][ T3304] veth1_vlan: entered promiscuous mode
[   31.903981][ T3303] veth1_macvtap: entered promiscuous mode
[   31.912057][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.923466][ T3302] veth0_vlan: entered promiscuous mode
[   31.937253][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.950598][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.959401][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.968331][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.977054][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.991453][ T3302] veth1_vlan: entered promiscuous mode
[   32.004985][ T3304] veth0_macvtap: entered promiscuous mode
[   32.013848][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.024315][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.034839][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.042823][ T3304] veth1_macvtap: entered promiscuous mode
[   32.059633][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.070229][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.080622][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.089278][ T3297] veth0_vlan: entered promiscuous mode
[   32.100400][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.109220][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.117930][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.126640][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.138924][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.149475][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.159331][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.169800][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.180445][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.190668][ T3297] veth1_vlan: entered promiscuous mode
[   32.208230][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.218840][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.228728][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.239175][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.250052][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.260520][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.264227][ T3297] veth0_macvtap: entered promiscuous mode
[   32.281691][ T3302] veth0_macvtap: entered promiscuous mode
[   32.289008][ T3302] veth1_macvtap: entered promiscuous mode
[   32.302134][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.310972][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.319858][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.328664][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.342685][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.353331][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.363218][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.373674][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.383563][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.394172][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.407162][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.415011][ T3297] veth1_macvtap: entered promiscuous mode
[   32.428381][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.438926][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.448944][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.459412][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.469285][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.479821][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.490280][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.506054][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.514923][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.523686][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.524320][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   32.524335][   T29] audit: type=1400 audit(1736665735.365:125): avc:  denied  { prog_load } for  pid=3440 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.532409][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.538513][   T29] audit: type=1400 audit(1736665735.365:126): avc:  denied  { bpf } for  pid=3440 comm="syz.1.6" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   32.604525][   T29] audit: type=1400 audit(1736665735.465:127): avc:  denied  { prog_run } for  pid=3440 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   32.648888][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.659481][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.669359][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.679974][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.689883][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.692785][ T3441] syz.1.6 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   32.700507][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.720497][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.730979][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.741549][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.751031][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.761575][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.771490][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.782057][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.791988][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.802576][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.812551][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.823112][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.833770][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.842162][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.850928][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.859678][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.868445][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.921825][   T29] audit: type=1400 audit(1736665735.785:128): avc:  denied  { open } for  pid=3446 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   32.940817][   T29] audit: type=1400 audit(1736665735.785:129): avc:  denied  { kernel } for  pid=3446 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   32.950986][ T3374] kernel write not supported for file task/3/attr/current (pid: 3374 comm: kworker/0:4)
[   33.015721][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.023345][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.030947][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.041839][   T29] audit: type=1400 audit(1736665735.835:130): avc:  denied  { create } for  pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   33.061005][   T29] audit: type=1400 audit(1736665735.835:131): avc:  denied  { execute } for  pid=3446 comm="syz.3.4" path="/0/bus" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   33.083063][   T29] audit: type=1400 audit(1736665735.845:132): avc:  denied  { create } for  pid=3446 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.083625][ T3462] FAULT_INJECTION: forcing a failure.
[   33.083625][ T3462] name failslab, interval 1, probability 0, space 0, times 1
[   33.102324][   T29] audit: type=1400 audit(1736665735.845:133): avc:  denied  { ioctl } for  pid=3453 comm="syz.0.1" path="socket:[4480]" dev="sockfs" ino=4480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   33.115049][ T3462] CPU: 0 UID: 0 PID: 3462 Comm: syz.3.9 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0
[   33.115075][ T3462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   33.115089][ T3462] Call Trace:
[   33.139160][   T29] audit: type=1400 audit(1736665735.845:134): avc:  denied  { bind } for  pid=3453 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   33.149575][ T3462]  <TASK>
[   33.149584][ T3462]  dump_stack_lvl+0xf2/0x150
[   33.161680][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.162927][ T3462]  dump_stack+0x15/0x1a
[   33.181873][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.184700][ T3462]  should_fail_ex+0x223/0x230
[   33.189353][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.196706][ T3462]  should_failslab+0x8f/0xb0
[   33.200885][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.208191][ T3462]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   33.212919][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.220249][ T3462]  ? sidtab_sid2str_get+0xb8/0x140
[   33.220299][ T3462]  kmemdup_noprof+0x2a/0x60
[   33.224893][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.232226][ T3462]  sidtab_sid2str_get+0xb8/0x140
[   33.238599][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.245913][ T3462]  security_sid_to_context_core+0x1eb/0x2f0
[   33.251054][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.255493][ T3462]  security_sid_to_context+0x27/0x30
[   33.262891][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.267773][ T3462]  selinux_lsmprop_to_secctx+0x2c/0x40
[   33.275180][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.280999][ T3462]  security_lsmprop_to_secctx+0x4a/0x90
[   33.281044][ T3462]  audit_log_task_context+0x93/0x1c0
[   33.288411][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.293647][ T3462]  audit_log_task+0xf9/0x1c0
[   33.301029][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.301059][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.306494][ T3462]  audit_seccomp+0x68/0x130
[   33.313922][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.319368][ T3462]  __seccomp_filter+0x6fa/0x1180
[   33.324662][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.332002][ T3462]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   33.336609][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.343948][ T3462]  ? vfs_write+0x596/0x920
[   33.343987][ T3462]  __secure_computing+0x9f/0x1c0
[   33.365064][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.368162][ T3462]  syscall_trace_enter+0xd1/0x1f0
[   33.375636][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.381212][ T3462]  ? fpregs_assert_state_consistent+0x83/0xa0
[   33.388630][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.388651][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.388677][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.393055][ T3462]  do_syscall_64+0xaa/0x1c0
[   33.398042][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.405319][ T3462]  ? clear_bhb_loop+0x55/0xb0
[   33.410366][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.417676][ T3462]  ? clear_bhb_loop+0x55/0xb0
[   33.423774][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.431084][ T3462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.438498][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.445828][ T3462] RIP: 0033:0x7fc4f2475d29
[   33.450354][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.457667][ T3462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.462366][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.469756][ T3462] RSP: 002b:00007fc4f0ae1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7
[   33.474462][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.481793][ T3462] RAX: ffffffffffffffda RBX: 00007fc4f2665fa0 RCX: 00007fc4f2475d29
[   33.481811][ T3462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   33.481827][ T3462] RBP: 00007fc4f0ae1090 R08: 0000000000000000 R09: 0000000000000000
[   33.487707][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.495043][ T3462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.495060][ T3462] R13: 0000000000000000 R14: 00007fc4f2665fa0 R15: 00007ffc00242dc8
[   33.495082][ T3462]  </TASK>
[   33.566258][ T3466] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   33.574178][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.589472][ T3461] loop0: detected capacity change from 0 to 512
[   33.589606][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.609101][ T3461] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   33.614023][ T3375] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0
[   33.658421][ T3375] hid-generic 0000:0003:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   33.712510][ T3473] random: crng reseeded on system resumption
[   33.800758][ T3475] loop2: detected capacity change from 0 to 164
[   33.807267][ T3475] =======================================================
[   33.807267][ T3475] WARNING: The mand mount option has been deprecated and
[   33.807267][ T3475]          and is ignored by this kernel. Remove the mand
[   33.807267][ T3475]          option from the mount to silence this warning.
[   33.807267][ T3475] =======================================================
[   33.844526][ T3475] Unable to read rock-ridge attributes
[   33.874722][ T3475] Unable to read rock-ridge attributes
[   33.906077][ T3473] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   33.915343][ T3475] iso9660: Corrupted directory entry in block 4 of inode 1792
[   33.966428][ T3483] netlink: 'syz.0.15': attribute type 13 has an invalid length.
[   34.022355][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.029611][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.072095][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.085304][ T3490] loop0: detected capacity change from 0 to 732
[   34.122442][ T3490] process 'syz.0.15' launched '/dev/fd/10' with NULL argv: empty string added
[   34.134874][ T3490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.192513][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.224883][ T3493] serio: Serial port ptm0
[   34.260513][ T3483] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.269655][ T3483] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.278607][ T3483] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.282761][ T3494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17'.
[   34.287566][ T3483] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.422694][ T3500] loop3: detected capacity change from 0 to 512
[   34.442363][ T3500] EXT4-fs: Ignoring removed i_version option
[   34.448462][ T3500] EXT4-fs: Ignoring removed mblk_io_submit option
[   34.462564][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.475666][ T3500] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   34.494490][ T3500] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   34.526318][ T3500] EXT4-fs (loop3): 1 truncate cleaned up
[   34.538136][ T3500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.543856][ T3508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.565666][ T3500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.674518][ T3517] rdma_op ffff888117427180 conn xmit_rdma 0000000000000000
[   34.684966][    C0] hrtimer: interrupt took 28006 ns
[   34.691432][ T3519] loop2: detected capacity change from 0 to 128
[   34.709977][ T3519] team0: Device gtp0 is of different type
[   34.770220][ T3523] bond1: entered promiscuous mode
[   34.775382][ T3523] bond1: entered allmulticast mode
[   34.813478][ T3523] 8021q: adding VLAN 0 to HW filter on device bond1
[   34.833894][ T3523] bond1 (unregistering): Released all slaves
[   48.631578][ T3531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'.
[   48.644621][ T3535] loop4: detected capacity change from 0 to 1024
[   48.647201][   T29] kauditd_printk_skb: 83 callbacks suppressed
[   48.647218][   T29] audit: type=1326 audit(1736665751.495:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.680261][   T29] audit: type=1326 audit(1736665751.495:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.703533][   T29] audit: type=1326 audit(1736665751.495:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.726719][   T29] audit: type=1326 audit(1736665751.495:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.749961][   T29] audit: type=1326 audit(1736665751.495:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.752221][ T3544] loop1: detected capacity change from 0 to 128
[   48.773198][   T29] audit: type=1326 audit(1736665751.495:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.773239][   T29] audit: type=1326 audit(1736665751.495:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.816352][ T3544] syz.1.30: attempt to access beyond end of device
[   48.816352][ T3544] loop1: rw=2049, sector=153, nr_sectors = 888 limit=128
[   48.825915][   T29] audit: type=1326 audit(1736665751.495:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.856578][ T3547] loop0: detected capacity change from 0 to 1024
[   48.862554][   T29] audit: type=1326 audit(1736665751.495:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.888500][ T3547] EXT4-fs: Ignoring removed nobh option
[   48.891979][   T29] audit: type=1326 audit(1736665751.495:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f16561a5d29 code=0x7ffc0000
[   48.923334][ T3547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.934167][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.003785][ T3528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   49.054435][ T3552] EXT4-fs (loop4): shut down requested (0)
[   49.079215][ T3549] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   49.112808][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.142216][ T3543] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   49.143352][ T3554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.33'.
[   49.211133][ T3557] loop1: detected capacity change from 0 to 1024
[   49.222485][ T3557] EXT4-fs: Ignoring removed oldalloc option
[   49.234508][ T3557] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   49.337147][ T3531] syz.2.31 (3531) used greatest stack depth: 10736 bytes left
[   49.349517][ T3543] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   49.391363][ T3563] syz.2.35[3563] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.391493][ T3563] syz.2.35[3563] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.430882][ T3563] syz.2.35[3563] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.443525][ T3567] netlink: 72 bytes leftover after parsing attributes in process `syz.3.37'.
[   49.489293][ T3563] loop2: detected capacity change from 0 to 128
[   49.508157][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.518918][ T3563] vfat: Unknown parameter ''
[   49.588284][ T3574] syz.0.38[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.588411][ T3574] syz.0.38[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.692871][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   49.716604][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[   49.716604][   T11] 
[   49.726355][   T11] EXT4-fs (loop4): Total free blocks count 0
[   49.732386][   T11] EXT4-fs (loop4): Free/Dirty block details
[   49.738329][   T11] EXT4-fs (loop4): free_blocks=68451041280
[   49.744152][   T11] EXT4-fs (loop4): dirty_blocks=15152
[   49.749588][   T11] EXT4-fs (loop4): Block reservation details
[   49.755583][   T11] EXT4-fs (loop4): i_reserved_data_blocks=947
[   49.777686][ T3578] syz.2.40[3578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.778139][ T3578] syz.2.40[3578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.792345][ T3565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'.
[   49.828087][ T3578] netlink: zone id is out of range
[   49.833255][ T3578] netlink: zone id is out of range
[   49.859210][ T3578] netlink: set zone limit has 4 unknown bytes
[   49.875742][ T3590] syz.3.41[3590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.875991][ T3590] syz.3.41[3590] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   49.901848][ T3592] loop0: detected capacity change from 0 to 512
[   49.953101][ T3592] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   50.101870][ T3596] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   50.125762][ T3596] mmap: syz.0.44 (3596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   50.232563][ T3605] loop3: detected capacity change from 0 to 512
[   50.241197][ T3605] EXT4-fs: Ignoring removed i_version option
[   50.247307][ T3605] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.272233][ T3605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   50.275050][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.289662][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.297133][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.305662][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.313152][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.320588][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.328016][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.335423][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.342859][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.350412][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.357930][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.359100][ T3605] EXT4-fs (loop3): 1 truncate cleaned up
[   50.365334][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.372922][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.378422][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.378450][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.403908][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'.
[   50.405360][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.421573][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.429006][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.436451][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.443880][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.444014][ T3619] loop2: detected capacity change from 0 to 2048
[   50.464090][ T3605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.467801][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.480696][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.488149][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.491413][ T3621] loop4: detected capacity change from 0 to 1024
[   50.495661][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.495692][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.495713][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.495733][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.516890][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.517029][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.517053][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.517073][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.517107][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.531248][ T3619] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   50.531889][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.543861][ T3619] EXT4-fs (loop2): This should not happen!! Data will be lost
[   50.543861][ T3619] 
[   50.551273][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.558676][ T3619] EXT4-fs (loop2): Total free blocks count 0
[   50.566043][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.573416][ T3619] EXT4-fs (loop2): Free/Dirty block details
[   50.573431][ T3619] EXT4-fs (loop2): free_blocks=0
[   50.573443][ T3619] EXT4-fs (loop2): dirty_blocks=0
[   50.573457][ T3619] EXT4-fs (loop2): Block reservation details
[   50.585801][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.593172][ T3619] EXT4-fs (loop2): i_reserved_data_blocks=0
[   50.602851][   T35] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[   50.647357][ T3621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.679877][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.692732][   T35] hid-generic 0000:0003:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   50.776405][ T3633] EXT4-fs (loop4): shut down requested (0)
[   50.836864][ T3629] geneve0: entered allmulticast mode
[   50.870104][ T3638] netlink: 52 bytes leftover after parsing attributes in process `syz.4.53'.
[   50.914126][ T3627] 9pnet_fd: Insufficient options for proto=fd
[   50.996521][ T3646] loop2: detected capacity change from 0 to 512
[   51.028501][ T3650] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   51.057202][ T3646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[   51.110404][ T3656] netlink: 'syz.1.63': attribute type 58 has an invalid length.
[   51.118124][ T3656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'.
[   51.137155][ T3646] System zones: 1-12
[   51.148646][ T3646] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.60: Directory hole found for htree index block 0
[   51.169689][ T3627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.170449][ T3646] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[   51.202689][   T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   51.227009][ T3646] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.60: Directory hole found for htree index block 0
[   51.235544][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   51.251963][   T50] EXT4-fs (loop4): This should not happen!! Data will be lost
[   51.251963][   T50] 
[   51.256330][ T3646] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   51.261677][   T50] EXT4-fs (loop4): Total free blocks count 0
[   51.275928][   T50] EXT4-fs (loop4): Free/Dirty block details
[   51.277762][ T3646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.281886][   T50] EXT4-fs (loop4): free_blocks=68451041280
[   51.300182][   T50] EXT4-fs (loop4): dirty_blocks=16384
[   51.305584][   T50] EXT4-fs (loop4): Block reservation details
[   51.311641][   T50] EXT4-fs (loop4): i_reserved_data_blocks=1024
[   51.355203][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.431900][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'.
[   51.454389][ T3673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.561925][ T3673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.581188][ T3687] loop1: detected capacity change from 0 to 512
[   51.588935][ T3688] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   51.596429][ T3687] EXT4-fs: Ignoring removed i_version option
[   51.602799][ T3687] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.615211][ T3687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   51.641687][ T3673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.641880][ T3687] EXT4-fs (loop1): 1 truncate cleaned up
[   51.670062][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.672733][ T3695] FAULT_INJECTION: forcing a failure.
[   51.672733][ T3695] name failslab, interval 1, probability 0, space 0, times 0
[   51.695036][ T3695] CPU: 0 UID: 0 PID: 3695 Comm: syz.4.76 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0
[   51.705565][ T3695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   51.715737][ T3695] Call Trace:
[   51.719034][ T3695]  <TASK>
[   51.722080][ T3695]  dump_stack_lvl+0xf2/0x150
[   51.726783][ T3695]  dump_stack+0x15/0x1a
[   51.731031][ T3695]  should_fail_ex+0x223/0x230
[   51.735729][ T3695]  should_failslab+0x8f/0xb0
[   51.740501][ T3695]  kmem_cache_alloc_node_noprof+0x59/0x320
[   51.746454][ T3695]  ? __alloc_skb+0x10b/0x310
[   51.749200][ T3687] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.751055][ T3695]  __alloc_skb+0x10b/0x310
[   51.764506][ T3695]  ? audit_log_start+0x34c/0x6b0
[   51.769474][ T3695]  audit_log_start+0x368/0x6b0
[   51.774330][ T3695]  audit_seccomp+0x4b/0x130
[   51.778847][ T3695]  __seccomp_filter+0x6fa/0x1180
[   51.783840][ T3695]  ? do_renameat2+0xa00/0xa70
[   51.788541][ T3695]  ? bpf_trace_run3+0x12b/0x1d0
[   51.793413][ T3695]  ? getname_flags+0x2be/0x3b0
[   51.798248][ T3695]  ? strncpy_from_user+0x17d/0x210
[   51.803403][ T3695]  __secure_computing+0x9f/0x1c0
[   51.808362][ T3695]  syscall_trace_enter+0xd1/0x1f0
[   51.813451][ T3695]  ? fpregs_assert_state_consistent+0x83/0xa0
[   51.819556][ T3695]  do_syscall_64+0xaa/0x1c0
[   51.824066][ T3695]  ? clear_bhb_loop+0x55/0xb0
[   51.828759][ T3695]  ? clear_bhb_loop+0x55/0xb0
[   51.833618][ T3695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.839536][ T3695] RIP: 0033:0x7f16561a473c
[   51.843954][ T3695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   51.863602][ T3695] RSP: 002b:00007f1654811030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   51.872020][ T3695] RAX: ffffffffffffffda RBX: 00007f1656395fa0 RCX: 00007f16561a473c
[   51.879992][ T3695] RDX: 000000000000000f RSI: 00007f16548110a0 RDI: 0000000000000006
[   51.887967][ T3695] RBP: 00007f1654811090 R08: 0000000000000000 R09: 0000000000000000
[   51.896017][ T3695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   51.904069][ T3695] R13: 0000000000000000 R14: 00007f1656395fa0 R15: 00007fffc569e338
[   51.912050][ T3695]  </TASK>
[   51.981059][ T3673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.011083][ T3713] netlink: 'syz.1.83': attribute type 13 has an invalid length.
[   52.022620][ T3715] netlink: 'syz.4.84': attribute type 13 has an invalid length.
[   52.026839][ T3711] loop0: detected capacity change from 0 to 1156
[   52.037047][ T3711] iso9660: Unknown parameter ''
[   52.066147][ T3716] loop1: detected capacity change from 0 to 732
[   52.097085][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.104467][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.145837][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.156383][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.191608][ T3715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.200701][ T3715] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.209846][ T3715] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.219036][ T3715] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.283785][ T3722] loop2: detected capacity change from 0 to 164
[   52.296948][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.304291][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.313588][ T3722] Unable to read rock-ridge attributes
[   52.330873][ T3722] Unable to read rock-ridge attributes
[   52.339404][ T3722] iso9660: Corrupted directory entry in block 4 of inode 1792
[   52.384058][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.393992][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.420779][ T3713] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.429833][ T3713] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.438969][ T3713] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.447886][ T3713] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.462002][ T3725] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   52.470280][ T3727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   52.498529][ T3673] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.530552][ T3673] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.531762][ T3733] loop4: detected capacity change from 0 to 512
[   52.543093][ T3673] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.555919][ T3733] EXT4-fs: Ignoring removed i_version option
[   52.562049][ T3733] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.565955][ T3673] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.584202][ T3733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.589153][ T3673] syz.3.68 (3673) used greatest stack depth: 10648 bytes left
[   52.609508][ T3733] EXT4-fs (loop4): 1 truncate cleaned up
[   52.618178][ T3733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.637364][ T3733] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.645993][ T3739] loop2: detected capacity change from 0 to 512
[   52.663570][ T3739] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.690603][ T3739] EXT4-fs (loop2): 1 truncate cleaned up
[   52.693973][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   52.696595][ T3739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.737485][ T3756] loop4: detected capacity change from 0 to 164
[   52.746031][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.784614][ T3756] Unable to read rock-ridge attributes
[   52.792991][ T3756] Unable to read rock-ridge attributes
[   52.860646][ T3767] loop1: detected capacity change from 0 to 512
[   52.882751][ T3768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.904415][ T3768] loop0: detected capacity change from 0 to 128
[   52.921029][ T3767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.100: bg 0: block 248: padding at end of block bitmap is not set
[   52.959020][ T3767] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.100: Failed to acquire dquot type 1
[   52.971524][ T3767] EXT4-fs (loop1): 1 truncate cleaned up
[   52.977643][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.991601][ T3767] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.079744][ T3767] syz.1.100 (3767) used greatest stack depth: 9384 bytes left
[   53.090668][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.186969][ T3784] loop3: detected capacity change from 0 to 512
[   53.931504][ T3784] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   53.967572][ T3784] EXT4-fs (loop3): 1 truncate cleaned up
[   53.973781][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.993476][ T3791] loop4: detected capacity change from 0 to 512
[   54.000067][ T3791] EXT4-fs: Ignoring removed i_version option
[   54.006117][ T3791] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.007726][ T3793] loop2: detected capacity change from 0 to 164
[   54.041539][ T3791] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   54.080708][ T3791] EXT4-fs (loop4): 1 truncate cleaned up
[   54.091205][ T3791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.098810][   T29] kauditd_printk_skb: 400 callbacks suppressed
[   54.098828][   T29] audit: type=1326 audit(1736665756.935:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.134826][   T29] audit: type=1326 audit(1736665756.935:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.158108][   T29] audit: type=1326 audit(1736665756.935:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.162910][ T3791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.181565][   T29] audit: type=1326 audit(1736665756.935:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.181603][   T29] audit: type=1326 audit(1736665756.935:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.181627][   T29] audit: type=1326 audit(1736665756.935:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.240070][ T3793] Unable to read rock-ridge attributes
[   54.260353][   T29] audit: type=1326 audit(1736665756.935:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.289119][   T29] audit: type=1326 audit(1736665756.935:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.312414][   T29] audit: type=1326 audit(1736665756.935:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.335675][   T29] audit: type=1326 audit(1736665756.935:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9932585d29 code=0x7ffc0000
[   54.394011][ T3793] Unable to read rock-ridge attributes
[   54.405141][ T3809] __nla_validate_parse: 1 callbacks suppressed
[   54.405159][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   54.423070][ T3793] iso9660: Corrupted directory entry in block 4 of inode 1792
[   54.470338][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.477970][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.485411][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.494958][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.502418][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.509894][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.517309][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.524754][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.525080][ T3816] netlink: 'syz.2.115': attribute type 13 has an invalid length.
[   54.532215][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.532296][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.554891][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.562397][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.569819][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.577302][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.581957][ T3820] loop2: detected capacity change from 0 to 732
[   54.584755][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.598445][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.606018][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.613508][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.621032][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.668793][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.676252][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.683848][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.691320][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.698752][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.706162][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.713628][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.721111][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.728582][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.736001][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.743552][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.750963][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.758472][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.765965][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.773428][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.780952][ T3375] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   54.833046][ T3375] hid-generic 0000:0003:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   54.930165][ T3832] loop0: detected capacity change from 0 to 512
[   54.966753][ T3832] EXT4-fs: Ignoring removed oldalloc option
[   54.975081][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.982428][ T3816] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.000403][ T3832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   55.036521][ T3832] EXT4-fs (loop0): 1 truncate cleaned up
[   55.044282][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.139249][ T3840] loop1: detected capacity change from 0 to 764
[   55.160420][ T3840] Symlink component flag not implemented
[   55.167009][ T3840] Symlink component flag not implemented (101)
[   55.177020][ T3840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'.
[   55.266023][ T3845] loop1: detected capacity change from 0 to 512
[   55.306107][ T3845] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.120: bg 0: block 248: padding at end of block bitmap is not set
[   55.322109][ T3845] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.120: Failed to acquire dquot type 1
[   55.334871][ T3845] EXT4-fs (loop1): 1 truncate cleaned up
[   55.342320][ T3845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.361527][ T3845] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.385605][ T3845] syz.1.120 (3845) used greatest stack depth: 9288 bytes left
[   55.394797][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.430783][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.506676][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.536641][ T3816] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.545774][ T3816] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.554760][ T3816] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.563737][ T3816] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.749854][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   55.759641][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.823706][ T3865] loop1: detected capacity change from 0 to 164
[   55.833641][ T3862] loop2: detected capacity change from 0 to 1024
[   55.844893][ T3865] Unable to read rock-ridge attributes
[   55.852315][ T3865] Unable to read rock-ridge attributes
[   55.869886][ T3865] iso9660: Corrupted directory entry in block 4 of inode 1792
[   55.873293][ T3862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.899615][ T3870] netlink: 133536 bytes leftover after parsing attributes in process `syz.0.126'.
[   55.912600][ T3872] loop4: detected capacity change from 0 to 164
[   55.943038][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.950633][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.958128][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.966116][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.973568][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.981022][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.988527][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   55.990430][ T3877] EXT4-fs (loop2): shut down requested (0)
[   55.995917][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.009224][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.009391][ T3872] Unable to read rock-ridge attributes
[   56.016604][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.016630][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.016651][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.044416][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.051928][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.059383][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.066921][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.074411][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.081941][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.089398][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.092951][ T3872] Unable to read rock-ridge attributes
[   56.099313][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.109766][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.112311][ T3880] netlink: 52 bytes leftover after parsing attributes in process `syz.2.123'.
[   56.117154][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.133640][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.141097][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.148527][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.155941][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.161934][ T3882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'.
[   56.163386][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.179674][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.187121][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.187212][ T3882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'.
[   56.194609][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.210926][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.218409][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.225819][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.233355][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.240795][   T24] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   56.248979][   T24] hid-generic 0000:0003:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   56.264453][ T3886] loop4: detected capacity change from 0 to 164
[   56.314463][ T3886] Unable to read rock-ridge attributes
[   56.321366][ T3886] Unable to read rock-ridge attributes
[   56.343146][ T3890] loop0: detected capacity change from 0 to 512
[   56.359361][ T3890] EXT4-fs: Ignoring removed i_version option
[   56.365441][ T3890] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.384482][ T3890] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   56.398404][ T3890] EXT4-fs (loop0): 1 truncate cleaned up
[   56.398757][ T3892] syz.4.134[3892] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.404697][ T3890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.408516][ T3892] syz.4.134[3892] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   56.418011][ T3890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.542057][   T56] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   56.565417][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.578606][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.587000][   T56] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   56.599512][   T56] EXT4-fs (loop2): This should not happen!! Data will be lost
[   56.599512][   T56] 
[   56.609216][   T56] EXT4-fs (loop2): Total free blocks count 0
[   56.615242][   T56] EXT4-fs (loop2): Free/Dirty block details
[   56.621211][   T56] EXT4-fs (loop2): free_blocks=68451041280
[   56.627049][   T56] EXT4-fs (loop2): dirty_blocks=16384
[   56.632552][   T56] EXT4-fs (loop2): Block reservation details
[   56.638761][   T56] EXT4-fs (loop2): i_reserved_data_blocks=1024
[   56.684061][ T3904] loop0: detected capacity change from 0 to 164
[   56.691334][ T3904] Unable to read rock-ridge attributes
[   56.699006][ T3904] Unable to read rock-ridge attributes
[   56.704840][ T3904] iso9660: Corrupted directory entry in block 4 of inode 1792
[   56.751940][ T3909] loop0: detected capacity change from 0 to 512
[   56.780747][ T3909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.793642][ T3909] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.881662][ T3913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.142'.
[   56.890720][ T3913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   56.901470][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.922393][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.929902][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.937454][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.945616][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.953076][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.960522][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.968157][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.971467][ T3917] loop2: detected capacity change from 0 to 164
[   56.975642][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.989329][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.990601][ T3917] Unable to read rock-ridge attributes
[   56.996743][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   56.996773][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.006320][ T3917] Unable to read rock-ridge attributes
[   57.009641][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.009672][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.037485][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.045015][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.052432][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.059851][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.067288][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.074692][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.082218][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.089661][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.097133][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.104584][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.112075][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.119652][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.127057][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.134681][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.136406][ T3919] netlink: 72 bytes leftover after parsing attributes in process `syz.2.145'.
[   57.142086][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.142121][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.165847][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.173283][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.180744][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.188162][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.195604][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.203020][ T3373] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[   57.210941][ T3373] hid-generic 0000:0003:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   57.317108][ T3926] loop0: detected capacity change from 0 to 128
[   57.328399][ T3926] team0: Device gtp0 is of different type
[   57.383378][ T3927] bond1: entered promiscuous mode
[   57.388481][ T3927] bond1: entered allmulticast mode
[   57.393765][ T3927] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.402462][ T3927] bond1 (unregistering): Released all slaves
[   57.466950][ T3930] syz.4.148[3930] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.467288][ T3930] syz.4.148[3930] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.486804][ T3930] loop4: detected capacity change from 0 to 2048
[   57.553513][ T3930] Alternate GPT is invalid, using primary GPT.
[   57.559954][ T3930]  loop4: p2 p3 p7
[   57.618590][ T3934] loop4: detected capacity change from 0 to 128
[   57.625451][ T3934] /dev/loop4: Can't open blockdev
[   57.654239][ T3936] loop4: detected capacity change from 0 to 512
[   57.669612][ T3936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.682237][ T3936] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.122051][ T3941] loop0: detected capacity change from 0 to 2048
[   58.139563][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.190377][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.329061][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.389125][ T3952] loop3: detected capacity change from 0 to 512
[   58.433600][ T3952] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.156: bg 0: block 248: padding at end of block bitmap is not set
[   58.448508][ T3952] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.156: Failed to acquire dquot type 1
[   58.462186][ T3952] EXT4-fs (loop3): 1 truncate cleaned up
[   58.468668][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.481578][ T3952] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.503791][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.514275][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.552202][ T3961] loop4: detected capacity change from 0 to 164
[   58.561525][ T3961] Unable to read rock-ridge attributes
[   58.570300][ T3961] Unable to read rock-ridge attributes
[   58.576551][ T3961] iso9660: Corrupted directory entry in block 4 of inode 1792
[   58.609107][ T3965] loop3: detected capacity change from 0 to 1024
[   58.631361][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.649011][ T3971] loop4: detected capacity change from 0 to 164
[   58.656322][ T3971] Unable to read rock-ridge attributes
[   58.665685][ T3971] Unable to read rock-ridge attributes
[   58.671878][ T3971] iso9660: Corrupted directory entry in block 4 of inode 1792
[   58.700934][ T3972] EXT4-fs (loop3): shut down requested (0)
[   58.703200][ T3974] netlink: 'syz.4.164': attribute type 10 has an invalid length.
[   58.715982][ T3974] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.744738][ T3976] loop4: detected capacity change from 0 to 512
[   58.751887][ T3976] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   58.765496][ T3976] EXT4-fs (loop4): 1 truncate cleaned up
[   58.773218][ T3976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.854309][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.912384][   T56] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   58.927384][   T56] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   58.939984][   T56] EXT4-fs (loop3): This should not happen!! Data will be lost
[   58.939984][   T56] 
[   58.949697][   T56] EXT4-fs (loop3): Total free blocks count 0
[   58.955690][   T56] EXT4-fs (loop3): Free/Dirty block details
[   58.961633][   T56] EXT4-fs (loop3): free_blocks=68451041280
[   58.967497][   T56] EXT4-fs (loop3): dirty_blocks=16384
[   58.972920][   T56] EXT4-fs (loop3): Block reservation details
[   58.978936][   T56] EXT4-fs (loop3): i_reserved_data_blocks=1024
[   59.041451][ T3986] rdma_op ffff888117427980 conn xmit_rdma 0000000000000000
[   59.073265][ T3988] loop0: detected capacity change from 0 to 512
[   59.111801][ T3988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.131647][ T3988] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.180404][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.236431][ T3994] IPVS: Error connecting to the multicast addr
[   59.270475][ T3999] loop3: detected capacity change from 0 to 512
[   59.290229][ T4002] loop4: detected capacity change from 0 to 256
[   59.297161][ T3999] EXT4-fs: Ignoring removed i_version option
[   59.303230][ T3999] EXT4-fs: Ignoring removed mblk_io_submit option
[   59.311536][ T3999] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   59.314308][   T29] kauditd_printk_skb: 205 callbacks suppressed
[   59.314336][   T29] audit: type=1326 audit(1736665762.185:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03680b5d29 code=0x7ffc0000
[   59.323778][ T4005] netlink: 'syz.2.175': attribute type 10 has an invalid length.
[   59.331443][ T4003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.374896][   T29] audit: type=1326 audit(1736665762.195:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03680b5d29 code=0x7ffc0000
[   59.375032][ T3999] EXT4-fs (loop3): 1 truncate cleaned up
[   59.398116][   T29] audit: type=1326 audit(1736665762.195:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03680b5d29 code=0x7ffc0000
[   59.398151][   T29] audit: type=1326 audit(1736665762.195:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03680b5d29 code=0x7ffc0000
[   59.450247][   T29] audit: type=1326 audit(1736665762.195:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03680b5d29 code=0x7ffc0000
[   59.473625][   T29] audit: type=1326 audit(1736665762.195:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03680b7c47 code=0x7ffc0000
[   59.481886][ T3999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.496839][   T29] audit: type=1326 audit(1736665762.195:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f03680b7bbc code=0x7ffc0000
[   59.511734][ T3999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.532128][   T29] audit: type=1326 audit(1736665762.195:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f03680b7af4 code=0x7ffc0000
[   59.564470][   T29] audit: type=1326 audit(1736665762.195:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f03680b7af4 code=0x7ffc0000
[   59.587610][   T29] audit: type=1326 audit(1736665762.195:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f03680b498a code=0x7ffc0000
[   59.590314][ T4005] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   59.651897][ T4003] loop0: detected capacity change from 0 to 128
[   59.740268][ T4003] syz.0.174: attempt to access beyond end of device
[   59.740268][ T4003] loop0: rw=2049, sector=153, nr_sectors = 888 limit=128
[   59.774576][ T4023] syz.1.182[4023] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.774711][ T4023] syz.1.182[4023] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.922639][ T4037] loop0: detected capacity change from 0 to 164
[   59.966702][ T4037] Unable to read rock-ridge attributes
[   59.976526][ T4037] Unable to read rock-ridge attributes
[   59.992575][ T4037] iso9660: Corrupted directory entry in block 4 of inode 1792
[   60.046256][ T4045] __nla_validate_parse: 6 callbacks suppressed
[   60.046272][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   60.070800][ T4044] loop1: detected capacity change from 0 to 512
[   60.110167][ T4044] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.189: bg 0: block 248: padding at end of block bitmap is not set
[   60.114653][ T4047] loop0: detected capacity change from 0 to 512
[   60.131024][ T4047] EXT4-fs: Ignoring removed i_version option
[   60.137023][ T4047] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.153381][ T4047] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   60.163398][ T4044] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.189: Failed to acquire dquot type 1
[   60.166049][ T4052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.192'.
[   60.186294][ T4052] netlink: 'syz.2.192': attribute type 10 has an invalid length.
[   60.200052][ T4047] EXT4-fs (loop0): 1 truncate cleaned up
[   60.205808][ T4044] EXT4-fs (loop1): 1 truncate cleaned up
[   60.216347][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.225851][ T4044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.236533][ T4055] loop2: detected capacity change from 0 to 512
[   60.243816][ T4044] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.248818][ T4055] EXT4-fs: Ignoring removed i_version option
[   60.263894][ T4055] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.273680][ T4047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.286363][ T4055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   60.317104][ T4055] EXT4-fs (loop2): 1 truncate cleaned up
[   60.323289][ T4055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.347439][ T4055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.366241][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.455305][ T4064] loop1: detected capacity change from 0 to 164
[   60.464093][ T4066] loop0: detected capacity change from 0 to 512
[   60.465133][ T4064] Unable to read rock-ridge attributes
[   60.483664][ T4066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   60.485699][ T4068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.495858][ T4066] EXT4-fs (loop0): 1 truncate cleaned up
[   60.520499][ T4066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.539451][ T4064] Unable to read rock-ridge attributes
[   60.563006][ T4074] loop2: detected capacity change from 0 to 164
[   60.568996][ T4068] loop4: detected capacity change from 0 to 128
[   60.575730][ T4074] Unable to read rock-ridge attributes
[   60.593690][ T4074] Unable to read rock-ridge attributes
[   60.613788][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.617422][ T4076] loop1: detected capacity change from 0 to 512
[   60.640321][ T4068] syz.4.200: attempt to access beyond end of device
[   60.640321][ T4068] loop4: rw=2049, sector=153, nr_sectors = 888 limit=128
[   60.668044][ T4076] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.202: casefold flag without casefold feature
[   60.688246][ T4076] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.202: couldn't read orphan inode 15 (err -117)
[   60.692180][ T4079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.203'.
[   60.712376][ T4076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.726013][ T4081] netlink: 'syz.2.204': attribute type 13 has an invalid length.
[   60.727237][ T4076] EXT4-fs (loop1): shut down requested (0)
[   60.738606][ T4081] loop2: detected capacity change from 0 to 732
[   60.835607][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.878944][ T4092] loop1: detected capacity change from 0 to 128
[   60.905611][ T4092] FAT-fs (loop1): Directory bread(block 162) failed
[   60.917969][ T4092] FAT-fs (loop1): Directory bread(block 163) failed
[   60.944226][ T4092] FAT-fs (loop1): Directory bread(block 164) failed
[   60.952401][ T4092] FAT-fs (loop1): Directory bread(block 165) failed
[   60.959272][ T4092] FAT-fs (loop1): Directory bread(block 166) failed
[   60.961314][ T4102] loop2: detected capacity change from 0 to 164
[   60.966051][ T4092] FAT-fs (loop1): Directory bread(block 167) failed
[   60.980244][ T4092] FAT-fs (loop1): Directory bread(block 168) failed
[   60.994038][ T4102] Unable to read rock-ridge attributes
[   60.997944][ T4092] FAT-fs (loop1): Directory bread(block 169) failed
[   61.011115][ T4092] netlink: 104 bytes leftover after parsing attributes in process `syz.1.209'.
[   61.011577][ T4102] Unable to read rock-ridge attributes
[   61.027472][ T4102] iso9660: Corrupted directory entry in block 4 of inode 1792
[   61.036458][ T4092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'.
[   61.045377][ T4092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'.
[   61.054354][ T4092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'.
[   61.063306][ T4092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'.
[   61.127422][ T4109] loop3: detected capacity change from 0 to 512
[   61.155571][ T4112] netlink: 133536 bytes leftover after parsing attributes in process `syz.0.218'.
[   61.203724][ T4115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.219'.
[   61.207776][ T4117] loop0: detected capacity change from 0 to 1024
[   61.239710][ T4117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.299641][ T4122] loop3: detected capacity change from 0 to 512
[   61.304354][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.321332][ T4122] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.221: bg 0: block 248: padding at end of block bitmap is not set
[   61.337181][ T4122] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.221: Failed to acquire dquot type 1
[   61.349342][ T4122] EXT4-fs (loop3): 1 truncate cleaned up
[   61.355519][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.368122][ T4122] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.390092][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.402839][ T4127] loop0: detected capacity change from 0 to 512
[   61.414052][ T4127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   61.429886][ T4127] EXT4-fs (loop0): 1 orphan inode deleted
[   61.435754][ T4127] EXT4-fs (loop0): 1 truncate cleaned up
[   61.442180][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.560987][ T4134] capability: warning: `syz.3.225' uses deprecated v2 capabilities in a way that may be insecure
[   61.572227][ T4134] program syz.3.225 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   61.637249][ T4137] loop3: detected capacity change from 0 to 512
[   61.645173][ T4137] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.226: casefold flag without casefold feature
[   61.658084][ T4137] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.226: couldn't read orphan inode 15 (err -117)
[   61.670457][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.784792][ T4144] FAULT_INJECTION: forcing a failure.
[   61.784792][ T4144] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   61.798097][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.3.228 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0
[   61.804793][ T4146] netlink: 'syz.4.229': attribute type 10 has an invalid length.
[   61.808697][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   61.808714][ T4144] Call Trace:
[   61.808721][ T4144]  <TASK>
[   61.808730][ T4144]  dump_stack_lvl+0xf2/0x150
[   61.837531][ T4144]  dump_stack+0x15/0x1a
[   61.841720][ T4144]  should_fail_ex+0x223/0x230
[   61.846407][ T4144]  should_fail_alloc_page+0xfd/0x110
[   61.851758][ T4144]  __alloc_pages_noprof+0x109/0x340
[   61.856967][ T4144]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   61.862398][ T4144]  vma_alloc_folio_noprof+0x1a0/0x2f0
[   61.867789][ T4144]  handle_mm_fault+0xdd7/0x2ac0
[   61.872713][ T4144]  exc_page_fault+0x296/0x650
[   61.877528][ T4144]  asm_exc_page_fault+0x26/0x30
[   61.882378][ T4144] RIP: 0010:rep_movs_alternative+0x4a/0x70
[   61.888283][ T4144] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[   61.907905][ T4144] RSP: 0018:ffffc90010fa3b60 EFLAGS: 00050206
[   61.914053][ T4144] RAX: ffff8881086fbbf8 RBX: 0000000000001000 RCX: 0000000000000e80
[   61.922055][ T4144] RDX: 0000000000000000 RSI: ffff888008b80180 RDI: 0000000020001000
[   61.930062][ T4144] RBP: 0000000020000e80 R08: 0000000080000000 R09: 0000000000000000
[   61.938073][ T4144] R10: 0001888008b80000 R11: 0001888008b80fff R12: 0000000000001000
[   61.946071][ T4144] R13: ffffc90010fa3cd8 R14: ffffc90010fa3cf0 R15: ffff888008b80000
[   61.954171][ T4144]  _copy_to_iter+0x2cb/0xd00
[   61.958908][ T4144]  ? should_fail_ex+0xd7/0x230
[   61.963828][ T4144]  ? down_read+0x171/0x4b0
[   61.968263][ T4144]  copy_page_to_iter+0x171/0x2b0
[   61.973254][ T4144]  process_vm_rw+0x5b6/0x890
[   61.977905][ T4144]  ? __secure_computing+0x9f/0x1c0
[   61.983085][ T4144]  __x64_sys_process_vm_readv+0x7a/0x90
[   61.988687][ T4144]  x64_sys_call+0xb24/0x2dc0
[   61.993294][ T4144]  do_syscall_64+0xc9/0x1c0
[   61.997913][ T4144]  ? clear_bhb_loop+0x55/0xb0
[   62.002614][ T4144]  ? clear_bhb_loop+0x55/0xb0
[   62.007425][ T4144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.013407][ T4144] RIP: 0033:0x7fc4f2475d29
[   62.017826][ T4144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.037519][ T4144] RSP: 002b:00007fc4f0ae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[   62.045970][ T4144] RAX: ffffffffffffffda RBX: 00007fc4f2665fa0 RCX: 00007fc4f2475d29
[   62.053974][ T4144] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000060
[   62.061967][ T4144] RBP: 00007fc4f0ae1090 R08: 0000000000000286 R09: 0000000000000000
[   62.070003][ T4144] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000002
[   62.078083][ T4144] R13: 0000000000000000 R14: 00007fc4f2665fa0 R15: 00007ffc00242dc8
[   62.086171][ T4144]  </TASK>
[   62.230364][ T4157] loop3: detected capacity change from 0 to 764
[   62.249883][ T4157] Symlink component flag not implemented
[   62.255875][ T4157] Symlink component flag not implemented (101)
[   62.260096][ T4162] Zero length message leads to an empty skb
[   62.328442][ T4170] netlink: 'syz.4.236': attribute type 1 has an invalid length.
[   62.333344][ T4168] loop0: detected capacity change from 0 to 512
[   62.354136][ T4171] loop2: detected capacity change from 0 to 512
[   62.360201][ T4168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.240: bg 0: block 248: padding at end of block bitmap is not set
[   62.372625][ T4171] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.376201][ T4168] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.240: Failed to acquire dquot type 1
[   62.393900][ T4171] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   62.402293][ T4168] EXT4-fs (loop0): 1 truncate cleaned up
[   62.403369][ T4171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002]
[   62.408498][ T4168] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.415899][ T4171] System zones: 1-12
[   62.430917][ T4171] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.241: corrupted in-inode xattr: e_value size too large
[   62.448510][ T4171] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.241: couldn't read orphan inode 15 (err -117)
[   62.464522][ T4179] loop1: detected capacity change from 0 to 512
[   62.471081][ T4179] EXT4-fs: Ignoring removed i_version option
[   62.477090][ T4179] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.495456][ T4179] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.519114][ T4179] EXT4-fs (loop1): 1 truncate cleaned up
[   62.582805][ T4184] loop1: detected capacity change from 0 to 1024
[   62.611083][ T4189] loop2: detected capacity change from 0 to 164
[   62.623563][ T4189] Unable to read rock-ridge attributes
[   62.650859][ T4189] Unable to read rock-ridge attributes
[   62.665589][ T4189] iso9660: Corrupted directory entry in block 4 of inode 1792
[   62.682375][ T4194] rdma_op ffff888118a0c580 conn xmit_rdma 0000000000000000
[   62.726483][ T4196] rdma_op ffff8881171e7180 conn xmit_rdma 0000000000000000
[   62.867688][ T4198] loop1: detected capacity change from 0 to 764
[   62.882308][ T4198] Symlink component flag not implemented
[   62.892120][ T4198] Symlink component flag not implemented (101)
[   63.113469][ T4216] loop2: detected capacity change from 0 to 1024
[   63.128952][ T4214] syz.0.256[4214] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   63.129105][ T4214] syz.0.256[4214] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   63.158766][ T4219] loop4: detected capacity change from 0 to 164
[   63.194201][ T4219] Unable to read rock-ridge attributes
[   63.217382][ T4219] Unable to read rock-ridge attributes
[   63.228532][ T4219] iso9660: Corrupted directory entry in block 4 of inode 1792
[   63.381176][ T4239] loop2: detected capacity change from 0 to 128
[   63.393357][ T4241] netlink: 'syz.4.266': attribute type 13 has an invalid length.
[   63.414089][ T4239] team0: Device gtp0 is of different type
[   63.422711][ T4241] loop4: detected capacity change from 0 to 732
[   63.476823][ T4243] bond1: entered promiscuous mode
[   63.481974][ T4243] bond1: entered allmulticast mode
[   63.503016][ T4243] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.533656][ T4243] bond1 (unregistering): Released all slaves
[   63.562533][ T4248] loop4: detected capacity change from 0 to 1024
[   63.618379][ T4253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.640924][ T4253] loop0: detected capacity change from 0 to 128
[   63.660939][ T4255] EXT4-fs (loop4): shut down requested (0)
[   63.679610][ T4253] syz.0.269: attempt to access beyond end of device
[   63.679610][ T4253] loop0: rw=2049, sector=153, nr_sectors = 888 limit=128
[   63.721239][   T36] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   63.736568][   T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   63.749077][   T36] EXT4-fs (loop4): This should not happen!! Data will be lost
[   63.749077][   T36] 
[   63.758976][   T36] EXT4-fs (loop4): Total free blocks count 0
[   63.764973][   T36] EXT4-fs (loop4): Free/Dirty block details
[   63.771001][   T36] EXT4-fs (loop4): free_blocks=68451041280
[   63.775730][ T4258] loop0: detected capacity change from 0 to 512
[   63.776816][   T36] EXT4-fs (loop4): dirty_blocks=6528
[   63.787043][ T4258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   63.788423][   T36] EXT4-fs (loop4): Block reservation details
[   63.788438][   T36] EXT4-fs (loop4): i_reserved_data_blocks=408
[   63.817740][ T4258] EXT4-fs (loop0): 1 truncate cleaned up
[   63.820537][   T36] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   63.888798][ T4265] netlink: 'syz.1.271': attribute type 10 has an invalid length.
[   63.898087][ T4265] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   63.928286][ T4267] loop1: detected capacity change from 0 to 512
[   63.935195][ T2999] ==================================================================
[   63.943299][ T2999] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range
[   63.952167][ T2999] 
[   63.954502][ T2999] read-write to 0xffff8881004c11f0 of 8 bytes by task 4267 on cpu 0:
[   63.962587][ T2999]  __filemap_add_folio+0x430/0x6f0
[   63.967720][ T2999]  filemap_add_folio+0x9c/0x1b0
[   63.972675][ T2999]  __filemap_get_folio+0x2f1/0x5b0
[   63.977804][ T2999]  bdev_getblk+0x173/0x3b0
[   63.982246][ T2999]  __ext4_sb_bread_gfp+0x46/0x180
[   63.987287][ T2999]  ext4_fill_super+0x456/0x3a10
[   63.992157][ T2999]  get_tree_bdev_flags+0x29f/0x310
[   63.997282][ T2999]  get_tree_bdev+0x1f/0x30
[   64.001713][ T2999]  ext4_get_tree+0x1c/0x30
[   64.006146][ T2999]  vfs_get_tree+0x56/0x1e0
[   64.010577][ T2999]  do_new_mount+0x227/0x690
[   64.015096][ T2999]  path_mount+0x49b/0xb30
[   64.019491][ T2999]  __se_sys_mount+0x27c/0x2d0
[   64.024188][ T2999]  __x64_sys_mount+0x67/0x80
[   64.028796][ T2999]  x64_sys_call+0x2c84/0x2dc0
[   64.033507][ T2999]  do_syscall_64+0xc9/0x1c0
[   64.038024][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.043939][ T2999] 
[   64.046262][ T2999] read to 0xffff8881004c11f0 of 8 bytes by task 2999 on cpu 1:
[   64.053808][ T2999]  filemap_write_and_wait_range+0x59/0x360
[   64.059631][ T2999]  bdev_release+0xea/0x420
[   64.064063][ T2999]  blkdev_release+0x15/0x20
[   64.068583][ T2999]  __fput+0x17a/0x6d0
[   64.072578][ T2999]  __fput_sync+0x96/0xc0
[   64.076843][ T2999]  __se_sys_close+0x109/0x1b0
[   64.081537][ T2999]  __x64_sys_close+0x1f/0x30
[   64.086141][ T2999]  x64_sys_call+0x266c/0x2dc0
[   64.090829][ T2999]  do_syscall_64+0xc9/0x1c0
[   64.095340][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.101258][ T2999] 
[   64.103583][ T2999] value changed: 0x0000000000000000 -> 0x0000000000000001
[   64.110688][ T2999] 
[   64.113008][ T2999] Reported by Kernel Concurrency Sanitizer on:
[   64.119166][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0
[   64.129522][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   64.139587][ T2999] ==================================================================
[   64.160794][ T4267] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.272: bg 0: block 248: padding at end of block bitmap is not set
[   64.183163][ T4267] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.272: Failed to acquire dquot type 1
[   64.194988][ T4267] EXT4-fs (loop1): 1 truncate cleaned up
[   64.201487][ T4267] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)