last executing test programs:

3.439597194s ago: executing program 0 (id=369):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a5", 0xed}], 0x1}}], 0x1, 0xc0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700"], 0x1ac}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@delchain={0xe8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x44, 0x3, [@m_ife={0x40, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "7dea7fdc03dc266b4394d770e179d0165e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$eJzs2s9qE1EUB+CTP02LCGYtLgbcuCrVJzBICsWAEMlCceFA4yYjwmQzyaoP4hP4PD5JVt1F6oSkURGknUxtvg9CDvlNMucykHsX5+OTz5PzL9NPH75/jaOXSbQjonkZ0Y1mtKLUiI1GdOK6iwAA/jfDYdqruweqlee99OoMd/hbMvpWS0MAAAAAAAAAAADc2L/M/zfN/wPAvVDO/3fqboMK5Xkv7azOb9vM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1uVwuHy3/8qq7PwDg9tn/AWD/2P8BYP/Y/wFg/7x99/51bzDoD5PkKGJxUYyKUfle5qdng/5J8lN3861FUYxa6/x5mSfb+UE8WOUv/ph34tnTMr/KXr0Z/JIfxnn1ywcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuOU7Wuo31p4uiGLXKfHNBN7bysjo9G/RPVhds5+143N7dOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbm87mkzTLxrmiiqIdETu41/HD8mkerJ7q7d8iolHRLyvuZlHffxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCv6Ww+SbNsnE/r7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCums/kkzbJxXmFR9xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvR8BAAD//2/WhiY=")
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000400)) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{&(0x7f0000000680)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000000840)=""/73, 0x49}, {&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000001140)=""/4, 0x4}, {&(0x7f0000001180)=""/86, 0x56}, {&(0x7f0000001200)=""/243, 0xf3}], 0x6, &(0x7f0000001380)=""/39, 0x27}, 0x2}, {{&(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/70, 0x46}, {&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/19, 0x13}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/211, 0xd3}], 0x6, &(0x7f0000001880)=""/175, 0xaf}, 0x1}, {{&(0x7f0000001940)=@nl=@proc, 0x80, &(0x7f0000003ec0)=[{&(0x7f00000019c0)=""/76, 0x4c}, {&(0x7f0000001a40)=""/128, 0x80}, {&(0x7f0000001ac0)=""/19, 0x13}, {&(0x7f0000001b00)=""/131, 0x83}, {&(0x7f0000001bc0)=""/197, 0xc5}, {&(0x7f0000001cc0)=""/156, 0x9c}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/49, 0x31}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/234, 0xea}], 0xa, &(0x7f0000003f80)=""/81, 0x51}, 0x8}, {{&(0x7f0000004000)=@nfc, 0x80, &(0x7f0000006080)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/4096, 0x1000}], 0x2, &(0x7f00000060c0)=""/94, 0x5e}, 0x6}, {{&(0x7f0000006140)=@l2tp, 0x80, &(0x7f00000063c0)=[{&(0x7f00000061c0)=""/196, 0xc4}, {&(0x7f00000062c0)}, {&(0x7f0000006300)=""/183, 0xb7}], 0x3, &(0x7f0000006400)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000007400)=@caif, 0x80, &(0x7f0000007900)=[{&(0x7f0000007480)=""/220, 0xdc}, {&(0x7f0000007580)=""/147, 0x93}, {&(0x7f0000007640)=""/82, 0x52}, {&(0x7f00000076c0)=""/52, 0x34}, {&(0x7f0000007700)=""/236, 0xec}, {&(0x7f0000007800)=""/240, 0xf0}], 0x6, &(0x7f0000007980)=""/209, 0xd1}, 0xd}, {{&(0x7f0000007a80)=@llc, 0x80, &(0x7f0000009080)=[{&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/223, 0xdf}, {&(0x7f0000008c00)=""/228, 0xe4}, {&(0x7f0000008d00)=""/220, 0xdc}, {&(0x7f0000008e00)=""/35, 0x23}, {&(0x7f0000008e40)=""/205, 0xcd}, {&(0x7f0000008f40)=""/241, 0x14a}, {&(0x7f0000009040)=""/18, 0x12}], 0x8, &(0x7f0000009100)=""/254, 0xfe}, 0x4}, {{0x0, 0x0, &(0x7f000000a440)=[{&(0x7f0000009200)=""/172, 0xac}, {&(0x7f00000092c0)=""/4096, 0x1000}, {&(0x7f000000a2c0)=""/193, 0xc1}, {&(0x7f000000a3c0)=""/103, 0x67}], 0x4, &(0x7f000000a480)=""/161, 0xa1}, 0x20000000}], 0x8, 0x0, &(0x7f00000004c0)) (async, rerun: 64)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{0x8}, {0x9, 0x5}, 0x8, 0x2, 0x8}) (async)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
unshare(0x28060500) (async)
r3 = gettid() (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (rerun: 32)
write$selinux_access(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:updpwd_exec_t system_u:'], 0x56)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x1, 0xb, 0x5, 0x0, 0xffffffffffffffec}, @generic={0xfd, 0x3, 0xf, 0xfff, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd8, &(0x7f00000001c0)=""/216, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x10001, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")

3.205763497s ago: executing program 0 (id=375):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x480a, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@nobh}, {@data_err_ignore}]}, 0xfe, 0x79d, &(0x7f0000000740)="$eJzs3c9rHFUcAPDvbJImTauNINh6aU5aKN20NbYKghEPIlgo6Nk2bLYhZpMt2U1pQg4tIggiaPEg6MWzP+rNq+jZv8GLiLRUTYsVD7Iy+yPZ5nfSbDY2nw9M8t7sm33vu7Pz5u3OYyeAPas//ZOJOBIRHyURh+rrk4joqqY6I4Zq5e7Pz+XSJYlK5c0/kmqZe/NzuWjaJnWgnjkcET+8F3E8s7ze0szs+HChkJ+q5wfKE5cHSjOzJ8Ymhkfzo/nJM6cGB0+fff7sme2L9a+fZg/e/vi1Z78Z+ufdp25++GMSQ3Gw/lhzHNulP/rrr0lX+hI+4NXtrqzNknY3gC1JD82O2lEeR+JQdFRTAMCjLD3/VwCAPSZx/geAPabxPcC9+blcY2nvNxI7684rEdFTi79xfbP2SGf9ml1P9Tpo770kOutXRGMbr3f1R8Tn3739VbpEi65DAqzk2vWIuNjXv7z/T5bNWdiskxso078kr/+DnfN9Ov55YaXxX2Zh/BML459F3Sscu1vRH7GvOb/8+M/cWnHDl7eh8vr476Xa3LY00Kbx38Kktb6Oeu6xNHM0IsYK+bRvezwijkVX96WxQv7UGnUcu/vv3dUeax7//XnjnS/T+tP/iyUytzq7H9xmZLg8/DAxN7tzPeLpzsW5ffeX9f891bHu0v2frju/1hMfXUy+/uL7ny3ZdEEafxpvY1kef2tVvoh4JlaOv7nBq89PHEh3/8na35Xr+PaXT3tXq795/6dLWn/js8BOSPd/79rx9yXN8zVL21v/+vGv/P7fl7xVTTc6j6vD5fLUqYh9yRvL159e3LaRb5RP469FujT+zJrv//ST4MUNxth5+/evtx7/gpZMsUzjH9nU/t984ub98Y6tx5/u/8Fq6lh9zUb6v4028GFeOwAAAAAAAAAAAAAAAAAAAAAAAADYqExEHIwkk11IZzLZbO0e3k9Gb6ZQLJWPXypOT45E9V7ZfdGVafzU5aFaPmn8/mlfU/70kvxzEfFERHzSvb+az+aKhZF2Bw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdQdWuf9/6rfudrcOAGiZnnVL3M0/kK1UKpUWtgcAaL31z/8AwKNmjfP//p1sBwCwc3z+B4C9x/kfAPYe538AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa7Py5c+lS+Xt+LpfmR67MTI8Xr5wYyZfGsxPTuWyuOHU5O1osjhby2VxxYr3nKxSLlwdjcvrqQDlfKg+UZmYvTBSnJ8sXxiaGR/MX8l07EhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE5pZnZ8uFDITz0SiQ8iYhc0oxWJJHZFM9qS+PXEz4fXKnNjnbfx0K6IYvcl4toaZdrdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8P/wXAAD//1oOJVo=")
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
creat(0x0, 0xd931d3864d39ddd8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000010000deffffff00000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0), 0x111, 0x8}}, 0x20)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
sysinfo(&(0x7f0000000580)=""/113)
close_range(r9, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.612090877s ago: executing program 1 (id=385):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x13, &(0x7f0000000200)={0x9, 0x0, 0x80000000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890)
get_mempolicy(0x0, 0x0, 0xa, &(0x7f0000a94000/0x4000)=nil, 0x1)
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x2, 0x9, 0x2, 0x5cdb3cfb6f8e7254, 0xf1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0xda, &(0x7f0000000100)=@string={0xda, 0x3, "97cbf2ed3fda28aa6cfef541f1614fd6fd21c084b2c13055a68b9ca59a6613bd9caca8cefe2a2923b914283bdf4064d9098fd853825468834f6bd22cf11a7031de87d2e1016b6551d2f18af22117d6f910194800a654cb77b97034ad64967f2a7f593eb2010ea0ab4352ead945114481590232c0f30c3ed18688e0134a34fc9dba15b95d6412b7ae51372c19cda3d08c39efbd9eea10aa1bc088b027286c5df6cefa755b13e19763dcd0bf21962756909a764e9cc9a09dc16c269b87b7ea558ce9b18876ebeaaded3267d95055bb1c9e528700a02301cbd6"}}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")

2.593030788s ago: executing program 3 (id=386):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000280), 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2.513063749s ago: executing program 3 (id=387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800)

2.163903235s ago: executing program 0 (id=391):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x3, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)='\x00\x00P', 0x0, 0x800004, 0x10030, 0x1, 0x0})

2.141401685s ago: executing program 3 (id=392):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.926457528s ago: executing program 0 (id=394):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT')
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, r4}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0009000000000000274a42ad000000008d03bdf94ab45bb1b39f4c82b743b8bafe7046cb8b282ee191d58ab78ec91f1cdcbf6008330838ede31a7c48c2bf001000002dbc5091898cf3deb61ef624828f75bd857153d3c9ff45c17204ace607e309a6a3e31a11b64f9e92a801193f3d5eeb168176dc963cd3a00c31e248a34cd7f28fce79687e0a1f7641c7d99e7c025abd8527"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)

1.926027938s ago: executing program 3 (id=395):
open(&(0x7f0000000040)='./bus\x00', 0x2a2240, 0x108)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.82704392s ago: executing program 2 (id=396):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x6, 0xf, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

1.663824313s ago: executing program 1 (id=397):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2)

1.505731475s ago: executing program 1 (id=398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xb4, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x77, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c)
close(r7)

1.339641888s ago: executing program 1 (id=399):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="ce", 0x1}], 0x1, 0x932b, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='sched_process_wait\x00', r2, 0x0, 0x4}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x3d8}, &(0x7f0000ff0000), 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

1.174519711s ago: executing program 0 (id=400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
set_tid_address(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000c00000000000000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800fbffffff000000050000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200000000000000000000000000000000000000b9774700"], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/27], 0x50)
dup2(r4, r5)
r6 = socket$inet(0x2, 0x1, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10)
setreuid(0xee00, 0x0)
setpriority(0x2, 0x0, 0xd2f4)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@gettaction={0x110, 0x32, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x4, 0x4, 0xfffffe01}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcca3484}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb43}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x20130c1, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e8713ea727cf0c2f9b664f24e6a52d5c7587738fa9112c9e2e2e3003fa09469b1bbf7531decd9521dac4100ef7b7288e8eb80d93b454a802943010bcbf86146e9929f11461230c84776337c69af38fce6e1460e79218e2bf714d0fcc738783fbf65146ce46a816a9a77c133390a400ea9edd8a08b134211a3474b65e64e10de3309a7615abdb5cf60c5ed872e17d87caf76e29e1fd9bfc99ae77c6cf72df3bbf5e396077901888ddd3894bec76230f116926e502aaf852decc1674feace7fff9673c8000ec509dbbd3f597b18ea3", @ANYRES8], 0x0, 0x243, &(0x7f0000000e00)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

1.100028582s ago: executing program 2 (id=401):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x4e22, 0x0, 'sh\x00', 0x0, 0x1000, 0x4a}, 0x2c) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) (async)
r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x9, 0xa, 0x1) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000200)=""/179, 0xb3) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4050)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', <r5=>0x0, 0x755ecb5740661792, 0x40, 0x1a, 0x7fffffff, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x65, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x4, [{@remote, 0x10001}, {@rand_addr=0x64010101, 0x7fff}]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@deltclass={0x4c, 0x29, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0x2}, {0x9}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x51}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x40000)

925.252915ms ago: executing program 4 (id=402):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18)
socket$netlink(0x10, 0x3, 0x0)

732.984038ms ago: executing program 2 (id=403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0xe5}}]}, 0x38}}, 0x20008154)

732.119858ms ago: executing program 3 (id=404):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="ce", 0x1}], 0x1, 0x932b, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='sched_process_wait\x00', r2, 0x0, 0x4}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x3d8}, &(0x7f0000ff0000), 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

705.761608ms ago: executing program 4 (id=405):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x3, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)='\x00\x00P', 0x0, 0x800004, 0x10030, 0x1, 0x0})

681.993749ms ago: executing program 2 (id=406):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xb)
close(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0x10, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xe, 0x2, 0x6, 0x4}, 0x3ff, 0x1, 0xd9b, 0x0, 0x5, 0x13, 0xc, 0x2, 0x8, 0xf, {0xffffffff, 0x7, 0x7, 0xa, 0x0, 0xb}}}}]}, 0x78}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x18, 0x4000}, 0x18)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000700)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000540)="5c6ee59c465f064200dec7f6f40d9a09ebe07716256a8fa5581f038fe36ced1bf2b435b2e08ec881e493076c1386ce2b21b39ef2ca5997d99c959742a7a2995f3c1e9273cce4614f7f2791ad23d8114d46d6cad79a393903edf4973f9b7ff23e21f658327469993c3b3104f0d44b85c36474ccf914b3784bd2cfdb97a045903b3ddd2b1da740e1fbabb0c8b526cb28f6057ec78ff3a4b5f2f629d017d1d0088b7ee6196316e7b39756f1fb5d10c19dbed23634b2a4427f1c7e77e1bc40e427aeca810ef0d9c10f393bcfa35b", 0xcc}, {&(0x7f0000000640)="29f88c50e9b69340deef40332863eba823ce0a37439eed19a8563ab3b6a8be3656713ca35bf3ecada785bbe590ce9e9ddc73c94fa6849ddc37ae4a8f9261755a66182605693548e8c6f55a5584f2c559aa6520991433333f9e9134df49c3ac62fde7bb181d8146d0ee1d9448c9be83e6bfe13b45395f9181fc7d6ae5b7acd8221cc89e1b50e3ee41e1199f9bd927c617a04ae8db9ac64ef83ac8c0f30b818db8f26549cc3756120195213afc8b5106983d0a3e72b1108a", 0xb7}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000800)="5cea73a49c85346c6a3bde17063a0d1e046d43a3176fc47349cf8bc7415ba18aaad0563b5655187c718bc3f6e3b2b0ade39a87936d2791cc73d6b0659c1641fd7d07cc8c5d58e904aff4273d1bca5cee04b1ab40703bd264f5f52f47f72a2c84df34f29bb70b8070d1802d989bb1e8da6391a52ccfc086dfa7bd35cf426ec4c143ac0c3cace3367a6d5fdccc8cbcdf78d3aee6cefbb424fd0bca9f64d27f00ae4a26c455d5e86af4996db46fe5d1abf43df93c02fe90d7d5c0842998fce29a75b96338697eabf3e68efcf3093a700f142ca9c7fc5bb2e90376add9e51ffa8a7827", 0xe1}], 0x4, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @remote}}}], 0x38}}], 0x1, 0x4000080)
r10 = gettid()
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r11, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r11, 0x4040534e, &(0x7f00000007c0)={0x31, @time={0x0, 0xbdb}, 0x0, {0x0, 0x3}, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r11, 0x408c5333, &(0x7f0000000180)={0x1, 0x81, 0x0, 'queue1\x00', 0x6})
tkill(r10, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

622.41222ms ago: executing program 1 (id=407):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9e28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000a, @void, @value}, 0xff28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)

522.466581ms ago: executing program 4 (id=408):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d8", 0x29}], 0x2)

484.125602ms ago: executing program 4 (id=409):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000280), 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

475.922903ms ago: executing program 3 (id=410):
open(&(0x7f0000000040)='./bus\x00', 0x2a2240, 0x108)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x2, 0xbd2, &(0x7f0000000540)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={0x0, 0x0, <r3=>0x0, &(0x7f0000000340)=""/95, 0x5f}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0)

420.738333ms ago: executing program 4 (id=411):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9e28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000a, @void, @value}, 0xff28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='.]\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
close(0xffffffffffffffff)

361.004374ms ago: executing program 1 (id=412):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$P9_RSETATTR(r1, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x381000, 0x0)
r3 = openat$cgroup_int(r1, &(0x7f0000000300)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000340)=0x7, 0x12)
prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='GPL\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008940), 0x0, 0x40400e4)

322.442275ms ago: executing program 2 (id=413):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9e28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000a, @void, @value}, 0xff28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='.]\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
close(0xffffffffffffffff)

248.700476ms ago: executing program 0 (id=414):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = dup(r1)
mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})

195.064587ms ago: executing program 4 (id=415):
open(&(0x7f0000000040)='./bus\x00', 0x2a2240, 0x108)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

0s ago: executing program 2 (id=416):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x3, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts.
[   28.938648][   T29] audit: type=1400 audit(1750755866.307:62): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.940198][ T3292] cgroup: Unknown subsys name 'net'
[   28.965434][   T29] audit: type=1400 audit(1750755866.307:63): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.999141][   T29] audit: type=1400 audit(1750755866.337:64): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   29.118982][ T3292] cgroup: Unknown subsys name 'cpuset'
[   29.125581][ T3292] cgroup: Unknown subsys name 'rlimit'
[   29.277336][   T29] audit: type=1400 audit(1750755866.637:65): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.301648][   T29] audit: type=1400 audit(1750755866.647:66): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.323976][   T29] audit: type=1400 audit(1750755866.647:67): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.342538][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.345606][   T29] audit: type=1400 audit(1750755866.647:68): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   29.375592][   T29] audit: type=1400 audit(1750755866.647:69): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.397963][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.401195][   T29] audit: type=1400 audit(1750755866.647:70): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   29.434604][   T29] audit: type=1400 audit(1750755866.717:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   31.606514][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   31.669297][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   31.751721][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.760824][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.768889][ T3306] bridge_slave_0: entered allmulticast mode
[   31.778955][ T3306] bridge_slave_0: entered promiscuous mode
[   31.787996][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.798008][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.806123][ T3306] bridge_slave_1: entered allmulticast mode
[   31.813611][ T3306] bridge_slave_1: entered promiscuous mode
[   31.865442][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.876776][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   31.895877][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.906428][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.913869][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.921176][ T3304] bridge_slave_0: entered allmulticast mode
[   31.928794][ T3304] bridge_slave_0: entered promiscuous mode
[   31.954194][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.963524][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.972526][ T3304] bridge_slave_1: entered allmulticast mode
[   31.979327][ T3304] bridge_slave_1: entered promiscuous mode
[   32.006813][ T3306] team0: Port device team_slave_0 added
[   32.032145][ T3306] team0: Port device team_slave_1 added
[   32.046740][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   32.078319][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.088586][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   32.119174][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.144742][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.154315][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.164101][ T3308] bridge_slave_0: entered allmulticast mode
[   32.171023][ T3308] bridge_slave_0: entered promiscuous mode
[   32.179378][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.187504][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.194904][ T3308] bridge_slave_1: entered allmulticast mode
[   32.202260][ T3308] bridge_slave_1: entered promiscuous mode
[   32.209123][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.216313][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.244491][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.273156][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.281011][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.308554][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.341769][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.352734][ T3304] team0: Port device team_slave_0 added
[   32.367634][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.386583][ T3304] team0: Port device team_slave_1 added
[   32.431572][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.439526][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.469836][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.488857][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.497013][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.505275][ T3302] bridge_slave_0: entered allmulticast mode
[   32.512947][ T3302] bridge_slave_0: entered promiscuous mode
[   32.533339][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.543385][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.552652][ T3307] bridge_slave_0: entered allmulticast mode
[   32.560205][ T3307] bridge_slave_0: entered promiscuous mode
[   32.568398][ T3308] team0: Port device team_slave_0 added
[   32.574391][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.581978][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.589664][ T3307] bridge_slave_1: entered allmulticast mode
[   32.596667][ T3307] bridge_slave_1: entered promiscuous mode
[   32.603776][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.611403][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.640150][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.665442][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.673814][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.685590][ T3302] bridge_slave_1: entered allmulticast mode
[   32.693314][ T3302] bridge_slave_1: entered promiscuous mode
[   32.709694][ T3306] hsr_slave_0: entered promiscuous mode
[   32.718444][ T3306] hsr_slave_1: entered promiscuous mode
[   32.728864][ T3308] team0: Port device team_slave_1 added
[   32.756958][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.781067][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.791928][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.807208][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.814485][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.840728][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.852652][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.859851][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.886298][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.909881][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.935069][ T3304] hsr_slave_0: entered promiscuous mode
[   32.941482][ T3304] hsr_slave_1: entered promiscuous mode
[   32.947473][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.955268][ T3304] Cannot create hsr debugfs directory
[   32.961991][ T3302] team0: Port device team_slave_0 added
[   32.986498][ T3307] team0: Port device team_slave_0 added
[   32.993053][ T3302] team0: Port device team_slave_1 added
[   33.012153][ T3307] team0: Port device team_slave_1 added
[   33.065585][ T3308] hsr_slave_0: entered promiscuous mode
[   33.072349][ T3308] hsr_slave_1: entered promiscuous mode
[   33.079519][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   33.089378][ T3308] Cannot create hsr debugfs directory
[   33.095897][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.103476][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.132024][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.148315][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.155604][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.183514][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.209916][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.219256][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.250561][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.267881][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.277792][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.309653][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.402497][ T3307] hsr_slave_0: entered promiscuous mode
[   33.410653][ T3307] hsr_slave_1: entered promiscuous mode
[   33.416809][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   33.425562][ T3307] Cannot create hsr debugfs directory
[   33.456079][ T3302] hsr_slave_0: entered promiscuous mode
[   33.464948][ T3302] hsr_slave_1: entered promiscuous mode
[   33.471551][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   33.481229][ T3302] Cannot create hsr debugfs directory
[   33.544739][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.572162][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.594570][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.611393][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.650668][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.668967][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.678917][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.720083][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.767597][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.785510][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.800063][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.808232][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.837829][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   33.847051][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.858416][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.881956][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   33.899151][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.908677][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.922197][  T272] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.929976][  T272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.948030][  T272] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.955684][  T272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.974707][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.985508][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   34.004724][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.029923][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   34.046611][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   34.067143][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   34.101136][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.109641][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.130610][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.139119][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.241893][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.262435][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.281238][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.293530][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   34.315435][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   34.328779][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.339760][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.348241][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.365176][  T272] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.373660][  T272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.387901][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.413804][  T272] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.425882][  T272] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.449830][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.458791][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.488431][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   34.541271][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.549073][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.571281][  T272] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.579596][  T272] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.602279][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.642147][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   34.654341][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.689910][ T3306] veth0_vlan: entered promiscuous mode
[   34.704816][ T3306] veth1_vlan: entered promiscuous mode
[   34.751211][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.769112][ T3306] veth0_macvtap: entered promiscuous mode
[   34.786608][ T3306] veth1_macvtap: entered promiscuous mode
[   34.820083][ T3304] veth0_vlan: entered promiscuous mode
[   34.835747][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.852790][ T3304] veth1_vlan: entered promiscuous mode
[   34.895862][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.910229][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.928865][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.940838][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.950655][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.965378][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.000147][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.030749][ T3304] veth0_macvtap: entered promiscuous mode
[   35.046711][ T3304] veth1_macvtap: entered promiscuous mode
[   35.056093][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   35.056673][   T29] audit: type=1400 audit(1750755872.417:81): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.zZ4ZYv/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   35.117610][   T29] audit: type=1400 audit(1750755872.417:82): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   35.147291][   T29] audit: type=1400 audit(1750755872.427:83): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.zZ4ZYv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   35.182118][   T29] audit: type=1400 audit(1750755872.427:84): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   35.211927][   T29] audit: type=1400 audit(1750755872.427:85): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.zZ4ZYv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   35.239777][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.248371][   T29] audit: type=1400 audit(1750755872.427:86): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/root/syzkaller.zZ4ZYv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   35.287099][   T29] audit: type=1400 audit(1750755872.427:87): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   35.300989][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.309308][   T29] audit: type=1400 audit(1750755872.467:88): avc:  denied  { mounton } for  pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   35.326113][ T3307] veth0_vlan: entered promiscuous mode
[   35.341913][   T29] audit: type=1400 audit(1750755872.467:89): avc:  denied  { mount } for  pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=4103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   35.364325][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.386657][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.400259][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.414102][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.439618][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.472625][ T3302] veth0_vlan: entered promiscuous mode
[   35.489234][ T3307] veth1_vlan: entered promiscuous mode
[   35.520189][   T29] audit: type=1400 audit(1750755872.877:90): avc:  denied  { read write } for  pid=3306 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.564405][ T3307] veth0_macvtap: entered promiscuous mode
[   35.597029][ T3472] serio: Serial port ttyS3
[   35.625293][ T3307] veth1_macvtap: entered promiscuous mode
[   35.639106][ T3302] veth1_vlan: entered promiscuous mode
[   35.665343][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.709856][ T3308] veth0_vlan: entered promiscuous mode
[   35.724925][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.752027][ T3308] veth1_vlan: entered promiscuous mode
[   35.765660][ T3302] veth0_macvtap: entered promiscuous mode
[   35.777298][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.787832][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.798708][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.813694][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.839855][ T3302] veth1_macvtap: entered promiscuous mode
[   35.851209][ T3478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   35.889297][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.906069][ T3308] veth0_macvtap: entered promiscuous mode
[   35.933994][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.944852][ T3308] veth1_macvtap: entered promiscuous mode
[   35.969671][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.979603][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.990527][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.004404][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.078655][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.102663][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.129113][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.139120][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.149088][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.160734][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.173938][ T3489] xt_hashlimit: max too large, truncated to 1048576
[   36.209305][ T3489] netlink: 8 bytes leftover after parsing attributes in process `����H�A?���N'.
[   36.228122][ T3491] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   36.228122][ T3491]    program +}[@ not setting count and/or reply_len properly
[   36.229187][ T3489] netlink: 8 bytes leftover after parsing attributes in process `����H�A?���N'.
[   36.308058][ T3493] tipc: Started in network mode
[   36.314112][ T3493] tipc: Node identity 4, cluster identity 4711
[   36.321461][ T3493] tipc: Node number set to 4
[   36.367489][ T3500] loop0: detected capacity change from 0 to 512
[   36.490086][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.490107][ T3500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   36.636316][ T3500] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   36.682725][ T3511] loop4: detected capacity change from 0 to 1024
[   36.704147][ T3500] EXT4-fs (loop0): 1 truncate cleaned up
[   36.724810][ T3518] serio: Serial port ttyS3
[   36.725279][ T3516] loop1: detected capacity change from 0 to 512
[   36.743407][ T3516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   36.758067][ T3516] System zones: 1-12
[   36.765818][ T3516] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.13: corrupted in-inode xattr: invalid ea_ino
[   36.781569][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.803129][ T3500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.833597][ T3516] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.13: couldn't read orphan inode 15 (err -117)
[   36.863681][ T3507] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28
[   36.878810][ T3507] EXT4-fs (loop4): This should not happen!! Data will be lost
[   36.878810][ T3507] 
[   36.890796][ T3507] EXT4-fs (loop4): Total free blocks count 0
[   36.894238][ T3516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.898376][ T3507] EXT4-fs (loop4): Free/Dirty block details
[   36.898400][ T3507] EXT4-fs (loop4): free_blocks=0
[   36.928909][ T3507] EXT4-fs (loop4): dirty_blocks=0
[   36.930557][ T3500] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   36.934718][ T3507] EXT4-fs (loop4): Block reservation details
[   36.948570][ T3507] EXT4-fs (loop4): i_reserved_data_blocks=0
[   36.953508][ T3500] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1'.
[   36.974635][ T3524] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   36.974635][ T3524]    program +}[@ not setting count and/or reply_len properly
[   37.017707][ T3527] loop2: detected capacity change from 0 to 1024
[   37.065787][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.094366][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.148318][ T3527] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28
[   37.152922][ T3534] syz.1.19 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   37.166925][ T3527] EXT4-fs (loop2): This should not happen!! Data will be lost
[   37.166925][ T3527] 
[   37.200536][ T3527] EXT4-fs (loop2): Total free blocks count 0
[   37.207320][ T3527] EXT4-fs (loop2): Free/Dirty block details
[   37.214417][ T3527] EXT4-fs (loop2): free_blocks=0
[   37.221459][ T3527] EXT4-fs (loop2): dirty_blocks=0
[   37.227354][ T3527] EXT4-fs (loop2): Block reservation details
[   37.234070][ T3527] EXT4-fs (loop2): i_reserved_data_blocks=0
[   37.258124][ T3507] syz.4.5 (3507) used greatest stack depth: 10040 bytes left
[   37.311533][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.332392][ T3540] serio: Serial port ttyS3
[   37.359592][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.391983][ T3542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.476965][ T3545] loop1: detected capacity change from 0 to 1024
[   37.489953][ T3545] EXT4-fs: Ignoring removed orlov option
[   37.502018][ T3545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.531344][ T3548] loop4: detected capacity change from 0 to 512
[   37.547146][ T3548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   37.558371][ T3548] System zones: 1-12
[   37.562849][ T3548] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.25: corrupted in-inode xattr: invalid ea_ino
[   37.580726][ T3548] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.25: couldn't read orphan inode 15 (err -117)
[   37.597006][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.685623][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.699680][ T3545] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.24: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   37.726843][ T3553] loop0: detected capacity change from 0 to 512
[   37.735664][ T3553] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   37.791779][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.816365][ T3553] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6
[   38.031579][ T3574] tipc: Started in network mode
[   38.037354][ T3574] tipc: Node identity 4, cluster identity 4711
[   38.044120][ T3574] tipc: Node number set to 4
[   38.083165][ T3576] tipc: Started in network mode
[   38.088747][ T3576] tipc: Node identity 4, cluster identity 4711
[   38.096922][ T3576] tipc: Node number set to 4
[   38.489116][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.516104][ T3584] loop3: detected capacity change from 0 to 2048
[   38.538440][ T3584] EXT4-fs: Ignoring removed nobh option
[   38.576524][ T3589] loop0: detected capacity change from 0 to 1024
[   38.602548][ T3589] EXT4-fs: Ignoring removed orlov option
[   38.619654][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.643150][ T3593] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   38.643150][ T3593]    program +}[@ not setting count and/or reply_len properly
[   38.668042][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.672338][ T3596] serio: Serial port ttyS3
[   38.726450][    C0] hrtimer: interrupt took 27612 ns
[   38.796282][ T3589] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.40: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   38.823876][ T3589] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.40: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   38.825524][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.031345][ T3617] tipc: Started in network mode
[   39.038154][ T3617] tipc: Node identity 4, cluster identity 4711
[   39.045122][ T3617] tipc: Node number set to 4
[   39.342721][ T3622] loop4: detected capacity change from 0 to 512
[   39.365170][ T3622] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   39.390983][ T3628] loop2: detected capacity change from 0 to 1024
[   39.413403][ T3628] EXT4-fs: Ignoring removed orlov option
[   39.429722][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.461729][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.507403][ T3622] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6
[   39.572753][ T3642] pim6reg: entered allmulticast mode
[   39.578972][ T3628] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.63: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   39.603909][ T3628] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.63: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   39.630830][ T3644] Zero length message leads to an empty skb
[   39.637285][ T3642] pim6reg: left allmulticast mode
[   39.666935][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.699514][ T3642] loop1: detected capacity change from 0 to 512
[   39.764643][ T3646] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   39.764643][ T3646]    program +}[@ not setting count and/or reply_len properly
[   39.783494][ T3642] EXT4-fs: Ignoring removed bh option
[   39.861973][ T3642] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.021202][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'.
[   40.033001][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'.
[   40.077628][ T3663] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   40.077628][ T3663]    program +}[@ not setting count and/or reply_len properly
[   40.097291][ T3661] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   40.097291][ T3661]    program +}[@ not setting count and/or reply_len properly
[   40.177217][ T3672] loop3: detected capacity change from 0 to 1024
[   40.223052][ T3672] EXT4-fs: Ignoring removed orlov option
[   40.254345][ T3672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.289378][   T29] kauditd_printk_skb: 253 callbacks suppressed
[   40.289395][   T29] audit: type=1326 audit(1750755877.657:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.315362][ T3682] pim6reg: entered allmulticast mode
[   40.325989][   T29] audit: type=1326 audit(1750755877.657:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.359237][   T29] audit: type=1326 audit(1750755877.657:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.386507][   T29] audit: type=1326 audit(1750755877.657:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.390350][ T3685] pim6reg: left allmulticast mode
[   40.412729][   T29] audit: type=1326 audit(1750755877.657:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.444131][   T29] audit: type=1326 audit(1750755877.667:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.472052][   T29] audit: type=1326 audit(1750755877.667:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.501381][   T29] audit: type=1326 audit(1750755877.667:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.527849][   T29] audit: type=1326 audit(1750755877.667:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.554852][   T29] audit: type=1326 audit(1750755877.667:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92985ae929 code=0x7ffc0000
[   40.630548][ T3672] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.71: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   40.652600][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'.
[   40.662730][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   40.673310][ T3691] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.71: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   40.702971][ T3682] loop4: detected capacity change from 0 to 512
[   40.711946][ T3682] EXT4-fs: Ignoring removed bh option
[   40.728803][ T3675] loop2: detected capacity change from 0 to 512
[   40.739095][ T3682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.774292][ T3696] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   40.774292][ T3696]    program +}[@ not setting count and/or reply_len properly
[   40.870239][ T3675] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   40.918990][ T3675] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6
[   41.073689][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.279609][ T3732] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   41.279609][ T3732]    program +}[@ not setting count and/or reply_len properly
[   41.458532][ T3734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'.
[   41.612804][ T3746] loop2: detected capacity change from 0 to 512
[   41.681807][ T3749] 9pnet_fd: Insufficient options for proto=fd
[   41.689863][ T3749] netlink: 'syz.4.97': attribute type 13 has an invalid length.
[   41.759418][ T3749] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.767878][ T3749] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.855891][ T3749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.867207][ T3749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.915326][ T3749] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.925001][ T3749] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.935304][ T3749] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.945235][ T3749] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.020564][ T3751] loop0: detected capacity change from 0 to 1024
[   42.051821][ T3751] EXT4-fs: Ignoring removed orlov option
[   42.058925][ T3746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   42.068481][ T3746] System zones: 1-12
[   42.084913][ T3746] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.98: corrupted in-inode xattr: invalid ea_ino
[   42.086154][ T3751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.108772][ T3746] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.98: couldn't read orphan inode 15 (err -117)
[   42.145349][ T3746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.221474][ T3755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'.
[   42.247044][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.299345][ T3751] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.100: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   42.337906][ T3760] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.100: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   42.424216][ T3764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.115'.
[   42.544205][ T3772] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   42.544205][ T3772]    program +}[@ not setting count and/or reply_len properly
[   42.963216][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.013040][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'.
[   43.025659][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'.
[   43.103299][ T3789] loop4: detected capacity change from 0 to 512
[   43.111669][ T3789] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   43.221007][ T3792] loop3: detected capacity change from 0 to 512
[   43.230343][ T3789] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6
[   43.271052][ T3792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   43.312066][ T3792] System zones: 1-12
[   43.324554][ T3792] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.113: corrupted in-inode xattr: invalid ea_ino
[   43.384614][ T3792] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.113: couldn't read orphan inode 15 (err -117)
[   43.442465][ T3792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.472608][ T3805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.120'.
[   43.544729][ T3809] loop0: detected capacity change from 0 to 2048
[   43.578114][ T3809] EXT4-fs: Ignoring removed nobh option
[   43.584257][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.619691][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.692789][ T3817] loop2: detected capacity change from 0 to 1024
[   43.708476][ T3817] EXT4-fs: Ignoring removed orlov option
[   43.785567][ T3817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.810166][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.001083][ T3829] loop4: detected capacity change from 0 to 1024
[   44.042797][ T3817] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.125: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   44.079592][ T3829] =======================================================
[   44.079592][ T3829] WARNING: The mand mount option has been deprecated and
[   44.079592][ T3829]          and is ignored by this kernel. Remove the mand
[   44.079592][ T3829]          option from the mount to silence this warning.
[   44.079592][ T3829] =======================================================
[   44.088623][ T3817] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.125: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   44.175092][ T3833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'.
[   44.201033][ T3833] vlan2: entered promiscuous mode
[   44.208268][ T3833] team0: entered promiscuous mode
[   44.223187][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.235997][ T3833] team_slave_0: entered promiscuous mode
[   44.242318][ T3833] team_slave_1: entered promiscuous mode
[   44.328399][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.366354][ T3840] loop0: detected capacity change from 0 to 1024
[   44.377993][ T3840] EXT4-fs: Ignoring removed orlov option
[   44.411544][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.458271][ T3845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.134'.
[   44.526791][ T3840] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.133: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   44.555337][ T3840] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.133: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   44.616011][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.660024][ T3852] loop1: detected capacity change from 0 to 2048
[   44.682152][ T3854] loop0: detected capacity change from 0 to 1024
[   44.687123][ T3852] EXT4-fs: Ignoring removed nobh option
[   44.703347][ T3854] EXT4-fs: Ignoring removed orlov option
[   44.729967][ T3854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.752504][ T3852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.781800][ T3854] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.138: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   44.801795][ T3854] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.138: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   44.822148][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.844993][ T3855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'.
[   44.904530][ T3864] loop1: detected capacity change from 0 to 512
[   44.930444][ T3864] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   44.934720][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.040753][ T3864] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6
[   45.332811][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.385713][ T3888] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   45.385713][ T3888]    program +}[@ not setting count and/or reply_len properly
[   45.402375][ T3890] loop3: detected capacity change from 0 to 2048
[   45.424509][ T3892] loop0: detected capacity change from 0 to 1024
[   45.461180][ T3890] EXT4-fs: Ignoring removed nobh option
[   45.469654][ T3892] EXT4-fs: Ignoring removed orlov option
[   45.567083][ T3906] loop1: detected capacity change from 0 to 1024
[   45.567471][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.602081][ T3906] EXT4-fs: Ignoring removed orlov option
[   45.603358][ T3892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.663941][ T3906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.683296][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.718601][ T3914] loop4: detected capacity change from 0 to 1024
[   45.733141][   T29] kauditd_printk_skb: 130 callbacks suppressed
[   45.733157][   T29] audit: type=1400 audit(1750755883.097:484): avc:  denied  { read write } for  pid=3915 comm="syz.2.160" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   45.751411][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.768698][   T29] audit: type=1400 audit(1750755883.097:485): avc:  denied  { open } for  pid=3915 comm="syz.2.160" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   45.769292][   T29] audit: type=1400 audit(1750755883.117:486): avc:  denied  { getopt } for  pid=3915 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   45.778073][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.778105][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.778130][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.851899][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.860413][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.868455][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.877686][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.880064][ T3914] EXT4-fs: Ignoring removed orlov option
[   45.886000][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.902429][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.910880][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.919211][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.927610][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.935801][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.942928][ T3892] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.148: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   45.943909][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.961919][ T3906] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.156: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   45.970277][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   45.997053][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.000976][ T3917] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.148: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   46.005330][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.032214][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.041211][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.049793][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.058641][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.066969][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.076394][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.085310][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.095761][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.103608][ T3920] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.156: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   46.103952][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.130931][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.139296][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.147467][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.151539][ T3914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.156191][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.178338][ T1041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   46.187121][ T1041] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   46.218409][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.234387][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.281045][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'.
[   46.296816][ T3924] loop3: detected capacity change from 0 to 512
[   46.338858][ T3922] fido_id[3922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   46.398687][ T3931] tipc: Started in network mode
[   46.403914][ T3931] tipc: Node identity 4, cluster identity 4711
[   46.412060][ T3931] tipc: Node number set to 4
[   46.476351][   T29] audit: type=1400 audit(1750755883.797:487): avc:  denied  { create } for  pid=3934 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   46.498340][   T29] audit: type=1400 audit(1750755883.797:488): avc:  denied  { connect } for  pid=3934 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   46.519761][   T29] audit: type=1400 audit(1750755883.807:489): avc:  denied  { map } for  pid=3934 comm="syz.2.166" path="socket:[6224]" dev="sockfs" ino=6224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   46.544939][   T29] audit: type=1400 audit(1750755883.807:490): avc:  denied  { read } for  pid=3934 comm="syz.2.166" path="socket:[6224]" dev="sockfs" ino=6224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   46.657384][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.668586][ T3924] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   46.721912][ T3924] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6
[   46.732752][ T3945] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3945 comm=syz.4.169
[   46.746875][ T3942] loop2: detected capacity change from 0 to 2048
[   46.778574][ T3945] __nla_validate_parse: 1 callbacks suppressed
[   46.778595][ T3945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'.
[   46.795550][ T3942] EXT4-fs: Ignoring removed nobh option
[   46.823967][ T3945] netem: change failed
[   46.842576][ T3942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.977934][   T29] audit: type=1400 audit(1750755884.327:491): avc:  denied  { create } for  pid=3956 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   47.004176][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.132208][ T3970] 9pnet_fd: Insufficient options for proto=fd
[   47.141373][ T3970] netlink: 'syz.1.174': attribute type 13 has an invalid length.
[   47.221427][ T3968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.179'.
[   47.313269][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.322322][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.409392][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.420566][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.474153][ T3970] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.484224][ T3970] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.494795][ T3970] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.504977][ T3970] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.609381][ T3977] loop3: detected capacity change from 0 to 1024
[   47.642543][ T3977] EXT4-fs: Ignoring removed orlov option
[   47.663651][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.908587][ T4003] loop1: detected capacity change from 0 to 512
[   47.924085][ T4005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'.
[   47.937312][ T4003] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   48.003548][ T4003] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6
[   48.020059][ T4011] loop4: detected capacity change from 0 to 512
[   48.049725][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.074401][ T4011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   48.090698][ T4011] System zones: 1-12
[   48.097529][ T4011] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.194: corrupted in-inode xattr: invalid ea_ino
[   48.117014][ T4011] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.194: couldn't read orphan inode 15 (err -117)
[   48.142151][ T4011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.210551][ T4016] netlink: 92 bytes leftover after parsing attributes in process `syz.3.196'.
[   48.254850][ T4020] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   48.254850][ T4020]    program +}[@ not setting count and/or reply_len properly
[   48.281287][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.559846][ T4036] 9pnet_fd: Insufficient options for proto=fd
[   48.571521][ T4036] netlink: 'syz.4.199': attribute type 13 has an invalid length.
[   48.834748][ T4038] loop0: detected capacity change from 0 to 512
[   49.031451][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.084460][ T4038] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   49.118540][ T4054] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   49.136198][   T29] audit: type=1400 audit(1750755886.467:492): avc:  denied  { connect } for  pid=4051 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.164814][   T29] audit: type=1400 audit(1750755886.467:493): avc:  denied  { name_connect } for  pid=4051 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   49.242179][ T4057] loop2: detected capacity change from 0 to 2048
[   49.256475][ T4057] EXT4-fs: Ignoring removed nobh option
[   49.271782][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[   49.331415][ T4057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.454108][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.549053][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.740396][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'.
[   49.811576][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'.
[   49.875446][ T4086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4086 comm=syz.4.221
[   49.898127][ T4086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.221'.
[   49.973735][ T4086] netem: change failed
[   50.159898][ T4102] 9pnet_fd: Insufficient options for proto=fd
[   50.171442][ T4102] netlink: 'syz.2.222': attribute type 13 has an invalid length.
[   50.400319][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.409269][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.480317][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.492163][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.563747][ T4102] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.574599][ T4102] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.585400][ T4102] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.596089][ T4102] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.730088][ T4112] loop3: detected capacity change from 0 to 512
[   50.765137][   T29] kauditd_printk_skb: 11 callbacks suppressed
[   50.765271][   T29] audit: type=1326 audit(1750755888.127:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   50.847223][ T4112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   50.852937][   T29] audit: type=1326 audit(1750755888.167:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   50.884520][ T4112] System zones: 1-12
[   50.887922][   T29] audit: type=1326 audit(1750755888.247:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   50.890281][ T4112] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.229: corrupted in-inode xattr: invalid ea_ino
[   50.942590][ T4128] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[   50.964098][ T4112] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.229: couldn't read orphan inode 15 (err -117)
[   50.992478][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[   50.993015][ T4112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.020249][   T29] audit: type=1326 audit(1750755888.357:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.055547][   T29] audit: type=1326 audit(1750755888.357:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.090895][   T29] audit: type=1326 audit(1750755888.357:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.131000][   T29] audit: type=1326 audit(1750755888.357:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.158583][   T29] audit: type=1326 audit(1750755888.357:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.189294][   T29] audit: type=1326 audit(1750755888.357:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.222233][   T29] audit: type=1326 audit(1750755888.367:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4116 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de6be929 code=0x7ffc0000
[   51.253201][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.275621][ T4141] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4141 comm=syz.1.240
[   51.522648][ T4157] loop3: detected capacity change from 0 to 2048
[   51.534150][ T4157] EXT4-fs: Ignoring removed nobh option
[   51.553809][ T4157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.651217][ T4167] loop0: detected capacity change from 0 to 512
[   51.680900][ T4167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   51.709852][ T4167] System zones: 1-12
[   51.715721][ T4167] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.250: corrupted in-inode xattr: invalid ea_ino
[   51.749266][ T4167] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.250: couldn't read orphan inode 15 (err -117)
[   51.767376][ T4167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.819674][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.910509][ T4173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.252'.
[   52.115745][ T4183] loop0: detected capacity change from 0 to 1024
[   52.153844][ T4183] EXT4-fs: Ignoring removed oldalloc option
[   52.175144][ T4183] EXT4-fs: Ignoring removed orlov option
[   52.209103][ T4183] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   52.261790][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.374741][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.393188][ T4183] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   52.395080][ T4195] FAULT_INJECTION: forcing a failure.
[   52.395080][ T4195] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   52.434410][ T4195] CPU: 1 UID: 0 PID: 4195 Comm: syz.2.260 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) 
[   52.434461][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.434550][ T4195] Call Trace:
[   52.434558][ T4195]  <TASK>
[   52.434566][ T4195]  __dump_stack+0x1d/0x30
[   52.434589][ T4195]  dump_stack_lvl+0xe8/0x140
[   52.434666][ T4195]  dump_stack+0x15/0x1b
[   52.434683][ T4195]  should_fail_ex+0x265/0x280
[   52.434714][ T4195]  should_fail+0xb/0x20
[   52.434740][ T4195]  should_fail_usercopy+0x1a/0x20
[   52.434838][ T4195]  strncpy_from_user+0x25/0x230
[   52.434931][ T4195]  ? kmem_cache_alloc_noprof+0x186/0x310
[   52.434977][ T4195]  ? getname_flags+0x80/0x3b0
[   52.435014][ T4195]  getname_flags+0xae/0x3b0
[   52.435092][ T4195]  do_sys_openat2+0x60/0x110
[   52.435128][ T4195]  __x64_sys_openat+0xf2/0x120
[   52.435202][ T4195]  x64_sys_call+0x1af/0x2fb0
[   52.435223][ T4195]  do_syscall_64+0xd2/0x200
[   52.435246][ T4195]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.444079][ T4195]  ? clear_bhb_loop+0x40/0x90
[   52.444131][ T4195]  ? clear_bhb_loop+0x40/0x90
[   52.444193][ T4195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.444269][ T4195] RIP: 0033:0x7fc33433e929
[   52.444304][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.444329][ T4195] RSP: 002b:00007fc3329a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   52.444372][ T4195] RAX: ffffffffffffffda RBX: 00007fc334565fa0 RCX: 00007fc33433e929
[   52.444428][ T4195] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   52.444444][ T4195] RBP: 00007fc3329a7090 R08: 0000000000000000 R09: 0000000000000000
[   52.444473][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.444566][ T4195] R13: 0000000000000000 R14: 00007fc334565fa0 R15: 00007ffce1d41778
[   52.444596][ T4195]  </TASK>
[   52.449130][ T4183] FAULT_INJECTION: forcing a failure.
[   52.449130][ T4183] name failslab, interval 1, probability 0, space 0, times 1
[   52.733799][ T4197] loop2: detected capacity change from 0 to 1024
[   52.745133][ T4183] CPU: 0 UID: 0 PID: 4183 Comm: syz.0.256 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) 
[   52.745194][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.745211][ T4183] Call Trace:
[   52.745221][ T4183]  <TASK>
[   52.745237][ T4183]  __dump_stack+0x1d/0x30
[   52.745267][ T4183]  dump_stack_lvl+0xe8/0x140
[   52.745298][ T4183]  dump_stack+0x15/0x1b
[   52.745502][ T4183]  should_fail_ex+0x265/0x280
[   52.745552][ T4183]  should_failslab+0x8c/0xb0
[   52.745607][ T4183]  kmem_cache_alloc_noprof+0x50/0x310
[   52.745644][ T4183]  ? getname_flags+0x80/0x3b0
[   52.745708][ T4183]  getname_flags+0x80/0x3b0
[   52.745749][ T4183]  path_setxattrat+0x223/0x310
[   52.745808][ T4183]  __x64_sys_setxattr+0x6e/0x90
[   52.745849][ T4183]  x64_sys_call+0x28a7/0x2fb0
[   52.745928][ T4183]  do_syscall_64+0xd2/0x200
[   52.745954][ T4183]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.745993][ T4183]  ? clear_bhb_loop+0x40/0x90
[   52.746084][ T4183]  ? clear_bhb_loop+0x40/0x90
[   52.746115][ T4183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.746145][ T4183] RIP: 0033:0x7fc0de6be929
[   52.746169][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.746195][ T4183] RSP: 002b:00007fc0dcd27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[   52.746223][ T4183] RAX: ffffffffffffffda RBX: 00007fc0de8e5fa0 RCX: 00007fc0de6be929
[   52.746240][ T4183] RDX: 0000200000000700 RSI: 0000200000000100 RDI: 00002000000000c0
[   52.746261][ T4183] RBP: 00007fc0dcd27090 R08: 0000000000000002 R09: 0000000000000000
[   52.746278][ T4183] R10: 0000000000000381 R11: 0000000000000246 R12: 0000000000000001
[   52.746303][ T4183] R13: 0000000000000000 R14: 00007fc0de8e5fa0 R15: 00007ffd7a89ab18
[   52.746331][ T4183]  </TASK>
[   53.093491][ T4197] EXT4-fs: Ignoring removed orlov option
[   53.123850][ T4197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.243295][ T4205] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   53.243295][ T4205]    program +}[@ not setting count and/or reply_len properly
[   53.288021][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.311097][ T4208] loop3: detected capacity change from 0 to 512
[   53.360935][ T4208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.395292][ T4208] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   53.423921][ T4212] loop4: detected capacity change from 0 to 1024
[   53.487238][ T4212] EXT4-fs: Ignoring removed orlov option
[   53.497422][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'.
[   53.585013][ T4212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.649446][ T4216] loop0: detected capacity change from 0 to 512
[   53.652796][ T4212] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.267: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   53.699202][ T4212] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.267: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   53.733674][ T4216] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   53.734811][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.830156][ T4216] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6
[   53.933628][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.115186][ T4228] loop3: detected capacity change from 0 to 2048
[   54.133805][ T4229] 9pnet_fd: Insufficient options for proto=fd
[   54.144550][ T4229] netlink: 'syz.2.270': attribute type 13 has an invalid length.
[   54.193460][ T4228] EXT4-fs: Ignoring removed nobh option
[   54.301659][ T4228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.542027][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.608855][ T4235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.272'.
[   54.804161][ T4240] loop4: detected capacity change from 0 to 1024
[   54.827186][ T4242] netlink: 'syz.2.274': attribute type 4 has an invalid length.
[   54.857076][ T4240] EXT4-fs: Ignoring removed orlov option
[   54.901113][ T4244] loop0: detected capacity change from 0 to 1024
[   54.921070][ T4240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.933590][ T4244] EXT4-fs: Ignoring removed orlov option
[   55.010558][ T4244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.040684][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.059089][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.150876][ T4256] loop1: detected capacity change from 0 to 1024
[   55.170539][ T4256] EXT4-fs: Ignoring removed orlov option
[   55.210361][ T4244] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.275: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   55.210914][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.238227][ T4244] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.275: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   55.383120][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'.
[   55.410450][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[   55.779203][ T4278] loop0: detected capacity change from 0 to 1024
[   55.792788][ T4278] EXT4-fs: Ignoring removed orlov option
[   55.878411][   T29] kauditd_printk_skb: 50 callbacks suppressed
[   55.878488][   T29] audit: type=1326 audit(1750755893.247:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   55.926608][ T4287] loop3: detected capacity change from 0 to 2048
[   55.952092][   T29] audit: type=1326 audit(1750755893.247:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   55.989558][   T29] audit: type=1326 audit(1750755893.247:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.014191][ T4287] EXT4-fs: Ignoring removed nobh option
[   56.024368][   T29] audit: type=1326 audit(1750755893.247:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.057486][ T4293] loop0: detected capacity change from 0 to 1024
[   56.063305][   T29] audit: type=1326 audit(1750755893.247:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.100331][ T4293] EXT4-fs: Ignoring removed orlov option
[   56.102717][   T29] audit: type=1326 audit(1750755893.247:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.137524][   T29] audit: type=1326 audit(1750755893.247:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.167059][   T29] audit: type=1326 audit(1750755893.247:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.195498][   T29] audit: type=1326 audit(1750755893.247:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.221670][   T29] audit: type=1326 audit(1750755893.247:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65d0d6e929 code=0x7ffc0000
[   56.380402][ T4306] xt_hashlimit: max too large, truncated to 1048576
[   56.396007][ T4306] netlink: 8 bytes leftover after parsing attributes in process `����H�A?���N'.
[   56.408405][ T4306] netlink: 8 bytes leftover after parsing attributes in process `����H�A?���N'.
[   56.452034][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   56.509764][ T4317] netlink: 'syz.4.301': attribute type 4 has an invalid length.
[   56.571233][ T4329] loop4: detected capacity change from 0 to 128
[   56.640381][ T4331] loop1: detected capacity change from 0 to 1024
[   56.651001][ T4331] EXT4-fs: Ignoring removed orlov option
[   56.737674][ T4337] loop1: detected capacity change from 0 to 512
[   56.754855][ T4337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   56.776103][ T4337] System zones: 1-12
[   56.799104][ T4337] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.309: corrupted in-inode xattr: invalid ea_ino
[   56.838963][ T4337] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.309: couldn't read orphan inode 15 (err -117)
[   56.861375][ T4338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[   57.186615][ T4348] program syz.1.312 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   57.433572][ T4353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4353 comm=syz.1.314
[   57.502475][ T4353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'.
[   57.604887][ T4358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.316'.
[   57.616439][ T4353] netem: change failed
[   57.675669][ T4358] loop2: detected capacity change from 0 to 512
[   57.795346][ T4358] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.820123][ T4366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   57.820123][ T4366]    program +}[@ not setting count and/or reply_len properly
[   57.879529][ T4358] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.316: corrupted xattr block 33: e_value out of bounds
[   57.912960][ T4369] loop0: detected capacity change from 0 to 2048
[   57.941497][ T4369] EXT4-fs: Ignoring removed nobh option
[   57.989126][ T4358] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   58.003916][ T4358] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.316: corrupted xattr block 33: e_value out of bounds
[   58.005829][ T4359] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.316: corrupted xattr block 33: e_value out of bounds
[   58.050941][ T4359] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   58.058292][ T4358] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   58.203591][ T4389] loop4: detected capacity change from 0 to 1024
[   58.210097][ T4391] loop2: detected capacity change from 0 to 512
[   58.224909][ T4389] EXT4-fs: Ignoring removed orlov option
[   58.264594][ T4399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'.
[   58.280903][ T4398] FAULT_INJECTION: forcing a failure.
[   58.280903][ T4398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.297631][ T4398] CPU: 1 UID: 0 PID: 4398 Comm: syz.3.331 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) 
[   58.297665][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   58.297693][ T4398] Call Trace:
[   58.297702][ T4398]  <TASK>
[   58.297711][ T4398]  __dump_stack+0x1d/0x30
[   58.297799][ T4398]  dump_stack_lvl+0xe8/0x140
[   58.297819][ T4398]  dump_stack+0x15/0x1b
[   58.297846][ T4398]  should_fail_ex+0x265/0x280
[   58.297891][ T4398]  should_fail+0xb/0x20
[   58.297926][ T4398]  should_fail_usercopy+0x1a/0x20
[   58.297964][ T4398]  _copy_to_user+0x20/0xa0
[   58.298054][ T4398]  simple_read_from_buffer+0xb5/0x130
[   58.298119][ T4398]  proc_fail_nth_read+0x100/0x140
[   58.298162][ T4398]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   58.298211][ T4398]  vfs_read+0x19d/0x6f0
[   58.298263][ T4398]  ? __rcu_read_unlock+0x4f/0x70
[   58.298285][ T4398]  ? __fget_files+0x184/0x1c0
[   58.298307][ T4398]  ksys_read+0xda/0x1a0
[   58.298341][ T4398]  __x64_sys_read+0x40/0x50
[   58.298382][ T4398]  x64_sys_call+0x2d77/0x2fb0
[   58.298458][ T4398]  do_syscall_64+0xd2/0x200
[   58.298482][ T4398]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   58.298524][ T4398]  ? clear_bhb_loop+0x40/0x90
[   58.298555][ T4398]  ? clear_bhb_loop+0x40/0x90
[   58.298653][ T4398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.298692][ T4398] RIP: 0033:0x7f65d0d6d33c
[   58.298717][ T4398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   58.298746][ T4398] RSP: 002b:00007f65cf3d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   58.298782][ T4398] RAX: ffffffffffffffda RBX: 00007f65d0f95fa0 RCX: 00007f65d0d6d33c
[   58.298798][ T4398] RDX: 000000000000000f RSI: 00007f65cf3d70a0 RDI: 0000000000000006
[   58.298811][ T4398] RBP: 00007f65cf3d7090 R08: 0000000000000000 R09: 0000000000000000
[   58.298826][ T4398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.298851][ T4398] R13: 0000000000000000 R14: 00007f65d0f95fa0 R15: 00007fff6595c3f8
[   58.298886][ T4398]  </TASK>
[   58.305216][ T4391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   58.349711][ T4399] netem: change failed
[   58.366183][ T4391] System zones: 1-12
[   58.603332][ T4391] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.327: corrupted in-inode xattr: invalid ea_ino
[   58.630440][ T4391] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.327: couldn't read orphan inode 15 (err -117)
[   58.686998][ T4408] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   58.686998][ T4408]    program +}[@ not setting count and/or reply_len properly
[   58.861809][ T4422] loop4: detected capacity change from 0 to 1024
[   58.874518][ T4422] EXT4-fs: Ignoring removed orlov option
[   58.904218][ T4426] loop3: detected capacity change from 0 to 1024
[   58.933437][ T4426] EXT4-fs: Ignoring removed orlov option
[   59.035609][ T4434] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   59.035609][ T4434]    program +}[@ not setting count and/or reply_len properly
[   59.118433][ T4436] loop1: detected capacity change from 0 to 2048
[   59.141492][ T4436] EXT4-fs: Ignoring removed nobh option
[   59.203570][ T4446] loop0: detected capacity change from 0 to 512
[   59.214387][ T4446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   59.244007][ T4446] System zones: 1-12
[   59.278694][ T4446] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.354: corrupted in-inode xattr: invalid ea_ino
[   59.316878][ T4446] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.354: couldn't read orphan inode 15 (err -117)
[   59.424349][ T4466] loop3: detected capacity change from 0 to 1024
[   59.436931][ T4466] EXT4-fs: Ignoring removed orlov option
[   59.501462][ T4471] FAULT_INJECTION: forcing a failure.
[   59.501462][ T4471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.534662][ T4471] CPU: 1 UID: 0 PID: 4471 Comm: syz.2.359 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) 
[   59.534733][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   59.534746][ T4471] Call Trace:
[   59.534753][ T4471]  <TASK>
[   59.534761][ T4471]  __dump_stack+0x1d/0x30
[   59.534805][ T4471]  dump_stack_lvl+0xe8/0x140
[   59.534828][ T4471]  dump_stack+0x15/0x1b
[   59.534847][ T4471]  should_fail_ex+0x265/0x280
[   59.534885][ T4471]  should_fail+0xb/0x20
[   59.534960][ T4471]  should_fail_usercopy+0x1a/0x20
[   59.534995][ T4471]  _copy_from_user+0x1c/0xb0
[   59.535043][ T4466] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.361: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   59.535069][ T4471]  __sys_bpf+0x178/0x790
[   59.535164][ T4471]  __x64_sys_bpf+0x41/0x50
[   59.535204][ T4471]  x64_sys_call+0x2478/0x2fb0
[   59.535233][ T4471]  do_syscall_64+0xd2/0x200
[   59.536000][ T4471]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.536166][ T4471]  ? clear_bhb_loop+0x40/0x90
[   59.536225][ T4471]  ? clear_bhb_loop+0x40/0x90
[   59.536255][ T4471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.536303][ T4471] RIP: 0033:0x7fc33433e929
[   59.536327][ T4471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.536402][ T4471] RSP: 002b:00007fc3329a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   59.536444][ T4471] RAX: ffffffffffffffda RBX: 00007fc334565fa0 RCX: 00007fc33433e929
[   59.536460][ T4471] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[   59.536478][ T4471] RBP: 00007fc3329a7090 R08: 0000000000000000 R09: 0000000000000000
[   59.536493][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.536570][ T4471] R13: 0000000000000000 R14: 00007fc334565fa0 R15: 00007ffce1d41778
[   59.536643][ T4471]  </TASK>
[   59.537206][ T4472] loop4: detected capacity change from 0 to 1024
[   59.559290][ T4466] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.361: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   59.965179][ T4488] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   59.965179][ T4488]    program +}[@ not setting count and/or reply_len properly
[   60.013137][ T4493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'.
[   60.039030][ T4493] netem: change failed
[   60.058108][ T4496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.369'.
[   60.101615][ T4495] loop0: detected capacity change from 0 to 2048
[   60.128413][ T4496] netlink: 232 bytes leftover after parsing attributes in process `syz.0.369'.
[   60.149874][ T4508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.373'.
[   60.172874][ T4508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.373'.
[   60.304146][ T4515] loop0: detected capacity change from 0 to 2048
[   60.328840][ T4515] EXT4-fs: Ignoring removed nobh option
[   60.637320][ T4537] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   60.637320][ T4537]    program +}[@ not setting count and/or reply_len properly
[   60.772533][ T4542] loop1: detected capacity change from 0 to 1024
[   60.783681][ T4542] EXT4-fs: Ignoring removed orlov option
[   60.919229][ T4549] loop1: detected capacity change from 0 to 512
[   60.937630][ T4549] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   60.966179][ T4552] xt_TPROXY: Can be used only with -p tcp or -p udp
[   60.983583][   T29] kauditd_printk_skb: 210 callbacks suppressed
[   60.983602][   T29] audit: type=1400 audit(1750755898.347:785): avc:  denied  { read } for  pid=4550 comm="syz.3.387" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   61.025275][ T4549] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6
[   61.071315][   T29] audit: type=1400 audit(1750755898.347:786): avc:  denied  { open } for  pid=4550 comm="syz.3.387" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   61.073851][   T29] audit: type=1400 audit(1750755898.367:787): avc:  denied  { ioctl } for  pid=4550 comm="syz.3.387" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   61.258007][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'.
[   61.285323][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'.
[   61.325195][   T29] audit: type=1400 audit(1750755898.687:788): avc:  denied  { write } for  pid=4558 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.360578][   T29] audit: type=1400 audit(1750755898.687:789): avc:  denied  { nlmsg_write } for  pid=4558 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.488234][   T29] audit: type=1400 audit(1750755898.857:790): avc:  denied  { read } for  pid=4566 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   61.523517][ T4569] loop0: detected capacity change from 0 to 512
[   61.550019][ T4569] EXT4-fs: Ignoring removed orlov option
[   61.765977][ T4569] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   61.803971][ T4569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   61.840723][ T4569] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm +}[@: corrupted in-inode xattr: e_value size too large
[   61.949788][ T4569] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117)
[   62.063991][ T4569] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   62.239515][ T4582] loop1: detected capacity change from 0 to 512
[   62.375294][ T4582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   62.393822][ T1041] IPVS: starting estimator thread 0...
[   62.405388][ T4584] loop0: detected capacity change from 0 to 1024
[   62.418150][ T4582] System zones: 1-12
[   62.429651][   T29] audit: type=1326 audit(1750755899.767:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33433e929 code=0x7ffc0000
[   62.466597][   T29] audit: type=1326 audit(1750755899.767:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33433e929 code=0x7ffc0000
[   62.509206][   T29] audit: type=1326 audit(1750755899.767:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4585 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc33433e929 code=0x7ffc0000
[   62.538962][ T4586] tipc: Enabled bearer <udp:s>, priority 10
[   62.546257][   T29] audit: type=1400 audit(1750755899.767:794): avc:  denied  { execmem } for  pid=4585 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   62.607870][ T4589] IPVS: using max 2352 ests per chain, 117600 per kthread
[   62.608626][ T4582] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.399: corrupted in-inode xattr: invalid ea_ino
[   62.673074][ T4582] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.399: couldn't read orphan inode 15 (err -117)
[   62.780101][ T4598] loop3: detected capacity change from 0 to 512
[   62.802424][ T4598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[   62.810280][ T4603] __nla_validate_parse: 1 callbacks suppressed
[   62.810306][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[   62.847351][ T4598] System zones: 1-12
[   62.856742][ T4598] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.404: corrupted in-inode xattr: invalid ea_ino
[   62.891893][ T4598] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.404: couldn't read orphan inode 15 (err -117)
[   63.038717][ T4614] loop3: detected capacity change from 0 to 1024
[   63.047170][ T4614] EXT4-fs: Ignoring removed orlov option
[   63.163824][ T4620] loop1: detected capacity change from 0 to 512
[   63.173312][ T4614] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.410: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   63.199206][ T4614] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.410: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   63.276355][ T4620] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.469574][ T4627] ==================================================================
[   63.481351][ T4627] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[   63.493679][ T4627] 
[   63.496137][ T4627] write to 0xffff88811b84f168 of 4 bytes by task 4614 on cpu 1:
[   63.504679][ T4627]  writeback_single_inode+0x14a/0x3e0
[   63.510772][ T4627]  sync_inode_metadata+0x5b/0x90
[   63.516400][ T4627]  generic_buffers_fsync_noflush+0xd9/0x120
[   63.523459][ T4627]  ext4_sync_file+0x1ab/0x690
[   63.529423][ T4627]  vfs_fsync_range+0x10a/0x130
[   63.535343][ T4627]  ext4_buffered_write_iter+0x34f/0x3c0
[   63.541476][ T4627]  ext4_file_write_iter+0x383/0xf00
[   63.547449][ T4627]  iter_file_splice_write+0x5ef/0x970
[   63.553005][ T4627]  direct_splice_actor+0x153/0x2a0
[   63.558822][ T4627]  splice_direct_to_actor+0x30f/0x680
[   63.564994][ T4627]  do_splice_direct+0xda/0x150
[   63.569939][ T4627]  do_sendfile+0x380/0x650
[   63.575186][ T4627]  __x64_sys_sendfile64+0x105/0x150
[   63.580971][ T4627]  x64_sys_call+0xb39/0x2fb0
[   63.585876][ T4627]  do_syscall_64+0xd2/0x200
[   63.591721][ T4627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.599287][ T4627] 
[   63.601884][ T4627] read to 0xffff88811b84f168 of 4 bytes by task 4627 on cpu 0:
[   63.610109][ T4627]  generic_buffers_fsync_noflush+0x80/0x120
[   63.616403][ T4627]  ext4_sync_file+0x1ab/0x690
[   63.621438][ T4627]  vfs_fsync_range+0x10a/0x130
[   63.626619][ T4627]  ext4_buffered_write_iter+0x34f/0x3c0
[   63.633092][ T4627]  ext4_file_write_iter+0x383/0xf00
[   63.639210][ T4627]  iter_file_splice_write+0x5ef/0x970
[   63.645167][ T4627]  direct_splice_actor+0x153/0x2a0
[   63.651208][ T4627]  splice_direct_to_actor+0x30f/0x680
[   63.657509][ T4627]  do_splice_direct+0xda/0x150
[   63.662869][ T4627]  do_sendfile+0x380/0x650
[   63.668171][ T4627]  __x64_sys_sendfile64+0x105/0x150
[   63.674564][ T4627]  x64_sys_call+0xb39/0x2fb0
[   63.680080][ T4627]  do_syscall_64+0xd2/0x200
[   63.684701][ T4627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.692951][ T4627] 
[   63.695650][ T4627] value changed: 0x00000038 -> 0x00000002
[   63.703507][ T4627] 
[   63.707212][ T4627] Reported by Kernel Concurrency Sanitizer on:
[   63.713938][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.3.410 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) 
[   63.727998][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.740539][ T4627] ==================================================================
[   64.033010][ T4620] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm GPL: corrupted inode contents
[   64.072302][ T4620] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm GPL: mark_inode_dirty error
[   64.092086][ T4620] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm GPL: corrupted inode contents
[   64.107455][ T4620] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm GPL: mark_inode_dirty error
[   64.135467][ T4620] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm GPL: mark inode dirty (error -117)
[   64.160767][ T4620] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)