last executing test programs: 3m4.901201815s ago: executing program 2 (id=230): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xd725}}, './file0\x00'}) 3m4.827048987s ago: executing program 2 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x7, &(0x7f0000001440)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r6, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r7}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000020013"], 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = io_uring_setup(0x6cfd, &(0x7f0000001280)={0x0, 0x200023d4, 0x800, 0x1, 0x87}) r9 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000000)=r9, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r9, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) pipe2(&(0x7f00000004c0), 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000012000800080400"], 0x110}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) 3m4.366544316s ago: executing program 2 (id=240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0xc4ffffff, 0x0, 0x0) 3m4.306583407s ago: executing program 2 (id=243): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x11, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x9}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x120, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf0, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}, @TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x80, 0x1, [@m_skbmod={0x7c, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x15, 0x6, "ac74a020e69210ef1e4b1bec96d0381169"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x40010) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f80)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001080)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4e23, 0x2, 0x4e22, 0xe6be, 0x2, 0x20, 0x20, 0x6, 0x0, r8}, {0x800, 0x5e4, 0x8000000000000001, 0x1ff, 0x4, 0x5, 0x5, 0x8}, {0x8, 0x3a, 0x8, 0x2}, 0x6, 0x6e6bb1, 0x2, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d6}, 0x2, @in=@private=0xa010100, 0x0, 0x4, 0x3, 0x3, 0x831, 0x78, 0x7}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) writev(r10, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c000000060a010400000000000000000a0000050900020073797a3200000000400004802c0001800b0001006e756d67656e00001c000280080002400000000908000140240000120800034000000000100001800b00010064796e73657400000900010073797a31"], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r12 = inotify_init() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1a4243c, &(0x7f0000000300)=ANY=[@ANYRES16=r15, @ANYRESDEC=r17, @ANYRES16=r16, @ANYRES8=r18, @ANYRES32=r15, @ANYRES32=r2, @ANYRESOCT=r14, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r17], 0x0, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r12, 0xc0709411, &(0x7f0000000040)={{r13, 0x4, 0x0, 0xb, 0x400, 0xaed, 0x6, 0x2, 0x468, 0xfffffffc, 0x4, 0x6, 0x7, 0x7fffffffffffffff, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f00000000c0)={{r13, 0xfff, 0x4ede, 0x80000000, 0x4, 0x1, 0x800, 0x6, 0xfffffffc, 0xffff0619, 0xaf, 0xfffffffffffffff7, 0x1, 0x6, 0x3}, 0x8, [0x0]}) 3m3.802023426s ago: executing program 2 (id=249): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3m2.799313165s ago: executing program 2 (id=254): gettid() r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x10000000) 3m2.788922446s ago: executing program 32 (id=254): gettid() r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x10000000) 4.665279801s ago: executing program 3 (id=2427): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x10) read$rfkill(r1, &(0x7f0000000100), 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8404f0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x2c2, &(0x7f0000000440)="$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") fremovexattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00') socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="00022abd70"], 0x1c}, 0x1, 0x0, 0x0, 0x2040080}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) fsopen(&(0x7f0000000080)='logfs\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x7fff) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_ID={0x8, 0x6, 0x1}]}, 0x28}}, 0x0) 4.206605119s ago: executing program 0 (id=2431): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @ifru_map={0x8000, 0x8, 0x4, 0x4, 0x7, 0x40}}) r1 = open(&(0x7f0000000100)='./file1\x00', 0x185102, 0x13a) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000040), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="ffd64531a869986b"], 0x8, 0x0) msgrcv(r5, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x3, r6, r7, r8, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r9}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@sr0, r6, &(0x7f0000000180)={0x996, 0x7, 0x0, 0x3}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xc}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x20000) 3.743474288s ago: executing program 3 (id=2435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5}, 0x18) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r6, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) 3.285234387s ago: executing program 0 (id=2436): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf25080000000800060008050000000000000000000009240000020002004e220000080008000800000014000100e000000200000000000000000000000008000400c8d00000060002004e210000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000002c0)={0x1, 0x1, 0x3}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mblk_io_submit}]}, 0x1, 0x4bd, &(0x7f0000000540)="$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") unlink(&(0x7f0000000080)='./file1\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x174d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) 2.980738343s ago: executing program 4 (id=2439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0ab10788c9235200070300f408"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) r3 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x4000001) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) connect$netlink(r3, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioprio_get$uid(0x3, 0xee01) mbind(&(0x7f00005d4000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000200)=0x3, 0x7ff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.882868415s ago: executing program 5 (id=2440): mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 2.745263057s ago: executing program 5 (id=2441): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @ifru_map={0x8000, 0x8, 0x4, 0x4, 0x7, 0x40}}) r1 = open(&(0x7f0000000100)='./file1\x00', 0x185102, 0x13a) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000040), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgsnd(r5, &(0x7f0000000000)=ANY=[], 0x8, 0x0) msgrcv(r5, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x3, r6, r7, r8, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r9}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@sr0, r6, &(0x7f0000000180)={0x996, 0x7, 0x0, 0x3}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xc}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x20000) 2.569409691s ago: executing program 3 (id=2443): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @ifru_map={0x8000, 0x8, 0x4, 0x4, 0x7, 0x40}}) r1 = open(&(0x7f0000000100)='./file1\x00', 0x185102, 0x13a) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000040), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="ffd64531a869986b"], 0x8, 0x0) msgrcv(r5, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x3, r6, r7, r8, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@sr0, r6, &(0x7f0000000180)={0x996, 0x7, 0x0, 0x3}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xc}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x20000) 2.301454536s ago: executing program 0 (id=2446): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff00000000070000008500000075000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000600)={r8, 0xbd63, 0x5}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) 2.07756072s ago: executing program 4 (id=2447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5}, 0x18) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r6, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) 2.07709297s ago: executing program 0 (id=2448): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) 2.07683097s ago: executing program 0 (id=2449): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1a70c2b9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xae, &(0x7f00000002c0)=""/174, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x5, 0xd, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1000}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f000801}, 0x840) 2.023705301s ago: executing program 0 (id=2450): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x80}}, @fwd={0xd}]}, {0x0, [0x0, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x5f, 0x61, 0x30]}}, &(0x7f0000000100)=""/41, 0x47, 0x29, 0x1, 0xfffffff7}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_user(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) fcntl$lock(r8, 0x24, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x80000000}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r5, 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r10, r10, 0x0, 0x1000000201005) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x18100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.876033044s ago: executing program 5 (id=2451): gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0x24) open_tree(r11, &(0x7f00000002c0)='./file1\x00', 0x80001) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 1.606552129s ago: executing program 3 (id=2452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x7, &(0x7f0000001440)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r6, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r7}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000020013"], 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = io_uring_setup(0x6cfd, &(0x7f0000001280)={0x0, 0x200023d4, 0x800, 0x1, 0x87}) r9 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000000)=r9, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r9, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) pipe2(&(0x7f00000004c0), 0x800) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000012000800080400"], 0x110}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) 1.493487021s ago: executing program 5 (id=2454): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff00000000070000008500000075000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000600)={r7, 0xbd63, 0x5}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) 1.316513875s ago: executing program 5 (id=2455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 1.262277686s ago: executing program 3 (id=2456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf25080000000800060008050000000000000000000009240000020002004e220000080008000800000014000100e000000200000000000000000000000008000400c8d00000060002004e210000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000002c0)={0x1, 0x1, 0x3}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mblk_io_submit}]}, 0x1, 0x4bd, &(0x7f0000000540)="$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") unlink(&(0x7f0000000080)='./file1\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x174d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) 1.256334206s ago: executing program 1 (id=2457): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x43) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000240)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000140)=0xe8) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x17a) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRESOCT, @ANYRES64=r6, @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT=r5, @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r8, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a55e8bab65ff29328f22965a91f6491b57075b13751d", @ANYRES16=r8], 0x94, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) unshare(0x2c060000) 1.070284829s ago: executing program 4 (id=2458): r0 = socket$inet(0x2, 0x3, 0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) socket$inet(0x2, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1.069799969s ago: executing program 4 (id=2459): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x46514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffd}, 0x2b76, 0x0, 0x20, 0x6, 0x3, 0x13, 0x0, 0x0, 0x2ff, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x2, 0x6, 0x4, 0x0, 0x3, 0x1000000, r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), 0x0}, 0x20) 939.166762ms ago: executing program 4 (id=2460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) 874.247053ms ago: executing program 5 (id=2461): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc1513c4b"], 0x1c}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 825.868514ms ago: executing program 1 (id=2462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e000100fdffff05ffff7f0002000000010000070000000008000f0006"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 800.985124ms ago: executing program 4 (id=2463): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x10) read$rfkill(r1, &(0x7f0000000100), 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8404f0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x2c2, &(0x7f0000000440)="$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") fremovexattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00') socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="00022abd70"], 0x1c}, 0x1, 0x0, 0x0, 0x2040080}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) fsopen(&(0x7f0000000080)='logfs\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ID={0x8, 0x6, 0x1}]}, 0x28}}, 0x0) 771.833765ms ago: executing program 1 (id=2464): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x43) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000010000000000000000000000850000006d001a0f42450db9b8dd35c68ce392c403a58ebfca60371a5f0ba7710d2beb9666c8fe145f575e3483af26c55edd0fa7907ad6fb663acd08ad6016237ce4683f45a19ca8f630e600e23989cf9e530f4b553161831ed5dc7d89919649"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000240)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000140)=0xe8) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x17a) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRESOCT, @ANYRES64=r8, @ANYRESOCT, @ANYRESDEC=r6, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT=r7, @ANYRES32=0xee00, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r9, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r10, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a55e8bab65ff29328f22965a91f6491b57075b13751d", @ANYRES16=r10], 0x94, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) unshare(0x2c060000) 448.030971ms ago: executing program 1 (id=2465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6080447900140600fc020000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780900"], 0x0) r7 = dup(r4) request_key(&(0x7f0000000680)='logon\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0xfffffffffffffff8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0x7a) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) ioctl$SG_GET_NUM_WAITING(r10, 0x227d, &(0x7f00000001c0)) r11 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000200)={'fscrypt:', @desc2}, 0x0, 0xfffffffffffffcce, 0xfffffffffffffff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="0700000000000052d24b00000000000000000000001797861a1f4a7078083d6511b4803cd04b5a41ee18cdbe1d2570386686032af771ee8b79cb9121293d139d0e2bab6b675e302539a6e97ac31be755c2c70bb045524762fa79ad00335958330f68eb8815db3aa6228e9d36e20d54131ab638ebb1e4259a9e5ce35b8b6ea4a0f7144b5885f66152c0212a366ae5a4fd47ecfae5c0d9e3fb4ec27ef84cb4af5304595f4eb29cb2757c18a2a71fc618c5114236842eeb241c6d42fd13672f9e980f64194b96a01809f63b68b5ee8fcdd440b17cfeec0b97eacae1c8370000c44a907f6ff307ddad37b643bf2abde23d7d4fc867bfa3a4ba8adffeb8d8107aa5a4a2e0f6399a3d083078eb863c77e22850dff6688a11e0a5beeb8746898a82365583dd9bdb2228b5eab483eb50d9346292", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="05000000020000000100"/28], 0x50) keyctl$KEYCTL_MOVE(0x1e, r11, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) pipe(&(0x7f0000000240)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r11) 288.958594ms ago: executing program 1 (id=2466): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x43) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000240)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000140)=0xe8) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x17a) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRESOCT, @ANYRES64=r6, @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT=r5, @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r8, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a55e8bab65ff29328f22965a91f6491b57075b13751d", @ANYRES16=r8], 0x94, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) unshare(0x2c060000) 288.457624ms ago: executing program 3 (id=2467): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x43) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000240)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000140)=0xe8) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x17a) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRESOCT, @ANYRES64=r6, @ANYRESOCT, @ANYRESDEC=r4, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef489440101", @ANYRESOCT=r5, @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r7, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r8, @ANYRESDEC=0x0, @ANYBLOB="0800047f475279a55e8bab65ff29328f22965a91f6491b57075b13751d", @ANYRES16=r8], 0x94, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) unshare(0x2c060000) 0s ago: executing program 1 (id=2468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5}, 0x18) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r6, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ave batadv0): Releasing backup interface [ 192.074631][T13228] bridge0: port 3(batadv0) entered blocking state [ 192.081170][T13228] bridge0: port 3(batadv0) entered disabled state [ 192.093225][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.102675][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 192.111831][T13229] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1962'. [ 192.120975][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 192.236856][T13237] loop4: detected capacity change from 0 to 8192 [ 192.289597][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 192.347203][T13242] loop3: detected capacity change from 0 to 512 [ 192.391808][T13246] loop4: detected capacity change from 0 to 512 [ 192.454322][T13242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.470368][T13242] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.489565][T13246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.504012][T11387] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 192.513259][T11387] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 192.645745][T13246] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.674875][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.786075][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.842008][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 192.842026][ T29] audit: type=1326 audit(1759436739.681:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 192.906952][ T29] audit: type=1326 audit(1759436739.713:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 192.930656][ T29] audit: type=1326 audit(1759436739.713:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 192.931111][T13257] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 192.954214][ T29] audit: type=1326 audit(1759436739.713:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 192.985654][ T29] audit: type=1326 audit(1759436739.713:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 193.009175][ T29] audit: type=1326 audit(1759436739.713:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 193.019311][T13257] batadv0: left allmulticast mode [ 193.032759][ T29] audit: type=1326 audit(1759436739.713:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 193.037797][T13257] batadv0: left promiscuous mode [ 193.061269][ T29] audit: type=1326 audit(1759436739.713:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 193.061302][ T29] audit: type=1326 audit(1759436739.713:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 193.061332][ T29] audit: type=1326 audit(1759436739.713:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 193.066503][T13257] bridge0: port 3(batadv0) entered disabled state [ 193.090067][T13253] loop4: detected capacity change from 0 to 8192 [ 193.149767][T13258] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 193.158636][T13257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.200466][T13257] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 193.209255][T13258] batadv0: entered promiscuous mode [ 193.214529][T13258] batadv0: entered allmulticast mode [ 193.259850][T13258] bond0: (slave batadv0): Releasing backup interface [ 193.273691][T13258] bridge0: port 3(batadv0) entered blocking state [ 193.280244][T13258] bridge0: port 3(batadv0) entered disabled state [ 193.427817][T13263] loop4: detected capacity change from 0 to 512 [ 193.467316][T13267] loop3: detected capacity change from 0 to 128 [ 193.489766][T13263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.504908][T13263] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.630444][T11381] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 193.639733][T11381] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 193.664031][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.740629][T13275] loop4: detected capacity change from 0 to 8192 [ 194.018784][T13298] loop4: detected capacity change from 0 to 512 [ 194.121542][T13298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.136613][T13298] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.305964][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.340821][T11383] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 194.349013][T11383] FAT-fs (loop3): Filesystem has been set read-only [ 194.373663][T11383] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 194.425564][T13321] loop4: detected capacity change from 0 to 8192 [ 194.470154][T13332] loop3: detected capacity change from 0 to 512 [ 194.478813][T13332] EXT4-fs: quotafile must be on filesystem root [ 194.646988][T13339] loop3: detected capacity change from 0 to 8192 [ 194.863815][T13354] loop4: detected capacity change from 0 to 512 [ 194.946031][T13354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.961633][T13354] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.237831][T13387] loop0: detected capacity change from 0 to 512 [ 195.272333][T13387] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.292316][T13386] loop5: detected capacity change from 0 to 512 [ 195.386645][T13387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.434897][T13387] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.450407][T13386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.498450][T13387] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1987: corrupted xattr block 33: e_value out of bounds [ 195.519912][T13386] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.559658][T13387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 195.655538][T13387] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1987: corrupted xattr block 33: e_value out of bounds [ 195.791825][T13387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 195.805660][T13387] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 195.823848][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.834965][T13387] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.1987: corrupted xattr block 33: e_value out of bounds [ 195.851213][T13387] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 195.904625][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.921373][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.038797][T13397] loop0: detected capacity change from 0 to 128 [ 196.057678][T13399] loop5: detected capacity change from 0 to 512 [ 196.070263][T13395] loop9: detected capacity change from 0 to 7 [ 196.077904][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.089075][T13399] EXT4-fs: quotafile must be on filesystem root [ 196.111457][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.119429][ T4610] loop9: unable to read partition table [ 196.162499][T13395] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.180680][T13395] loop9: unable to read partition table [ 196.185277][T13403] loop5: detected capacity change from 0 to 1024 [ 196.192821][T13395] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 196.192821][T13395] ) failed (rc=-5) [ 196.263181][T13403] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.269753][T13403] EXT4-fs: Ignoring removed bh option [ 196.302602][T13403] ext3: Unknown parameter 'subj_type' [ 196.426150][T13413] loop4: detected capacity change from 0 to 1024 [ 196.472599][T13413] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 196.483782][T13413] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 196.512126][T13417] loop1: detected capacity change from 0 to 8192 [ 196.550521][T13417] __nla_validate_parse: 15 callbacks suppressed [ 196.550541][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 196.566084][T13417] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1995'. [ 196.572947][T13413] JBD2: no valid journal superblock found [ 196.575220][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 196.585119][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1992'. [ 196.589895][T13413] EXT4-fs (loop4): Could not load journal inode [ 196.720999][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 196.730086][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1996'. [ 196.739132][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 196.782826][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1996'. [ 196.791886][T13434] netlink: 'syz.1.1996': attribute type 6 has an invalid length. [ 196.871578][T11384] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 196.879955][T11384] FAT-fs (loop0): Filesystem has been set read-only [ 196.892450][T11384] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 196.929385][T13448] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 196.938839][T13448] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 196.946734][T13448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1997'. [ 197.054081][T13448] batadv0: entered promiscuous mode [ 197.059631][T13448] batadv0: entered allmulticast mode [ 197.069306][T13448] .`: (slave batadv0): Releasing backup interface [ 197.080624][T13448] bridge0: port 3(batadv0) entered blocking state [ 197.087208][T13448] bridge0: port 3(batadv0) entered disabled state [ 197.242270][T11386] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 197.245733][T13465] loop0: detected capacity change from 0 to 512 [ 197.251602][T11386] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 197.279518][T13474] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2001'. [ 197.307923][T13484] loop1: detected capacity change from 0 to 512 [ 197.320405][T13484] EXT4-fs: quotafile must be on filesystem root [ 197.431429][T13498] netlink: 'syz.5.2007': attribute type 6 has an invalid length. [ 197.503970][T13465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.528975][T13465] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.693321][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 197.693336][ T29] audit: type=1400 audit(1759436744.773:7689): avc: denied { read } for pid=13500 comm="syz.4.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.739422][T13523] loop5: detected capacity change from 0 to 512 [ 197.748953][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.760063][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.770769][ T29] audit: type=1400 audit(1759436744.836:7690): avc: denied { ioctl } for pid=13500 comm="syz.4.2006" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.881921][ T29] audit: type=1326 audit(1759436744.931:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.905585][ T29] audit: type=1326 audit(1759436744.931:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.929213][ T29] audit: type=1326 audit(1759436744.931:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.950670][T13523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.952857][ T29] audit: type=1326 audit(1759436744.931:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.952931][ T29] audit: type=1326 audit(1759436744.931:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.952965][ T29] audit: type=1326 audit(1759436744.931:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.952993][ T29] audit: type=1326 audit(1759436744.931:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 197.953100][ T29] audit: type=1326 audit(1759436744.931:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 198.022239][T13536] loop3: detected capacity change from 0 to 512 [ 198.024706][T13536] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.066863][T13538] loop1: detected capacity change from 0 to 512 [ 198.105958][T13523] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.111920][T13538] EXT4-fs: quotafile must be on filesystem root [ 198.136884][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.149126][T13536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.165786][T13536] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.260465][T13536] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2014: corrupted xattr block 33: e_value out of bounds [ 198.302505][T13536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 198.314518][T13536] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2014: corrupted xattr block 33: e_value out of bounds [ 198.338809][T13536] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 198.349699][T13536] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 198.349762][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.380163][T13536] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2014: corrupted xattr block 33: e_value out of bounds [ 198.395856][T13536] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 198.431281][T13551] SELinux: failed to load policy [ 198.624754][T13577] loop1: detected capacity change from 0 to 512 [ 198.675645][T13581] loop5: detected capacity change from 0 to 8192 [ 198.683567][T13577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.700299][T13577] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.750941][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.877737][T13586] loop3: detected capacity change from 0 to 8192 [ 198.933242][T13592] loop5: detected capacity change from 0 to 512 [ 198.960895][T13592] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.975420][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.985292][T13592] EXT4-fs (loop5): 1 truncate cleaned up [ 198.991352][T13592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.132551][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.206211][T13606] ALSA: seq fatal error: cannot create timer (-19) [ 199.212939][T13606] FAULT_INJECTION: forcing a failure. [ 199.212939][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 199.225682][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.3.2036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.225712][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.225770][T13606] Call Trace: [ 199.225777][T13606] [ 199.225784][T13606] __dump_stack+0x1d/0x30 [ 199.225807][T13606] dump_stack_lvl+0xe8/0x140 [ 199.225825][T13606] dump_stack+0x15/0x1b [ 199.225886][T13606] should_fail_ex+0x265/0x280 [ 199.225916][T13606] ? snd_timer_instance_new+0x31/0x160 [ 199.225959][T13606] should_failslab+0x8c/0xb0 [ 199.225983][T13606] __kmalloc_cache_noprof+0x4c/0x320 [ 199.226052][T13606] snd_timer_instance_new+0x31/0x160 [ 199.226093][T13606] snd_seq_timer_open+0x12b/0x360 [ 199.226159][T13606] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 199.226257][T13606] snd_seq_queue_timer_open+0x101/0x120 [ 199.226285][T13606] snd_seq_ioctl_set_queue_timer+0x14b/0x170 [ 199.226401][T13606] snd_seq_ioctl+0x17a/0x2e0 [ 199.226508][T13606] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 199.226604][T13606] __se_sys_ioctl+0xce/0x140 [ 199.226636][T13606] __x64_sys_ioctl+0x43/0x50 [ 199.226742][T13606] x64_sys_call+0x1816/0x3000 [ 199.226764][T13606] do_syscall_64+0xd2/0x200 [ 199.226838][T13606] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.226976][T13606] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.227098][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.227125][T13606] RIP: 0033:0x7f87107deec9 [ 199.227140][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.227186][T13606] RSP: 002b:00007f870f247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.227209][T13606] RAX: ffffffffffffffda RBX: 00007f8710a35fa0 RCX: 00007f87107deec9 [ 199.227226][T13606] RDX: 0000200000000400 RSI: 0000000040605346 RDI: 0000000000000003 [ 199.227302][T13606] RBP: 00007f870f247090 R08: 0000000000000000 R09: 0000000000000000 [ 199.227318][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.227334][T13606] R13: 00007f8710a36038 R14: 00007f8710a35fa0 R15: 00007ffcf94a86f8 [ 199.227353][T13606] [ 199.508820][T13615] loop5: detected capacity change from 0 to 128 [ 199.609194][T13623] loop3: detected capacity change from 0 to 512 [ 199.616075][T13623] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.635229][T13623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.648654][T13623] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.661380][T13623] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2042: corrupted xattr block 33: e_value out of bounds [ 199.676197][T13623] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 199.685481][T13623] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2042: corrupted xattr block 33: e_value out of bounds [ 199.701121][T13623] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 199.710704][T13623] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 199.726599][T13623] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2042: corrupted xattr block 33: e_value out of bounds [ 199.741352][T13623] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 199.882691][T13654] SELinux: syz.1.2043 (13654) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 200.349399][T13666] loop4: detected capacity change from 0 to 128 [ 200.381056][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.391647][T11386] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 200.399818][T11386] FAT-fs (loop5): Filesystem has been set read-only [ 200.410055][T11386] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 200.440235][T13676] netlink: 'syz.5.2047': attribute type 10 has an invalid length. [ 200.460268][T13676] netlink: 'syz.5.2047': attribute type 10 has an invalid length. [ 200.478407][T13676] batadv0: entered promiscuous mode [ 200.483670][T13676] batadv0: entered allmulticast mode [ 200.498024][T13676] bond0: (slave batadv0): Releasing backup interface [ 200.508966][T13676] bridge0: port 3(batadv0) entered blocking state [ 200.515542][T13676] bridge0: port 3(batadv0) entered disabled state [ 200.554808][T13675] loop3: detected capacity change from 0 to 512 [ 200.598042][T13690] loop5: detected capacity change from 0 to 512 [ 200.638897][T13690] EXT4-fs: quotafile must be on filesystem root [ 200.667531][T13675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.711935][T13675] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.731686][T13707] loop5: detected capacity change from 0 to 512 [ 200.775807][T13707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.799245][T13707] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.813583][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.839764][T13707] SELinux: Context @ is not valid (left unmapped). [ 200.863609][T13728] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 200.882075][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.908509][T11372] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 200.917808][T11372] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 200.943076][T13740] SELinux: Context  is not valid (left unmapped). [ 201.263652][T11372] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 201.271898][T11372] FAT-fs (loop4): Filesystem has been set read-only [ 201.305786][T11372] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 201.432244][T13759] SELinux: failed to load policy [ 201.600634][T13769] loop0: detected capacity change from 0 to 512 [ 201.650078][T13769] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.711870][T13769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.764298][T13769] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.802170][T13776] loop4: detected capacity change from 0 to 8192 [ 201.826731][T13769] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2056: corrupted xattr block 33: e_value out of bounds [ 201.850311][T13792] loop3: detected capacity change from 0 to 164 [ 201.857870][T13792] iso9660: Unknown parameter '' [ 201.913327][T13769] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 201.935619][T13799] loop5: detected capacity change from 0 to 512 [ 201.943617][T13769] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2056: corrupted xattr block 33: e_value out of bounds [ 202.008680][T13802] __nla_validate_parse: 15 callbacks suppressed [ 202.008699][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 202.026021][T13802] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2060'. [ 202.029244][T13769] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 202.035175][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 202.039461][T13799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.071691][T13769] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 202.097404][T13769] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.2056: corrupted xattr block 33: e_value out of bounds [ 202.117897][T13799] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.130353][T13769] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 202.213727][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.270314][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.449333][T13825] loop9: detected capacity change from 0 to 7 [ 202.458020][T13825] buffer_io_error: 6 callbacks suppressed [ 202.458061][T13825] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.481752][T13825] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.489672][T13825] loop9: unable to read partition table [ 202.508196][T13825] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 202.508196][T13825] ) failed (rc=-5) [ 202.509443][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.554252][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.562243][T13824] loop0: detected capacity change from 0 to 8192 [ 202.586037][T13836] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 202.594317][T13836] batadv0: left allmulticast mode [ 202.599364][T13836] batadv0: left promiscuous mode [ 202.604537][T13836] bridge0: port 3(batadv0) entered disabled state [ 202.611395][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.620693][T13836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.628068][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.643361][T13836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 202.654217][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.689098][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 202.706145][T13838] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2063'. [ 202.715252][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 202.835915][T13842] loop4: detected capacity change from 0 to 8192 [ 202.906653][T13844] loop0: detected capacity change from 0 to 8192 [ 202.976996][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 202.987780][T13847] 9pnet: Could not find request transport: fd0x0000000000000007 [ 203.019172][T13849] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2067'. [ 203.028318][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 203.065504][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 203.095480][T13852] SELinux: failed to load policy [ 203.246106][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 203.246120][ T29] audit: type=1326 audit(1759436750.601:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.281833][ T29] audit: type=1326 audit(1759436750.643:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.305550][ T29] audit: type=1326 audit(1759436750.643:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.329088][ T29] audit: type=1326 audit(1759436750.643:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.352624][ T29] audit: type=1326 audit(1759436750.643:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.376130][ T29] audit: type=1326 audit(1759436750.643:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.376159][ T29] audit: type=1326 audit(1759436750.643:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ce8dad710 code=0x7ffc0000 [ 203.376192][ T29] audit: type=1326 audit(1759436750.643:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4ce8db06f7 code=0x7ffc0000 [ 203.376297][ T29] audit: type=1326 audit(1759436750.643:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 203.376329][ T29] audit: type=1326 audit(1759436750.643:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13860 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4ce8db06f7 code=0x7ffc0000 [ 203.405767][T13864] loop0: detected capacity change from 0 to 512 [ 203.406061][T13864] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.523075][T13864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.523139][T13864] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.523894][T13864] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2073: corrupted xattr block 33: e_value out of bounds [ 203.524095][T13864] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 203.524131][T13864] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2073: corrupted xattr block 33: e_value out of bounds [ 203.524302][T13864] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 203.524722][T13864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 203.524849][T13864] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.2073: corrupted xattr block 33: e_value out of bounds [ 203.525175][T13864] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 203.663837][T13867] loop5: detected capacity change from 0 to 512 [ 203.743381][T13867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.769917][T13867] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.814855][T13875] netlink: 'syz.4.2075': attribute type 10 has an invalid length. [ 203.838249][T13875] netlink: 'syz.4.2075': attribute type 10 has an invalid length. [ 203.867865][T13875] batadv0: entered promiscuous mode [ 203.873171][T13875] batadv0: entered allmulticast mode [ 203.881884][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.891512][T13875] bond0: (slave batadv0): Releasing backup interface [ 203.901064][T13875] bridge0: port 3(batadv0) entered blocking state [ 203.907623][T13875] bridge0: port 3(batadv0) entered disabled state [ 203.927769][T13877] loop5: detected capacity change from 0 to 512 [ 203.934416][T13877] EXT4-fs: quotafile must be on filesystem root [ 203.991178][T13881] netlink: 'syz.4.2078': attribute type 10 has an invalid length. [ 204.000447][T13881] batadv0: left allmulticast mode [ 204.005683][T13881] batadv0: left promiscuous mode [ 204.010785][T13881] bridge0: port 3(batadv0) entered disabled state [ 204.021971][T13881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.030866][T13881] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 204.051717][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.098528][T13885] 9pnet: Could not find request transport: fd0x0000000000000007 [ 204.160590][T13893] loop0: detected capacity change from 0 to 512 [ 204.179188][T13889] SELinux: failed to load policy [ 204.204430][T13893] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.256749][T13898] loop5: detected capacity change from 0 to 512 [ 204.260629][T13901] loop4: detected capacity change from 0 to 512 [ 204.278874][T13901] EXT4-fs: quotafile must be on filesystem root [ 204.353691][T13898] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.387653][T13909] netlink: 'syz.4.2089': attribute type 10 has an invalid length. [ 204.435160][T13909] netlink: 'syz.4.2089': attribute type 10 has an invalid length. [ 204.499705][T13909] batadv0: entered promiscuous mode [ 204.504983][T13909] batadv0: entered allmulticast mode [ 204.513730][T13912] loop0: detected capacity change from 0 to 512 [ 204.547743][T13909] bond0: (slave batadv0): Releasing backup interface [ 204.563345][T13909] bridge0: port 3(batadv0) entered blocking state [ 204.569922][T13909] bridge0: port 3(batadv0) entered disabled state [ 204.576881][T13912] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.608902][T13915] loop3: detected capacity change from 0 to 8192 [ 204.613436][T13912] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.630687][T11385] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 204.631763][T13919] netlink: 'syz.5.2092': attribute type 10 has an invalid length. [ 204.640023][T11385] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 204.648164][T13919] batadv0: left allmulticast mode [ 204.662126][T13919] batadv0: left promiscuous mode [ 204.667180][T13919] bridge0: port 3(batadv0) entered disabled state [ 204.676136][T13919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.685242][T13912] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2090: corrupted xattr block 33: e_value out of bounds [ 204.702614][T13919] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 204.715180][T13920] netlink: 'syz.5.2092': attribute type 10 has an invalid length. [ 204.723650][T13920] batadv0: entered promiscuous mode [ 204.728984][T13920] batadv0: entered allmulticast mode [ 204.734538][T13912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 204.743680][T13912] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2090: corrupted xattr block 33: e_value out of bounds [ 204.743856][T13912] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 204.744434][T13912] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 204.744680][T13912] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.2090: corrupted xattr block 33: e_value out of bounds [ 204.749704][T13920] bond0: (slave batadv0): Releasing backup interface [ 204.784946][T13912] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 204.824149][T13920] bridge0: port 3(batadv0) entered blocking state [ 204.830711][T13920] bridge0: port 3(batadv0) entered disabled state [ 204.844890][T13925] netlink: 'syz.1.2094': attribute type 6 has an invalid length. [ 204.927551][T13937] loop1: detected capacity change from 0 to 128 [ 205.188506][T13962] loop5: detected capacity change from 0 to 164 [ 205.199161][T13962] iso9660: Unknown parameter '' [ 205.297840][T13970] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 205.326429][T11385] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 205.335739][T11385] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 205.345123][T13970] batadv0: left allmulticast mode [ 205.350278][T13970] batadv0: left promiscuous mode [ 205.355485][T13970] bridge0: port 3(batadv0) entered disabled state [ 205.370042][T13967] loop3: detected capacity change from 0 to 512 [ 205.380455][T13970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.398518][T13970] .`: (slave batadv0): Enslaving as an active interface with an up link [ 205.407039][T13973] batadv0: entered promiscuous mode [ 205.412450][T13973] batadv0: entered allmulticast mode [ 205.439316][T13973] .`: (slave batadv0): Releasing backup interface [ 205.491159][T13973] bridge0: port 3(batadv0) entered blocking state [ 205.497822][T13973] bridge0: port 3(batadv0) entered disabled state [ 205.505352][T13967] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.791630][T13994] loop0: detected capacity change from 0 to 512 [ 205.814537][T11385] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 205.822734][T11385] FAT-fs (loop1): Filesystem has been set read-only [ 205.822910][T14002] loop4: detected capacity change from 0 to 512 [ 205.846591][T11385] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 205.863239][T13994] EXT4-fs (loop0): orphan cleanup on readonly fs [ 205.879386][T13994] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2106: iget: bad extended attribute block 1 [ 205.895641][T14002] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.898296][T13994] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2106: couldn't read orphan inode 15 (err -117) [ 206.070341][T14013] loop3: detected capacity change from 0 to 8192 [ 206.094497][T14021] loop0: detected capacity change from 0 to 8192 [ 206.571886][T14061] loop3: detected capacity change from 0 to 512 [ 206.578545][T14061] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.596965][T14061] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.638761][T14063] loop0: detected capacity change from 0 to 512 [ 206.646038][T14061] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2114: corrupted xattr block 33: e_value out of bounds [ 206.668581][T14061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 206.678320][T14061] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2114: corrupted xattr block 33: e_value out of bounds [ 206.712746][T14061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 206.741905][T14063] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.758440][T14061] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 206.878090][T14061] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2114: corrupted xattr block 33: e_value out of bounds [ 206.918246][T14061] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 207.583824][T14081] loop0: detected capacity change from 0 to 128 [ 207.991433][T14114] 9pnet_fd: Insufficient options for proto=fd [ 208.149807][T14118] loop9: detected capacity change from 0 to 7 [ 208.156449][T14118] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.164999][T14118] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.172856][T14118] loop9: unable to read partition table [ 208.178801][T14118] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 208.178801][T14118] ) failed (rc=-5) [ 208.180736][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.200168][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.208141][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.216167][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.225734][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 208.275481][T14122] loop3: detected capacity change from 0 to 512 [ 208.304257][T14122] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.385848][T14127] loop3: detected capacity change from 0 to 8192 [ 208.443852][T11384] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 208.452194][T11384] FAT-fs (loop0): Filesystem has been set read-only [ 208.469358][T11384] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 208.564680][T14144] __nla_validate_parse: 23 callbacks suppressed [ 208.564703][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 208.590449][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 208.590465][ T29] audit: type=1326 audit(1759436756.218:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.620213][ T29] audit: type=1326 audit(1759436756.218:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.650259][T14144] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2125'. [ 208.659446][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 208.669820][ T29] audit: type=1326 audit(1759436756.281:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.693414][ T29] audit: type=1326 audit(1759436756.281:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.716994][ T29] audit: type=1326 audit(1759436756.281:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.740736][ T29] audit: type=1326 audit(1759436756.281:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.764298][ T29] audit: type=1326 audit(1759436756.281:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.788093][ T29] audit: type=1326 audit(1759436756.281:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40cf8ad710 code=0x7ffc0000 [ 208.811763][ T29] audit: type=1326 audit(1759436756.281:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f40cf8b06f7 code=0x7ffc0000 [ 208.835291][ T29] audit: type=1326 audit(1759436756.281:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14150 comm="syz.5.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 208.881729][T14163] loop5: detected capacity change from 0 to 512 [ 208.888515][T14163] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.943870][T14171] validate_nla: 2 callbacks suppressed [ 208.943888][T14171] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 208.957280][T14171] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2128'. [ 208.984564][T14163] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.995818][T14163] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2127: corrupted xattr block 33: e_value out of bounds [ 209.007853][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2128'. [ 209.024944][T14178] SELinux: failed to load policy [ 209.052555][T14180] 9pnet_fd: Insufficient options for proto=fd [ 209.070672][T14163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 209.093790][T14186] 9pnet_fd: Insufficient options for proto=fd [ 209.106243][T14163] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2127: corrupted xattr block 33: e_value out of bounds [ 209.137055][T14163] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 209.154457][T14163] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 209.169435][T14163] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.2127: corrupted xattr block 33: e_value out of bounds [ 209.184081][T14192] loop1: detected capacity change from 0 to 512 [ 209.190588][T14192] ext4: Unknown parameter 'GPL' [ 209.207463][T14163] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 209.298035][T14200] loop3: detected capacity change from 0 to 128 [ 209.494560][T14211] loop9: detected capacity change from 0 to 7 [ 209.514014][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.534106][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.542117][ T4610] loop9: unable to read partition table [ 209.552946][T14209] loop1: detected capacity change from 0 to 8192 [ 209.578810][T14211] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.591319][T14211] loop9: unable to read partition table [ 209.600273][T14211] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 209.600273][T14211] ) failed (rc=-5) [ 209.706610][T14231] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 209.714468][T14231] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2140'. [ 209.737176][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 209.746282][T14228] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2138'. [ 209.755393][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 209.761679][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2140'. [ 209.781670][T14234] SELinux: failed to load policy [ 209.819986][T14242] 9pnet_fd: Insufficient options for proto=fd [ 209.933032][T14256] loop0: detected capacity change from 0 to 128 [ 209.972186][T14262] loop4: detected capacity change from 0 to 512 [ 209.979111][T14262] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.013441][T14262] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.020570][T14264] SELinux: failed to load policy [ 210.024835][T14262] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2147: corrupted xattr block 33: e_value out of bounds [ 210.043102][T14262] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 210.053020][T14262] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2147: corrupted xattr block 33: e_value out of bounds [ 210.067301][T14262] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 210.079343][T14262] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 210.102627][T14269] SELinux: failed to load policy [ 210.103911][T14262] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.2147: corrupted xattr block 33: e_value out of bounds [ 210.123354][T14262] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 210.156046][T11384] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 210.164220][T11384] FAT-fs (loop3): Filesystem has been set read-only [ 210.171183][T11384] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 210.230006][T14284] SELinux: failed to load policy [ 210.278108][T14296] 9pnet_fd: Insufficient options for proto=fd [ 210.360171][T14301] loop3: detected capacity change from 0 to 512 [ 210.427590][T14301] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.610875][T14330] SELinux: failed to load policy [ 210.673380][T14334] loop0: detected capacity change from 0 to 128 [ 210.754355][T14339] loop4: detected capacity change from 0 to 8192 [ 211.440144][T14376] loop3: detected capacity change from 0 to 512 [ 211.449158][T14376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.461630][T14376] EXT4-fs (loop3): 1 truncate cleaned up [ 211.519487][T11372] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 211.527745][T11372] FAT-fs (loop0): Filesystem has been set read-only [ 211.537248][T11372] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 211.576631][T14394] loop0: detected capacity change from 0 to 512 [ 211.603219][T14394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.629579][T14394] EXT4-fs (loop0): 1 truncate cleaned up [ 211.655114][T14396] loop3: detected capacity change from 0 to 8192 [ 211.954230][T14440] loop3: detected capacity change from 0 to 512 [ 211.980153][T14440] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.296031][T14446] loop4: detected capacity change from 0 to 512 [ 212.316009][T14446] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.507062][T14456] loop3: detected capacity change from 0 to 128 [ 212.513755][T14454] loop4: detected capacity change from 0 to 8192 [ 212.625325][T14464] loop9: detected capacity change from 0 to 7 [ 212.631867][T14464] loop9: unable to read partition table [ 212.637664][T14464] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 212.637664][T14464] ) failed (rc=-5) [ 212.798465][T14478] loop4: detected capacity change from 0 to 512 [ 212.866881][T14478] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.023076][T14509] netlink: 'syz.1.2178': attribute type 10 has an invalid length. [ 213.033008][T14509] batadv0: left allmulticast mode [ 213.038080][T14509] batadv0: left promiscuous mode [ 213.043196][T14509] bridge0: port 3(batadv0) entered disabled state [ 213.057489][T14509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.076155][T14509] .`: (slave batadv0): Enslaving as an active interface with an up link [ 213.191365][T14515] loop1: detected capacity change from 0 to 512 [ 213.212904][T14511] loop4: detected capacity change from 0 to 512 [ 213.305665][T14515] EXT4-fs mount: 34 callbacks suppressed [ 213.305790][T14515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.314413][T14511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.331460][T14515] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.352410][T14511] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.367017][T11372] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 213.375222][T11372] FAT-fs (loop3): Filesystem has been set read-only [ 213.384482][T11372] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 213.417624][T14526] loop9: detected capacity change from 0 to 7 [ 213.452832][T14526] buffer_io_error: 13 callbacks suppressed [ 213.452847][T14526] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.490499][T14526] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.498489][T14526] loop9: unable to read partition table [ 213.507558][T14526] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 213.507558][T14526] ) failed (rc=-5) [ 213.655120][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.670578][T14556] __nla_validate_parse: 15 callbacks suppressed [ 213.670592][T14556] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2187'. [ 213.735075][T14561] netlink: 'syz.4.2190': attribute type 10 has an invalid length. [ 213.757280][T14561] batadv0: left allmulticast mode [ 213.762464][T14561] batadv0: left promiscuous mode [ 213.767716][T14561] bridge0: port 3(batadv0) entered disabled state [ 213.793613][T14564] netlink: 'syz.4.2190': attribute type 10 has an invalid length. [ 213.801520][T14564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2190'. [ 213.815984][T14559] loop3: detected capacity change from 0 to 8192 [ 213.824536][T14561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.856724][T14561] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.869685][T14564] batadv0: entered promiscuous mode [ 213.875090][T14564] batadv0: entered allmulticast mode [ 213.944030][T14564] bond0: (slave batadv0): Releasing backup interface [ 213.956042][T14564] bridge0: port 3(batadv0) entered blocking state [ 213.962607][T14564] bridge0: port 3(batadv0) entered disabled state [ 213.993209][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'. [ 214.012348][T14573] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2191'. [ 214.021433][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'. [ 214.032320][T14568] loop0: detected capacity change from 0 to 512 [ 214.064031][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.081748][T14568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.097267][T14568] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.196328][T14591] loop3: detected capacity change from 0 to 8192 [ 214.216058][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.246896][T14598] loop1: detected capacity change from 0 to 128 [ 214.346127][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 214.357133][T14609] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2195'. [ 214.366336][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 214.402393][T11384] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 214.411933][T11384] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 214.472025][T14621] FAULT_INJECTION: forcing a failure. [ 214.472025][T14621] name failslab, interval 1, probability 0, space 0, times 0 [ 214.484814][T14621] CPU: 1 UID: 0 PID: 14621 Comm: syz.0.2199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.484844][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.484857][T14621] Call Trace: [ 214.484864][T14621] [ 214.484872][T14621] __dump_stack+0x1d/0x30 [ 214.484895][T14621] dump_stack_lvl+0xe8/0x140 [ 214.484955][T14621] dump_stack+0x15/0x1b [ 214.485001][T14621] should_fail_ex+0x265/0x280 [ 214.485027][T14621] should_failslab+0x8c/0xb0 [ 214.485048][T14621] kmem_cache_alloc_noprof+0x50/0x310 [ 214.485084][T14621] ? __break_lease+0x78/0xe80 [ 214.485117][T14621] ? avc_has_perm+0xf7/0x180 [ 214.485213][T14621] __break_lease+0x78/0xe80 [ 214.485247][T14621] ? selinux_inode_set_acl+0x1c0/0x210 [ 214.485336][T14621] vfs_set_acl+0x2ad/0x6f0 [ 214.485457][T14621] do_set_acl+0x97/0x130 [ 214.485543][T14621] filename_setxattr+0x1ff/0x400 [ 214.485589][T14621] path_setxattrat+0x2c9/0x310 [ 214.485688][T14621] __x64_sys_lsetxattr+0x71/0x90 [ 214.485713][T14621] x64_sys_call+0x287b/0x3000 [ 214.485785][T14621] do_syscall_64+0xd2/0x200 [ 214.485808][T14621] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.485839][T14621] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.485897][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.485932][T14621] RIP: 0033:0x7f4ce8daeec9 [ 214.485949][T14621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.485971][T14621] RSP: 002b:00007f4ce7817038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 214.485995][T14621] RAX: ffffffffffffffda RBX: 00007f4ce9005fa0 RCX: 00007f4ce8daeec9 [ 214.486010][T14621] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000000 [ 214.486025][T14621] RBP: 00007f4ce7817090 R08: 0000000000000000 R09: 0000000000000000 [ 214.486072][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.486124][T14621] R13: 00007f4ce9006038 R14: 00007f4ce9005fa0 R15: 00007ffcdff6c9c8 [ 214.486222][T14621] [ 214.742667][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 214.742682][ T29] audit: type=1400 audit(1759436762.675:8174): avc: denied { listen } for pid=14631 comm="syz.3.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.778834][T14628] pim6reg: entered allmulticast mode [ 214.785558][T14628] pim6reg: left allmulticast mode [ 214.790686][ T29] audit: type=1400 audit(1759436762.707:8175): avc: denied { read } for pid=14631 comm="syz.3.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.904113][T14651] loop3: detected capacity change from 0 to 512 [ 214.917027][T14651] EXT4-fs: quotafile must be on filesystem root [ 214.932751][T14658] loop4: detected capacity change from 0 to 512 [ 214.970324][T14658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.988534][T14658] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.003200][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'. [ 215.090494][T14666] loop3: detected capacity change from 0 to 8192 [ 215.144446][T11372] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 215.152673][T11372] FAT-fs (loop1): Filesystem has been set read-only [ 215.162717][T14670] loop0: detected capacity change from 0 to 512 [ 215.173161][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.174177][T11372] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 215.283860][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 215.317514][T14689] loop4: detected capacity change from 0 to 8192 [ 215.343461][T14670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.358361][T14670] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.457347][T14701] netlink: 'syz.1.2211': attribute type 10 has an invalid length. [ 215.487735][T14701] netlink: 'syz.1.2211': attribute type 10 has an invalid length. [ 215.528244][T14701] batadv0: entered promiscuous mode [ 215.534911][T14701] batadv0: entered allmulticast mode [ 215.586514][T14701] .`: (slave batadv0): Releasing backup interface [ 215.622203][T14701] bridge0: port 3(batadv0) entered blocking state [ 215.628811][T14701] bridge0: port 3(batadv0) entered disabled state [ 215.641611][T14718] loop3: detected capacity change from 0 to 128 [ 215.665937][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.768190][T11383] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 215.777499][T11383] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 215.823832][T14739] loop0: detected capacity change from 0 to 512 [ 215.834112][T14734] SELinux: failed to load policy [ 215.850930][T14739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.873231][T14739] EXT4-fs (loop0): 1 truncate cleaned up [ 215.880547][T14739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.908948][T14743] loop1: detected capacity change from 0 to 512 [ 215.917442][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.964046][T14748] loop0: detected capacity change from 0 to 512 [ 215.964408][T14743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.973613][T14748] EXT4-fs: quotafile must be on filesystem root [ 215.989234][T14743] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.024734][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.043268][T14754] loop1: detected capacity change from 0 to 128 [ 216.120719][T14762] loop4: detected capacity change from 0 to 512 [ 216.152781][T14762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.190891][T14762] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.208471][T14771] SELinux: failed to load policy [ 216.275481][T14781] loop0: detected capacity change from 0 to 8192 [ 216.397584][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.486974][ T29] audit: type=1326 audit(1759436764.318:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.511130][ T29] audit: type=1326 audit(1759436764.318:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.534732][ T29] audit: type=1326 audit(1759436764.318:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.558382][ T29] audit: type=1326 audit(1759436764.318:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.581979][ T29] audit: type=1326 audit(1759436764.318:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.605549][ T29] audit: type=1326 audit(1759436764.318:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.629089][ T29] audit: type=1326 audit(1759436764.318:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.652658][ T29] audit: type=1326 audit(1759436764.318:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14800 comm="syz.0.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 216.693166][T11386] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 216.701346][T11386] FAT-fs (loop3): Filesystem has been set read-only [ 216.711576][T11386] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 216.747482][T14805] loop0: detected capacity change from 0 to 8192 [ 216.792596][T14811] SELinux: failed to load policy [ 216.837772][T14809] loop3: detected capacity change from 0 to 8192 [ 216.847021][T14814] loop5: detected capacity change from 0 to 512 [ 216.853702][T14814] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.884039][T14819] loop4: detected capacity change from 0 to 512 [ 216.890425][T14814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.903522][T14814] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.914829][T14819] EXT4-fs: quotafile must be on filesystem root [ 216.945276][T14814] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2227: corrupted xattr block 33: e_value out of bounds [ 216.964738][T14814] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 216.974723][T14814] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2227: corrupted xattr block 33: e_value out of bounds [ 216.997376][T14814] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 217.006823][T14814] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 217.023621][T11386] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 217.031767][T11386] FAT-fs (loop1): Filesystem has been set read-only [ 217.069786][T14833] loop4: detected capacity change from 0 to 512 [ 217.097795][T14814] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.2227: corrupted xattr block 33: e_value out of bounds [ 217.112175][T11386] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 217.130684][T14814] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 217.152632][T14833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.166243][T14833] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.330941][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.350935][T14849] loop9: detected capacity change from 0 to 7 [ 217.357496][T14849] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.377317][T14849] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.385231][T14849] loop9: unable to read partition table [ 217.419578][T14849] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 217.419578][T14849] ) failed (rc=-5) [ 217.434122][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.444672][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.452813][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.462053][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.481674][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.547961][T14865] loop3: detected capacity change from 0 to 8192 [ 217.702437][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.813555][T14883] loop4: detected capacity change from 0 to 128 [ 217.922412][T14887] loop3: detected capacity change from 0 to 128 [ 217.954975][T14884] loop1: detected capacity change from 0 to 8192 [ 218.062630][T14898] SELinux: failed to load policy [ 218.103117][T14906] loop5: detected capacity change from 0 to 512 [ 218.112457][T14906] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.135624][T14906] EXT4-fs (loop5): 1 truncate cleaned up [ 218.142312][T14906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.239801][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.312100][T14923] loop5: detected capacity change from 0 to 512 [ 218.399332][T14923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.426195][T14923] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.588454][T14937] loop0: detected capacity change from 0 to 8192 [ 218.834983][T14951] loop4: detected capacity change from 0 to 512 [ 218.914516][T11386] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 218.922694][T11386] FAT-fs (loop3): Filesystem has been set read-only [ 218.940710][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.961076][T11386] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 218.991381][T14951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.012571][T14951] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.092907][T14973] netlink: 'syz.5.2249': attribute type 10 has an invalid length. [ 219.122400][T14973] batadv0: left allmulticast mode [ 219.127603][T14973] batadv0: left promiscuous mode [ 219.132733][T14973] bridge0: port 3(batadv0) entered disabled state [ 219.170968][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.200841][T14973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 219.217155][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.260172][T14981] loop3: detected capacity change from 0 to 8192 [ 219.354279][T14992] SELinux: failed to load policy [ 219.416114][T15005] loop4: detected capacity change from 0 to 128 [ 219.433492][T14998] loop5: detected capacity change from 0 to 8192 [ 219.440748][T15008] __nla_validate_parse: 26 callbacks suppressed [ 219.440766][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 219.461595][T15008] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2252'. [ 219.470725][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 219.725846][T15024] loop0: detected capacity change from 0 to 512 [ 219.802472][T15024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.830657][T15024] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.837985][T15031] loop3: detected capacity change from 0 to 8192 [ 220.040056][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 220.052419][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.075150][T15053] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2258'. [ 220.084332][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 220.154972][T15060] loop5: detected capacity change from 0 to 8192 [ 220.164651][T15067] loop0: detected capacity change from 0 to 512 [ 220.218437][T15067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.276554][T15067] EXT4-fs (loop0): 1 truncate cleaned up [ 220.298766][T15067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.365431][T11384] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 220.373696][T11384] FAT-fs (loop4): Filesystem has been set read-only [ 220.381472][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 220.395176][T15077] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2260'. [ 220.404342][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 220.415877][T11384] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 220.497358][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.599860][T15090] loop4: detected capacity change from 0 to 512 [ 220.653384][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 220.653466][ T29] audit: type=1326 audit(1759436768.210:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.684394][ T29] audit: type=1326 audit(1759436768.247:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.725800][ T29] audit: type=1326 audit(1759436768.275:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.749468][ T29] audit: type=1326 audit(1759436768.275:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.775839][ T29] audit: type=1326 audit(1759436768.322:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.777877][T15090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.808904][T15095] loop0: detected capacity change from 0 to 512 [ 220.821131][ T29] audit: type=1326 audit(1759436768.350:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.844811][ T29] audit: type=1326 audit(1759436768.350:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.851165][T15090] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.868540][ T29] audit: type=1326 audit(1759436768.350:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.868603][ T29] audit: type=1326 audit(1759436768.350:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.868637][ T29] audit: type=1326 audit(1759436768.350:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.5.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf8aeec9 code=0x7ffc0000 [ 220.982466][T15119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2266'. [ 221.004196][T15095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.030469][T15095] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.238981][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.250287][T15128] 9pnet: Could not find request transport: fd0x0000000000000004 [ 221.259995][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.392402][T15138] loop4: detected capacity change from 0 to 8192 [ 221.696833][T15157] loop0: detected capacity change from 0 to 512 [ 221.738480][T15163] loop5: detected capacity change from 0 to 512 [ 221.764145][T15157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.778484][T15157] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.798244][T15163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.813563][T15163] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.905235][T15172] FAULT_INJECTION: forcing a failure. [ 221.905235][T15172] name failslab, interval 1, probability 0, space 0, times 0 [ 221.917979][T15172] CPU: 1 UID: 0 PID: 15172 Comm: Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.918067][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.918083][T15172] Call Trace: [ 221.918090][T15172] [ 221.918099][T15172] __dump_stack+0x1d/0x30 [ 221.918125][T15172] dump_stack_lvl+0xe8/0x140 [ 221.918144][T15172] dump_stack+0x15/0x1b [ 221.918160][T15172] should_fail_ex+0x265/0x280 [ 221.918258][T15172] ? resv_map_alloc+0x57/0x190 [ 221.918287][T15172] should_failslab+0x8c/0xb0 [ 221.918312][T15172] __kmalloc_cache_noprof+0x4c/0x320 [ 221.918346][T15172] resv_map_alloc+0x57/0x190 [ 221.918425][T15172] hugetlbfs_get_inode+0x67/0x370 [ 221.918454][T15172] hugetlb_file_setup+0x192/0x3d0 [ 221.918531][T15172] ksys_mmap_pgoff+0x157/0x310 [ 221.918570][T15172] x64_sys_call+0x14a3/0x3000 [ 221.918597][T15172] do_syscall_64+0xd2/0x200 [ 221.918620][T15172] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.918680][T15172] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.918716][T15172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.918771][T15172] RIP: 0033:0x7f9785ddeec9 [ 221.918865][T15172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.918889][T15172] RSP: 002b:00007f978483f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 221.918912][T15172] RAX: ffffffffffffffda RBX: 00007f9786035fa0 RCX: 00007f9785ddeec9 [ 221.918999][T15172] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 221.919015][T15172] RBP: 00007f978483f090 R08: ffffffffffffffff R09: 0000000000000000 [ 221.919031][T15172] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001 [ 221.919047][T15172] R13: 00007f9786036038 R14: 00007f9786035fa0 R15: 00007ffe5b5c7ce8 [ 221.919070][T15172] [ 221.963154][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.142560][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.190437][T15187] 9pnet_fd: Insufficient options for proto=fd [ 222.213924][T15185] loop5: detected capacity change from 0 to 8192 [ 222.279151][T15193] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 222.290303][T15191] loop0: detected capacity change from 0 to 8192 [ 222.623052][T15208] loop4: detected capacity change from 0 to 512 [ 222.660838][T15205] loop0: detected capacity change from 0 to 8192 [ 222.727729][T15208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.775734][T15208] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.800080][T15210] loop5: detected capacity change from 0 to 512 [ 222.828874][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.874972][T15210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.899973][T15210] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.905720][T15219] loop4: detected capacity change from 0 to 512 [ 222.951994][T15219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.965329][T15219] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.992488][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.032708][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.087484][T15227] 9pnet_fd: Insufficient options for proto=fd [ 223.114745][T15223] loop5: detected capacity change from 0 to 8192 [ 223.134248][T15225] loop4: detected capacity change from 0 to 512 [ 223.192436][T15233] netlink: 'syz.0.2294': attribute type 10 has an invalid length. [ 223.221013][T15225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.240335][T15225] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.302295][T15241] loop1: detected capacity change from 0 to 128 [ 223.316522][T15239] loop0: detected capacity change from 0 to 1024 [ 223.334389][T15241] FAT-fs (loop1): bogus sectors per cluster 0 [ 223.339537][T15239] EXT4-fs: Ignoring removed bh option [ 223.340617][T15241] FAT-fs (loop1): Can't find a valid FAT filesystem [ 223.462723][T15239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.489574][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.582616][T15255] loop1: detected capacity change from 0 to 512 [ 223.620055][T15258] loop4: detected capacity change from 0 to 512 [ 223.649217][T15255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.665179][T15255] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.703270][T15258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.716846][T15258] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.717894][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.742143][T15272] loop5: detected capacity change from 0 to 512 [ 223.748840][T15272] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.789159][T15272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.805247][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.805542][T15272] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.828505][T15272] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2302: corrupted xattr block 33: e_value out of bounds [ 223.842903][T15272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 223.854752][T15272] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2302: corrupted xattr block 33: e_value out of bounds [ 223.873702][T15272] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 223.906130][T15272] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 223.925100][T15272] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.2302: corrupted xattr block 33: e_value out of bounds [ 223.940144][T15272] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 223.956031][T15280] loop1: detected capacity change from 0 to 8192 [ 224.039422][T15285] loop4: detected capacity change from 0 to 8192 [ 224.187656][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.245835][T15298] loop1: detected capacity change from 0 to 128 [ 224.322260][T15307] loop4: detected capacity change from 0 to 128 [ 224.385539][T15305] loop0: detected capacity change from 0 to 512 [ 224.413588][T15305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.427562][T15305] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.583778][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.635294][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.655984][T15331] netlink: 'syz.3.2317': attribute type 10 has an invalid length. [ 224.664181][T15331] batadv0: left allmulticast mode [ 224.669252][T15331] batadv0: left promiscuous mode [ 224.674346][T15331] bridge0: port 3(batadv0) entered disabled state [ 224.688877][T15331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.703510][T15331] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 224.710449][T15336] netlink: 'syz.3.2317': attribute type 10 has an invalid length. [ 224.723573][T15336] batadv0: entered promiscuous mode [ 224.728948][T15336] batadv0: entered allmulticast mode [ 224.751984][T15336] bond0: (slave batadv0): Releasing backup interface [ 224.755709][T15336] bridge0: port 3(batadv0) entered blocking state [ 224.755748][T15336] bridge0: port 3(batadv0) entered disabled state [ 224.797350][T15341] netlink: 'syz.0.2318': attribute type 10 has an invalid length. [ 224.811315][T15341] __nla_validate_parse: 12 callbacks suppressed [ 224.811332][T15341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2318'. [ 224.855757][T15346] loop3: detected capacity change from 0 to 512 [ 224.881735][T15346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.895921][T15346] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.952475][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.984366][T15362] loop3: detected capacity change from 0 to 128 [ 225.063988][T15365] loop0: detected capacity change from 0 to 8192 [ 225.144005][T15375] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2326'. [ 225.181226][T15375] loop5: detected capacity change from 0 to 512 [ 225.190500][T15380] loop1: detected capacity change from 0 to 512 [ 225.198636][T15380] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.205870][T15375] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.224915][T11385] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 225.233103][T11385] FAT-fs (loop4): Filesystem has been set read-only [ 225.241184][T15375] EXT4-fs warning (device loop5): ext4_xattr_inode_get:556: inode #11: comm syz.5.2326: EA inode hash validation failed [ 225.249972][T11385] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 225.262386][T15375] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 225.276436][T15375] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.2326: corrupted inode contents [ 225.289522][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 225.289476][T15375] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.2326: mark_inode_dirty error [ 225.298653][T15365] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2322'. [ 225.318937][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 225.323903][T15375] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.2326: corrupted inode contents [ 225.341311][T15375] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.2326: mark_inode_dirty error [ 225.353699][T15375] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #15: comm syz.5.2326: mark inode dirty (error -117) [ 225.367213][T15375] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 225.368327][T15380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.389004][T15375] EXT4-fs (loop5): 1 orphan inode deleted [ 225.390888][T15380] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.396611][T15375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 225.410408][T15380] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2325: corrupted xattr block 33: e_value out of bounds [ 225.441744][T15380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 225.451075][T15380] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2325: corrupted xattr block 33: e_value out of bounds [ 225.465545][T15380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 225.476611][ T4582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.477085][T15380] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 225.539259][T15380] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.2325: corrupted xattr block 33: e_value out of bounds [ 225.562215][T15380] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 225.710065][T15400] SELinux: failed to load policy [ 225.781764][T15402] SELinux: failed to load policy [ 225.855483][T15409] loop5: detected capacity change from 0 to 128 [ 225.950383][T11386] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 225.958633][T11386] FAT-fs (loop3): Filesystem has been set read-only [ 225.975427][T11386] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 226.017565][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 226.017579][ T29] audit: type=1326 audit(1759436773.224:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9785dd5d67 code=0x7ffc0000 [ 226.065350][ T29] audit: type=1326 audit(1759436773.252:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9785d7af79 code=0x7ffc0000 [ 226.088821][ T29] audit: type=1326 audit(1759436773.252:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9785ddeec9 code=0x7ffc0000 [ 226.112541][ T29] audit: type=1326 audit(1759436773.252:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9785ddeec9 code=0x7ffc0000 [ 226.136058][ T29] audit: type=1326 audit(1759436773.252:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9785ddeec9 code=0x7ffc0000 [ 226.159569][ T29] audit: type=1326 audit(1759436773.262:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9785dd5d67 code=0x7ffc0000 [ 226.183082][ T29] audit: type=1326 audit(1759436773.262:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9785d7af79 code=0x7ffc0000 [ 226.206658][ T29] audit: type=1326 audit(1759436773.262:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15372 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9785ddeec9 code=0x7ffc0000 [ 226.235726][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.272691][ T29] audit: type=1326 audit(1759436773.458:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 226.296342][ T29] audit: type=1326 audit(1759436773.458:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15432 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce8daeec9 code=0x7ffc0000 [ 226.321889][T15436] loop1: detected capacity change from 0 to 128 [ 226.336501][T15436] FAT-fs (loop1): bogus sectors per cluster 0 [ 226.342730][T15436] FAT-fs (loop1): Can't find a valid FAT filesystem [ 226.412976][T15443] loop1: detected capacity change from 0 to 512 [ 226.455804][T15443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.512445][T15443] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.577343][T15458] loop3: detected capacity change from 0 to 512 [ 226.635651][T15458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.664845][T15458] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.691166][T15478] loop0: detected capacity change from 0 to 128 [ 226.748918][T15483] FAULT_INJECTION: forcing a failure. [ 226.748918][T15483] name failslab, interval 1, probability 0, space 0, times 0 [ 226.761606][T15483] CPU: 1 UID: 0 PID: 15483 Comm: syz.1.2343 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.761699][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.761715][T15483] Call Trace: [ 226.761722][T15483] [ 226.761730][T15483] __dump_stack+0x1d/0x30 [ 226.761757][T15483] dump_stack_lvl+0xe8/0x140 [ 226.761777][T15483] dump_stack+0x15/0x1b [ 226.761803][T15483] should_fail_ex+0x265/0x280 [ 226.761830][T15483] should_failslab+0x8c/0xb0 [ 226.761855][T15483] kmem_cache_alloc_noprof+0x50/0x310 [ 226.761886][T15483] ? getname_kernel+0x3c/0x1f0 [ 226.761957][T15483] getname_kernel+0x3c/0x1f0 [ 226.761979][T15483] kern_path+0x23/0x130 [ 226.762007][T15483] create_local_trace_uprobe+0x53/0x2c0 [ 226.762042][T15483] perf_uprobe_init+0xc0/0x150 [ 226.762075][T15483] perf_uprobe_event_init+0xc4/0x140 [ 226.762102][T15483] perf_try_init_event+0xd9/0x540 [ 226.762130][T15483] ? perf_event_alloc+0xb1c/0x1740 [ 226.762161][T15483] perf_event_alloc+0xb27/0x1740 [ 226.762208][T15483] __se_sys_perf_event_open+0x615/0x11c0 [ 226.762235][T15483] ? __rcu_read_unlock+0x4f/0x70 [ 226.762280][T15483] __x64_sys_perf_event_open+0x67/0x80 [ 226.762378][T15483] x64_sys_call+0x7bd/0x3000 [ 226.762400][T15483] do_syscall_64+0xd2/0x200 [ 226.762421][T15483] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 226.762487][T15483] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 226.762524][T15483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.762545][T15483] RIP: 0033:0x7f9785ddeec9 [ 226.762560][T15483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.762643][T15483] RSP: 002b:00007f978481e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 226.762661][T15483] RAX: ffffffffffffffda RBX: 00007f9786036090 RCX: 00007f9785ddeec9 [ 226.762673][T15483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 226.762688][T15483] RBP: 00007f978481e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.762703][T15483] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 226.762718][T15483] R13: 00007f9786036128 R14: 00007f9786036090 R15: 00007ffe5b5c7ce8 [ 226.762797][T15483] [ 227.022886][T11384] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 227.031015][T11384] FAT-fs (loop5): Filesystem has been set read-only [ 227.039390][T11384] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 227.048554][T15501] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2343'. [ 227.057659][T15501] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.083014][T15501] can0: slcan on ptm0. [ 227.621620][T15475] can0 (unregistered): slcan off ptm0. [ 227.684986][T15550] SELinux: failed to load policy [ 227.737402][T11385] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 227.745652][T11385] FAT-fs (loop0): Filesystem has been set read-only [ 227.755731][T11385] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 227.794726][T15559] loop0: detected capacity change from 0 to 128 [ 227.924234][T15559] FAT-fs (loop0): bogus sectors per cluster 0 [ 227.930387][T15559] FAT-fs (loop0): Can't find a valid FAT filesystem [ 228.110473][T15576] loop5: detected capacity change from 0 to 512 [ 228.202751][T15576] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.465362][T15604] netlink: 'syz.3.2358': attribute type 10 has an invalid length. [ 228.473338][T15604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2358'. [ 228.493106][T15606] loop5: detected capacity change from 0 to 1024 [ 228.501175][T15606] EXT4-fs: Ignoring removed bh option [ 228.559549][T15611] SELinux: failed to load policy [ 228.600785][T15616] loop9: detected capacity change from 0 to 7 [ 228.607515][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.615804][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.623699][ T4610] loop9: unable to read partition table [ 228.630106][T15616] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.646185][T15616] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.654222][T15616] loop9: unable to read partition table [ 228.656297][T15613] loop3: detected capacity change from 0 to 512 [ 228.664095][T15616] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 228.664095][T15616] ) failed (rc=-5) [ 228.667742][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.696485][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.705799][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.713987][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.722188][ T4610] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.742662][T15613] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.800544][T15622] loop1: detected capacity change from 0 to 128 [ 228.821777][T15622] FAT-fs (loop1): bogus sectors per cluster 0 [ 228.828117][T15622] FAT-fs (loop1): Can't find a valid FAT filesystem [ 229.112427][T15633] loop3: detected capacity change from 0 to 8192 [ 229.306938][T15642] loop1: detected capacity change from 0 to 1024 [ 229.335669][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 229.348340][T15633] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2368'. [ 229.349871][T15642] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2370: Allocating blocks 385-513 which overlap fs metadata [ 229.357502][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 229.424103][T15641] EXT4-fs (loop1): pa ffff888107280e00: logic 16, phys. 129, len 24 [ 229.432184][T15641] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 229.525450][T15648] SELinux: failed to load policy [ 229.542960][T15650] loop3: detected capacity change from 0 to 1024 [ 229.567551][T15654] loop5: detected capacity change from 0 to 128 [ 229.582964][T15650] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2372: Allocating blocks 385-513 which overlap fs metadata [ 229.605212][T15649] EXT4-fs (loop3): pa ffff8881004b65b0: logic 16, phys. 129, len 24 [ 229.613387][T15649] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 229.654081][T15652] loop1: detected capacity change from 0 to 512 [ 229.759689][T15663] loop3: detected capacity change from 0 to 8192 [ 229.764020][T15652] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.925294][T15672] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.961502][T15672] can0: slcan on ptm0. [ 230.271102][T15725] loop3: detected capacity change from 0 to 8192 [ 230.491677][T15736] loop0: detected capacity change from 0 to 512 [ 230.546800][T11384] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 230.555034][T11384] FAT-fs (loop5): Filesystem has been set read-only [ 230.588176][T11384] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 230.617439][T15742] netlink: 'syz.5.2385': attribute type 10 has an invalid length. [ 230.625363][T15742] __nla_validate_parse: 4 callbacks suppressed [ 230.625377][T15742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2385'. [ 230.641434][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 230.659752][T15734] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2381'. [ 230.668870][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 230.685733][T15736] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.698051][T15742] batadv0: entered promiscuous mode [ 230.703377][T15742] batadv0: entered allmulticast mode [ 230.713256][T15667] can0 (unregistered): slcan off ptm0. [ 230.796456][T15742] bond0: (slave batadv0): Releasing backup interface [ 230.814988][T15742] bridge0: port 3(batadv0) entered blocking state [ 230.821572][T15742] bridge0: port 3(batadv0) entered disabled state [ 230.945357][T15763] loop3: detected capacity change from 0 to 512 [ 230.995525][T15763] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.025829][T15758] loop0: detected capacity change from 0 to 512 [ 231.054569][T15766] SELinux: failed to load policy [ 231.175323][T15758] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.300374][T15793] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 231.319739][T15793] SELinux: failed to load policy [ 231.365440][T15790] loop3: detected capacity change from 0 to 8192 [ 231.371239][T11385] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 231.381092][T11385] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 231.442705][T15805] loop5: detected capacity change from 0 to 128 [ 231.584713][T15807] loop0: detected capacity change from 0 to 512 [ 231.647887][T15807] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.865028][T15836] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 231.879315][T15836] batadv0: left allmulticast mode [ 231.884406][T15836] batadv0: left promiscuous mode [ 231.889512][T15836] bridge0: port 3(batadv0) entered disabled state [ 231.909285][T15836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.917749][T15836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 231.938388][T15843] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 231.946320][T15843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 231.977080][T15843] batadv0: entered promiscuous mode [ 231.982426][T15843] batadv0: entered allmulticast mode [ 232.005265][T15843] bond0: (slave batadv0): Releasing backup interface [ 232.020958][T15843] bridge0: port 3(batadv0) entered blocking state [ 232.027539][T15843] bridge0: port 3(batadv0) entered disabled state [ 232.206684][T15854] SELinux: failed to load policy [ 232.222686][T15856] loop3: detected capacity change from 0 to 8192 [ 232.352361][T15874] SELinux: failed to load policy [ 232.388670][T11387] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 232.397275][T11387] FAT-fs (loop5): Filesystem has been set read-only [ 232.456173][T11387] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 232.519677][T15887] loop4: detected capacity change from 0 to 8192 [ 232.527454][T11383] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 232.536740][T11383] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.806731][T15919] netlink: 'syz.5.2409': attribute type 10 has an invalid length. [ 232.845834][T15908] loop3: detected capacity change from 0 to 512 [ 232.856419][T15919] batadv0: left allmulticast mode [ 232.861578][T15919] batadv0: left promiscuous mode [ 232.862142][T15915] loop0: detected capacity change from 0 to 8192 [ 232.866719][T15919] bridge0: port 3(batadv0) entered disabled state [ 232.905468][T15919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.918772][T15908] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.931655][T15927] netlink: 'syz.5.2409': attribute type 10 has an invalid length. [ 232.939658][T15927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2409'. [ 233.056138][T15919] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 233.104728][T15927] batadv0: entered promiscuous mode [ 233.110008][T15927] batadv0: entered allmulticast mode [ 233.164881][T15927] bond0: (slave batadv0): Releasing backup interface [ 233.198288][T15927] bridge0: port 3(batadv0) entered blocking state [ 233.204956][T15927] bridge0: port 3(batadv0) entered disabled state [ 233.249946][T15954] loop3: detected capacity change from 0 to 128 [ 233.343997][T15962] loop5: detected capacity change from 0 to 128 [ 233.435180][T15960] loop0: detected capacity change from 0 to 8192 [ 233.565209][T11384] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 233.574485][T11384] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 233.965451][T15995] loop0: detected capacity change from 0 to 8192 [ 234.124652][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 234.124666][ T29] audit: type=1326 audit(1759436780.812:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 234.158247][ T29] audit: type=1326 audit(1759436780.840:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 234.181806][ T29] audit: type=1326 audit(1759436780.840:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 234.205391][ T29] audit: type=1326 audit(1759436780.840:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 234.229019][ T29] audit: type=1326 audit(1759436780.840:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 234.252606][ T29] audit: type=1326 audit(1759436780.840:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87107dd710 code=0x7ffc0000 [ 234.276263][ T29] audit: type=1326 audit(1759436780.840:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87107e06f7 code=0x7ffc0000 [ 234.299845][ T29] audit: type=1326 audit(1759436780.840:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 234.323266][ T29] audit: type=1326 audit(1759436780.840:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f87107e06f7 code=0x7ffc0000 [ 234.346783][ T29] audit: type=1326 audit(1759436780.840:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16008 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87107ddb2a code=0x7ffc0000 [ 234.376193][T16012] loop3: detected capacity change from 0 to 512 [ 234.391025][T16012] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.443969][T16021] program syz.0.2418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.466833][T11384] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 234.475026][T11384] FAT-fs (loop5): Filesystem has been set read-only [ 234.480188][T16012] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.498603][T11384] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 234.520256][T16012] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2416: corrupted xattr block 33: e_value out of bounds [ 234.562966][T16032] loop5: detected capacity change from 0 to 128 [ 234.608109][T16012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 234.650852][T16012] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2416: corrupted xattr block 33: e_value out of bounds [ 234.669327][T16012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 234.710701][T16031] loop0: detected capacity change from 0 to 8192 [ 234.714724][T16012] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 234.741264][T16012] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2416: corrupted xattr block 33: e_value out of bounds [ 234.756545][T16048] loop1: detected capacity change from 0 to 128 [ 234.775261][T16012] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 234.791443][T16040] loop4: detected capacity change from 0 to 512 [ 234.923792][T16040] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.227002][T16089] loop0: detected capacity change from 0 to 8192 [ 235.235277][T16103] loop3: detected capacity change from 0 to 128 [ 235.247455][T16101] SELinux: failed to load policy [ 235.352550][T16109] loop4: detected capacity change from 0 to 8192 [ 235.463565][T11385] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 235.471756][T11385] FAT-fs (loop5): Filesystem has been set read-only [ 235.502165][T11385] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 235.509900][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 235.540969][T16113] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2426'. [ 235.550173][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 235.637981][T16135] loop0: detected capacity change from 0 to 128 [ 235.716493][T11385] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 235.724786][T11385] FAT-fs (loop1): Filesystem has been set read-only [ 235.745619][T11385] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 235.813968][T16155] loop1: detected capacity change from 0 to 128 [ 235.899029][T16157] loop4: detected capacity change from 0 to 1024 [ 235.923556][T16157] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 235.934584][T16157] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 235.978389][T16157] JBD2: no valid journal superblock found [ 235.984212][T16157] EXT4-fs (loop4): Could not load journal inode [ 236.181047][T16182] loop3: detected capacity change from 0 to 1024 [ 236.220557][T16182] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 236.231629][T16182] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 236.294641][T16182] JBD2: no valid journal superblock found [ 236.300480][T16182] EXT4-fs (loop3): Could not load journal inode [ 236.541784][T11383] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 236.550106][T11383] FAT-fs (loop0): Filesystem has been set read-only [ 236.570519][T11383] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 236.700126][T16208] loop0: detected capacity change from 0 to 512 [ 236.711104][T16208] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.786914][T11385] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 236.795112][T11385] FAT-fs (loop1): Filesystem has been set read-only [ 236.813199][T11385] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 236.832560][T16208] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.865193][T16208] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2436: corrupted xattr block 33: e_value out of bounds [ 236.906308][T16220] netlink: 'syz.1.2438': attribute type 10 has an invalid length. [ 236.914578][T16220] batadv0: left allmulticast mode [ 236.919630][T16220] batadv0: left promiscuous mode [ 236.924762][T16220] bridge0: port 3(batadv0) entered disabled state [ 236.962433][T16208] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 236.983311][T16231] netlink: 'syz.1.2438': attribute type 10 has an invalid length. [ 236.991242][T16231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2438'. [ 237.015218][T16208] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2436: corrupted xattr block 33: e_value out of bounds [ 237.050888][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.057830][T16235] loop5: detected capacity change from 0 to 128 [ 237.081519][T16208] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 237.091390][T16220] .`: (slave batadv0): Enslaving as an active interface with an up link [ 237.102349][T16208] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 237.118204][T16231] batadv0: entered promiscuous mode [ 237.123483][T16231] batadv0: entered allmulticast mode [ 237.149881][T16231] .`: (slave batadv0): Releasing backup interface [ 237.164867][T16208] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.2436: corrupted xattr block 33: e_value out of bounds [ 237.182441][T16231] bridge0: port 3(batadv0) entered blocking state [ 237.189066][T16231] bridge0: port 3(batadv0) entered disabled state [ 237.206799][T16208] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 237.264638][T16245] loop3: detected capacity change from 0 to 128 [ 237.377401][T16259] loop1: detected capacity change from 0 to 128 [ 237.550806][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 237.559893][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2446'. [ 237.568952][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 237.599517][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2446'. [ 237.608560][T16277] netlink: 'syz.0.2446': attribute type 6 has an invalid length. [ 237.717983][T16293] loop4: detected capacity change from 0 to 1024 [ 237.726782][T16293] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.737829][T16293] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 237.772593][T16295] SELinux: syz.0.2450 (16295) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 237.786546][T16293] JBD2: no valid journal superblock found [ 237.792295][T16293] EXT4-fs (loop4): Could not load journal inode [ 237.949607][T11383] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 237.957859][T11383] FAT-fs (loop5): Filesystem has been set read-only [ 237.968460][T11383] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 238.064580][T16298] serio: Serial port ptm0 [ 238.132073][T16300] loop5: detected capacity change from 0 to 1024 [ 238.147110][T16300] EXT4-fs: Ignoring removed orlov option [ 238.152911][T16300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.213906][T11383] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 238.222074][T11383] FAT-fs (loop3): Filesystem has been set read-only [ 238.262743][T11383] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 238.293306][T16313] netlink: 'syz.1.2453': attribute type 10 has an invalid length. [ 238.305210][T16313] batadv0: left allmulticast mode [ 238.310420][T16313] batadv0: left promiscuous mode [ 238.315521][T16313] bridge0: port 3(batadv0) entered disabled state [ 238.337490][T16313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.362155][T16313] .`: (slave batadv0): Enslaving as an active interface with an up link [ 238.374326][T16324] netlink: 'syz.1.2453': attribute type 10 has an invalid length. [ 238.382248][T16324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2453'. [ 238.403487][T16324] batadv0: entered promiscuous mode [ 238.408816][T16324] batadv0: entered allmulticast mode [ 238.422251][T16324] .`: (slave batadv0): Releasing backup interface [ 238.431798][T16324] bridge0: port 3(batadv0) entered blocking state [ 238.438343][T16324] bridge0: port 3(batadv0) entered disabled state [ 238.446047][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2454'. [ 238.455142][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2454'. [ 238.464170][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2454'. [ 238.478340][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2454'. [ 238.487482][T16325] netlink: 'syz.5.2454': attribute type 6 has an invalid length. [ 238.596722][T16333] loop5: detected capacity change from 0 to 512 [ 238.647859][T16346] loop3: detected capacity change from 0 to 512 [ 238.671360][T16346] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.680409][T16341] loop1: detected capacity change from 0 to 8192 [ 238.706486][T16333] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.772259][T16346] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.818998][T16346] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2456: corrupted xattr block 33: e_value out of bounds [ 238.855142][T16346] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.896160][T16346] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2456: corrupted xattr block 33: e_value out of bounds [ 238.940949][T16346] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 238.955512][T16346] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 238.972271][T16346] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2456: corrupted xattr block 33: e_value out of bounds [ 239.008126][T16346] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 239.124548][T16385] loop1: detected capacity change from 0 to 8192 [ 239.131125][T16386] loop4: detected capacity change from 0 to 128 [ 239.479487][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 239.479502][ T29] audit: type=1326 audit(1759436785.826:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87107d5d67 code=0x7ffc0000 [ 239.544630][ T29] audit: type=1326 audit(1759436785.854:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f871077af79 code=0x7ffc0000 [ 239.568194][ T29] audit: type=1326 audit(1759436785.854:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87107d5d67 code=0x7ffc0000 [ 239.591812][ T29] audit: type=1326 audit(1759436785.854:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f871077af79 code=0x7ffc0000 [ 239.615318][ T29] audit: type=1326 audit(1759436785.854:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 239.637029][T16395] loop1: detected capacity change from 0 to 8192 [ 239.638992][ T29] audit: type=1326 audit(1759436785.854:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87107d5d67 code=0x7ffc0000 [ 239.639024][ T29] audit: type=1326 audit(1759436785.854:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f871077af79 code=0x7ffc0000 [ 239.692296][ T29] audit: type=1326 audit(1759436785.854:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 239.715913][ T29] audit: type=1326 audit(1759436785.854:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 239.739596][ T29] audit: type=1326 audit(1759436785.854:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.3.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87107deec9 code=0x7ffc0000 [ 239.830027][T16400] loop3: detected capacity change from 0 to 8192 [ 239.912506][T16403] ================================================================== [ 239.920646][T16403] BUG: KCSAN: data-race in delete_from_page_cache_batch / filemap_write_and_wait_range [ 239.930320][T16403] [ 239.932651][T16403] read-write to 0xffff88811942be60 of 8 bytes by task 16400 on cpu 0: [ 239.940804][T16403] delete_from_page_cache_batch+0x4f1/0x6f0 [ 239.946712][T16403] truncate_inode_pages_range+0x1b8/0x690 [ 239.952449][T16403] truncate_pagecache+0x53/0x70 [ 239.957319][T16403] fat_write_end+0xa5/0x160 [ 239.961832][T16403] generic_perform_write+0x312/0x490 [ 239.967147][T16403] __generic_file_write_iter+0x9e/0x120 [ 239.972717][T16403] generic_file_write_iter+0x8d/0x2f0 [ 239.978113][T16403] do_iter_readv_writev+0x4a1/0x540 [ 239.983341][T16403] vfs_writev+0x2df/0x8b0 [ 239.987683][T16403] __se_sys_pwritev2+0xfc/0x1c0 [ 239.992544][T16403] __x64_sys_pwritev2+0x67/0x80 [ 239.997401][T16403] x64_sys_call+0x2c59/0x3000 [ 240.002087][T16403] do_syscall_64+0xd2/0x200 [ 240.006602][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.012505][T16403] [ 240.014830][T16403] read to 0xffff88811942be60 of 8 bytes by task 16403 on cpu 1: [ 240.022464][T16403] filemap_write_and_wait_range+0x59/0x340 [ 240.028284][T16403] generic_file_read_iter+0x101/0x330 [ 240.033675][T16403] copy_splice_read+0x43f/0x660 [ 240.038540][T16403] splice_direct_to_actor+0x290/0x680 [ 240.043928][T16403] do_splice_direct+0xda/0x150 [ 240.048705][T16403] do_sendfile+0x380/0x650 [ 240.053141][T16403] __x64_sys_sendfile64+0x105/0x150 [ 240.058350][T16403] x64_sys_call+0x2bb4/0x3000 [ 240.063038][T16403] do_syscall_64+0xd2/0x200 [ 240.067549][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.073446][T16403] [ 240.075777][T16403] value changed: 0x000000000000000a -> 0x0000000000000009 [ 240.082884][T16403] [ 240.085207][T16403] Reported by Kernel Concurrency Sanitizer on: [ 240.091361][T16403] CPU: 1 UID: 0 PID: 16403 Comm: syz.3.2467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.101173][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.111239][T16403] ================================================================== [ 240.246298][T16405] loop1: detected capacity change from 0 to 1024 [ 240.268885][T16405] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 240.279929][T16405] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 240.312177][T16405] JBD2: no valid journal superblock found [ 240.318004][T16405] EXT4-fs (loop1): Could not load journal inode