last executing test programs:

5.31501595s ago: executing program 2 (id=373):
bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB], 0x50)
r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
recvmsg$unix(0xffffffffffffffff, 0x0, 0x101)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

4.817183583s ago: executing program 2 (id=377):
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
capset(&(0x7f0000000800)={0x10a64aa651c0c601}, &(0x7f0000000380)={0x0, 0x9, 0x2, 0x8000, 0xfffffff7, 0x8})
rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x1fc, 0x800000000004}}, 0x20, 0x1, 0x0)
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r1 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getpid()
setns(0xffffffffffffffff, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfe33)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10)

3.937596208s ago: executing program 2 (id=387):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1e, 0x20, 0x113})
set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4)
fsmount(0xffffffffffffffff, 0x0, 0x6)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2)

3.917998068s ago: executing program 2 (id=390):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4040, &(0x7f0000000440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5ee, &(0x7f0000001200)="$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")
open(0x0, 0x64842, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000240)={[{@fat=@flush}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@nodots}, {@fat=@quiet}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}, {@fat=@nfs}, {@dots}, {@fat=@debug}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@quiet}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)

3.748003939s ago: executing program 2 (id=393):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r3}, &(0x7f0000000cc0), &(0x7f0000000d00)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x3d)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000))

3.5369494s ago: executing program 2 (id=394):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="d39b504731ffb312c65d45471beb5fa4f8abebafb6183031ca455e501055ab1350c92958a9926836258362a500a3277b7b2b34d5ae8341928ffedb847dcb76bed20ff52d79172b9f92ce4becf457e1461919acbde8b66e59409dd4725622fe04e9d4d9228330be3c84024a665af4cdf64ad9575f516a9e9b460b8523fcee9d5127934ad8cc084764226c0f636b16f056ba8664b1269a92f86e163becd9fb1121bf147c18a50487662d8d4e52"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280))
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}}, 0x28}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

3.53675654s ago: executing program 32 (id=394):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="d39b504731ffb312c65d45471beb5fa4f8abebafb6183031ca455e501055ab1350c92958a9926836258362a500a3277b7b2b34d5ae8341928ffedb847dcb76bed20ff52d79172b9f92ce4becf457e1461919acbde8b66e59409dd4725622fe04e9d4d9228330be3c84024a665af4cdf64ad9575f516a9e9b460b8523fcee9d5127934ad8cc084764226c0f636b16f056ba8664b1269a92f86e163becd9fb1121bf147c18a50487662d8d4e52"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280))
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}}, 0x28}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

3.095540332s ago: executing program 1 (id=410):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)

2.623920266s ago: executing program 3 (id=408):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setregid(0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x120, 0x0)
fstat(0xffffffffffffffff, 0x0)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setpriority(0x2, 0x0, 0x800)

2.601060575s ago: executing program 3 (id=411):
rename(&(0x7f0000000000)='./file2\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840), 0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r4], 0x48}}, 0x0)

2.394713207s ago: executing program 3 (id=413):
ioperm(0x0, 0x9, 0x7)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x81ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x100000, 0x5dd8, 0x5, 0x3, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}])

2.388412806s ago: executing program 0 (id=422):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001"], 0x17d4}}, 0x4001044)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xee01, &(0x7f0000000300))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.951321829s ago: executing program 1 (id=416):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100490d5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = dup3(r1, r1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000280)=0x200, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13)
setpgid(0x0, 0x0)

1.950444519s ago: executing program 3 (id=417):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x100000000000000, 0x2, 0x4})

1.902822019s ago: executing program 1 (id=418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='$\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0)

1.902066719s ago: executing program 5 (id=419):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x8923, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures})

1.7952866s ago: executing program 5 (id=420):
r0 = gettid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
tkill(r0, 0x7)

1.676358051s ago: executing program 0 (id=423):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='signal_generate\x00', r0}, 0x10)
acct(0xfffffffffffffffe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r2, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40)

1.655178191s ago: executing program 5 (id=424):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "72cc28eac847409b", "23859c7b0f2c72583dbc82c89ce9b187", "0668a765", "f8a690ff5a21e01d"}, 0x28)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.654669911s ago: executing program 0 (id=425):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r1, 0x25, 0x2}, 0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0x14d, &(0x7f0000000b00)=ANY=[], 0x0)

1.64786935s ago: executing program 5 (id=426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

1.615310861s ago: executing program 5 (id=427):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004020100600000000000001090224000100"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
creat(&(0x7f0000000140)='./file1\x00', 0x0)

1.614716941s ago: executing program 0 (id=437):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x15)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1.560082402s ago: executing program 3 (id=428):
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)

1.559744041s ago: executing program 0 (id=429):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

1.055116684s ago: executing program 1 (id=435):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_pts(r0, 0x88380)
dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4a902499991171d4256f78cd297849b390f518"})

828.087025ms ago: executing program 5 (id=436):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x1, "00ffffffffff"}]}}}}}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
acct(0xfffffffffffffffe)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

639.354236ms ago: executing program 3 (id=438):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)

539.468277ms ago: executing program 4 (id=440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

529.908297ms ago: executing program 0 (id=441):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000740), 0x0, 0x0, 0x2)

509.944357ms ago: executing program 4 (id=442):
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x406, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

224.721258ms ago: executing program 4 (id=443):
symlink(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x20000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
request_key(0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000050000000200000004000000"], 0x48)
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000002)
statx(0xffffffffffffffff, 0x0, 0x2000, 0x10, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

198.640909ms ago: executing program 1 (id=444):
r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$cgroup_pid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

198.109629ms ago: executing program 4 (id=445):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)="457a1a359a4e97", 0x7}], 0x1)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)

166.083319ms ago: executing program 4 (id=446):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffff}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040))

159.949039ms ago: executing program 1 (id=447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)
umount2(0x0, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
open(0x0, 0x143c62, 0x0)
mount(&(0x7f00000001c0)=@sg0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 4 (id=448):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca10, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

[   18.257440][   T29] audit: type=1400 audit(1733142099.028:81): avc:  denied  { read } for  pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts.
[   21.515343][   T29] audit: type=1400 audit(1733142102.278:82): avc:  denied  { mounton } for  pid=3269 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.516399][ T3269] cgroup: Unknown subsys name 'net'
[   21.538048][   T29] audit: type=1400 audit(1733142102.278:83): avc:  denied  { mount } for  pid=3269 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.565405][   T29] audit: type=1400 audit(1733142102.318:84): avc:  denied  { unmount } for  pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.796847][ T3269] cgroup: Unknown subsys name 'cpuset'
[   21.802904][ T3269] cgroup: Unknown subsys name 'rlimit'
[   21.971535][   T29] audit: type=1400 audit(1733142102.738:85): avc:  denied  { setattr } for  pid=3269 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.994837][   T29] audit: type=1400 audit(1733142102.738:86): avc:  denied  { create } for  pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.015284][   T29] audit: type=1400 audit(1733142102.738:87): avc:  denied  { write } for  pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.035715][   T29] audit: type=1400 audit(1733142102.738:88): avc:  denied  { read } for  pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   22.043477][ T3288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.055965][   T29] audit: type=1400 audit(1733142102.748:89): avc:  denied  { mounton } for  pid=3269 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.089286][   T29] audit: type=1400 audit(1733142102.748:90): avc:  denied  { mount } for  pid=3269 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   22.112567][   T29] audit: type=1400 audit(1733142102.838:91): avc:  denied  { relabelto } for  pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.154435][ T3269] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.102356][ T3295] chnl_net:caif_netlink_parms(): no params data found
[   23.202624][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.209790][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.217009][ T3295] bridge_slave_0: entered allmulticast mode
[   23.223218][ T3295] bridge_slave_0: entered promiscuous mode
[   23.248045][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.255165][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.262468][ T3295] bridge_slave_1: entered allmulticast mode
[   23.268775][ T3295] bridge_slave_1: entered promiscuous mode
[   23.285350][ T3296] chnl_net:caif_netlink_parms(): no params data found
[   23.300715][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.310680][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.330236][ T3295] team0: Port device team_slave_0 added
[   23.359242][ T3300] chnl_net:caif_netlink_parms(): no params data found
[   23.368820][ T3295] team0: Port device team_slave_1 added
[   23.388866][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   23.411691][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.418749][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.444667][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.469518][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.476519][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.502492][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.551276][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.558375][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.565471][ T3296] bridge_slave_0: entered allmulticast mode
[   23.571863][ T3296] bridge_slave_0: entered promiscuous mode
[   23.580003][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.587177][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.594296][ T3296] bridge_slave_1: entered allmulticast mode
[   23.600711][ T3296] bridge_slave_1: entered promiscuous mode
[   23.611250][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.618371][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.625476][ T3300] bridge_slave_0: entered allmulticast mode
[   23.631848][ T3300] bridge_slave_0: entered promiscuous mode
[   23.652635][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.659707][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.666925][ T3300] bridge_slave_1: entered allmulticast mode
[   23.673115][ T3300] bridge_slave_1: entered promiscuous mode
[   23.694843][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.703958][ T3299] chnl_net:caif_netlink_parms(): no params data found
[   23.716910][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.723958][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.731121][ T3304] bridge_slave_0: entered allmulticast mode
[   23.737364][ T3304] bridge_slave_0: entered promiscuous mode
[   23.745618][ T3295] hsr_slave_0: entered promiscuous mode
[   23.751773][ T3295] hsr_slave_1: entered promiscuous mode
[   23.758376][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.771409][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.780938][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.788030][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.795143][ T3304] bridge_slave_1: entered allmulticast mode
[   23.801550][ T3304] bridge_slave_1: entered promiscuous mode
[   23.822482][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.844942][ T3296] team0: Port device team_slave_0 added
[   23.851701][ T3296] team0: Port device team_slave_1 added
[   23.866920][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   23.879144][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   23.893001][ T3300] team0: Port device team_slave_0 added
[   23.913367][ T3300] team0: Port device team_slave_1 added
[   23.936107][ T3304] team0: Port device team_slave_0 added
[   23.941918][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.948886][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.974817][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.987778][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.994879][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.020802][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.036912][ T3304] team0: Port device team_slave_1 added
[   24.048181][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.055239][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.081268][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.096486][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.103438][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.129344][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.144554][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.151665][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.158884][ T3299] bridge_slave_0: entered allmulticast mode
[   24.165335][ T3299] bridge_slave_0: entered promiscuous mode
[   24.176792][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.183754][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.209699][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.230921][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.238005][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.245095][ T3299] bridge_slave_1: entered allmulticast mode
[   24.251403][ T3299] bridge_slave_1: entered promiscuous mode
[   24.257776][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.264792][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.290751][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.330878][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.355585][ T3304] hsr_slave_0: entered promiscuous mode
[   24.361594][ T3304] hsr_slave_1: entered promiscuous mode
[   24.367658][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.375189][ T3304] Cannot create hsr debugfs directory
[   24.381377][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.391992][ T3296] hsr_slave_0: entered promiscuous mode
[   24.398098][ T3296] hsr_slave_1: entered promiscuous mode
[   24.404027][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.411592][ T3296] Cannot create hsr debugfs directory
[   24.433961][ T3300] hsr_slave_0: entered promiscuous mode
[   24.440051][ T3300] hsr_slave_1: entered promiscuous mode
[   24.445791][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.453410][ T3300] Cannot create hsr debugfs directory
[   24.465984][ T3299] team0: Port device team_slave_0 added
[   24.472693][ T3299] team0: Port device team_slave_1 added
[   24.515161][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   24.522151][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.548114][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   24.571753][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   24.578835][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   24.604752][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   24.658087][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   24.678049][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   24.690728][ T3299] hsr_slave_0: entered promiscuous mode
[   24.696772][ T3299] hsr_slave_1: entered promiscuous mode
[   24.702503][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   24.710078][ T3299] Cannot create hsr debugfs directory
[   24.723566][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   24.733842][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   24.782912][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   24.792223][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   24.802401][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   24.818215][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   24.845408][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   24.854368][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   24.866110][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   24.883147][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   24.910105][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   24.918707][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   24.927211][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   24.946572][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   24.962251][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   24.970871][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   24.980979][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   24.989680][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   25.004588][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.028055][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.035141][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.042442][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.049647][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.061248][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.068941][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.094250][ T3295] 8021q: adding VLAN 0 to HW filter on device team0
[   25.106007][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.113074][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.124538][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.135930][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.143014][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.166568][ T3296] 8021q: adding VLAN 0 to HW filter on device team0
[   25.178805][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.185847][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.204958][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.212071][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.223691][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.241248][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   25.263152][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.272880][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.280849][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.287925][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.297748][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.304921][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.332272][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   25.347884][ T3299] 8021q: adding VLAN 0 to HW filter on device team0
[   25.359847][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.370293][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.387758][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.394840][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.405502][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.412590][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.421220][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.428319][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.440974][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.448180][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.473028][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.494154][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.504579][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.541494][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.561237][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.633453][ T3295] veth0_vlan: entered promiscuous mode
[   25.658240][ T3295] veth1_vlan: entered promiscuous mode
[   25.671635][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.685473][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.696727][ T3295] veth0_macvtap: entered promiscuous mode
[   25.704776][ T3295] veth1_macvtap: entered promiscuous mode
[   25.731115][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.738498][ T3296] veth0_vlan: entered promiscuous mode
[   25.757377][ T3300] veth0_vlan: entered promiscuous mode
[   25.766985][ T3300] veth1_vlan: entered promiscuous mode
[   25.777647][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.785718][ T3295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.794457][ T3295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.803207][ T3295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.812013][ T3295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.825804][ T3296] veth1_vlan: entered promiscuous mode
[   25.859871][ T3300] veth0_macvtap: entered promiscuous mode
[   25.878058][ T3296] veth0_macvtap: entered promiscuous mode
[   25.890714][ T3300] veth1_macvtap: entered promiscuous mode
[   25.910718][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   25.921230][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.932428][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.940300][ T3296] veth1_macvtap: entered promiscuous mode
[   25.947838][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   25.950123][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   25.973118][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   25.982949][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   25.993416][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.004249][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.012027][ T3299] veth0_vlan: entered promiscuous mode
[   26.023867][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.034465][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.045570][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.053993][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.062817][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.071676][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.080382][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.093927][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.104419][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.114250][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.124675][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.135548][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.146013][ T3299] veth1_vlan: entered promiscuous mode
[   26.156699][ T3437] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   26.160180][ T3300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.171551][ T3300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.180342][ T3300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.189161][ T3300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.212579][ T3304] veth0_vlan: entered promiscuous mode
[   26.224646][ T3299] veth0_macvtap: entered promiscuous mode
[   26.231838][ T3299] veth1_macvtap: entered promiscuous mode
[   26.243928][ T3304] veth1_vlan: entered promiscuous mode
[   26.255939][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.266489][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.276322][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.286775][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.296644][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.307082][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.319698][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.335497][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.346018][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.355931][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.366438][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.376338][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.386856][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.397346][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.416756][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.425514][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.434236][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.442963][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.456701][ T3304] veth0_macvtap: entered promiscuous mode
[   26.469838][ T3445] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.484245][ T3304] veth1_macvtap: entered promiscuous mode
[   26.512973][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.523482][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.533326][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.544010][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.553892][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.564341][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.574192][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   26.583464][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   26.583479][   T29] audit: type=1400 audit(1733142107.348:142): avc:  denied  { mount } for  pid=3446 comm="syz.1.8" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   26.584607][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.585661][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.633609][   T29] audit: type=1400 audit(1733142107.408:143): avc:  denied  { setopt } for  pid=3446 comm="syz.1.8" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.653704][   T29] audit: type=1400 audit(1733142107.408:144): avc:  denied  { connect } for  pid=3446 comm="syz.1.8" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.681470][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.692115][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.693562][   T29] audit: type=1400 audit(1733142107.408:145): avc:  denied  { write } for  pid=3446 comm="syz.1.8" path="socket:[3653]" dev="sockfs" ino=3653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.702021][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.724825][   T29] audit: type=1400 audit(1733142107.408:146): avc:  denied  { watch } for  pid=3446 comm="syz.1.8" path="/1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   26.735185][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.756705][   T29] audit: type=1400 audit(1733142107.408:147): avc:  denied  { unmount } for  pid=3446 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   26.766546][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.785852][   T29] audit: type=1326 audit(1733142107.448:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3450 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aac90ff19 code=0x7ffc0000
[   26.785875][   T29] audit: type=1326 audit(1733142107.448:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3450 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aac90ff19 code=0x7ffc0000
[   26.796356][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.819319][   T29] audit: type=1326 audit(1733142107.448:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3450 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aac90ff19 code=0x7ffc0000
[   26.819344][   T29] audit: type=1326 audit(1733142107.448:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3450 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aac90ff19 code=0x7ffc0000
[   26.842372][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   26.908779][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   26.921905][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.930461][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.939325][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.948131][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.957187][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.038907][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   27.069959][ T3467] loop4: detected capacity change from 0 to 1024
[   27.106769][ T3465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   27.130409][ T3467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.155328][ T3465] syz.2.11 (3465) used greatest stack depth: 10312 bytes left
[   27.159658][ T3477] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   27.196521][ T3482] syz.0.19[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   27.196592][ T3482] syz.0.19[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   27.210585][ T3482] syz.0.19[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   27.222039][ T3467] =======================================================
[   27.222039][ T3467] WARNING: The mand mount option has been deprecated and
[   27.222039][ T3467]          and is ignored by this kernel. Remove the mand
[   27.222039][ T3467]          option from the mount to silence this warning.
[   27.222039][ T3467] =======================================================
[   27.269966][ T3467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   27.278551][ T3467] EXT4-fs (loop4): stripe (157) is not aligned with cluster size (16), stripe is disabled
[   27.298317][ T3467] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   27.338558][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.394834][ T3492] tipc: Started in network mode
[   27.399919][ T3492] tipc: Node identity babf47b6cf92, cluster identity 4711
[   27.407330][ T3492] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[   27.425809][ T3492] ������: renamed from syzkaller0
[   27.434176][ T3490] loop3: detected capacity change from 0 to 1024
[   27.443238][ T3492] tipc: Disabling bearer <eth:syzkaller0>
[   27.450750][ T3490] EXT4-fs: Ignoring removed nobh option
[   27.456460][ T3490] EXT4-fs: Ignoring removed orlov option
[   27.477555][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   27.490619][ T3489] syzkaller0: entered promiscuous mode
[   27.496244][ T3489] syzkaller0: entered allmulticast mode
[   27.545406][ T3501] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   27.552027][ T3501] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   27.559734][ T3501] vhci_hcd vhci_hcd.0: Device attached
[   27.569217][ T3501] vhci_hcd: invalid port number 157
[   27.574477][ T3501] vhci_hcd: default hub control req: c1ef v21ba i009d l29779
[   27.577989][ T3505] vhci_hcd: cannot find the pending unlink 212
[   27.589617][ T3505] vhci_hcd: connection closed
[   27.596021][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.610116][ T3317] vhci_hcd: stop threads
[   27.614393][ T3317] vhci_hcd: release socket
[   27.618827][ T3317] vhci_hcd: disconnect device
[   27.827298][ T3522] loop2: detected capacity change from 0 to 512
[   27.834128][ T3522] EXT4-fs: Ignoring removed orlov option
[   27.846467][ T3522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   27.855569][ T3522] EXT4-fs (loop2): orphan cleanup on readonly fs
[   27.862628][ T3522] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.33: bg 0: block 248: padding at end of block bitmap is not set
[   27.878482][ T3522] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.33: Failed to acquire dquot type 1
[   27.890858][ T3522] EXT4-fs (loop2): 1 truncate cleaned up
[   27.898828][ T3522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   27.931639][ T3522] EXT4-fs: Ignoring removed orlov option
[   27.937639][ T3522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   27.964321][ T3522] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   28.028668][ T3522] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.33: Abort forced by user
[   28.091536][ T3522] EXT4-fs (loop2): Remounting filesystem read-only
[   28.098228][ T3522] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   28.182306][ T3522] ext4 filesystem being remounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   28.220253][ T3522] syz.2.33 (3522) used greatest stack depth: 9520 bytes left
[   28.226383][ T3533] mmap: syz.1.35 (3533) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   28.242860][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.305892][ T3540] SELinux:  Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped).
[   28.318037][ T3540] netlink: 'syz.1.40': attribute type 4 has an invalid length.
[   28.426711][ T3547] loop1: detected capacity change from 0 to 1024
[   28.438110][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   28.453838][ T3547] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   28.471643][ T3547] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28
[   28.484120][ T3547] EXT4-fs (loop1): This should not happen!! Data will be lost
[   28.484120][ T3547] 
[   28.493817][ T3547] EXT4-fs (loop1): Total free blocks count 0
[   28.499808][ T3547] EXT4-fs (loop1): Free/Dirty block details
[   28.505696][ T3547] EXT4-fs (loop1): free_blocks=68451041280
[   28.511531][ T3547] EXT4-fs (loop1): dirty_blocks=16
[   28.516745][ T3547] EXT4-fs (loop1): Block reservation details
[   28.522731][ T3547] EXT4-fs (loop1): i_reserved_data_blocks=1
[   28.563294][ T3547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3547 comm=syz.1.42
[   28.603086][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.859472][ T3560] loop1: detected capacity change from 0 to 1764
[   29.066404][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   29.135533][ T3566] syz.0.47[3566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.135608][ T3566] syz.0.47[3566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.147158][ T3566] syz.0.47[3566] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   29.269615][ T3573] loop2: detected capacity change from 0 to 128
[   29.296554][ T3573] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   29.308963][ T3573] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   29.315683][ T3570] hub 6-0:1.0: USB hub found
[   29.346025][ T3570] hub 6-0:1.0: 8 ports detected
[   29.395922][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   29.427711][ T3581] loop2: detected capacity change from 0 to 128
[   29.462484][ T3580] netlink: 180 bytes leftover after parsing attributes in process `syz.4.53'.
[   29.471483][ T3580] netlink: 56 bytes leftover after parsing attributes in process `syz.4.53'.
[   29.502861][ T3581] syz.2.51: attempt to access beyond end of device
[   29.502861][ T3581] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[   29.507672][ T3586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'.
[   29.523937][ T3581] syz.2.51: attempt to access beyond end of device
[   29.523937][ T3581] loop2: rw=0, sector=177, nr_sectors = 1 limit=128
[   29.525803][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   29.545515][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_0
[   29.553176][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   29.556883][ T3578] syz.2.51: attempt to access beyond end of device
[   29.556883][ T3578] loop2: rw=524288, sector=145, nr_sectors = 32 limit=128
[   29.560860][ T3586] batman_adv: batadv0: Removing interface: batadv_slave_1
[   29.577256][ T3578] syz.2.51: attempt to access beyond end of device
[   29.577256][ T3578] loop2: rw=524288, sector=185, nr_sectors = 184 limit=128
[   29.598840][ T3578] syz.2.51: attempt to access beyond end of device
[   29.598840][ T3578] loop2: rw=0, sector=177, nr_sectors = 1 limit=128
[   29.611863][ T3578] Buffer I/O error on dev loop2, logical block 177, async page read
[   29.619911][ T3578] syz.2.51: attempt to access beyond end of device
[   29.619911][ T3578] loop2: rw=0, sector=178, nr_sectors = 1 limit=128
[   29.632892][ T3578] Buffer I/O error on dev loop2, logical block 178, async page read
[   29.640958][ T3578] syz.2.51: attempt to access beyond end of device
[   29.640958][ T3578] loop2: rw=0, sector=179, nr_sectors = 1 limit=128
[   29.654012][ T3578] Buffer I/O error on dev loop2, logical block 179, async page read
[   29.662206][ T3578] syz.2.51: attempt to access beyond end of device
[   29.662206][ T3578] loop2: rw=0, sector=180, nr_sectors = 1 limit=128
[   29.675297][ T3578] Buffer I/O error on dev loop2, logical block 180, async page read
[   29.683810][ T3578] syz.2.51: attempt to access beyond end of device
[   29.683810][ T3578] loop2: rw=0, sector=181, nr_sectors = 1 limit=128
[   29.696826][ T3578] Buffer I/O error on dev loop2, logical block 181, async page read
[   29.705492][ T3578] syz.2.51: attempt to access beyond end of device
[   29.705492][ T3578] loop2: rw=0, sector=182, nr_sectors = 1 limit=128
[   29.718494][ T3578] Buffer I/O error on dev loop2, logical block 182, async page read
[   29.726837][ T3578] Buffer I/O error on dev loop2, logical block 183, async page read
[   29.734944][ T3578] Buffer I/O error on dev loop2, logical block 184, async page read
[   29.743424][ T3578] Buffer I/O error on dev loop2, logical block 177, async page read
[   29.751548][ T3578] Buffer I/O error on dev loop2, logical block 178, async page read
[   29.760578][ T3592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.790374][ T3594] loop2: detected capacity change from 0 to 2048
[   29.807634][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.822766][ T3594] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   29.837613][ T3594] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[   29.849975][ T3594] EXT4-fs (loop2): This should not happen!! Data will be lost
[   29.849975][ T3594] 
[   29.859641][ T3594] EXT4-fs (loop2): Total free blocks count 0
[   29.865601][ T3594] EXT4-fs (loop2): Free/Dirty block details
[   29.871564][ T3594] EXT4-fs (loop2): free_blocks=2415919504
[   29.877294][ T3594] EXT4-fs (loop2): dirty_blocks=48
[   29.882437][ T3594] EXT4-fs (loop2): Block reservation details
[   29.888465][ T3594] EXT4-fs (loop2): i_reserved_data_blocks=3
[   29.901170][ T3592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.928866][ T2275] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   29.948731][ T3592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   29.964980][ T3599] team0: Port device team_slave_0 removed
[   30.038275][ T3592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.101758][ T3592] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.112462][ T3592] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.122662][ T3592] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.133736][ T3592] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.429521][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'.
[   30.564218][ T3627] loop4: detected capacity change from 0 to 2048
[   30.572106][ T3628] loop1: detected capacity change from 0 to 128
[   30.581484][ T3628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'.
[   30.590232][ T3628] netlink: 'syz.1.70': attribute type 5 has an invalid length.
[   30.601727][ T3628] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   30.610611][ T3628] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   30.619351][ T3628] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   30.628139][ T3628] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   30.637179][ T3628] vxlan0: entered promiscuous mode
[   30.637570][ T3627]  loop4: p3 < > p4 < >
[   30.646497][ T3627] loop4: partition table partially beyond EOD, truncated
[   30.653885][ T3627] loop4: p3 start 4284289 is beyond EOD, truncated
[   32.166412][   T29] kauditd_printk_skb: 539 callbacks suppressed
[   32.166428][   T29] audit: type=1400 audit(1733142112.858:689): avc:  denied  { read write } for  pid=3707 comm="syz.3.76" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.195656][   T29] audit: type=1400 audit(1733142112.858:690): avc:  denied  { open } for  pid=3707 comm="syz.3.76" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.218697][   T29] audit: type=1400 audit(1733142112.858:691): avc:  denied  { ioctl } for  pid=3707 comm="syz.3.76" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.415237][ T3739] loop4: detected capacity change from 0 to 2048
[   32.436767][ T3745] loop2: detected capacity change from 0 to 128
[   32.449295][   T29] audit: type=1326 audit(1733142113.218:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.472736][   T29] audit: type=1326 audit(1733142113.218:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.476175][ T3719] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[   32.500552][   T29] audit: type=1326 audit(1733142113.218:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.527609][   T29] audit: type=1326 audit(1733142113.238:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.550795][   T29] audit: type=1326 audit(1733142113.238:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.574043][   T29] audit: type=1326 audit(1733142113.238:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.597122][   T29] audit: type=1326 audit(1733142113.238:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f214ff19 code=0x7ffc0000
[   32.635093][ T3747] loop1: detected capacity change from 0 to 512
[   32.646856][ T3747] EXT4-fs: Ignoring removed i_version option
[   32.682615][ T3747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002]
[   32.692384][ T3747] System zones: 0-2, 18-18, 34-35
[   32.698591][ T3747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.706448][ T3771] loop3: detected capacity change from 0 to 2048
[   32.719552][ T3747] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.737262][ T3771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.738108][ T3770] kernel profiling enabled (shift: 17)
[   32.770562][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.798021][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.852755][ T3786] loop4: detected capacity change from 0 to 256
[   32.859571][ T3786] msdos: Unknown parameter 'nodo'
[   32.953253][ T3783] serio: Serial port ptm0
[   33.176830][ T3794] netlink: 44 bytes leftover after parsing attributes in process `syz.0.94'.
[   33.233216][ T3796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'.
[   33.274099][ T3796] Zero length message leads to an empty skb
[   33.345819][ T3799] loop0: detected capacity change from 0 to 1024
[   33.363263][ T3799] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   33.387702][ T3799] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   33.406216][ T3799] EXT4-fs (loop0): orphan cleanup on readonly fs
[   33.420555][ T3799] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   33.435110][ T3799] EXT4-fs (loop0): Cannot turn on quotas: error -5
[   33.445421][ T3803] syz.1.97[3803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.445478][ T3803] syz.1.97[3803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.457838][ T3803] syz.1.97[3803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.476749][ T3803] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   33.480223][ T3805] loop3: detected capacity change from 0 to 512
[   33.489246][ T3803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   33.497007][ T3805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.521601][ T3805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   33.530655][ T3799] EXT4-fs (loop0): 1 truncate cleaned up
[   33.539081][ T3799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   33.555950][ T3805] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.569822][ T3805] EXT4-fs (loop3): 1 truncate cleaned up
[   33.575958][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.635376][ T3811] netlink: 'syz.1.100': attribute type 39 has an invalid length.
[   33.652647][ T3805] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.98: inode #1073372648: comm syz.3.98: iget: illegal inode #
[   33.667167][ T3805] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.98: error while reading EA inode 1073372648 err=-117
[   33.680916][ T3805] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm syz.3.98: corrupted xattr block 33: invalid header
[   33.697017][ T3805] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[   33.734444][ T3815] loop2: detected capacity change from 0 to 2048
[   33.750764][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.760185][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.772695][ T3815]  loop2: p3 < > p4 < >
[   33.776893][ T3815] loop2: partition table partially beyond EOD, truncated
[   33.793450][ T3815] loop2: p3 start 4284289 is beyond EOD, truncated
[   33.861733][ T3815] syzkaller0: entered promiscuous mode
[   33.867381][ T3815] syzkaller0: entered allmulticast mode
[   33.885758][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.893269][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.900713][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.908458][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.915833][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.923356][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.930769][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.938245][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.945644][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.953084][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.960524][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.967946][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.975334][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.982773][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.990235][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.997639][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.005016][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.012510][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.019932][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.027354][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.034831][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.042334][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.049744][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.057168][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.064545][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.071929][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.079334][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.086727][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.094112][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.101519][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.108916][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.116374][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.123796][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.131181][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.138573][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.145957][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.153368][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.160820][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.168235][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.175616][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.183064][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.190462][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.197948][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.208352][   T35] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   34.268977][ T3835] syzkaller0: entered promiscuous mode
[   34.274520][ T3835] syzkaller0: entered allmulticast mode
[   34.358485][ T3844] loop0: detected capacity change from 0 to 512
[   34.508114][ T3854] random: crng reseeded on system resumption
[   34.618081][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.807688][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.866805][ T3857] netlink: 'syz.0.115': attribute type 39 has an invalid length.
[   34.875447][ T3852] loop3: detected capacity change from 0 to 1024
[   34.919518][ T3852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.951491][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.057444][ T3870] loop0: detected capacity change from 0 to 256
[   35.084770][ T3870] FAT-fs (loop0): Directory bread(block 64) failed
[   35.092930][ T3870] FAT-fs (loop0): Directory bread(block 65) failed
[   35.105934][ T3870] FAT-fs (loop0): Directory bread(block 66) failed
[   35.119892][ T3870] FAT-fs (loop0): Directory bread(block 67) failed
[   35.127943][ T3864] syz.3.117[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.127999][ T3864] syz.3.117[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.133399][ T3870] FAT-fs (loop0): Directory bread(block 68) failed
[   35.184866][ T3870] FAT-fs (loop0): Directory bread(block 69) failed
[   35.199734][ T3870] FAT-fs (loop0): Directory bread(block 70) failed
[   35.208179][ T3864] syz.3.117[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   35.209553][ T3864] process 'syz.3.117' launched './file1' with NULL argv: empty string added
[   35.230403][ T3870] FAT-fs (loop0): Directory bread(block 71) failed
[   35.266336][ T3870] FAT-fs (loop0): Directory bread(block 72) failed
[   35.272939][ T3870] FAT-fs (loop0): Directory bread(block 73) failed
[   35.528274][ T3887] loop2: detected capacity change from 0 to 512
[   35.546409][ T3887] EXT4-fs: Ignoring removed oldalloc option
[   35.558285][ T3887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   35.571553][ T3897] loop4: detected capacity change from 0 to 128
[   35.590099][ T3887] EXT4-fs (loop2): 1 truncate cleaned up
[   35.596790][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.615054][ T3897] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.628498][ T3897] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   35.668643][ T3897] smc: net device bond0 applied user defined pnetid SYZ0
[   35.687636][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.712148][ T3905] loop4: detected capacity change from 0 to 2048
[   35.712945][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.741985][ T3905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.952349][ T3912] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   35.961160][ T3912] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   35.970053][ T3912] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   35.978855][ T3912] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   35.989511][ T3912] vxlan0: entered promiscuous mode
[   35.994677][ T3912] vxlan0: entered allmulticast mode
[   36.011798][ T3912] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   36.020818][ T3912] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   36.029795][ T3912] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   36.038727][ T3912] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   36.098560][ T3904] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   36.114936][ T3904] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   36.127465][ T3904] EXT4-fs (loop4): This should not happen!! Data will be lost
[   36.127465][ T3904] 
[   36.138016][ T3904] EXT4-fs (loop4): Total free blocks count 0
[   36.143999][ T3904] EXT4-fs (loop4): Free/Dirty block details
[   36.149910][ T3904] EXT4-fs (loop4): free_blocks=2415919104
[   36.155637][ T3904] EXT4-fs (loop4): dirty_blocks=8192
[   36.160930][ T3904] EXT4-fs (loop4): Block reservation details
[   36.166922][ T3904] EXT4-fs (loop4): i_reserved_data_blocks=512
[   36.313951][ T3703] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   36.372940][ T3924] pim6reg1: entered promiscuous mode
[   36.378315][ T3924] pim6reg1: entered allmulticast mode
[   36.451737][ T3926] loop0: detected capacity change from 0 to 512
[   36.479510][ T3926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.566654][ T3926] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.628279][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.628630][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'.
[   37.153453][ T3959] loop2: detected capacity change from 0 to 128
[   37.209568][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[   37.218466][ T3959] netlink: 'syz.2.145': attribute type 5 has an invalid length.
[   37.280524][ T3959] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   37.289346][ T3959] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   37.298104][ T3959] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   37.306814][ T3959] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   37.511016][ T3964] loop0: detected capacity change from 0 to 512
[   37.536440][ T3959] vxlan0: entered promiscuous mode
[   37.547208][ T3964] EXT4-fs (loop0): orphan cleanup on readonly fs
[   37.558924][ T3964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.147: bg 0: block 248: padding at end of block bitmap is not set
[   37.579435][ T3964] __quota_error: 507 callbacks suppressed
[   37.579510][ T3964] Quota error (device loop0): write_blk: dquota write failed
[   37.592703][ T3964] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   37.602629][ T3964] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.147: Failed to acquire dquot type 1
[   37.641164][ T3964] EXT4-fs (loop0): 1 truncate cleaned up
[   37.653042][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   37.680131][ T3964] syz.0.147 (3964) used greatest stack depth: 9296 bytes left
[   37.708405][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.747931][   T29] audit: type=1400 audit(1733142118.518:1205): avc:  denied  { load_policy } for  pid=3967 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   37.769288][ T3968] SELinux:  policydb version 0 does not match my version range 15-33
[   37.795283][   T29] audit: type=1326 audit(1733142118.558:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.818725][   T29] audit: type=1326 audit(1733142118.558:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.842122][   T29] audit: type=1326 audit(1733142118.558:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.865447][   T29] audit: type=1326 audit(1733142118.558:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.888881][   T29] audit: type=1326 audit(1733142118.558:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.912127][   T29] audit: type=1326 audit(1733142118.558:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.935406][   T29] audit: type=1326 audit(1733142118.558:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3969 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   37.965565][ T3968] SELinux: failed to load policy
[   38.146964][ T3983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   38.298512][ T3987] serio: Serial port ptm1
[   38.399024][ T3990] loop4: detected capacity change from 0 to 512
[   38.447784][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.466203][ T3990] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.497355][ T3990] geneve2: entered promiscuous mode
[   38.502602][ T3990] geneve2: entered allmulticast mode
[   38.585966][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.604388][ T3998] loop4: detected capacity change from 0 to 128
[   38.612199][ T3998] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   38.641612][ T3998] bio_check_eod: 218 callbacks suppressed
[   38.641630][ T3998] syz.4.159: attempt to access beyond end of device
[   38.641630][ T3998] loop4: rw=2049, sector=209, nr_sectors = 832 limit=128
[   38.681988][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'.
[   38.733974][ T4003] netlink: 'syz.3.160': attribute type 27 has an invalid length.
[   38.765260][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.765363][ T3723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   38.772504][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.816971][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.826399][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.873886][ T4003] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.882413][ T4003] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.891162][ T4003] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.899613][ T4003] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   38.946611][ T4007] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.956740][ T4007] 8021q: adding VLAN 0 to HW filter on device team0
[   38.965927][ T4007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.015310][ T4015] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   39.024223][ T4015] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   39.027118][ T4018] netlink: 'syz.3.165': attribute type 4 has an invalid length.
[   39.033015][ T4015] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   39.049372][ T4015] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   39.058216][ T4015] vxlan0: entered promiscuous mode
[   39.063441][ T4015] vxlan0: entered allmulticast mode
[   39.071539][ T4015] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   39.080608][ T4015] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   39.089541][ T4015] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   39.098536][ T4015] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   39.165247][ T4024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   39.175620][ T4024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.271172][ T4024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   39.281533][ T4024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.318122][ T4030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.333083][ T4024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   39.344074][ T4024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.372033][ T4033] loop4: detected capacity change from 0 to 128
[   39.398165][ T4024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   39.408607][ T4024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.438514][ T1051] kernel write not supported for file /106/attr/keycreate (pid: 1051 comm: kworker/1:2)
[   39.454916][ T4024] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   39.463298][ T4024] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.477111][ T4024] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   39.485480][ T4024] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.497407][ T4024] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   39.497451][ T4024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.499802][ T4024] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   39.499844][ T4024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.544627][ T4046] loop2: detected capacity change from 0 to 512
[   39.552500][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.573385][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'.
[   39.594364][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.634801][ T4052] syz.3.179[4052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.634981][ T4052] syz.3.179[4052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.638223][ T4039] serio: Serial port ptm0
[   39.647723][ T4052] syz.3.179[4052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   39.660156][ T4050] ------------[ cut here ]------------
[   39.678699][ T4050] refcount_t: underflow; use-after-free.
[   39.684591][ T4050] WARNING: CPU: 1 PID: 4050 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230
[   39.694030][ T4050] Modules linked in:
[   39.697949][ T4050] CPU: 1 UID: 0 PID: 4050 Comm: syz.2.178 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0
[   39.708571][ T4050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.718662][ T4050] RIP: 0010:refcount_warn_saturate+0x1c6/0x230
[   39.718963][ T4052] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   39.724893][ T4050] Code: 72 ff ff ff e8 bb 28 70 ff 48 c7 c7 eb ce b2 86 e8 3f 76 89 ff c6 05 b3 4c f0 04 01 90 48 c7 c7 f3 04 1c 86 e8 db b8 51 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 8c 28 70 ff 48 c7 c7 e8 ce b2 86 e8
[   39.724918][ T4050] RSP: 0018:ffffc90003627cd8 EFLAGS: 00010246
[   39.757805][ T4050] RAX: 9cea887022608a00 RBX: ffff88810454dce4 RCX: 0000000000080000
[   39.765857][ T4050] RDX: ffffc9000306a000 RSI: 0000000000011054 RDI: 0000000000011055
[   39.773935][ T4050] RBP: 0000000000000003 R08: ffffffff81143c87 R09: 0000000000000000
[   39.781953][ T4050] R10: 0001ffffffffffff R11: ffff8881017ac200 R12: ffff888117aa7c68
[   39.789965][ T4050] R13: ffff888117aa7c18 R14: ffff88810454dce4 R15: 0000000000000000
[   39.798055][ T4050] FS:  00007f0aaaf876c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[   39.807022][ T4050] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   39.813679][ T4050] CR2: 0000001b32013ff8 CR3: 000000011a6a6000 CR4: 00000000003506f0
[   39.821676][ T4050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   39.829683][ T4050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   39.837736][ T4050] Call Trace:
[   39.841013][ T4050]  <TASK>
[   39.843956][ T4050]  ? __warn+0x141/0x350
[   39.848207][ T4050]  ? report_bug+0x315/0x420
[   39.852736][ T4050]  ? refcount_warn_saturate+0x1c6/0x230
[   39.858315][ T4050]  ? handle_bug+0x60/0x90
[   39.862652][ T4050]  ? exc_invalid_op+0x1a/0x50
[   39.867380][ T4050]  ? asm_exc_invalid_op+0x1a/0x20
[   39.872468][ T4050]  ? __warn_printk+0x167/0x1b0
[   39.877332][ T4050]  ? refcount_warn_saturate+0x1c6/0x230
[   39.882897][ T4050]  ? refcount_warn_saturate+0x1c5/0x230
[   39.888478][ T4050]  sk_skb_reason_drop+0xe9/0x290
[   39.893430][ T4050]  j1939_session_put+0x157/0x2a0
[   39.898427][ T4050]  j1939_sk_release+0x278/0x4f0
[   39.903313][ T4050]  ? __pfx_autoremove_wake_function+0x10/0x10
[   39.909475][ T4050]  sock_close+0x68/0x150
[   39.913762][ T4050]  ? __pfx_sock_close+0x10/0x10
[   39.918636][ T4050]  __fput+0x17a/0x6d0
[   39.922688][ T4050]  ____fput+0x1c/0x30
[   39.926703][ T4050]  task_work_run+0x13a/0x1a0
[   39.931308][ T4050]  syscall_exit_to_user_mode+0xa8/0x120
[   39.936390][ T4054] loop0: detected capacity change from 0 to 1024
[   39.936881][ T4050]  do_syscall_64+0xd6/0x1c0
[   39.947704][ T4050]  ? clear_bhb_loop+0x55/0xb0
[   39.952305][ T4054] EXT4-fs: Ignoring removed nobh option
[   39.952382][ T4050]  ? clear_bhb_loop+0x55/0xb0
[   39.958016][ T4054] EXT4-fs: Ignoring removed orlov option
[   39.962591][ T4050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.974281][ T4050] RIP: 0033:0x7f0aac90ff19
[   39.978802][ T4050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.998448][ T4050] RSP: 002b:00007f0aaaf87058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   40.006864][ T4050] RAX: 0000000000000000 RBX: 00007f0aacad5fa0 RCX: 00007f0aac90ff19
[   40.014833][ T4050] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006
[   40.018460][ T4054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.022879][ T4050] RBP: 00007f0aac983986 R08: 0000000000000000 R09: 0000000000000000
[   40.022893][ T4050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.022904][ T4050] R13: 0000000000000000 R14: 00007f0aacad5fa0 R15: 00007ffdff4bc048
[   40.022927][ T4050]  </TASK>
[   40.061928][ T4050] ---[ end trace 0000000000000000 ]---
[   40.097180][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.171852][ T4062] loop3: detected capacity change from 0 to 128
[   40.194615][ T4065] loop2: detected capacity change from 0 to 512
[   40.207628][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.220389][ T4065] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.239569][ T4065] geneve2: entered promiscuous mode
[   40.242302][ T4071] loop3: detected capacity change from 0 to 512
[   40.244797][ T4065] geneve2: entered allmulticast mode
[   40.267463][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.277863][ T4075] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   40.280134][ T4071] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.367860][ T4081] syz.1.188[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.367985][ T4081] syz.1.188[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.379430][ T4081] syz.1.188[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   40.464214][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.504969][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.599095][ T4105] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   40.611245][ T4109] loop3: detected capacity change from 0 to 128
[   40.637481][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'.
[   40.646389][ T4109] netlink: 'syz.3.191': attribute type 5 has an invalid length.
[   40.668873][ T4109] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   40.677290][ T4109] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   40.685595][ T4109] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   40.693887][ T4109] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   40.702427][ T4109] vxlan0: entered promiscuous mode
[   40.713554][ T4119] loop0: detected capacity change from 0 to 128
[   40.785298][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[   40.819326][ T4140] loop4: detected capacity change from 0 to 512
[   40.845411][ T4140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.198: bg 0: block 35: padding at end of block bitmap is not set
[   40.852513][ T4135] loop0: detected capacity change from 0 to 8192
[   40.867693][ T4140] EXT4-fs (loop4): Remounting filesystem read-only
[   40.876214][ T4140] EXT4-fs (loop4): 1 truncate cleaned up
[   40.882470][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.894717][ T4140] SELinux: (dev loop4, type ext4) getxattr errno 5
[   40.903039][ T4140] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.905565][ T4150] loop0: detected capacity change from 0 to 256
[   40.936500][ T4150] FAT-fs (loop0): Directory bread(block 64) failed
[   40.943203][ T4150] FAT-fs (loop0): Directory bread(block 65) failed
[   40.949982][ T4150] FAT-fs (loop0): Directory bread(block 66) failed
[   40.956794][ T4150] FAT-fs (loop0): Directory bread(block 67) failed
[   40.963410][ T4150] FAT-fs (loop0): Directory bread(block 68) failed
[   40.970314][ T4150] FAT-fs (loop0): Directory bread(block 69) failed
[   40.978040][ T4150] FAT-fs (loop0): Directory bread(block 70) failed
[   40.984621][ T4150] FAT-fs (loop0): Directory bread(block 71) failed
[   40.991411][ T4150] FAT-fs (loop0): Directory bread(block 72) failed
[   40.998852][ T4150] FAT-fs (loop0): Directory bread(block 73) failed
[   41.017909][ T3376] IPVS: starting estimator thread 0...
[   41.126142][ T4163] IPVS: using max 2592 ests per chain, 129600 per kthread
[   41.137853][    C1] hrtimer: interrupt took 27388 ns
[   41.167356][ T4174] serio: Serial port ptm0
[   41.737643][ T4253] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   41.802103][ T4249] loop3: detected capacity change from 0 to 512
[   41.825845][ T4249] EXT4-fs: Ignoring removed oldalloc option
[   41.845887][ T4249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   41.885110][ T4249] EXT4-fs (loop3): 1 truncate cleaned up
[   41.972157][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.266112][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.307847][ T4262] SELinux:  policydb version 0 does not match my version range 15-33
[   42.316151][ T4262] SELinux: failed to load policy
[   42.434412][ T4268] pim6reg1: entered promiscuous mode
[   42.439796][ T4268] pim6reg1: entered allmulticast mode
[   42.494786][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   43.417526][ T4282] x_tables: duplicate underflow at hook 2
[   43.436872][ T4284] loop3: detected capacity change from 0 to 2048
[   43.476863][ T4284]  loop3: p3 < > p4 < >
[   43.481225][ T4284] loop3: partition table partially beyond EOD, truncated
[   43.490064][   T29] kauditd_printk_skb: 462 callbacks suppressed
[   43.490118][   T29] audit: type=1400 audit(1733142124.258:1675): avc:  denied  { module_load } for  pid=4285 comm="+}[@" path="/47/bus" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[   43.525026][ T4286] Invalid ELF header magic: != ELF
[   43.530485][ T4284] loop3: p3 start 4284289 is beyond EOD, truncated
[   43.746529][ T4304] netlink: 'syz.4.221': attribute type 39 has an invalid length.
[   43.880275][ T4322] wg2: entered promiscuous mode
[   43.885228][ T4322] wg2: entered allmulticast mode
[   44.333720][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'.
[   44.342802][ T4420] bridge_slave_1: left allmulticast mode
[   44.345515][ T4422] loop0: detected capacity change from 0 to 512
[   44.348522][ T4420] bridge_slave_1: left promiscuous mode
[   44.348677][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.360462][ T4422] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   44.376791][ T4422] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   44.383765][ T4422] EXT4-fs (loop0): mount failed
[   44.388851][ T4420] bridge_slave_0: left allmulticast mode
[   44.394557][ T4420] bridge_slave_0: left promiscuous mode
[   44.400234][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.496463][   T29] audit: type=1400 audit(1733142125.268:1676): avc:  denied  { read } for  pid=4435 comm="syz.0.225" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   44.575061][ T4444] geneve2: entered promiscuous mode
[   44.580321][ T4444] geneve2: entered allmulticast mode
[   44.600647][ T4447] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   44.664756][ T4455] loop0: detected capacity change from 0 to 128
[   44.723719][ T4458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=4458 comm=syz.0.236
[   44.793708][ T4462] loop0: detected capacity change from 0 to 512
[   44.821332][ T4462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.854215][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[   44.881949][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.062955][ T4477] wg2: entered promiscuous mode
[   45.068044][ T4477] wg2: entered allmulticast mode
[   45.108631][ T4481] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   45.188300][   T29] audit: type=1326 audit(1733142125.958:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.193574][ T4483] syzkaller0: entered promiscuous mode
[   45.211692][   T29] audit: type=1326 audit(1733142125.958:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.217149][ T4483] syzkaller0: entered allmulticast mode
[   45.240390][   T29] audit: type=1326 audit(1733142125.958:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.295325][   T29] audit: type=1326 audit(1733142125.958:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.318711][   T29] audit: type=1326 audit(1733142125.958:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.342042][   T29] audit: type=1326 audit(1733142126.018:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.365345][   T29] audit: type=1326 audit(1733142126.018:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.388696][   T29] audit: type=1326 audit(1733142126.018:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff45e80ff19 code=0x7ffc0000
[   45.439693][ T4486] loop3: detected capacity change from 0 to 512
[   45.455425][ T4486] EXT4-fs: Ignoring removed i_version option
[   45.507398][ T4486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002]
[   45.522640][ T4486] System zones: 0-2, 18-18, 34-35
[   45.537191][ T4497] loop2: detected capacity change from 0 to 512
[   45.547139][ T4486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.564972][ T4497] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   45.584578][ T4486] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.600460][ T4497] EXT4-fs (loop2): 1 truncate cleaned up
[   45.616631][ T4497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.678187][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.689614][ T4497] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.251: inode #1073372648: comm syz.2.251: iget: illegal inode #
[   45.708943][ T4497] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.251: error while reading EA inode 1073372648 err=-117
[   45.723440][ T4497] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.251: corrupted xattr block 33: invalid header
[   45.739257][ T4497] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117)
[   45.786939][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.201705][ T4510] syz.1.265[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.202266][ T4510] syz.1.265[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.225938][ T4510] syz.1.265[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   46.237399][ T4508] wg2: entered promiscuous mode
[   46.253488][ T4508] wg2: entered allmulticast mode
[   46.427108][ T4527] loop2: detected capacity change from 0 to 512
[   46.429781][ T4525] SELinux: security_context_str_to_sid (�H�X4�qPC����H%`E@
) failed with errno=-22
[   46.471682][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.511043][ T4527] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.545070][ T4512] loop0: detected capacity change from 0 to 512
[   46.552108][ T4512] EXT4-fs: Ignoring removed oldalloc option
[   46.559456][ T4512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   46.577418][ T4512] EXT4-fs (loop0): 1 truncate cleaned up
[   46.586036][ T4512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.675870][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.721211][ T4544] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   46.730855][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'.
[   46.742654][ T4548] bridge_slave_1: left allmulticast mode
[   46.748363][ T4548] bridge_slave_1: left promiscuous mode
[   46.754116][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.762977][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.772474][ T4548] bridge_slave_0: left allmulticast mode
[   46.778190][ T4548] bridge_slave_0: left promiscuous mode
[   46.783935][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.870488][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[   46.874768][ T4562] loop4: detected capacity change from 0 to 512
[   46.879338][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   46.899510][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   46.906420][ T4562] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.917570][ T4567] loop1: detected capacity change from 0 to 512
[   46.940829][ T4564] bond0: (slave bond_slave_0): Releasing backup interface
[   46.944741][ T4562] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   46.949127][ T4567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.976008][ T4567] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.018044][ T4574] loop2: detected capacity change from 0 to 512
[   47.025675][ T4574] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   47.058851][ T4574] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.282: iget: bad i_size value: -67835469387268086
[   47.074712][ T4574] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.282: couldn't read orphan inode 15 (err -117)
[   47.076706][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.087990][ T4574] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.108109][ T4574] ext2 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.119936][ T3304] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   47.146949][ T4574] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   47.167658][ T3300] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[   47.172772][ T4587] loop4: detected capacity change from 0 to 128
[   47.199486][ T4587] syz.4.285: attempt to access beyond end of device
[   47.199486][ T4587] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128
[   47.219014][ T4587] syz.4.285: attempt to access beyond end of device
[   47.219014][ T4587] loop4: rw=0, sector=177, nr_sectors = 1 limit=128
[   47.254712][ T3377] IPVS: starting estimator thread 0...
[   47.269725][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'.
[   47.283781][ T4600] bridge_slave_1: left allmulticast mode
[   47.289502][ T4600] bridge_slave_1: left promiscuous mode
[   47.295234][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.307658][ T4600] bridge_slave_0: left allmulticast mode
[   47.313340][ T4600] bridge_slave_0: left promiscuous mode
[   47.319065][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.346614][ T4597] IPVS: using max 2688 ests per chain, 134400 per kthread
[   47.363621][ T4609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   47.370171][ T4609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   47.377687][ T4609] vhci_hcd vhci_hcd.0: Device attached
[   47.393228][ T4609] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.294'.
[   47.402783][ T4613] loop4: detected capacity change from 0 to 512
[   47.411595][ T4603] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.294'.
[   47.437944][ T4610] vhci_hcd: connection closed
[   47.438166][ T4416] vhci_hcd: stop threads
[   47.447184][ T4416] vhci_hcd: release socket
[   47.451682][ T4416] vhci_hcd: disconnect device
[   47.457546][ T4613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.478138][ T4613] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.583356][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.621164][ T4624] loop4: detected capacity change from 0 to 512
[   47.648487][ T4624] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.298: corrupted xattr block 95: invalid header
[   47.662541][ T4624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.298: bg 0: block 7: invalid block bitmap
[   47.677204][ T4624] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   47.686144][ T4624] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.298: corrupted xattr block 95: invalid header
[   47.713657][ T4624] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[   47.734301][ T4624] EXT4-fs (loop4): 1 orphan inode deleted
[   47.755091][ T4624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.797279][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.815250][ T4627] loop4: detected capacity change from 0 to 128
[   47.832842][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'.
[   47.848380][ T4627] +}[@: attempt to access beyond end of device
[   47.848380][ T4627] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[   47.893531][ T4633] SELinux:  policydb table sizes (0,-1) do not match mine (8,7)
[   47.902330][ T4633] SELinux: failed to load policy
[   48.020005][ T4645] loop0: detected capacity change from 0 to 128
[   48.040221][ T1051] IPVS: starting estimator thread 0...
[   48.086191][ T4645] syz.0.302: attempt to access beyond end of device
[   48.086191][ T4645] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[   48.114947][ T4653] ������: renamed from vlan1 (while UP)
[   48.126123][ T4651] IPVS: using max 2976 ests per chain, 148800 per kthread
[   48.130329][ T4645] syz.0.302: attempt to access beyond end of device
[   48.130329][ T4645] loop0: rw=0, sector=177, nr_sectors = 1 limit=128
[   48.169310][ T4644] syz.0.302: attempt to access beyond end of device
[   48.169310][ T4644] loop0: rw=524288, sector=145, nr_sectors = 32 limit=128
[   48.196518][ T4644] syz.0.302: attempt to access beyond end of device
[   48.196518][ T4644] loop0: rw=524288, sector=185, nr_sectors = 184 limit=128
[   48.228266][ T4645] syz.0.302: attempt to access beyond end of device
[   48.228266][ T4645] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   48.256264][ T4645] syz.0.302: attempt to access beyond end of device
[   48.256264][ T4645] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[   48.359471][ T4662] netlink: 'syz.3.312': attribute type 39 has an invalid length.
[   48.398745][ T4660] loop1: detected capacity change from 0 to 1024
[   48.455005][ T4660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.501764][   T29] kauditd_printk_skb: 514 callbacks suppressed
[   48.501776][   T29] audit: type=1326 audit(1733142129.268:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9626e6ee7 code=0x7ffc0000
[   48.531268][   T29] audit: type=1326 audit(1733142129.268:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff96268c129 code=0x7ffc0000
[   48.554549][   T29] audit: type=1326 audit(1733142129.268:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   48.578746][   T29] audit: type=1326 audit(1733142129.328:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9626e6ee7 code=0x7ffc0000
[   48.584447][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.601975][   T29] audit: type=1326 audit(1733142129.328:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff96268c129 code=0x7ffc0000
[   48.602004][   T29] audit: type=1326 audit(1733142129.328:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   48.657414][   T29] audit: type=1326 audit(1733142129.328:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9626e6ee7 code=0x7ffc0000
[   48.680716][   T29] audit: type=1326 audit(1733142129.328:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff96268c129 code=0x7ffc0000
[   48.704024][   T29] audit: type=1326 audit(1733142129.328:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9626eff19 code=0x7ffc0000
[   48.727239][   T29] audit: type=1326 audit(1733142129.338:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9626e6ee7 code=0x7ffc0000
[   49.312721][ T4637] syz.2.305 (4637) used greatest stack depth: 7240 bytes left
[   49.373085][ T4682] loop2: detected capacity change from 0 to 2048
[   49.458115][ T4682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.490587][ T4682] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28
[   49.502927][ T4682] EXT4-fs (loop2): This should not happen!! Data will be lost
[   49.502927][ T4682] 
[   49.512579][ T4682] EXT4-fs (loop2): Total free blocks count 0
[   49.518642][ T4682] EXT4-fs (loop2): Free/Dirty block details
[   49.524547][ T4682] EXT4-fs (loop2): free_blocks=0
[   49.529503][ T4682] EXT4-fs (loop2): dirty_blocks=0
[   49.534524][ T4682] EXT4-fs (loop2): Block reservation details
[   49.540566][ T4682] EXT4-fs (loop2): i_reserved_data_blocks=0
[   49.769853][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.960600][ T4701] block device autoloading is deprecated and will be removed.
[   49.968832][ T4701] syz.3.334: attempt to access beyond end of device
[   49.968832][ T4701] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   50.093946][ T4705] netlink: 'syz.2.327': attribute type 39 has an invalid length.
[   50.109143][ T4708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.117708][ T4708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.119339][ T4710] syz.1.329[4710] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.125660][ T4710] syz.1.329[4710] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.137044][ T4710] syz.1.329[4710] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.247627][ T4714] syz.4.330[4714] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.259969][ T4714] syz.4.330[4714] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.271945][ T4714] syz.4.330[4714] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   50.291703][ T4717] pim6reg1: entered promiscuous mode
[   50.308361][ T4717] pim6reg1: entered allmulticast mode
[   50.332200][ T4721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.340649][ T4721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.409693][ T4726] loop2: detected capacity change from 0 to 512
[   50.427325][ T4726] EXT4-fs: Ignoring removed orlov option
[   50.441956][ T4726] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[   50.477241][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.496258][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.157586][ T4743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.344'.
[   51.166574][ T4743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.344'.
[   51.167445][ T4742] netlink: 'syz.3.345': attribute type 10 has an invalid length.
[   51.298583][ T4745] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[   51.298583][ T4745]    program syz.3.346 not setting count and/or reply_len properly
[   51.448290][ T4754] loop3: detected capacity change from 0 to 1024
[   51.459957][ T4754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.519189][ T4760] geneve2: entered promiscuous mode
[   51.524455][ T4760] geneve2: entered allmulticast mode
[   51.559290][ T4754] netlink: 'syz.3.349': attribute type 15 has an invalid length.
[   51.582842][ T4762] netlink: 'syz.4.352': attribute type 4 has an invalid length.
[   51.599742][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.638622][ T4770] loop4: detected capacity change from 0 to 128
[   52.104634][ T4788] xt_CT: You must specify a L4 protocol and not use inversions on it
[   52.510191][ T4798] syz.3.359[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.510317][ T4798] syz.3.359[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.522071][ T4798] syz.3.359[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.540512][ T4798] loop3: detected capacity change from 0 to 1024
[   52.558841][ T4798] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.578616][ T4798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.660927][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.793756][ T4815] Illegal XDP return value 4294967274 on prog  (id 316) dev N/A, expect packet loss!
[   53.398037][ T4823] netlink: 168 bytes leftover after parsing attributes in process `syz.4.369'.
[   53.458327][ T4828] syz.0.371[4828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.458386][ T4828] syz.0.371[4828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.487554][ T4828] syz.0.371[4828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   53.505243][ T4833] loop2: detected capacity change from 0 to 512
[   53.537299][ T4833] EXT4-fs: Ignoring removed orlov option
[   53.553665][ T4833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.562340][   T29] kauditd_printk_skb: 2315 callbacks suppressed
[   53.562354][   T29] audit: type=1326 audit(1733142134.318:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.592015][   T29] audit: type=1326 audit(1733142134.318:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.615428][   T29] audit: type=1326 audit(1733142134.318:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.649937][ T4833] EXT4-fs (loop2): orphan cleanup on readonly fs
[   53.658538][ T4833] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.373: bg 0: block 248: padding at end of block bitmap is not set
[   53.682926][   T29] audit: type=1326 audit(1733142134.448:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.705569][ T4833] Quota error (device loop2): write_blk: dquota write failed
[   53.706245][   T29] audit: type=1326 audit(1733142134.448:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.713691][ T4833] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   53.746930][ T4833] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.373: Failed to acquire dquot type 1
[   53.759951][   T29] audit: type=1326 audit(1733142134.448:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.783312][   T29] audit: type=1326 audit(1733142134.448:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.806699][   T29] audit: type=1326 audit(1733142134.448:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e527cff19 code=0x7ffc0000
[   53.833075][ T4833] EXT4-fs (loop2): 1 truncate cleaned up
[   53.839376][ T4833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.857914][ T4833] EXT4-fs: Ignoring removed orlov option
[   53.863806][ T4833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.872376][ T4833] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   53.909281][ T4833] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.373: Abort forced by user
[   53.925007][ T4833] EXT4-fs (loop2): Remounting filesystem read-only
[   53.931711][ T4833] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   53.954652][ T4833] ext4 filesystem being remounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.979928][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.121993][ T4861] netlink: 76 bytes leftover after parsing attributes in process `syz.0.380'.
[   54.145379][ T4863] syz.0.381[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.145498][ T4863] syz.0.381[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.157225][ T4863] syz.0.381[4863] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.341223][ T4866] loop1: detected capacity change from 0 to 512
[   54.360533][ T4866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   54.372918][ T4866] EXT4-fs (loop1): 1 truncate cleaned up
[   54.381163][ T4866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.414067][ T4866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.382'.
[   54.447143][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.887689][ T4881] loop2: detected capacity change from 0 to 1024
[   54.894321][ T4881] EXT4-fs: test_dummy_encryption option not supported
[   54.904530][ T4881] loop2: detected capacity change from 0 to 256
[   55.369706][ T4894] syzkaller0: entered promiscuous mode
[   55.375226][ T4894] syzkaller0: entered allmulticast mode
[   55.481409][ T4904] ip6erspan0: entered promiscuous mode
[   55.487008][ T4904] ip6erspan0: entered allmulticast mode
[   55.564864][ T4890] chnl_net:caif_netlink_parms(): no params data found
[   55.601878][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.609043][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.616327][ T4890] bridge_slave_0: entered allmulticast mode
[   55.622792][ T4890] bridge_slave_0: entered promiscuous mode
[   55.629527][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.636615][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.644458][ T4890] bridge_slave_1: entered allmulticast mode
[   55.650980][ T4890] bridge_slave_1: entered promiscuous mode
[   55.674733][ T4890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.685342][ T4890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.709936][ T4890] team0: Port device team_slave_0 added
[   55.717700][ T4890] team0: Port device team_slave_1 added
[   55.737743][ T4890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.744747][ T4890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.770763][ T4890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.784621][ T4890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.791695][ T4890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.817677][ T4890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.845907][ T4890] hsr_slave_0: entered promiscuous mode
[   55.851847][ T4890] hsr_slave_1: entered promiscuous mode
[   55.857724][ T4890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.865255][ T4890] Cannot create hsr debugfs directory
[   55.929070][ T4890] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   55.938018][ T4890] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   55.948061][ T4890] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   55.958468][ T4890] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   55.978458][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.985567][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.992841][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.999988][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.028060][ T4890] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.040007][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.049414][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.066029][ T4890] 8021q: adding VLAN 0 to HW filter on device team0
[   56.086706][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.093830][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.097034][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'.
[   56.109844][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'.
[   56.113171][ T4890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.129019][ T4890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.139463][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'.
[   56.150205][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.157297][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.214403][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'.
[   56.225086][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'.
[   56.229565][ T4890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.242292][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.253004][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.337429][ T4890] veth0_vlan: entered promiscuous mode
[   56.347136][ T4890] veth1_vlan: entered promiscuous mode
[   56.362277][ T4890] veth0_macvtap: entered promiscuous mode
[   56.369957][ T4890] veth1_macvtap: entered promiscuous mode
[   56.380544][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.391118][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.395137][ T4956] loop3: detected capacity change from 0 to 128
[   56.401090][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.418012][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.427855][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.438325][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.444964][ T4956] bio_check_eod: 6 callbacks suppressed
[   56.445056][ T4956] syz.3.413: attempt to access beyond end of device
[   56.445056][ T4956] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128
[   56.451331][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.479491][ T4956] syz.3.413: attempt to access beyond end of device
[   56.479491][ T4956] loop3: rw=0, sector=177, nr_sectors = 1 limit=128
[   56.493466][ T4958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.494339][ T4955] syz.3.413: attempt to access beyond end of device
[   56.494339][ T4955] loop3: rw=524288, sector=145, nr_sectors = 32 limit=128
[   56.519028][ T4955] syz.3.413: attempt to access beyond end of device
[   56.519028][ T4955] loop3: rw=524288, sector=185, nr_sectors = 184 limit=128
[   56.526459][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.543183][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.553037][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.563488][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.573330][ T4890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.583791][ T4890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.585513][ T4956] syz.3.413: attempt to access beyond end of device
[   56.585513][ T4956] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   56.601174][ T4890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.614094][ T4956] syz.3.413: attempt to access beyond end of device
[   56.614094][ T4956] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   56.693317][ T4958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.712576][ T4960] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.414' sets config #0
[   56.713351][ T4890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.730253][ T4890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.738939][ T4890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.747678][ T4890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.797629][ T4958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.847033][ T4958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.858256][ T4964] loop4: detected capacity change from 0 to 8192
[   56.865398][ T4964] FAT-fs (loop4): bogus number of directory entries (3)
[   56.872396][ T4964] FAT-fs (loop4): Can't find a valid FAT filesystem
[   56.909800][ T4972] @: renamed from bond0 (while UP)
[   56.912328][ T4964] loop4: detected capacity change from 0 to 512
[   56.916314][ T4974] loop3: detected capacity change from 0 to 512
[   56.922006][ T4964] EXT4-fs: inline encryption not supported
[   56.940396][ T4964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.943700][ T4958] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.956131][ T4964] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.964986][ T4958] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.979074][ T4974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.980985][ T4980] netlink: 256 bytes leftover after parsing attributes in process `$'.
[   56.996277][ T4964] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.415: corrupted inode contents
[   57.005690][ T4958] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.020582][ T4964] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.415: mark_inode_dirty error
[   57.021988][ T4974] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.032919][ T4964] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.415: corrupted inode contents
[   57.045630][ T4958] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.054621][ T4964] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.415: mark_inode_dirty error
[   57.095301][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.143653][ T4987] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   57.151926][ T4987] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   57.188780][ T5000] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[   57.189388][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.225861][ T4987] loop4: detected capacity change from 0 to 736
[   57.303895][ T5006] loop5: detected capacity change from 0 to 512
[   57.317531][ T5006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.347291][ T5006] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.388492][ T5006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.397036][ T5006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.431251][ T5016] loop4: detected capacity change from 0 to 1024
[   57.468933][ T5016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.520264][ T5016] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.624631][ T5021] 9pnet_fd: p9_fd_create_tcp (5021): problem connecting socket to 127.0.0.1
[   57.636208][ T5021] loop4: detected capacity change from 0 to 512
[   57.642648][ T5021] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   57.675820][ T5021] 9pnet: Could not find request transport: xen
[   58.365082][ T5044] bond_slave_0: entered promiscuous mode
[   58.370777][ T5044] bond_slave_1: entered promiscuous mode
[   58.394544][ T5044] macvtap0: entered promiscuous mode
[   58.399905][ T5044] bond0: entered promiscuous mode
[   58.407553][ T5044] 8021q: adding VLAN 0 to HW filter on device macvtap0
[   58.421401][ T5044] bond0: left promiscuous mode
[   58.426402][ T5044] bond_slave_0: left promiscuous mode
[   58.431785][ T5044] bond_slave_1: left promiscuous mode
[   58.646605][ T5054] loop4: detected capacity change from 0 to 2048
[   58.653428][ T5054] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.669320][ T5054] syz.4.446[5054] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.669418][ T5054] syz.4.446[5054] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.681177][ T5054] syz.4.446[5054] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.694718][   T29] kauditd_printk_skb: 1463 callbacks suppressed
[   58.694780][   T29] audit: type=1400 audit(1733142139.468:5994): avc:  denied  { create } for  pid=5053 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   58.793714][ T5061] loop4: detected capacity change from 0 to 1024
[   59.152351][ T5064] ==================================================================
[   59.156240][ T5041] syz.0.441 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[   59.160450][ T5064] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[   59.174429][ T5041] CPU: 1 UID: 0 PID: 5041 Comm: syz.0.441 Tainted: G        W          6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0
[   59.181452][ T5064] 
[   59.181459][ T5064] write to 0xffff8881068af8a4 of 4 bytes by task 5061 on cpu 1:
[   59.193483][ T5041] Tainted: [W]=WARN
[   59.195778][ T5064]  xas_set_mark+0x131/0x150
[   59.203376][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   59.207152][ T5064]  __folio_start_writeback+0x1e8/0x430
[   59.211628][ T5041] Call Trace:
[   59.211639][ T5041]  <TASK>
[   59.221668][ T5064]  ext4_bio_write_folio+0x591/0x9d0
[   59.227105][ T5041]  dump_stack_lvl+0xf2/0x150
[   59.230356][ T5064]  mpage_process_page_bufs+0x486/0x5d0
[   59.233268][ T5041]  dump_stack+0x15/0x1a
[   59.238432][ T5064]  mpage_prepare_extent_to_map+0x788/0xb80
[   59.242993][ T5041]  dump_header+0x83/0x2d0
[   59.248419][ T5064]  ext4_do_writepages+0xa20/0x2130
[   59.252547][ T5041]  oom_kill_process+0x341/0x4c0
[   59.258317][ T5064]  ext4_writepages+0x159/0x2e0
[   59.262619][ T5041]  out_of_memory+0x9af/0xbe0
[   59.267698][ T5064]  do_writepages+0x1d8/0x480
[   59.272522][ T5041]  ? css_next_descendant_pre+0x11c/0x140
[   59.277253][ T5064]  file_write_and_wait_range+0x168/0x2f0
[   59.281819][ T5041]  mem_cgroup_out_of_memory+0x13e/0x190
[   59.286382][ T5064]  generic_buffers_fsync_noflush+0x46/0x120
[   59.291987][ T5041]  try_charge_memcg+0x508/0x7f0
[   59.297581][ T5064]  ext4_sync_file+0x1ff/0x6c0
[   59.303105][ T5041]  ? ZSTD_decompressSequences_bmi2+0xfc0/0x13f0
[   59.308964][ T5064]  vfs_fsync_range+0x116/0x130
[   59.313827][ T5041]  obj_cgroup_charge_pages+0xbd/0x1a0
[   59.318426][ T5064]  ext4_buffered_write_iter+0x326/0x370
[   59.324639][ T5041]  __memcg_kmem_charge_page+0x9d/0x170
[   59.329366][ T5064]  ext4_file_write_iter+0x383/0xf20
[   59.334707][ T5041]  __alloc_pages_noprof+0x1bc/0x340
[   59.340221][ T5064]  iter_file_splice_write+0x5f1/0x980
[   59.345653][ T5041]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   59.350812][ T5064]  direct_splice_actor+0x160/0x2c0
[   59.355983][ T5041]  alloc_pages_noprof+0xe1/0x100
[   59.361323][ T5064]  splice_direct_to_actor+0x302/0x670
[   59.366670][ T5041]  __vmalloc_node_range_noprof+0x6eb/0xe80
[   59.371746][ T5064]  do_splice_direct+0xd7/0x150
[   59.376662][ T5041]  __kvmalloc_node_noprof+0x121/0x170
[   59.381992][ T5064]  do_sendfile+0x398/0x660
[   59.387767][ T5041]  ? ip_set_alloc+0x1f/0x30
[   59.392500][ T5064]  __x64_sys_sendfile64+0x110/0x150
[   59.397842][ T5041]  ip_set_alloc+0x1f/0x30
[   59.402230][ T5064]  x64_sys_call+0xfbd/0x2dc0
[   59.406712][ T5041]  hash_netiface_create+0x273/0x730
[   59.411882][ T5064]  do_syscall_64+0xc9/0x1c0
[   59.416186][ T5041]  ? __nla_parse+0x40/0x60
[   59.420748][ T5064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.425924][ T5041]  ? __pfx_hash_netiface_create+0x10/0x10
[   59.430397][ T5064] 
[   59.430404][ T5064] read to 0xffff8881068af8a4 of 4 bytes by task 5064 on cpu 0:
[   59.434788][ T5041]  ip_set_create+0x359/0x8a0
[   59.441000][ T5064]  xas_find_marked+0x60a/0x660
[   59.446695][ T5041]  ? memchr+0x1/0x50
[   59.449001][ T5064]  find_get_entry+0x54/0x390
[   59.449023][ T5064]  filemap_get_folios_tag+0x9e/0x210
[   59.456537][ T5041]  ? __nla_parse+0x40/0x60
[   59.461093][ T5064]  mpage_prepare_extent_to_map+0x329/0xb80
[   59.465831][ T5041]  nfnetlink_rcv_msg+0x4a9/0x570
[   59.469697][ T5064]  ext4_do_writepages+0x6ea/0x2130
[   59.474389][ T5041]  netlink_rcv_skb+0x12c/0x230
[   59.479571][ T5064]  ext4_writepages+0x159/0x2e0
[   59.483963][ T5041]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   59.489754][ T5064]  do_writepages+0x1d8/0x480
[   59.494668][ T5041]  nfnetlink_rcv+0x16c/0x15d0
[   59.499740][ T5064]  file_write_and_wait_range+0x168/0x2f0
[   59.504472][ T5041]  ? kmem_cache_free+0xdc/0x2d0
[   59.509201][ T5064]  generic_buffers_fsync_noflush+0x46/0x120
[   59.514638][ T5041]  ? nlmon_xmit+0x51/0x60
[   59.519195][ T5064]  ext4_sync_file+0x1ff/0x6c0
[   59.523843][ T5041]  ? __kfree_skb+0x102/0x150
[   59.529447][ T5064]  vfs_fsync_range+0x116/0x130
[   59.529472][ T5064]  ext4_buffered_write_iter+0x326/0x370
[   59.529496][ T5064]  ext4_file_write_iter+0x383/0xf20
[   59.529519][ T5064]  iter_file_splice_write+0x5f1/0x980
[   59.534339][ T5041]  ? consume_skb+0x49/0x160
[   59.540207][ T5064]  direct_splice_actor+0x160/0x2c0
[   59.544508][ T5041]  ? nlmon_xmit+0x51/0x60
[   59.549156][ T5064]  splice_direct_to_actor+0x302/0x670
[   59.553720][ T5041]  ? dev_hard_start_xmit+0x3c1/0x3f0
[   59.558450][ T5064]  do_splice_direct+0xd7/0x150
[   59.563973][ T5041]  ? __dev_queue_xmit+0xb6e/0x2090
[   59.569138][ T5064]  do_sendfile+0x398/0x660
[   59.574491][ T5041]  ? ref_tracker_free+0x3a5/0x410
[   59.578965][ T5064]  __x64_sys_sendfile64+0x110/0x150
[   59.584044][ T5041]  ? __dev_queue_xmit+0x186/0x2090
[   59.588345][ T5064]  x64_sys_call+0xfbd/0x2dc0
[   59.593695][ T5041]  ? __netlink_deliver_tap+0x4c6/0x4f0
[   59.598941][ T5064]  do_syscall_64+0xc9/0x1c0
[   59.603675][ T5041]  netlink_unicast+0x599/0x670
[   59.608749][ T5064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.613177][ T5041]  netlink_sendmsg+0x5cc/0x6e0
[   59.618167][ T5064] 
[   59.618172][ T5064] value changed: 0x0a000021 -> 0x04000021
[   59.623338][ T5041]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.628417][ T5064] 
[   59.628421][ T5064] Reported by Kernel Concurrency Sanitizer on:
[   59.632977][ T5041]  __sock_sendmsg+0x140/0x180
[   59.638411][ T5064] CPU: 0 UID: 0 PID: 5064 Comm: syz.4.448 Tainted: G        W          6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0
[   59.638438][ T5064] Tainted: [W]=WARN
[   59.638444][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   59.638454][ T5064] ==================================================================
[   59.720235][ T5041]  ____sys_sendmsg+0x312/0x410
[   59.725087][ T5041]  __sys_sendmsg+0x19d/0x230
[   59.729733][ T5041]  __x64_sys_sendmsg+0x46/0x50
[   59.734506][ T5041]  x64_sys_call+0x2734/0x2dc0
[   59.739189][ T5041]  do_syscall_64+0xc9/0x1c0
[   59.743725][ T5041]  ? clear_bhb_loop+0x55/0xb0
[   59.748406][ T5041]  ? clear_bhb_loop+0x55/0xb0
[   59.753091][ T5041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.759114][ T5041] RIP: 0033:0x7ff9626eff19
[   59.763543][ T5041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.783171][ T5041] RSP: 002b:00007ff960d67058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.791600][ T5041] RAX: ffffffffffffffda RBX: 00007ff9628b5fa0 RCX: 00007ff9626eff19
[   59.799574][ T5041] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[   59.807548][ T5041] RBP: 00007ff962763986 R08: 0000000000000000 R09: 0000000000000000
[   59.815521][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.823536][ T5041] R13: 0000000000000000 R14: 00007ff9628b5fa0 R15: 00007ffd80b25fb8
[   59.831546][ T5041]  </TASK>
[   59.834960][ T5041] memory: usage 307200kB, limit 307200kB, failcnt 355
[   59.841893][ T5041] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[   59.849805][ T5041] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   59.857165][ T5041] Memory cgroup stats for /syz0:
[   59.857366][ T5041] cache 0
[   59.865224][ T5041] rss 4096
[   59.868274][ T5041] shmem 0
[   59.871208][ T5041] mapped_file 0
[   59.874663][ T5041] dirty 0
[   59.877616][ T5041] writeback 8192
[   59.881149][ T5041] workingset_refault_anon 73
[   59.885725][ T5041] workingset_refault_file 196
[   59.890435][ T5041] swap 200704
[   59.893766][ T5041] swapcached 12288
[   59.897554][ T5041] pgpgin 52081
[   59.900917][ T5041] pgpgout 52078
[   59.904369][ T5041] pgfault 57640
[   59.907843][ T5041] pgmajfault 37
[   59.911297][ T5041] inactive_anon 12288
[   59.915304][ T5041] active_anon 0
[   59.918836][ T5041] inactive_file 0
[   59.922479][ T5041] active_file 0
[   59.925973][ T5041] unevictable 0
[   59.929444][ T5041] hierarchical_memory_limit 314572800
[   59.934810][ T5041] hierarchical_memsw_limit 9223372036854771712
[   59.940983][ T5041] total_cache 0
[   59.944450][ T5041] total_rss 4096
[   59.948025][ T5041] total_shmem 0
[   59.951488][ T5041] total_mapped_file 0
[   59.955514][ T5041] total_dirty 0
[   59.959010][ T5041] total_writeback 8192
[   59.963080][ T5041] total_workingset_refault_anon 73
[   59.968217][ T5041] total_workingset_refault_file 196
[   59.973448][ T5041] total_swap 200704
[   59.977281][ T5041] total_swapcached 12288
[   59.981599][ T5041] total_pgpgin 52082
[   59.985538][ T5041] total_pgpgout 52079
[   59.989568][ T5041] total_pgfault 57651
[   59.993613][ T5041] total_pgmajfault 37
[   59.997667][ T5041] total_inactive_anon 12288
[   60.002151][ T5041] total_active_anon 0
[   60.006168][ T5041] total_inactive_file 0
[   60.010311][ T5041] total_active_file 0
[   60.014263][ T5041] total_unevictable 0
[   60.018233][ T5041] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.441,pid=5040,uid=0
[   60.032780][ T5041] Memory cgroup out of memory: Killed process 5040 (syz.0.441) total-vm:95460kB, anon-rss:616kB, file-rss:22176kB, shmem-rss:128kB, UID:0 pgtables:140kB oom_score_adj:1000
[   60.239106][ T5041] syz.0.441 (5041) used greatest stack depth: 7096 bytes left