last executing test programs: 5m57.312780072s ago: executing program 2 (id=37): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000e27f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa2180c20000000800450000140000000000739078ac1414bbac141435"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r4, 0x0, 0x2}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0) pipe(&(0x7f0000000040)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0xf7, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r9}, 0x10) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 5m56.603782147s ago: executing program 2 (id=56): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000010000000000000040f83398a3dfd79ae079c7c1f581d1bdcd952d49368175f2291f79c285871c40452dd8c96df7ac057c0f07c8f09bccde8fef6710534dd095d8e1a1a3fbb67350d4e2dcb0841556ebe34be2c35326e21ab9d8a03ac2e429255995", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m56.546149577s ago: executing program 2 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b04, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 5m56.361393959s ago: executing program 2 (id=63): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050003"], 0x48}}, 0x0) 5m56.283399159s ago: executing program 2 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x1, 0x1d, 0x7, 0x5, 0x7, 0x4, 0x5, 0xe9}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) inotify_init1(0x0) 5m56.247664819s ago: executing program 2 (id=67): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m41.226069292s ago: executing program 32 (id=67): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.902911493s ago: executing program 1 (id=5651): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6d71756575655f73706f6f6c5f743a73302073797374656d5f753a6f626a6563745f723a5e79736c6f67645f7661725f6c69625f743a7330203030303030303030303030303030303030303032202f7362696e2f6468636c69656e7400c47ee18c5e0143045481bc86294496daaaaf21aff514ebda59d1d757e9d3722a4990c6a916f8a8adde38689d57ceb5172886191f549b361735e330ad41f5cc8e5b338db57219832bff4877a5c4c5f6622002f3acff5df8cc10543e208be45368f97ae9e75c06e5cd03c18ec0e3a5d9a8f6f9f6260112862767"], 0x6f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2000000000000000}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000140)=""/178, 0xb2) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f0000000240)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r7, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x19, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r13}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x1) cachestat(r12, &(0x7f00000001c0)={0xb, 0x30}, &(0x7f0000000200), 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) 3.831933664s ago: executing program 1 (id=5652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r4) 3.830131214s ago: executing program 1 (id=5654): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,posixacl,privport,afid=0x0000000000000001,cache=mmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',cache=none,msize=0x0000000000000fff,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/241, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000c9c7db7745000000ccfb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000050000000000170000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_pidfd_open(r13, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r14, 0xff08, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(r0, r6, 0xf3a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) 2.96504089s ago: executing program 1 (id=5670): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) 2.9267215s ago: executing program 1 (id=5673): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001000000000000000000008500000036000000c5000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x0, 0xfffffffffffffff3}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000380)=ANY=[], 0x1, 0x285, &(0x7f0000000d80)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f040000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) 2.705096431s ago: executing program 1 (id=5679): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 1.548831829s ago: executing program 5 (id=5704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001000000000000000000008500000036000000c5000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x0, 0xfffffffffffffff3}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000380)=ANY=[], 0x1, 0x285, &(0x7f0000000d80)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f040000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) 1.259783031s ago: executing program 5 (id=5707): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000000)='./file2\x00', 0x2823) socket$netlink(0x10, 0x3, 0x0) 1.222513972s ago: executing program 0 (id=5708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r5) 1.212758221s ago: executing program 0 (id=5710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x18) (async) mq_notify(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) 1.206845432s ago: executing program 5 (id=5711): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x3, 0x10000, 0x1, 0x237}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}}}, 0x32) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000380)="0a98bae3fb6520730413cf1f1328966066a5b606209e9b42cd35a6d4ef213f", 0x1f}, {&(0x7f0000000400)="22ec95c2b8b49b0946a779b4f6d072ec7620ef5c2310890e466a3fb2628a6f0ed035c87b", 0x24}, {&(0x7f0000000440)="9e211e3879994732768fad6000336a366c", 0x11}, {&(0x7f0000000500)="a3358904da306d6b4984afbeabfc1ce13e070280c8ba7423554620c78c5ef3e57e1ebf182b95454698745557c3cac78154dae703f3da3525f92251b84df0277917af9bfd3b634c25e44719935d691d2a33fd90208407217f7f60b9c237f2e344e24432d023a0f3fb60876ea796f1acf13bc0cbb17b2712706ebdf7497443", 0x7e}, {&(0x7f0000001040)="e38e9ddb7b573bc7200d4271f06a7015c263a778a05c9aea486cb17e8197e4a45686310889992b5f4df5a9d1432763bce33fc34a564be2cfd243d888ba25556d32cafefe9f7523dd1682d972364723174e765e5e9d22aa2fcfcc857a7c2938e7c72739aaf9a3befb442c4ab9e2c57230d5200b8df1a6680b0748fd1ffa881dba7888649c6e203b431dac9734cf2293eefb4e4588a2cb5a8bb024da3a59326f5a370c50b4cb964a9dba93c6e2decfbc81b8e51793e36283fe8b61170f0b8edd467f0c42443abd1ccc0f43020447e1b8ef4b441b94c99f85f17cd680b5187266f3671ad5a03c16a94ebb6b178b5ac99b34b81ca248a934d4bf2366ccc3805e0197ae472a8a55100f0c5cb68520f3573e423608e0f8d7e04edc45cd290ed63c21c179b20236e0c009a709f0cf03ec306254cf9fd880dfb654cb12ee211c3d2c2bd9eb0f8af9a735588220f71b07690d996e25604748b864fbc6fcca0ddecee38cdd352cfb4bb3a7ba6535f06a21bddfb0ee7f7e89ce440ca3edde3f916a2de7d94150e849a2ee574b1e24879086a0c8bdc48e68aaa4b66409159daa63594aea55f6f295726874388d13404b2e21e1d3e7652aa9f9c6d5baf26ead44a20c4d1e811f0c27f3e7c824dd4bda9cff382e4407768eb182d1f1fd2733840e321eddc684ee79501f4c0134e80aa13a827cd1fab06df6e7e39015606bef6e83f8757e4047b9f3d048388df0cc48147b2a968a01b2db7fb23b05c07b0a325d150375486c6feddd33444345fdc496f6d92a922c00701e529a370958603f6a61cc27c1e73113a7879fc37974da17db3ab98513c82f67eba49c8bb20b18a3157a696b5e24f8fa7dfcc23bc39ff32c1cd43e3cfd493ef94f41dda59ba74e9103d2e76febb8a2840675b18612686f6cf1e38711d59290a3bc801333a0edd0271d62fd104babf535ef8e8c67491ad9421f97761d9aa16d01a36c50f30f8a1f685ddfc5c6aa4a19baae8d6453f36a94b5379bf8fd85d2bf4e563f17b5e48d302fe493d8bcfac04bfe80fff24df0f12d4144e01b42014071b4803cbed8c1175cc0982f7c74dbaf4154e879479cae265ffd26823566d6443bc1ff9e0a632b9a10ee58a92c8b3624674832e8c1f675c3dc471975601a4b56015cbb32f9c80de2cbef416c768e430592f4d738273a742001aefad57857818a8265cbc329e86cad48993b42067d0572cac61632cf27e1c21b24ffccff8a5fb6623a3186ddbb13a3eed072e9fe4d123a6a0072024314855bb1f69bf3a1ea5b1b1af654a54d3165c9bd3b7edf04a34f01bd6a8fcc0b0cdbd5465347157d047a5945645a50d6d41fae15a03eeaa455eb7d2e4b37d0689ca7b745859e4e4ae7838afa083a2c163398ff0e8194772d622b6cab019e3f88baa43cd94f546c245f5cc27e0f8ce8a9970355fb42dfee43758ceb9667a715af264dfaa56f00e45d9d56af97a77f92720e726819ceab6a2542b3f5c55acd2792f12c50775cc9f5a964b97a2bded7e36a92e873ea10cc27a77ef711dbefd50c5145c942cbd5907beff3603eb500eabf1cb850d48bf01d7dcdeed6c1d23b589b0c61755c7a90aeb66c9c070725a546c86ed5e75ccc4e8215d074d2cb25501865ca2001106884c74b14917913aa88520d3a4d6ce69a1b57671a62d18c2fc27ef368c7a53fe199753865186c7e", 0x4ad}], 0x5) 1.202102502s ago: executing program 4 (id=5712): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000003c0)) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@get={0x1, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(0xffffffffffffffff, r2, 0xf3a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x18c6) 1.181700662s ago: executing program 3 (id=5713): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,posixacl,privport,afid=0x0000000000000001,cache=mmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',cache=none,msize=0x0000000000000fff,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/241, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000c9c7db7745000000ccfb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000050000000000170000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_pidfd_open(r13, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r14, 0xff08, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(r0, r6, 0xf3a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) 1.151288892s ago: executing program 0 (id=5714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe4}}, 0x0) 1.149980112s ago: executing program 4 (id=5715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.117381572s ago: executing program 4 (id=5716): r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001240)={&(0x7f0000000100)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}], 0x1, &(0x7f00000011c0)=[@timestamping={{0x14, 0x1, 0x25, 0xc38}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}, 0x4080) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800"/16], 0x0, 0x2d, 0x0, 0x1, 0x10, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = creat(&(0x7f0000002640)='./file0\x00', 0x18a) process_madvise(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x21c7, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r7 = creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x41) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000040)={[{@dioread_nolock}, {@noquota}]}, 0xfe, 0x45d, &(0x7f0000001480)="$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") 1.091656632s ago: executing program 0 (id=5717): r0 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2004010) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xec) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000540)=0xe) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x8000}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a08403, &(0x7f0000000940), 0x2, 0x5c9, &(0x7f0000001000)="$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") setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000300)=0x40, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400001be36424ad98780000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c00000000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000000"], 0xa0}}, 0x8040) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000340)=0x6e, 0x80000) 871.943344ms ago: executing program 4 (id=5718): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001000000000000000000008500000036000000c5000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x0, 0xfffffffffffffff3}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000380)=ANY=[], 0x1, 0x285, &(0x7f0000000d80)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f040000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) 648.454205ms ago: executing program 4 (id=5719): bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) stat(&(0x7f0000000a00)='./file0\x00', 0x0) 625.628675ms ago: executing program 4 (id=5720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "d1ddbe17f36539c9653070792cc4f1c0207aa4d36e0ae764313f66701ee3265a15f3ef9159991751beecd685df35a666457316b94b521d75ee49ab6c6c33dfef", 0x33}, 0x48, 0xfffffffffffffffe) request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='/dev/vhost-vsock\x00', r1) listen(r0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r2, 0x4, 0x4, &(0x7f00000023c0)=[{}, {}, {}, {}], 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0xb10, 0x2}, 0x8, 0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) r7 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) 330.462957ms ago: executing program 5 (id=5721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r5) 296.564407ms ago: executing program 3 (id=5722): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000000)='./file2\x00', 0x2823) socket$netlink(0x10, 0x3, 0x0) 295.445528ms ago: executing program 3 (id=5723): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000", @ANYRES32=r5, @ANYRESOCT=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x7fff000000080}, 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0x4a00, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x460}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000780)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000800), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001f00000004000100080004"], 0x44}}, 0x0) 288.206128ms ago: executing program 5 (id=5724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 268.749668ms ago: executing program 5 (id=5725): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',nodevmap,posixacl,privport,afid=0x0000000000000001,cache=mmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,msize=0x0000000000000fff,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xf3a, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/241, 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000c9c7db7745000000ccfb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000050000000000170000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r12, 0xff08, 0x0) tee(r0, r5, 0xf3a, 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6) 212.535478ms ago: executing program 0 (id=5726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r4) 207.412658ms ago: executing program 3 (id=5727): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 170.049419ms ago: executing program 3 (id=5728): r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001240)={&(0x7f0000000100)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)="03983e56be1e0b1a6c77ea1e7744901546fed02906abda7bd43813dce5ba1cc4f6c2b72534dbd4651de4a3dcf7c0fa3106fd2e46529cca396dec2f71568affadadf08ea6d0fe06f31a7c864b0370060a88e8c45cfd8e2eb69e29618ab257ebc73dd589cbb7594ec08ff4c6a7bcaacb0e9987e17fdf65841564afa6dd7771eb4d6650e4656638a17665ec56fbeee99145658306c1e67734d453a51cc8a4722961f5129401f7229fd6fd471ff2ba0fad3ea30f5517865e07a19f8c0695b29924f105bf822823884d38d2755f827a93560bb9b545b959c2048fab4c06e829bf7d8ef240f4befd30b8c4de1440ec3fb391566a5faa95a0a4341321ff4c8b5ec79ade4d3af43d8d540ea748a9ada4eff126d0fc5433550ef8e4b1b57e1f4849e227cc04aa63328b7f5cdb9a6c6bee6cf602aab217c43c992c7d4521d9a1db1fc215954b3a6a9eaeee7d5a62552f4757e2f14d6777da45504dcdeacee1a25ceafe3aa0f07adcc94936760d132d41e2e3be28728ae8815761ad3a40cce253b85cecdc546cbf24401ae8339864770159123abdefb47ab94c662ef9c1dad64b4b5745ad6a5a49b35ba8be1d70df3171d2704304f698266a27342418b7676f0175b0dbcdb7143da66907c6e57679018797d832ed48abe42ee83c65b86f779ca619308e992be4c0013e71008a0013ab8f6d958c8e61418005f850852b3196af58773ea641fc76c6c6dc5cb25eaf97d0754bba7fb011ff4d239385e6e08d04b60cea9b71631ef847f493069175fc25081c70de130a888c9bde830578b2865d0210f612b4b4c9be8c8105723dfedbc043393ef2eaf0173c3e935daaae8726a2169308df4aacf5e6a5ce99645b683961b8001aa17a14819fc0a4e27524b14a462609279cff831e34410eb533361258256fbf4a78561ee3529b0677dce522a18493e858e412e76adf4320894b6d22143d61214ebc5d4f36531ea6b0e9d674bc9a41bb24295c0b41cb21f1218183e4a7ab2e16bd207ce9673ff6bd86ce8cdc4a2520defe08c37f5499904a9421dedb1d5cce989503c1d4ffaeea82e7b5a5d5dda62f7434e0bfed8474d682fd1bef5b2978b5a11387ece4e50ccbdd4c3a6353fd3c9e6527e4df71b5d08175461cd21eb3036438867ef17d1dd43e004d550b2120482cf046305ca1fcc88159dbb3bd3c909b9eef4faaa30b1e28692121a9a75120da0cce98068cc93d52307b20b1b955cfcf50bb83fa051aa84a1afbdc91490d1db8810149fcc846182b03f32f62d2ff4cb7b115761e9fa93635f87da8e2b17b3331c64bde0c8deb6a1ebc39b5655a3f84f7b4db403ad55f4ee2ba8871d71957f0f5dfbd0b4df6fe3fb02fe8f0e760e487e9db239ee252ce952a4d7953cfbcc3b089ffe672aafdd056276437d86f022441c2277af138c6b334cf52dcb0c31a9fb6f4a719efdab12c2e4961452ba6d216b40e1802e577e4b586aadefeb62133a6c2987a2b52ef54a4f922b335e51320d9cdfec3363e5ad2281c9aff6ab2abd442964faa7e6915171c61ddd67c714ee00c34ccd89a86d2bfbde37dce7aa960dfefd23ff3152df6eba081e4ee457ed40856e9f14f578918b69ec98b75c4000792475985dc3a56f55d2413f03ead026d07453226d4f2e05c0751d3b30986f8a714595d4fc7a7272ad26868c2b6fef0e5e08c3b766b043dc9fda527a8b11ae463ed80e29b8bbcba8ae7ca46f4b053edcd3f52b9a9f5fa5f8661779d0055115d1598ab2aaef303c09d667002d63902ac89e114e82049495fc9c8e022f12ddb14bd91a4a9d5ab7f5e031f319377f0dc271de52edc1715f6d54d29e77f4def122f021a8fb0f5c93c2b41822681a79b007f3906da52f0af374bced8bce3f0df390471ef6affeeddc13f01da27c1ace4938c9087f29f64e73f812bea16cb4c60bd311723bdb264410c7a45c04332baffcb9599bb086788e1079c19dbd0ac4dc23a80e12805938856773c69896b6f4b01bbe0d325454abdbe62b948727af852f08b030e8f278e5e161a223cfe0319550de43ab5e4a4f4fb3e1752cb35f090d2e4d8a7973701664845030aca923bf75824d2cc9db9bd5032560eb7c0a5901460f08de536da5d0b3baa3ef727cd79a2a0f384743014e563dcc369215f479ca6fb54e1e45d051546af6b2756edb433ffdf2be2416efd169c5db0ebba33636e134e0061b44075d624bcd52143cb4b6998ae36e0f990e6a2788c19681e7e101750cf20eecf3bfcb76452d722e1499f2fe34727b7a90695302c2768cff905b50ef614899457a6303de6467ed71a3257195f2d918b64042dd7cbca6726845efb46ed10b8b5edc8407ea1e1b433f6f1bdd4f35f82a74da0bbf50456be94d20e91a5056eb5b467b516bc95f53b2777d165d458cece62d9e31ac4f366f89dede2fae180e8cfb74519a4b6e4e7116b0e3d6bb7d57e1862adb0ed20f2b69fcf1cc1685bc76d1d25d95ee412422c6dad0414e4b880520ef2faec7c0d83df2d8b9bfe79a02dab27eb2c888972342a84eb94f4c7b05e5df944c7c5ea408cb2b4a9f05492dcdcb1fa0f462feedfb1271a6b76a2feaa62c4a1ed2ff3932e7f19b634a7a542e869edc094f5913b11506c8fd90685ee12ee8ad2cd78b150e5d7ad9c36ebaa29c22111233b753aab3e05d8a6c7d219364985e7f0b1b23cd50c54fc3d53244419d7674f3fc18d7f93decd9506926806847dee891137eef4a3936e50190001cfada1c4d39986183d0bbae4e217fd96ac365252e9024144efa8b5217c35bd5361e83020b88c007afda0cc29347373e3ad252c9c7fb4655101210c3fc5efae85e90d180497b99844d5b681a8492edc38a52cd7a6c829fdf8ffa32fd0018f26f6768fdd0a71de11018a140a6c9afa50c7990193f63b9061a1102d7d6d7342d6b6c9e557824336a1dbfec75188d1b5bf7383908a340083c6adffec3f110836d12b1c32120b535187240a519f6a2a57ad5c741fe5895c7235c409779fed14d6b1384d21950d436bb62b7dc6979443d4f323a0de28a24cf365a97251479cb6c461fb368749978649a4f12712fac9291d801f6fadb2869d2f385274210c6ae6fd2510781ed54c0e78e073ebab07e54673fb49a1ff91e9eb8b438dae6e38e14cb111024cbb2c66db7e59e8752c8efb9f544fefaa7b485eb244f005a8d46c97905bf7d1def4133d5435a12e917fc3eef3f9e69f43be0178873e0739ffcabad766de00eac94b32465c7c90b30ebc38240c2906f75b4be7abd9d3b8f41b4e07716537e732c27b827bc6f3d67a46c612657fdf51132280bad69ba6e351c91eb90728a1d180dcde57f751255d2491122e6c7eb63ae510d5b36519464c73a018d57e97b5f3abd5154d90b0489ebd4d7cacca72ff6aa6fffe80f20787327c15be524948ecc548b67cbad99c5c3a949852026fb6213a03f9e0ea0d3973789885569213805ec5266258179f463224ca8e867279fac003aaff8a0d5f1edcf192c4d083b4827c5fa5736320a20c27007d39ed73108814842b38954114578c3095be81808b39f278930982e2979d74d1709986a2029e22c3fe565ce29c4f8c2496d125ee1407f4fbb54de583d4120d574444b9ae9def6475ad211c9d1c489dc17f5bc3ddb55aca7c68df8b6ba038da4eb595e8773ce4d81b9557ef17012f2c44d79c5306d7552d653a213a85519034eab8074ac7023604d977adb48520204f1e5dc7c1e330fba5acb175ede024432a47d687aa847079e77d8cad680c882112eaaeebcbea1f0c48b5348b5781c429a8633143664724ff076048d841b0ba5d62093980d7630ba5874d57360beb3e5fc09882ea24c0bc6b2eba3a4547e274117bf62e422d73864fabf851cc949850cbd5076e585b64c78975a0ff849b056c9671d073cf80892ad4e90fbbb3822dc75dfc7e58a8b84baaa9b912e841bc087fc7d6c64692a6f088ffc3333b1c2ba9f11530ff0f42d90b3487033d9cb4dfce6e5f559b06b27d9bfb4f0166c1684e82789aa28636aceabf7c09a9ba27e327e91de429e0f68a027f0798dcaaf98a6a2d6b37d15ad6565f42fad13bcda8f822b30c8f976de983c2222de037efa2c2dffae19db1022c1900e6ef59029c07fc5c99b9f8fc1f63248f1ceaa8611940082fe4d37bf78c3175fd3169ff5d5bd8b4452e1c6a0cf92c50fd6e70c5d1873c27303802e0bb869b4bae44e2c2df6d5d2ce9700584ab33389abfa358725eda8f5092d892bcb03944abeef7e585b952f84f4c879fd7fe521c2daba5adb44fbd567b3e75a2c8d00668c5d1ef404b0fed089c9e90663bd59504ae3acccc086fe07440585b4fb1eba154cc041fea48036e33c6298bc8cd06c2c4e0c58e8db1e6a8b0ffd481db965fd3d4f3268e240fd42c9f57a962da04cb3845b82d75f86f813dc3a9c6bf8792b6997a7c2c041e2a5cda00566d077cf85b672bfb45734aeeccf11a8d7bf6c51ae7dcb2a33260129256e410be5ffc437f5e315ef0f7b540bad56b7c9367fcd19446b1b54b9bcc01c3c3f7712f1f3113ffc0ce28847bd5869664987d133a96be5054c501771700a4749e4834f0ad505951fe184e5c2fde3f876e90e24a0c0db42fcc81bbe31f2f1c3ff0eb87f85d1bf9a5a75e2510950d042e3beedd50d110b1483b2f968374d0a4b4149896972cf9d204d109864029dd95c89866231488dcef26d3587f296ff737fac3a925bb22cc6dcba81ae381408b6f9641543ac85f7a569ed5741b1f458d170251e62d4c0541184c66d3a2557d50620d1f90df228470bfd68323e0fd04d71fb2816a7f80b245865d58fc2b206cb403e15d97f62cff5e1cacf86ba9050679fb4d2c68a5f95cea551ab5ed8f2f3f2eaf13f9174d5e41d896e50695de48b073bfe974fc4fa47d85e1fa743c3bb7cba264dd6ebd81db5c8b68e459962588c676a6c1630c919fc6462656be3e48c39a44e1db64410b14ea8fee0b542b324f421f384224768d3fe3c505b04e2fa54bff0ad77d5930f3b7dc3097f131d8d32341fe0d628a13a2227eed7bbd42687f93f1e496763c50c0c6d02eda8d8b6d5535850b9f7435f6920c848d609a5a0bf33fccc76996d553f9b893b5891d05ecc5d179261128e83aa48750ff5254f0f2a2c6c4f24167c0a8626bc1a709e853cf987444bd9c72fb272c7db3ebac946b87d21bc9d0e08e92f6aad7dc01f772ffadc9304057fd0750915e20b7c82c226fbc4c6f93942ae1f6dd687a7b3780b5ed8ae1b6bd633d843f996ff6c01cdd621d4b4d0bbea9e3412737a5156305179794efb867bbe9ccc1b76e13efe3d983c44b85926bfb106572b27e9a0c968b600e3270e17a24acd737c075006b102e0f4c3db31c290582d90dada009f43cb55a4c62037b401700ce9b74ca5f12e8ef2f57c05a5d4ff8c79571fa0726ddb93d3ed08343df9693955935bf71406d172a80d8a6dac98414c5930e0518409e1a39bd2c1b16ee136ee90659815c4b56d38d5a307c2afd5adf7d544c16c58a759801478d848775169669a755ff56408e6594acdbf2d910c151da8635d81e3bb55aa3117fecebb0421201cba337b8b1cda449cd9f8ce22f09bbafed3f5b8b59be9a0d6602978adb91fcab977cc823296ebc9384e7888fdf5f0720715d141fbbf4677ff26086fe4952e3de5c64aba6b7575bea637094bf0f251cbfcb2a59ae9a134eff867b30f58a98e4f75d91db5878f6f7eca516fbc2a020a8d4bfd04e0dd34143a71315e21bfccd9dc46c4d09fd45877a1db0cf889dbb46e37cdd3c58f6a6bc9d51d489ede6e323c69f89f97e8ba7ec23df93", 0x1000}], 0x1, &(0x7f00000011c0)=[@timestamping={{0x14, 0x1, 0x25, 0xc38}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}, 0x4080) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800"/16], 0x0, 0x2d, 0x0, 0x1, 0x10, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = creat(&(0x7f0000002640)='./file0\x00', 0x18a) process_madvise(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x21c7, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r7 = creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x41) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000040)={[{@dioread_nolock}, {@noquota}]}, 0xfe, 0x45d, &(0x7f0000001480)="$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") 153.583489ms ago: executing program 0 (id=5729): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x3, 0x10000, 0x1, 0x237}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}}}, 0x32) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000380)="0a98bae3fb6520730413cf1f1328966066a5b606209e9b42cd35a6d4ef213f", 0x1f}, {&(0x7f0000000400)="22ec95c2b8b49b0946a779b4f6d072ec7620ef5c2310890e466a3fb2628a6f0ed035c87b", 0x24}, {&(0x7f0000000440)="9e211e3879994732768fad6000336a366c", 0x11}, {&(0x7f0000000500)="a3358904da306d6b4984afbeabfc1ce13e070280c8ba7423554620c78c5ef3e57e1ebf182b95454698745557c3cac78154dae703f3da3525f92251b84df0277917af9bfd3b634c25e44719935d691d2a33fd90208407217f7f60b9c237f2e344e24432d023a0f3fb60876ea796f1acf13bc0cbb17b2712706ebdf7497443", 0x7e}, {&(0x7f0000001040)="e38e9ddb7b573bc7200d4271f06a7015c263a778a05c9aea486cb17e8197e4a45686310889992b5f4df5a9d1432763bce33fc34a564be2cfd243d888ba25556d32cafefe9f7523dd1682d972364723174e765e5e9d22aa2fcfcc857a7c2938e7c72739aaf9a3befb442c4ab9e2c57230d5200b8df1a6680b0748fd1ffa881dba7888649c6e203b431dac9734cf2293eefb4e4588a2cb5a8bb024da3a59326f5a370c50b4cb964a9dba93c6e2decfbc81b8e51793e36283fe8b61170f0b8edd467f0c42443abd1ccc0f43020447e1b8ef4b441b94c99f85f17cd680b5187266f3671ad5a03c16a94ebb6b178b5ac99b34b81ca248a934d4bf2366ccc3805e0197ae472a8a55100f0c5cb68520f3573e423608e0f8d7e04edc45cd290ed63c21c179b20236e0c009a709f0cf03ec306254cf9fd880dfb654cb12ee211c3d2c2bd9eb0f8af9a735588220f71b07690d996e25604748b864fbc6fcca0ddecee38cdd352cfb4bb3a7ba6535f06a21bddfb0ee7f7e89ce440ca3edde3f916a2de7d94150e849a2ee574b1e24879086a0c8bdc48e68aaa4b66409159daa63594aea55f6f295726874388d13404b2e21e1d3e7652aa9f9c6d5baf26ead44a20c4d1e811f0c27f3e7c824dd4bda9cff382e4407768eb182d1f1fd2733840e321eddc684ee79501f4c0134e80aa13a827cd1fab06df6e7e39015606bef6e83f8757e4047b9f3d048388df0cc48147b2a968a01b2db7fb23b05c07b0a325d150375486c6feddd33444345fdc496f6d92a922c00701e529a370958603f6a61cc27c1e73113a7879fc37974da17db3ab98513c82f67eba49c8bb20b18a3157a696b5e24f8fa7dfcc23bc39ff32c1cd43e3cfd493ef94f41dda59ba74e9103d2e76febb8a2840675b18612686f6cf1e38711d59290a3bc801333a0edd0271d62fd104babf535ef8e8c67491ad9421f97761d9aa16d01a36c50f30f8a1f685ddfc5c6aa4a19baae8d6453f36a94b5379bf8fd85d2bf4e563f17b5e48d302fe493d8bcfac04bfe80fff24df0f12d4144e01b42014071b4803cbed8c1175cc0982f7c74dbaf4154e879479cae265ffd26823566d6443bc1ff9e0a632b9a10ee58a92c8b3624674832e8c1f675c3dc471975601a4b56015cbb32f9c80de2cbef416c768e430592f4d738273a742001aefad57857818a8265cbc329e86cad48993b42067d0572cac61632cf27e1c21b24ffccff8a5fb6623a3186ddbb13a3eed072e9fe4d123a6a0072024314855bb1f69bf3a1ea5b1b1af654a54d3165c9bd3b7edf04a34f01bd6a8fcc0b0cdbd5465347157d047a5945645a50d6d41fae15a03eeaa455eb7d2e4b37d0689ca7b745859e4e4ae7838afa083a2c163398ff0e8194772d622b6cab019e3f88baa43cd94f546c245f5cc27e0f8ce8a9970355fb42dfee43758ceb9667a715af264dfaa56f00e45d9d56af97a77f92720e726819ceab6a2542b3f5c55acd2792f12c50775cc9f5a964b97a2bded7e36a92e873ea10cc27a77ef711dbefd50c5145c942cbd5907beff3603eb500eabf1cb850d48bf01d7dcdeed6c1d23b589b0c61755c7a90aeb66c9c070725a546c86ed5e75ccc4e8215d074d2cb25501865ca2001106884c74b14917913aa88520d3a4d6ce69a1b57671a62d18c2fc27ef368c7a53fe199753865186c7e", 0x4ad}], 0x5) 0s ago: executing program 3 (id=5730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000004000000040000000010"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000080)}, 0x20) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x18}, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r3}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @const={0xe, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x30]}}, &(0x7f00000008c0)=""/14, 0x36, 0xe, 0x1, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5, 0x9, 0x10, 0x6801, r1, 0x5cc, '\x00', r3, r5, 0x4, 0x1, 0x6, 0x5, @void, @value, @void, @value}, 0x50) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) ioperm(0x1, 0x131, 0x8000002000008) getgroups(0x2, &(0x7f0000002c80)=[0x0, 0xee00]) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r3, 0x2f, 0xd0, 0x0, 0x7f, 0x40, @mcast2, @private1, 0x7, 0x80, 0x6, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', r3, 0x700, 0x700, 0x3, 0xfffffff1, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x64, 0x0, 0xb8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x2, 0x0}, {[@cipso={0x86, 0x5a, 0x1, [{0x5, 0x6, "cb86b2ca"}, {0x7, 0xf, "12fe086cb23e54f2fa4c200cc2"}, {0x6, 0xb, "b8ddeca0305ef6f1cd"}, {0x7, 0x8, "baa8d554caad"}, {0x2, 0xd, "5d8a4e1d5af5eb89b0aafb"}, {0x7, 0xd, "f52e5ac448066ada19c760"}, {0x6, 0x12, "b95c3c892e55d297b1bc73721429ed93"}]}, @rr={0x7, 0x27, 0xfd, [@private=0xa010101, @loopback, @multicast2, @remote, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1c8, r10, 0x110, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80004}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a4}}}]}}]}, 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r8}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): scriptors [ 350.201138][T18650] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 350.212027][T18650] JBD2: no valid journal superblock found [ 350.217818][T18650] EXT4-fs (loop0): Could not load journal inode [ 350.904292][T18662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.904364][ T36] hid-generic 0000:0000:40000.007D: unknown main item tag 0x0 [ 350.914305][T18662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.920826][ T36] hid-generic 0000:0000:40000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.974384][T18666] netlink: 'syz.0.5232': attribute type 13 has an invalid length. [ 350.982668][T18664] loop1: detected capacity change from 0 to 512 [ 350.992050][T18664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5233: bg 0: block 16: invalid block bitmap [ 351.005160][T18664] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 351.014294][T18664] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5233: invalid indirect mapped block 5 (level 0) [ 351.027783][T18664] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5233: invalid indirect mapped block 4294967295 (level 1) [ 351.043529][T18664] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5233: invalid indirect mapped block 4294967295 (level 2) [ 351.058003][T18664] EXT4-fs (loop1): 1 truncate cleaned up [ 351.064111][T18664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.077258][T18664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.171661][T18675] netlink: 'syz.1.5235': attribute type 13 has an invalid length. [ 351.179903][T18675] gretap0: refused to change device tx_queue_len [ 351.186359][T18675] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 351.206991][T18677] sd 0:0:1:0: device reset [ 351.280558][T18681] sd 0:0:1:0: device reset [ 351.361339][T18684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.370189][T18684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.952619][T18692] netlink: 'syz.0.5241': attribute type 13 has an invalid length. [ 351.960810][T18692] gretap0: refused to change device tx_queue_len [ 351.967168][T18692] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.010416][T18694] 8021q: adding VLAN 0 to HW filter on device bond16 [ 352.018489][T18694] team0: Port device bond16 added [ 352.031740][T18694] loop1: detected capacity change from 0 to 512 [ 352.041951][T18694] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5242: bg 0: block 16: invalid block bitmap [ 352.054542][T18694] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 352.063474][T18694] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5242: invalid indirect mapped block 5 (level 0) [ 352.076943][T18694] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5242: invalid indirect mapped block 4294967295 (level 1) [ 352.091320][T18694] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5242: invalid indirect mapped block 4294967295 (level 2) [ 352.105763][T18694] EXT4-fs (loop1): 1 truncate cleaned up [ 352.112089][T18694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.125150][T18694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.224126][T18705] loop1: detected capacity change from 0 to 1024 [ 352.231037][T18705] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 352.242019][T18705] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 352.252565][T18705] JBD2: no valid journal superblock found [ 352.258348][T18705] EXT4-fs (loop1): Could not load journal inode [ 352.376834][T18707] netlink: 'syz.4.5244': attribute type 13 has an invalid length. [ 352.455996][T18710] netlink: 'syz.4.5245': attribute type 13 has an invalid length. [ 352.464163][T18710] gretap0: refused to change device tx_queue_len [ 352.470624][T18710] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.768664][T18715] loop0: detected capacity change from 0 to 512 [ 352.776544][T18715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5246: bg 0: block 16: invalid block bitmap [ 352.789518][T18715] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 352.798533][T18715] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5246: invalid indirect mapped block 5 (level 0) [ 352.811884][T18715] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5246: invalid indirect mapped block 4294967295 (level 1) [ 352.826256][T18715] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5246: invalid indirect mapped block 4294967295 (level 2) [ 352.840592][T18715] EXT4-fs (loop0): 1 truncate cleaned up [ 352.846633][T18715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.859733][T18715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.005445][T18723] sd 0:0:1:0: device reset [ 353.024866][T18725] sd 0:0:1:0: device reset [ 353.104310][ T2963] hid-generic 0000:0000:40000.007E: unknown main item tag 0x0 [ 353.110205][T18729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.112583][ T2963] hid-generic 0000:0000:40000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 353.124463][T18729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.198956][T18732] netlink: 'syz.0.5252': attribute type 13 has an invalid length. [ 353.206993][T18732] gretap0: refused to change device tx_queue_len [ 353.213367][T18732] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 353.255596][T18734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.264212][T18734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.684254][T18740] 8021q: adding VLAN 0 to HW filter on device bond13 [ 353.692088][T18740] team0: Port device bond13 added [ 353.703962][T18740] loop5: detected capacity change from 0 to 512 [ 353.712262][T18740] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5254: bg 0: block 16: invalid block bitmap [ 353.726383][T18740] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 353.735487][T18740] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5254: invalid indirect mapped block 5 (level 0) [ 353.751132][T18740] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5254: invalid indirect mapped block 4294967295 (level 1) [ 353.765497][T18740] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5254: invalid indirect mapped block 4294967295 (level 2) [ 353.765740][T18740] EXT4-fs (loop5): 1 truncate cleaned up [ 353.766257][T18740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.767203][T18740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.838617][T18750] netlink: 'syz.5.5257': attribute type 13 has an invalid length. [ 353.846528][T18750] netlink: 'syz.5.5257': attribute type 27 has an invalid length. [ 353.887525][T18753] netlink: 'syz.4.5256': attribute type 13 has an invalid length. [ 353.895702][T18753] gretap0: refused to change device tx_queue_len [ 353.897024][T18752] loop5: detected capacity change from 0 to 512 [ 353.902090][T18753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 353.912011][T18752] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5258: bg 0: block 16: invalid block bitmap [ 353.937006][T18752] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 353.946083][T18752] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5258: invalid indirect mapped block 5 (level 0) [ 353.959522][T18752] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5258: invalid indirect mapped block 4294967295 (level 1) [ 353.973711][T18752] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5258: invalid indirect mapped block 4294967295 (level 2) [ 353.988957][T18752] EXT4-fs (loop5): 1 truncate cleaned up [ 353.995177][T18752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.008367][T18752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.087383][T18765] sd 0:0:1:0: device reset [ 354.112210][T18767] loop5: detected capacity change from 0 to 1024 [ 354.119835][T18767] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 354.130913][T18767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 354.151307][T18767] JBD2: no valid journal superblock found [ 354.157144][T18767] EXT4-fs (loop5): Could not load journal inode [ 354.256519][T18773] sd 0:0:1:0: device reset [ 354.387914][T18776] netlink: 'syz.0.5264': attribute type 13 has an invalid length. [ 354.396053][T18776] gretap0: refused to change device tx_queue_len [ 354.402478][T18776] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 354.689408][T18783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.698171][T18783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.698875][ T2963] hid-generic 0000:0000:40000.007F: unknown main item tag 0x0 [ 354.713859][ T2963] hid-generic 0000:0000:40000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.892713][T18785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.901132][T18785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.189498][T18787] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.197502][T18787] team0: Port device bond11 added [ 355.210781][T18787] loop0: detected capacity change from 0 to 512 [ 355.218754][T18787] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5268: bg 0: block 16: invalid block bitmap [ 355.231552][T18787] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 355.241286][T18787] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5268: invalid indirect mapped block 5 (level 0) [ 355.256322][T18787] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5268: invalid indirect mapped block 4294967295 (level 1) [ 355.258514][T18792] netlink: 'syz.4.5269': attribute type 13 has an invalid length. [ 355.272638][T18787] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5268: invalid indirect mapped block 4294967295 (level 2) [ 355.278767][T18792] netlink: 'syz.4.5269': attribute type 27 has an invalid length. [ 355.294474][T18787] EXT4-fs (loop0): 1 truncate cleaned up [ 355.307115][T18787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.321770][T18787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.365180][T18796] loop0: detected capacity change from 0 to 512 [ 355.373278][T18796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5271: bg 0: block 16: invalid block bitmap [ 355.386213][T18796] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 355.387559][T18798] netlink: 'syz.4.5270': attribute type 13 has an invalid length. [ 355.395239][T18796] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5271: invalid indirect mapped block 5 (level 0) [ 355.416190][T18798] gretap0: refused to change device tx_queue_len [ 355.418036][T18796] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5271: invalid indirect mapped block 4294967295 (level 1) [ 355.422691][T18798] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.438546][T18796] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5271: invalid indirect mapped block 4294967295 (level 2) [ 355.468489][T18796] EXT4-fs (loop0): 1 truncate cleaned up [ 355.474887][T18796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.491920][T18796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.524968][T18803] sd 0:0:1:0: device reset [ 355.621986][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 355.622003][ T30] audit: type=1326 audit(1741793782.142:22253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm="syz.5.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa647bdd169 code=0x7ffc0000 [ 355.635694][T18811] sd 0:0:1:0: device reset [ 355.651972][ T30] audit: type=1326 audit(1741793782.142:22254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18805 comm="syz.5.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa647bdd169 code=0x7ffc0000 [ 355.834069][T18819] gretap0: refused to change device tx_queue_len [ 355.840686][T18819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 356.245449][T18829] loop4: detected capacity change from 0 to 1024 [ 356.252638][T18829] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 356.263656][T18829] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 356.274270][T18829] JBD2: no valid journal superblock found [ 356.280112][T18829] EXT4-fs (loop4): Could not load journal inode [ 356.684982][T18832] gretap0: refused to change device tx_queue_len [ 356.691434][T18832] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 356.786817][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.787055][ T3375] hid-generic 0000:0000:40000.0080: unknown main item tag 0x0 [ 356.796722][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.803402][ T3375] hid-generic 0000:0000:40000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.047052][T18841] 8021q: adding VLAN 0 to HW filter on device bond17 [ 357.054878][T18841] team0: Port device bond17 added [ 357.067658][T18841] loop4: detected capacity change from 0 to 512 [ 357.075423][T18841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5282: bg 0: block 16: invalid block bitmap [ 357.088836][T18841] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 357.097892][T18841] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5282: invalid indirect mapped block 5 (level 0) [ 357.111488][T18841] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5282: invalid indirect mapped block 4294967295 (level 1) [ 357.125611][T18841] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5282: invalid indirect mapped block 4294967295 (level 2) [ 357.139936][T18841] EXT4-fs (loop4): 1 truncate cleaned up [ 357.146129][T18841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.159172][T18841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.188273][T18845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.196689][T18845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.355598][T18847] loop1: detected capacity change from 0 to 512 [ 357.363886][T18847] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5284: bg 0: block 16: invalid block bitmap [ 357.376552][T18847] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 357.385656][T18847] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5284: invalid indirect mapped block 5 (level 0) [ 357.399034][T18847] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5284: invalid indirect mapped block 4294967295 (level 1) [ 357.413228][T18847] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5284: invalid indirect mapped block 4294967295 (level 2) [ 357.427598][T18847] EXT4-fs (loop1): 1 truncate cleaned up [ 357.433719][T18847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.446543][T18847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.481842][T18850] loop1: detected capacity change from 0 to 1024 [ 357.492765][T18853] sd 0:0:1:0: device reset [ 357.504847][T18850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.664025][T18859] loop0: detected capacity change from 0 to 1024 [ 357.683672][T18859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.784868][T18868] validate_nla: 4 callbacks suppressed [ 357.784888][T18868] netlink: 'syz.4.5290': attribute type 13 has an invalid length. [ 357.798793][T18868] gretap0: refused to change device tx_queue_len [ 357.805182][T18868] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 357.829000][ T30] audit: type=1400 audit(1741793784.342:22255): avc: denied { create } for pid=18858 comm="syz.0.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 357.849070][ T30] audit: type=1400 audit(1741793784.352:22256): avc: denied { write } for pid=18858 comm="syz.0.5288" path="socket:[71934]" dev="sockfs" ino=71934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.602131][T11295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.633916][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.663552][T18881] 8021q: adding VLAN 0 to HW filter on device bond17 [ 358.671727][T18881] team0: Port device bond17 added [ 358.684309][T18881] loop1: detected capacity change from 0 to 512 [ 358.690842][T18886] loop4: detected capacity change from 0 to 1024 [ 358.695599][ T10] hid-generic 0000:0000:40000.0081: unknown main item tag 0x0 [ 358.697813][T18886] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 358.705176][ T10] hid-generic 0000:0000:40000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.715678][T18886] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 358.729132][T18887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.736499][T18886] JBD2: no valid journal superblock found [ 358.743918][T18887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.749219][T18886] EXT4-fs (loop4): Could not load journal inode [ 358.759536][T18881] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5293: bg 0: block 16: invalid block bitmap [ 358.777173][T18881] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 358.786772][T18881] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5293: invalid indirect mapped block 5 (level 0) [ 358.800148][T18881] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5293: invalid indirect mapped block 4294967295 (level 1) [ 358.814426][T18881] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5293: invalid indirect mapped block 4294967295 (level 2) [ 358.828822][T18881] EXT4-fs (loop1): 1 truncate cleaned up [ 358.834805][T18881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.847747][T18881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.894589][T18890] loop5: detected capacity change from 0 to 512 [ 358.902860][T18890] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5296: bg 0: block 16: invalid block bitmap [ 358.915658][T18890] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 358.924592][T18890] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5296: invalid indirect mapped block 5 (level 0) [ 358.938368][T18890] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5296: invalid indirect mapped block 4294967295 (level 1) [ 358.942031][T18894] netlink: 'syz.1.5297': attribute type 13 has an invalid length. [ 358.952518][T18890] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5296: invalid indirect mapped block 4294967295 (level 2) [ 358.962303][T18894] gretap0: refused to change device tx_queue_len [ 358.974363][T18890] EXT4-fs (loop5): 1 truncate cleaned up [ 358.980597][T18894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 358.986607][T18890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.014734][T18890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.047542][T18897] sd 0:0:1:0: device reset [ 359.321524][T18905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.330345][T18905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.500598][T18908] netlink: 'syz.4.5302': attribute type 13 has an invalid length. [ 359.508730][T18908] gretap0: refused to change device tx_queue_len [ 359.515107][T18908] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.751225][ T30] audit: type=1400 audit(1741793786.272:22257): avc: denied { write } for pid=18915 comm="syz.1.5304" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 359.950727][T18924] loop1: detected capacity change from 0 to 256 [ 359.991523][T18927] 8021q: adding VLAN 0 to HW filter on device bond18 [ 359.999405][T18927] team0: Port device bond18 added [ 360.012808][T18927] loop1: detected capacity change from 0 to 512 [ 360.020948][T18927] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5308: bg 0: block 16: invalid block bitmap [ 360.033709][T18927] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 360.042634][T18927] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5308: invalid indirect mapped block 5 (level 0) [ 360.056133][T18927] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5308: invalid indirect mapped block 4294967295 (level 1) [ 360.070352][T18927] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5308: invalid indirect mapped block 4294967295 (level 2) [ 360.084581][T18927] EXT4-fs (loop1): 1 truncate cleaned up [ 360.090797][T18927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.103807][T18927] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.147445][T18933] loop1: detected capacity change from 0 to 512 [ 360.156113][T18933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5309: bg 0: block 16: invalid block bitmap [ 360.168886][T18933] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 360.177773][T18933] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5309: invalid indirect mapped block 5 (level 0) [ 360.191261][T18933] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5309: invalid indirect mapped block 4294967295 (level 1) [ 360.205551][T18933] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5309: invalid indirect mapped block 4294967295 (level 2) [ 360.219741][T18933] EXT4-fs (loop1): 1 truncate cleaned up [ 360.225784][T18933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.238991][T18933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.270056][T18936] sd 0:0:1:0: device reset [ 360.313077][ T10] hid-generic 0000:0000:40000.0082: unknown main item tag 0x0 [ 360.321212][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.329892][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.331987][ T10] hid-generic 0000:0000:40000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 360.541175][T18943] loop1: detected capacity change from 0 to 128 [ 360.655867][T18947] netlink: 'syz.1.5314': attribute type 13 has an invalid length. [ 360.664080][T18947] gretap0: refused to change device tx_queue_len [ 360.670471][T18947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 360.872575][T18954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.881469][T18954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.095046][T18961] 8021q: adding VLAN 0 to HW filter on device bond9 [ 361.103125][T18961] team0: Port device bond9 added [ 361.116042][T18961] loop3: detected capacity change from 0 to 512 [ 361.124342][T18961] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5319: bg 0: block 16: invalid block bitmap [ 361.136992][T18961] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 361.145947][T18961] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5319: invalid indirect mapped block 5 (level 0) [ 361.159357][T18961] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5319: invalid indirect mapped block 4294967295 (level 1) [ 361.173567][T18961] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5319: invalid indirect mapped block 4294967295 (level 2) [ 361.187822][T18961] EXT4-fs (loop3): 1 truncate cleaned up [ 361.194002][T18961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.207013][T18961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.302683][T18968] netlink: 'syz.3.5321': attribute type 13 has an invalid length. [ 361.310771][T18968] gretap0: refused to change device tx_queue_len [ 361.317223][T18968] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 361.427820][T18972] loop4: detected capacity change from 0 to 512 [ 361.435943][T18972] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5322: bg 0: block 16: invalid block bitmap [ 361.450936][T18972] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 361.462178][T18972] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5322: invalid indirect mapped block 5 (level 0) [ 361.463634][T18976] sd 0:0:1:0: device reset [ 361.475588][T18972] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5322: invalid indirect mapped block 4294967295 (level 1) [ 361.494125][T18972] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5322: invalid indirect mapped block 4294967295 (level 2) [ 361.511722][T18972] EXT4-fs (loop4): 1 truncate cleaned up [ 361.517847][T18972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.532635][T18972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.577163][T18980] loop4: detected capacity change from 0 to 1024 [ 361.586722][T18980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.729066][T18986] tmpfs: Unknown parameter 'kmem_cache_free' [ 361.729493][ T30] audit: type=1400 audit(1741793788.252:22258): avc: denied { connect } for pid=18979 comm="syz.4.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 361.729530][ T30] audit: type=1400 audit(1741793788.252:22259): avc: denied { mounton } for pid=18979 comm="syz.4.5324" path="/428/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.131683][ T3375] hid-generic 0000:0000:40000.0083: unknown main item tag 0x0 [ 362.139917][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.148852][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.157103][ T3375] hid-generic 0000:0000:40000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.414956][T18999] 8021q: adding VLAN 0 to HW filter on device bond14 [ 362.423886][T18999] team0: Port device bond14 added [ 362.440141][T18999] loop5: detected capacity change from 0 to 512 [ 362.448470][T18999] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5331: bg 0: block 16: invalid block bitmap [ 362.461330][T18999] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 362.470402][T18999] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5331: invalid indirect mapped block 5 (level 0) [ 362.483870][T18999] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5331: invalid indirect mapped block 4294967295 (level 1) [ 362.499648][T18999] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5331: invalid indirect mapped block 4294967295 (level 2) [ 362.513890][T18999] EXT4-fs (loop5): 1 truncate cleaned up [ 362.520056][T18999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.533479][T18999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.571287][T11847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.595283][T19005] loop4: detected capacity change from 0 to 256 [ 362.621776][T19008] sd 0:0:1:0: device reset [ 362.750855][T19012] loop3: detected capacity change from 0 to 512 [ 362.768596][T19012] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5335: bg 0: block 16: invalid block bitmap [ 362.782985][T19012] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 362.792540][T19012] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5335: invalid indirect mapped block 5 (level 0) [ 362.807830][T19012] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5335: invalid indirect mapped block 4294967295 (level 1) [ 362.825497][T19012] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5335: invalid indirect mapped block 4294967295 (level 2) [ 362.839721][T19012] EXT4-fs (loop3): 1 truncate cleaned up [ 362.846110][T19012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.856068][T19019] loop4: detected capacity change from 0 to 1024 [ 362.861142][T19012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.867340][T19019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.891292][T19021] netlink: 'syz.5.5337': attribute type 13 has an invalid length. [ 362.900095][T19021] gretap0: refused to change device tx_queue_len [ 362.906558][T19021] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 363.015065][T19031] tmpfs: Unknown parameter 'kmem_cache_free' [ 363.189910][T19030] loop0: detected capacity change from 0 to 128 [ 363.202793][T19037] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.210834][T19037] team0: Port device bond10 added [ 363.225448][T19037] loop3: detected capacity change from 0 to 512 [ 363.234084][T19037] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5343: bg 0: block 16: invalid block bitmap [ 363.250489][T19037] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 363.260836][T19037] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5343: invalid indirect mapped block 5 (level 0) [ 363.275821][T19037] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5343: invalid indirect mapped block 4294967295 (level 1) [ 363.296900][T19037] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5343: invalid indirect mapped block 4294967295 (level 2) [ 363.318796][T19037] EXT4-fs (loop3): 1 truncate cleaned up [ 363.325760][T19037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.339506][T19037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.691973][T19052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.700714][T19052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.721184][T11847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.753980][ T30] audit: type=1400 audit(1741793790.272:22260): avc: denied { execute } for pid=19055 comm="syz.4.5349" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.776906][ T30] audit: type=1400 audit(1741793790.272:22261): avc: denied { execute_no_trans } for pid=19055 comm="syz.4.5349" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.821201][ T30] audit: type=1400 audit(1741793790.342:22262): avc: denied { read write } for pid=11847 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.845874][ T30] audit: type=1400 audit(1741793790.342:22263): avc: denied { open } for pid=11847 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.856098][T19058] loop4: detected capacity change from 0 to 512 [ 363.870335][ T30] audit: type=1400 audit(1741793790.342:22264): avc: denied { ioctl } for pid=11847 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.893303][T19058] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5350: bg 0: block 16: invalid block bitmap [ 363.902558][ T30] audit: type=1400 audit(1741793790.352:22265): avc: denied { create } for pid=19057 comm="syz.4.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 363.902591][ T30] audit: type=1400 audit(1741793790.352:22266): avc: denied { setopt } for pid=19057 comm="syz.4.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 363.915621][T19058] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 363.934767][ T30] audit: type=1400 audit(1741793790.362:22267): avc: denied { bpf } for pid=19057 comm="syz.4.5350" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 363.956748][T19058] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5350: invalid indirect mapped block 5 (level 0) [ 363.997247][T19058] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5350: invalid indirect mapped block 4294967295 (level 1) [ 364.011449][T19058] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5350: invalid indirect mapped block 4294967295 (level 2) [ 364.025995][T19058] EXT4-fs (loop4): 1 truncate cleaned up [ 364.032062][T19058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.045528][T19058] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.237712][T19067] netlink: 'syz.4.5354': attribute type 13 has an invalid length. [ 364.246161][T19067] gretap0: refused to change device tx_queue_len [ 364.252692][T19067] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 364.289282][T19072] netlink: 'syz.5.5353': attribute type 13 has an invalid length. [ 364.297370][T19072] gretap0: refused to change device tx_queue_len [ 364.303792][T19072] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 364.326358][T19071] 8021q: adding VLAN 0 to HW filter on device bond18 [ 364.336188][T19071] team0: Port device bond18 added [ 364.344274][T19074] netlink: 'syz.0.5355': attribute type 13 has an invalid length. [ 364.352639][T19071] loop4: detected capacity change from 0 to 512 [ 364.353952][T19074] gretap0: refused to change device tx_queue_len [ 364.362094][T19071] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5356: bg 0: block 16: invalid block bitmap [ 364.365370][T19074] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 364.398177][T19071] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 364.407113][T19071] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5356: invalid indirect mapped block 5 (level 0) [ 364.421064][T19071] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5356: invalid indirect mapped block 4294967295 (level 1) [ 364.436493][T19071] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5356: invalid indirect mapped block 4294967295 (level 2) [ 364.461990][T19071] EXT4-fs (loop4): 1 truncate cleaned up [ 364.468259][T19071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.482483][T19071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.545942][T19088] loop4: detected capacity change from 0 to 1024 [ 364.564216][T19088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.626959][T19092] sd 0:0:1:0: device reset [ 364.692073][T19096] tmpfs: Unknown parameter 'kmem_cache_free' [ 364.843080][T19099] loop3: detected capacity change from 0 to 512 [ 364.862085][T19099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5362: bg 0: block 16: invalid block bitmap [ 364.875808][T19099] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 364.888667][T19099] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5362: invalid indirect mapped block 5 (level 0) [ 364.919026][T19099] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5362: invalid indirect mapped block 4294967295 (level 1) [ 364.933383][T19099] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5362: invalid indirect mapped block 4294967295 (level 2) [ 364.948812][T19095] loop1: detected capacity change from 0 to 128 [ 364.955882][T19099] EXT4-fs (loop3): 1 truncate cleaned up [ 364.962295][T19099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.011549][T19099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.100292][ T3375] hid-generic 0000:0000:40000.0084: unknown main item tag 0x0 [ 365.109452][T19103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.121929][ T3375] hid-generic 0000:0000:40000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.153079][T19103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.215316][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.229934][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.290676][T19113] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.298732][T19113] team0: Port device bond12 added [ 365.311641][T19113] loop0: detected capacity change from 0 to 512 [ 365.324542][T19119] loop5: detected capacity change from 0 to 1024 [ 365.331641][T19119] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 365.342607][T19119] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 365.355013][T19119] JBD2: no valid journal superblock found [ 365.360843][T19119] EXT4-fs (loop5): Could not load journal inode [ 365.364822][T19113] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5369: bg 0: block 16: invalid block bitmap [ 365.381161][T19113] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 365.396004][T19113] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5369: invalid indirect mapped block 5 (level 0) [ 365.410644][T19113] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5369: invalid indirect mapped block 4294967295 (level 1) [ 365.411665][T11847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.425249][T19113] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5369: invalid indirect mapped block 4294967295 (level 2) [ 365.448373][T19113] EXT4-fs (loop0): 1 truncate cleaned up [ 365.454508][T19113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.467971][T19113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.650364][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.659070][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.809553][T19135] loop3: detected capacity change from 0 to 512 [ 365.817620][T19135] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5375: bg 0: block 16: invalid block bitmap [ 365.830447][T19135] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 365.839447][T19135] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5375: invalid indirect mapped block 5 (level 0) [ 365.852834][T19135] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5375: invalid indirect mapped block 4294967295 (level 1) [ 365.867280][T19135] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5375: invalid indirect mapped block 4294967295 (level 2) [ 365.882023][T19135] EXT4-fs (loop3): 1 truncate cleaned up [ 365.963871][T19139] netlink: 'syz.3.5376': attribute type 13 has an invalid length. [ 365.972076][T19139] gretap0: refused to change device tx_queue_len [ 365.978504][T19139] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 366.134960][T19145] netlink: 'syz.5.5377': attribute type 13 has an invalid length. [ 366.143178][T19145] gretap0: refused to change device tx_queue_len [ 366.149681][T19145] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 366.404924][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5382'. [ 366.567649][T19168] loop1: detected capacity change from 0 to 256 [ 366.644997][T19174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5387'. [ 366.771600][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 366.771620][ T30] audit: type=1400 audit(1741793793.292:22382): avc: denied { open } for pid=19184 comm="syz.3.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.797335][ T30] audit: type=1400 audit(1741793793.292:22383): avc: denied { kernel } for pid=19184 comm="syz.3.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.817635][ T30] audit: type=1400 audit(1741793793.342:22384): avc: denied { cpu } for pid=19184 comm="syz.3.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.837103][T19183] loop4: detected capacity change from 0 to 1024 [ 366.847163][T19183] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 366.858365][T19183] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 366.858914][ T30] audit: type=1400 audit(1741793793.362:22385): avc: denied { mounton } for pid=19175 comm="syz.4.5388" path="/452/file0" dev="tmpfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 366.873874][T19183] JBD2: no valid journal superblock found [ 366.897436][T19183] EXT4-fs (loop4): Could not load journal inode [ 366.909251][ T30] audit: type=1400 audit(1741793793.432:22386): avc: denied { accept } for pid=19175 comm="syz.4.5388" path="/452/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 366.937937][ T30] audit: type=1400 audit(1741793793.452:22387): avc: denied { create } for pid=19181 comm="syz.1.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.938032][T19182] loop1: detected capacity change from 0 to 128 [ 366.968634][T19189] netlink: 'syz.3.5392': attribute type 13 has an invalid length. [ 366.977710][T19189] gretap0: refused to change device tx_queue_len [ 366.980614][ T30] audit: type=1400 audit(1741793793.492:22388): avc: denied { read } for pid=19187 comm="syz.3.5392" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 366.984233][T19189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.005750][ T30] audit: type=1400 audit(1741793793.492:22389): avc: denied { open } for pid=19187 comm="syz.3.5392" path="net:[4026532386]" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 367.005789][ T30] audit: type=1400 audit(1741793793.492:22390): avc: denied { create } for pid=19187 comm="syz.3.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.005818][ T30] audit: type=1400 audit(1741793793.492:22391): avc: denied { mounton } for pid=19181 comm="syz.1.5390" path="/555/file0" dev="tmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 367.093764][T19191] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.159992][T19191] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.200060][T19191] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.260001][T19191] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.265754][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5394'. [ 367.315818][T19191] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.327626][T19191] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.340448][T19203] netlink: 'syz.1.5395': attribute type 13 has an invalid length. [ 367.342517][T19191] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.360382][T19191] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.369231][T19203] gretap0: refused to change device tx_queue_len [ 367.376043][T19203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.424810][T19208] loop5: detected capacity change from 0 to 1024 [ 367.479837][T19212] loop1: detected capacity change from 0 to 1024 [ 367.545906][T19216] loop4: detected capacity change from 0 to 1024 [ 367.677695][T19222] tmpfs: Unknown parameter 'kmem_cache_free' [ 368.118361][T19230] netlink: 'syz.3.5403': attribute type 13 has an invalid length. [ 368.126302][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5403'. [ 368.512879][T19239] netlink: 'syz.5.5407': attribute type 13 has an invalid length. [ 368.521239][T19239] gretap0: refused to change device tx_queue_len [ 368.527615][T19239] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 368.791017][T19254] netlink: 'syz.0.5414': attribute type 13 has an invalid length. [ 368.814739][T19232] loop3: detected capacity change from 0 to 128 [ 368.884543][T19256] loop0: detected capacity change from 0 to 512 [ 368.913520][T19256] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5415: bg 0: block 16: invalid block bitmap [ 368.927929][T19256] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 368.939853][T19256] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5415: invalid indirect mapped block 5 (level 0) [ 368.982633][T19256] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5415: invalid indirect mapped block 4294967295 (level 1) [ 368.997320][T19261] loop5: detected capacity change from 0 to 1024 [ 369.019884][T19263] loop3: detected capacity change from 0 to 1024 [ 369.028077][T19256] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5415: invalid indirect mapped block 4294967295 (level 2) [ 369.048980][T19256] EXT4-fs (loop0): 1 truncate cleaned up [ 369.166972][T19272] netlink: 'syz.1.5418': attribute type 13 has an invalid length. [ 369.175583][T19272] gretap0: refused to change device tx_queue_len [ 369.182001][T19272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 369.665560][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5421'. [ 369.970124][T19299] loop1: detected capacity change from 0 to 1024 [ 370.173651][T19308] loop5: detected capacity change from 0 to 1024 [ 370.951073][T19313] sd 0:0:1:0: device reset [ 371.205369][T19316] loop3: detected capacity change from 0 to 1024 [ 371.246964][T19323] netlink: 'syz.5.5434': attribute type 13 has an invalid length. [ 371.309253][T19332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.317800][T19332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.374314][T19335] tmpfs: Unknown parameter 'kmem_cache_free' [ 371.510162][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5440'. [ 371.778909][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 371.778928][ T30] audit: type=1400 audit(1741793798.302:22514): avc: denied { sys_module } for pid=19354 comm="syz.1.5447" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 371.841747][ T30] audit: type=1400 audit(1741793798.362:22515): avc: denied { prog_load } for pid=19354 comm="syz.1.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.861044][ T30] audit: type=1400 audit(1741793798.362:22516): avc: denied { bpf } for pid=19354 comm="syz.1.5447" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.881818][ T30] audit: type=1400 audit(1741793798.362:22517): avc: denied { perfmon } for pid=19354 comm="syz.1.5447" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.907850][ T30] audit: type=1400 audit(1741793798.432:22518): avc: denied { prog_run } for pid=19354 comm="syz.1.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.935839][T19358] loop1: detected capacity change from 0 to 1024 [ 371.943006][T19358] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 371.954083][T19358] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 371.965096][ T30] audit: type=1400 audit(1741793798.452:22519): avc: denied { map_create } for pid=19354 comm="syz.1.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.984501][ T30] audit: type=1400 audit(1741793798.452:22520): avc: denied { map_read map_write } for pid=19354 comm="syz.1.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 372.004682][ T30] audit: type=1400 audit(1741793798.472:22521): avc: denied { mounton } for pid=19354 comm="syz.1.5447" path="/574/file0" dev="tmpfs" ino=3124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 372.085810][T19358] JBD2: no valid journal superblock found [ 372.091670][T19358] EXT4-fs (loop1): Could not load journal inode [ 372.106379][ T30] audit: type=1326 audit(1741793798.622:22522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.4.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 372.130116][ T30] audit: type=1326 audit(1741793798.622:22523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19362 comm="syz.4.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 372.189181][T19368] sd 0:0:1:0: device reset [ 372.206377][T19366] loop5: detected capacity change from 0 to 1024 [ 372.223398][T19371] loop3: detected capacity change from 0 to 256 [ 372.319636][T19377] netlink: 'syz.3.5454': attribute type 13 has an invalid length. [ 372.328089][T19377] gretap0: refused to change device tx_queue_len [ 372.334690][T19377] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 372.614306][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5458'. [ 372.681927][T19395] loop1: detected capacity change from 0 to 512 [ 372.692532][T19395] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5459: bg 0: block 16: invalid block bitmap [ 372.705740][T19395] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 372.712738][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.715285][T19395] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5459: invalid indirect mapped block 5 (level 0) [ 372.723280][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.744422][T19395] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5459: invalid indirect mapped block 4294967295 (level 1) [ 372.759274][T19395] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5459: invalid indirect mapped block 4294967295 (level 2) [ 372.773841][T19395] EXT4-fs (loop1): 1 truncate cleaned up [ 372.810877][ T10] hid-generic 0000:0000:40000.0085: unknown main item tag 0x0 [ 372.819583][T19400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.829836][ T10] hid-generic 0000:0000:40000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.829865][T19400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.956861][T19406] loop0: detected capacity change from 0 to 1024 [ 373.118679][T19411] sd 0:0:1:0: device reset [ 373.146209][T19413] loop5: detected capacity change from 0 to 1024 [ 373.234054][T19416] loop3: detected capacity change from 0 to 256 [ 373.576071][T19433] loop1: detected capacity change from 0 to 512 [ 373.610479][T19433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5472: bg 0: block 16: invalid block bitmap [ 373.623283][T19433] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 373.634030][T19433] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5472: invalid indirect mapped block 5 (level 0) [ 373.671312][T19433] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5472: invalid indirect mapped block 4294967295 (level 1) [ 373.699379][T19433] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5472: invalid indirect mapped block 4294967295 (level 2) [ 373.731114][T19433] EXT4-fs (loop1): 1 truncate cleaned up [ 373.857826][T19441] 8021q: adding VLAN 0 to HW filter on device bond13 [ 373.867053][T19441] team0: Port device bond13 added [ 373.886819][T19441] loop0: detected capacity change from 0 to 512 [ 373.889209][T19441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5474: bg 0: block 16: invalid block bitmap [ 373.889378][T19441] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 373.889476][T19441] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5474: invalid indirect mapped block 5 (level 0) [ 373.889712][T19441] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5474: invalid indirect mapped block 4294967295 (level 1) [ 373.889956][T19441] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5474: invalid indirect mapped block 4294967295 (level 2) [ 373.890329][T19441] EXT4-fs (loop0): 1 truncate cleaned up [ 373.995054][T19447] loop0: detected capacity change from 0 to 1024 [ 374.081583][T19452] netlink: 'syz.5.5476': attribute type 13 has an invalid length. [ 374.089951][T19452] gretap0: refused to change device tx_queue_len [ 374.096387][T19452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 374.122676][T19453] tmpfs: Unknown parameter 'kmem_cache_free' [ 374.207010][T19457] sd 0:0:1:0: device reset [ 374.377654][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.398243][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.511979][T19462] loop4: detected capacity change from 0 to 128 [ 374.617624][ T2963] hid-generic 0000:0000:40000.0086: unknown main item tag 0x0 [ 374.626613][ T2963] hid-generic 0000:0000:40000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 374.636913][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.645530][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.904191][T19473] netlink: 'syz.5.5483': attribute type 13 has an invalid length. [ 374.951212][T19475] loop5: detected capacity change from 0 to 1024 [ 374.958324][T12051] EXT4-fs unmount: 33 callbacks suppressed [ 374.958340][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.968106][T19475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.993447][T19477] 8021q: adding VLAN 0 to HW filter on device bond11 [ 375.020951][T19477] team0: Port device bond11 added [ 375.039217][T19477] loop3: detected capacity change from 0 to 512 [ 375.057773][T19477] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5485: bg 0: block 16: invalid block bitmap [ 375.070603][T19477] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 375.079559][T19477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5485: invalid indirect mapped block 5 (level 0) [ 375.090664][T19487] netlink: 'syz.0.5487': attribute type 13 has an invalid length. [ 375.098510][T19477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5485: invalid indirect mapped block 4294967295 (level 1) [ 375.102838][T19487] gretap0: refused to change device tx_queue_len [ 375.120952][T19487] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.139528][T19477] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5485: invalid indirect mapped block 4294967295 (level 2) [ 375.156436][T19477] EXT4-fs (loop3): 1 truncate cleaned up [ 375.164672][T19477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.177851][T19477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.225706][T19495] sd 0:0:1:0: device reset [ 375.556084][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5491'. [ 375.640463][T19508] loop3: detected capacity change from 0 to 512 [ 375.660087][T19500] loop4: detected capacity change from 0 to 128 [ 375.669172][T19508] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5493: bg 0: block 248: padding at end of block bitmap is not set [ 375.683944][T19508] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.5493: Failed to acquire dquot type 1 [ 375.696641][T19508] EXT4-fs (loop3): 1 truncate cleaned up [ 375.702866][T19508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.715777][T19508] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.737186][T19508] random: crng reseeded on system resumption [ 375.835170][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.856161][T19514] netlink: 'syz.4.5495': attribute type 13 has an invalid length. [ 375.923328][T19508] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.5493: deleted inode referenced: 12 [ 375.937473][T19508] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.5493: deleted inode referenced: 12 [ 375.953676][T19526] sd 0:0:1:0: device reset [ 375.981525][T11082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.040960][T19535] sd 0:0:1:0: device reset [ 376.119897][T19533] loop0: detected capacity change from 0 to 512 [ 376.130464][T19537] loop5: detected capacity change from 0 to 1024 [ 376.151186][T19533] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5504: bg 0: block 16: invalid block bitmap [ 376.152926][T19537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.197150][T19533] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 376.207748][T19533] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5504: invalid indirect mapped block 5 (level 0) [ 376.222296][T19533] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5504: invalid indirect mapped block 4294967295 (level 1) [ 376.236751][T19533] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5504: invalid indirect mapped block 4294967295 (level 2) [ 376.251608][T19538] loop4: detected capacity change from 0 to 128 [ 376.257994][T19533] EXT4-fs (loop0): 1 truncate cleaned up [ 376.264807][T19533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.281334][T19533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.415694][T19547] loop0: detected capacity change from 0 to 512 [ 376.429135][T19547] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5508: bg 0: block 16: invalid block bitmap [ 376.452346][T19547] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 376.459963][T19551] netlink: 'syz.4.5507': attribute type 13 has an invalid length. [ 376.470498][T19547] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5508: invalid indirect mapped block 5 (level 0) [ 376.484144][T19551] gretap0: refused to change device tx_queue_len [ 376.490564][T19551] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 376.506237][T19547] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5508: invalid indirect mapped block 4294967295 (level 1) [ 376.520743][T19547] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5508: invalid indirect mapped block 4294967295 (level 2) [ 376.535406][T19547] EXT4-fs (loop0): 1 truncate cleaned up [ 376.541631][T19547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.557638][T19547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.579056][T19545] loop3: detected capacity change from 0 to 128 [ 376.657822][T19557] netlink: 'syz.0.5509': attribute type 13 has an invalid length. [ 376.715067][T19563] loop3: detected capacity change from 0 to 256 [ 376.807108][T19571] loop3: detected capacity change from 0 to 1024 [ 376.816928][T19571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.893924][T19576] FAULT_INJECTION: forcing a failure. [ 376.893924][T19576] name failslab, interval 1, probability 0, space 0, times 0 [ 376.906680][T19576] CPU: 0 UID: 0 PID: 19576 Comm: syz.1.5517 Tainted: G W 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 376.906751][T19576] Tainted: [W]=WARN [ 376.906824][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 376.906845][T19576] Call Trace: [ 376.906854][T19576] [ 376.906865][T19576] dump_stack_lvl+0xf2/0x150 [ 376.906900][T19576] dump_stack+0x15/0x1a [ 376.906927][T19576] should_fail_ex+0x24a/0x260 [ 376.907042][T19576] ? percpu_ref_init+0x96/0x240 [ 376.907077][T19576] should_failslab+0x8f/0xb0 [ 376.907175][T19576] ? __pfx_free_ioctx_users+0x10/0x10 [ 376.907218][T19576] __kmalloc_cache_noprof+0x4e/0x320 [ 376.907251][T19576] ? __pfx_free_ioctx_users+0x10/0x10 [ 376.907367][T19576] percpu_ref_init+0x96/0x240 [ 376.907406][T19576] ioctx_alloc+0x1b8/0x4c0 [ 376.907505][T19576] __se_sys_io_setup+0x6b/0x1b0 [ 376.907554][T19576] __x64_sys_io_setup+0x31/0x40 [ 376.907591][T19576] x64_sys_call+0x160f/0x2dc0 [ 376.907645][T19576] do_syscall_64+0xc9/0x1c0 [ 376.907734][T19576] ? clear_bhb_loop+0x55/0xb0 [ 376.907771][T19576] ? clear_bhb_loop+0x55/0xb0 [ 376.907807][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.907858][T19576] RIP: 0033:0x7f272c1dd169 [ 376.907936][T19576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.907955][T19576] RSP: 002b:00007f272a847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 376.907974][T19576] RAX: ffffffffffffffda RBX: 00007f272c3f5fa0 RCX: 00007f272c1dd169 [ 376.907990][T19576] RDX: 0000000000000000 RSI: 0000400000000680 RDI: 0000000000002004 [ 376.908006][T19576] RBP: 00007f272a847090 R08: 0000000000000000 R09: 0000000000000000 [ 376.908082][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.908097][T19576] R13: 0000000000000000 R14: 00007f272c3f5fa0 R15: 00007fff6d4652f8 [ 376.908123][T19576] [ 377.151467][ T2963] hid-generic 0000:0000:40000.0087: unknown main item tag 0x0 [ 377.159939][ T2963] hid-generic 0000:0000:40000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.170734][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.182133][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.193391][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.220092][ T2963] hid-generic 0000:0000:40000.0088: unknown main item tag 0x0 [ 377.239870][ T2963] hid-generic 0000:0000:40000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.251932][T19583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.260604][T19583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.453238][T19585] loop4: detected capacity change from 0 to 128 [ 377.805074][T19605] sd 0:0:1:0: device reset [ 377.848816][T19608] loop5: detected capacity change from 0 to 1024 [ 377.866624][T19608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.899276][T11082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.928861][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 377.928878][ T30] audit: type=1326 audit(1741793804.452:22590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 377.975166][T19612] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 377.981102][T19612] syzkaller0: group set to 774 [ 377.996058][ T30] audit: type=1326 audit(1741793804.492:22591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.019777][ T30] audit: type=1326 audit(1741793804.492:22592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.043409][ T30] audit: type=1326 audit(1741793804.492:22593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.067030][ T30] audit: type=1326 audit(1741793804.492:22594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.090696][ T30] audit: type=1326 audit(1741793804.492:22595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.114303][ T30] audit: type=1326 audit(1741793804.492:22596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.137964][ T30] audit: type=1326 audit(1741793804.492:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.161581][ T30] audit: type=1326 audit(1741793804.492:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.185238][ T30] audit: type=1326 audit(1741793804.492:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.3.5532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf012d169 code=0x7ffc0000 [ 378.243364][T19614] tmpfs: Unknown parameter 'kmem_cache_free' [ 378.314348][T19618] FAULT_INJECTION: forcing a failure. [ 378.314348][T19618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.327544][T19618] CPU: 0 UID: 0 PID: 19618 Comm: syz.0.5533 Tainted: G W 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 378.327578][T19618] Tainted: [W]=WARN [ 378.327585][T19618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.327601][T19618] Call Trace: [ 378.327609][T19618] [ 378.327619][T19618] dump_stack_lvl+0xf2/0x150 [ 378.327732][T19618] dump_stack+0x15/0x1a [ 378.327755][T19618] should_fail_ex+0x24a/0x260 [ 378.327852][T19618] should_fail+0xb/0x10 [ 378.327893][T19618] should_fail_usercopy+0x1a/0x20 [ 378.328009][T19618] _copy_from_iter+0xd5/0xd00 [ 378.328052][T19618] ? kmalloc_reserve+0x16e/0x190 [ 378.328079][T19618] ? __build_skb_around+0x196/0x1f0 [ 378.328102][T19618] ? __alloc_skb+0x21f/0x310 [ 378.328152][T19618] ? __virt_addr_valid+0x1ed/0x250 [ 378.328180][T19618] ? __check_object_size+0x364/0x520 [ 378.328206][T19618] netlink_sendmsg+0x460/0x6e0 [ 378.328310][T19618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.328347][T19618] __sock_sendmsg+0x140/0x180 [ 378.328390][T19618] ____sys_sendmsg+0x326/0x4b0 [ 378.328465][T19618] __sys_sendmsg+0x19d/0x230 [ 378.328513][T19618] __x64_sys_sendmsg+0x46/0x50 [ 378.328564][T19618] x64_sys_call+0x2734/0x2dc0 [ 378.328593][T19618] do_syscall_64+0xc9/0x1c0 [ 378.328740][T19618] ? clear_bhb_loop+0x55/0xb0 [ 378.328772][T19618] ? clear_bhb_loop+0x55/0xb0 [ 378.328803][T19618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.328839][T19618] RIP: 0033:0x7f350d74d169 [ 378.328859][T19618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.328957][T19618] RSP: 002b:00007f350bdb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.328977][T19618] RAX: ffffffffffffffda RBX: 00007f350d965fa0 RCX: 00007f350d74d169 [ 378.329059][T19618] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000005 [ 378.329075][T19618] RBP: 00007f350bdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 378.329091][T19618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.329106][T19618] R13: 0000000000000000 R14: 00007f350d965fa0 R15: 00007ffcfee5f268 [ 378.329136][T19618] [ 378.759981][T19625] loop4: detected capacity change from 0 to 1024 [ 378.776916][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.786221][T19628] loop0: detected capacity change from 0 to 1024 [ 378.797663][T19631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.808665][T19625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.821738][T19631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.838613][T19628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.866419][ T3380] hid-generic 0000:0000:40000.0089: unknown main item tag 0x0 [ 378.874870][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.884119][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.892078][ T3380] hid-generic 0000:0000:40000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.916732][T19639] geneve2: entered promiscuous mode [ 378.922118][T19639] geneve2: entered allmulticast mode [ 379.411832][T19643] loop3: detected capacity change from 0 to 2048 [ 379.434078][T19643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.460939][T19643] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.604409][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5543'. [ 379.659388][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.685893][T11847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.745434][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5545'. [ 379.794467][T19665] loop0: detected capacity change from 0 to 1024 [ 379.826812][T19665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.837434][T19671] netlink: 'syz.4.5551': attribute type 13 has an invalid length. [ 379.883340][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5552'. [ 379.965858][T19679] tmpfs: Unknown parameter 'kmem_cache_free' [ 380.149251][T19685] loop5: detected capacity change from 0 to 512 [ 380.163561][T19683] 8021q: adding VLAN 0 to HW filter on device bond15 [ 380.171785][T19685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5554: bg 0: block 16: invalid block bitmap [ 380.189717][T19683] team0: Port device bond15 added [ 380.251607][T19688] loop1: detected capacity change from 0 to 1024 [ 380.259258][T19685] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 380.268609][T19685] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5554: invalid indirect mapped block 5 (level 0) [ 380.284305][T19685] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5554: invalid indirect mapped block 4294967295 (level 1) [ 380.301514][T19688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.323470][T19685] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5554: invalid indirect mapped block 4294967295 (level 2) [ 380.340928][T19685] EXT4-fs (loop5): 1 truncate cleaned up [ 380.347379][T19685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.360495][T19685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.361194][ T3317] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 380.385056][ T3317] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 380.398158][ T3317] EXT4-fs (loop3): This should not happen!! Data will be lost [ 380.398158][ T3317] [ 380.434886][ T3317] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 380.447801][ T3317] EXT4-fs (loop3): This should not happen!! Data will be lost [ 380.447801][ T3317] [ 380.457542][ T3317] EXT4-fs (loop3): Total free blocks count 0 [ 380.463581][ T3317] EXT4-fs (loop3): Free/Dirty block details [ 380.469598][ T3317] EXT4-fs (loop3): free_blocks=0 [ 380.474589][ T3317] EXT4-fs (loop3): dirty_blocks=2048 [ 380.479909][ T3317] EXT4-fs (loop3): Block reservation details [ 380.667956][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.683239][T19695] loop3: detected capacity change from 0 to 1024 [ 380.716530][T19695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.729186][T19701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19701 comm=syz.0.5559 [ 380.741998][T19701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19701 comm=syz.0.5559 [ 380.759795][T19701] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5559'. [ 380.814921][T19704] loop0: detected capacity change from 0 to 256 [ 380.830016][T19693] loop5: detected capacity change from 0 to 128 [ 380.849500][T19704] FAT-fs (loop0): Directory bread(block 64) failed [ 380.856948][T19704] FAT-fs (loop0): Directory bread(block 65) failed [ 380.863779][T19704] FAT-fs (loop0): Directory bread(block 66) failed [ 380.870705][T19704] FAT-fs (loop0): Directory bread(block 67) failed [ 380.877860][T19704] FAT-fs (loop0): Directory bread(block 68) failed [ 380.884767][T19704] FAT-fs (loop0): Directory bread(block 69) failed [ 380.891426][T19704] FAT-fs (loop0): Directory bread(block 70) failed [ 380.898018][T19704] FAT-fs (loop0): Directory bread(block 71) failed [ 380.905076][T19704] FAT-fs (loop0): Directory bread(block 72) failed [ 380.911810][T19704] FAT-fs (loop0): Directory bread(block 73) failed [ 381.112739][T11295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.165709][T19710] loop1: detected capacity change from 0 to 256 [ 381.178765][T19708] loop5: detected capacity change from 0 to 512 [ 381.300266][T19713] loop1: detected capacity change from 0 to 128 [ 381.406486][T19708] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5561: bg 0: block 16: invalid block bitmap [ 381.420533][T19708] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 381.429647][T19708] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5561: invalid indirect mapped block 5 (level 0) [ 381.444988][T19708] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5561: invalid indirect mapped block 4294967295 (level 1) [ 381.459973][T19708] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5561: invalid indirect mapped block 4294967295 (level 2) [ 381.474689][T19708] EXT4-fs (loop5): 1 truncate cleaned up [ 381.481042][T19708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.499321][T19708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.523646][T11082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.602942][T19719] sd 0:0:1:0: device reset [ 381.684783][T19715] loop1: detected capacity change from 0 to 128 [ 381.766766][T19728] netlink: 'syz.1.5568': attribute type 13 has an invalid length. [ 381.806845][T19724] wireguard0: entered promiscuous mode [ 381.807634][T19733] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5570'. [ 381.812475][T19724] wireguard0: entered allmulticast mode [ 381.828431][ C0] syz_tun: tun_net_xmit 58 [ 381.847009][T19736] FAULT_INJECTION: forcing a failure. [ 381.847009][T19736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.860343][T19736] CPU: 0 UID: 0 PID: 19736 Comm: syz.5.5571 Tainted: G W 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 381.860379][T19736] Tainted: [W]=WARN [ 381.860387][T19736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.860403][T19736] Call Trace: [ 381.860481][T19736] [ 381.860490][T19736] dump_stack_lvl+0xf2/0x150 [ 381.860596][T19736] dump_stack+0x15/0x1a [ 381.860624][T19736] should_fail_ex+0x24a/0x260 [ 381.860663][T19736] should_fail+0xb/0x10 [ 381.860699][T19736] should_fail_usercopy+0x1a/0x20 [ 381.860789][T19736] _copy_from_iter+0xd5/0xd00 [ 381.860833][T19736] ? kmalloc_reserve+0x16e/0x190 [ 381.860861][T19736] ? __build_skb_around+0x196/0x1f0 [ 381.860890][T19736] ? __alloc_skb+0x21f/0x310 [ 381.860917][T19736] ? __virt_addr_valid+0x1ed/0x250 [ 381.861093][T19736] ? __check_object_size+0x364/0x520 [ 381.861127][T19736] netlink_sendmsg+0x460/0x6e0 [ 381.861177][T19736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.861231][T19736] __sock_sendmsg+0x140/0x180 [ 381.861316][T19736] ____sys_sendmsg+0x326/0x4b0 [ 381.861366][T19736] __sys_sendmsg+0x19d/0x230 [ 381.861416][T19736] __x64_sys_sendmsg+0x46/0x50 [ 381.861507][T19736] x64_sys_call+0x2734/0x2dc0 [ 381.861541][T19736] do_syscall_64+0xc9/0x1c0 [ 381.861577][T19736] ? clear_bhb_loop+0x55/0xb0 [ 381.861613][T19736] ? clear_bhb_loop+0x55/0xb0 [ 381.861687][T19736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.861723][T19736] RIP: 0033:0x7fa647bdd169 [ 381.861744][T19736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.861788][T19736] RSP: 002b:00007fa646247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.861812][T19736] RAX: ffffffffffffffda RBX: 00007fa647df5fa0 RCX: 00007fa647bdd169 [ 381.861829][T19736] RDX: 0000000000008040 RSI: 000040000000c2c0 RDI: 0000000000000003 [ 381.861845][T19736] RBP: 00007fa646247090 R08: 0000000000000000 R09: 0000000000000000 [ 381.861859][T19736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.861874][T19736] R13: 0000000000000000 R14: 00007fa647df5fa0 R15: 00007ffd3f240d98 [ 381.861896][T19736] [ 382.123673][T19747] loop1: detected capacity change from 0 to 1024 [ 382.138223][ C0] syz_tun: tun_net_xmit 58 [ 382.156464][T19747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.172603][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.181260][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.181422][T19751] loop0: detected capacity change from 0 to 512 [ 382.197467][T19751] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5577: bg 0: block 16: invalid block bitmap [ 382.212570][T19751] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 382.221645][T19751] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5577: invalid indirect mapped block 5 (level 0) [ 382.236530][T19751] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5577: invalid indirect mapped block 4294967295 (level 1) [ 382.251078][T19751] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5577: invalid indirect mapped block 4294967295 (level 2) [ 382.265643][T19751] EXT4-fs (loop0): 1 truncate cleaned up [ 382.271776][T19751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.284682][T19751] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.538096][T19759] loop0: detected capacity change from 0 to 128 [ 382.661084][T19772] sd 0:0:1:0: device reset [ 382.700844][ T51] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.771260][ T51] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.799976][T19762] chnl_net:caif_netlink_parms(): no params data found [ 382.848958][T19782] loop0: detected capacity change from 0 to 1024 [ 382.857494][ T51] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.871549][T19782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.895446][T19781] netlink: 'syz.5.5583': attribute type 13 has an invalid length. [ 382.918212][ C0] syz_tun: tun_net_xmit 58 [ 382.922960][T19781] gretap0: refused to change device tx_queue_len [ 382.929955][T19781] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 382.947357][ T51] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.958303][T19762] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.965391][T19762] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.972803][T19762] bridge_slave_0: entered allmulticast mode [ 382.979532][T19762] bridge_slave_0: entered promiscuous mode [ 382.986548][T19762] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.993679][T19762] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.001169][T19762] bridge_slave_1: entered allmulticast mode [ 383.007925][T19762] bridge_slave_1: entered promiscuous mode [ 383.089390][T11295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.153869][T19797] loop1: detected capacity change from 0 to 1024 [ 383.164232][ T51] bond0 (unregistering): Released all slaves [ 383.182476][T19797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.197623][ T51] bond1 (unregistering): Released all slaves [ 383.209986][ T51] bond2 (unregistering): Released all slaves [ 383.222826][ T51] bond3 (unregistering): Released all slaves [ 383.234794][ T51] team0: Port device bond4 removed [ 383.242717][ T51] bond4 (unregistering): Released all slaves [ 383.251975][ T51] team0: Port device bond5 removed [ 383.258993][ T51] bond5 (unregistering): Released all slaves [ 383.268601][ T51] team0: Port device bond6 removed [ 383.275068][ T51] bond6 (unregistering): Released all slaves [ 383.285240][ T51] team0: Port device bond7 removed [ 383.292050][ T51] bond7 (unregistering): Released all slaves [ 383.301902][ T51] team0: Port device bond8 removed [ 383.308672][ T51] bond8 (unregistering): Released all slaves [ 383.318547][ T51] team0: Port device bond9 removed [ 383.325394][ T51] bond9 (unregistering): Released all slaves [ 383.336252][ T51] team0: Port device bond10 removed [ 383.337805][T19802] tmpfs: Unknown parameter 'kmem_cache_free' [ 383.344149][ T51] bond10 (unregistering): Released all slaves [ 383.360101][ T51] team0: Port device bond11 removed [ 383.366515][ T51] bond11 (unregistering): Released all slaves [ 383.379706][T19762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.391201][T19762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.437971][T19806] sd 0:0:1:0: device reset [ 383.461279][T19762] team0: Port device team_slave_0 added [ 383.518820][T19762] team0: Port device team_slave_1 added [ 383.554967][ T51] hsr_slave_0: left promiscuous mode [ 383.561292][ T51] hsr_slave_1: left promiscuous mode [ 383.572551][ T51] veth1_macvtap: left promiscuous mode [ 383.579777][ T51] veth0_macvtap: left promiscuous mode [ 383.648805][ T3374] hid-generic 0000:0000:40000.008A: unknown main item tag 0x0 [ 383.657119][ T3374] hid-generic 0000:0000:40000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.670337][T19809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.679380][T19809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.788452][T19762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.795497][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.822012][T19762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.908252][T19762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.915336][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.941545][T19762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.956683][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.057669][T19762] hsr_slave_0: entered promiscuous mode [ 384.068802][T19762] hsr_slave_1: entered promiscuous mode [ 384.085258][T19762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.098243][T19762] Cannot create hsr debugfs directory [ 384.149740][T11295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.231725][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5592'. [ 384.241378][T19820] netlink: 'syz.1.5593': attribute type 13 has an invalid length. [ 384.250455][T19820] gretap0: refused to change device tx_queue_len [ 384.257117][T19820] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 384.346204][T19827] loop0: detected capacity change from 0 to 1024 [ 384.357035][T19827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.455302][T19762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.464428][T19762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.473544][T19762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.483278][T19762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.484928][T19839] netlink: 'syz.5.5599': attribute type 13 has an invalid length. [ 384.500515][T19839] gretap0: refused to change device tx_queue_len [ 384.506953][T19839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 384.562909][T19762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.577883][T19762] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.594425][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.601567][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.613897][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.621077][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.700409][T19762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.786535][T19762] veth0_vlan: entered promiscuous mode [ 384.796450][T19762] veth1_vlan: entered promiscuous mode [ 384.814012][T19762] veth0_macvtap: entered promiscuous mode [ 384.823262][T19762] veth1_macvtap: entered promiscuous mode [ 384.835833][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.846427][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.858437][T19762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.870761][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.881371][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.892556][T19762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.904812][T19762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.913703][T19762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.922634][T19762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.931412][T19762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.956495][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 384.956511][ T30] audit: type=1400 audit(1741793811.472:22638): avc: denied { mounton } for pid=19762 comm="syz-executor" path="/root/syzkaller.KwQ1Pc/syz-tmp" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 384.992673][ T30] audit: type=1400 audit(1741793811.502:22639): avc: denied { mount } for pid=19762 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 385.015220][ T30] audit: type=1400 audit(1741793811.512:22640): avc: denied { mount } for pid=19762 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 385.037683][ T30] audit: type=1400 audit(1741793811.512:22641): avc: denied { mounton } for pid=19762 comm="syz-executor" path="/root/syzkaller.KwQ1Pc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 385.064905][ T30] audit: type=1400 audit(1741793811.512:22642): avc: denied { mounton } for pid=19762 comm="syz-executor" path="/root/syzkaller.KwQ1Pc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=75929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 385.092770][ T30] audit: type=1400 audit(1741793811.512:22643): avc: denied { mounton } for pid=19762 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 385.116012][ T30] audit: type=1400 audit(1741793811.512:22644): avc: denied { mount } for pid=19762 comm="syz-executor" name="/" dev="gadgetfs" ino=3730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 385.180768][T19859] loop3: detected capacity change from 0 to 2048 [ 385.203042][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.232044][T19863] loop1: detected capacity change from 0 to 1024 [ 385.243805][T19863] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 385.254820][T19863] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 385.275242][T19863] JBD2: no valid journal superblock found [ 385.281079][T19863] EXT4-fs (loop1): Could not load journal inode [ 385.325744][T19870] loop0: detected capacity change from 0 to 1024 [ 385.355365][T19870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.461756][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5604'. [ 385.504585][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5603'. [ 385.609012][ T3377] hid-generic 0000:0000:40000.008B: unknown main item tag 0x0 [ 385.617190][T19882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.627418][ T3377] hid-generic 0000:0000:40000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.637536][T19882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.077947][T19887] netlink: 'syz.1.5609': attribute type 13 has an invalid length. [ 386.086431][T19887] gretap0: refused to change device tx_queue_len [ 386.092968][T19887] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 386.156996][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.184244][T19891] loop5: detected capacity change from 0 to 1024 [ 386.195042][T19891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.266626][T19898] netlink: 'syz.0.5612': attribute type 13 has an invalid length. [ 386.274785][T19898] gretap0: refused to change device tx_queue_len [ 386.281200][T19898] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 387.076895][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.088841][T19918] netlink: 'syz.4.5614': attribute type 13 has an invalid length. [ 387.096985][T19918] gretap0: refused to change device tx_queue_len [ 387.103435][T19918] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 387.203680][T19905] chnl_net:caif_netlink_parms(): no params data found [ 387.216304][ T145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.267917][ T145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.280759][T19905] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.281294][T19936] netlink: 'syz.5.5619': attribute type 13 has an invalid length. [ 387.287877][T19905] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.303283][T19905] bridge_slave_0: entered allmulticast mode [ 387.309920][T19905] bridge_slave_0: entered promiscuous mode [ 387.316686][T19936] gretap0: refused to change device tx_queue_len [ 387.323144][T19936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 387.339816][T19920] loop0: detected capacity change from 0 to 128 [ 387.347184][ T145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.357985][T19905] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.365225][T19905] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.372622][T19905] bridge_slave_1: entered allmulticast mode [ 387.379454][T19905] bridge_slave_1: entered promiscuous mode [ 387.410055][ T145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.426955][T19905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.449866][T19905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.474264][T19944] netlink: 'syz.0.5621': attribute type 13 has an invalid length. [ 387.498807][ T2963] hid-generic 0000:0000:40000.008C: unknown main item tag 0x0 [ 387.499267][T19905] team0: Port device team_slave_0 added [ 387.507068][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.520634][ T2963] hid-generic 0000:0000:40000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.531210][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.537389][T19905] team0: Port device team_slave_1 added [ 387.639705][ T145] bond0 (unregistering): Released all slaves [ 387.648677][ T145] bond1 (unregistering): Released all slaves [ 387.657193][ T30] audit: type=1326 audit(1741793814.172:22645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.0.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350d74d169 code=0x7ffc0000 [ 387.681049][ T30] audit: type=1326 audit(1741793814.172:22646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.0.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350d74d169 code=0x7ffc0000 [ 387.688864][ T145] bond2 (unregistering): Released all slaves [ 387.707333][ T30] audit: type=1326 audit(1741793814.172:22647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.0.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350d74d169 code=0x7ffc0000 [ 387.714358][ T145] bond3 (unregistering): Released all slaves [ 387.743343][ T145] bond4 (unregistering): Released all slaves [ 387.752062][ T145] bond5 (unregistering): Released all slaves [ 387.761646][ T145] bond6 (unregistering): Released all slaves [ 387.770344][ T145] bond7 (unregistering): Released all slaves [ 387.779025][ T145] bond8 (unregistering): Released all slaves [ 387.787545][ T145] bond9 (unregistering): Released all slaves [ 387.795979][ T145] team0: Port device bond10 removed [ 387.802905][ T145] bond10 (unregistering): Released all slaves [ 387.811524][ T145] team0: Port device bond11 removed [ 387.817996][ T145] bond11 (unregistering): Released all slaves [ 387.827183][ T145] team0: Port device bond12 removed [ 387.833642][ T145] bond12 (unregistering): Released all slaves [ 387.842836][ T145] team0: Port device bond13 removed [ 387.849396][ T145] bond13 (unregistering): Released all slaves [ 387.857932][ T145] team0: Port device bond14 removed [ 387.864407][ T145] bond14 (unregistering): Released all slaves [ 387.873737][ T145] team0: Port device bond15 removed [ 387.880850][ T145] bond15 (unregistering): Released all slaves [ 387.890928][T19958] sd 0:0:1:0: device reset [ 387.895792][ T145] team0: Port device bond16 removed [ 387.902750][ T145] bond16 (unregistering): Released all slaves [ 387.920361][ T145] team0: Port device bond17 removed [ 387.927115][ T145] bond17 (unregistering): Released all slaves [ 387.938822][ T145] team0: Port device bond18 removed [ 387.945369][ T145] bond18 (unregistering): Released all slaves [ 387.973556][T19955] ipvlan0: entered promiscuous mode [ 387.978981][T19955] ipvlan0: entered allmulticast mode [ 387.984287][T19955] bridge0: entered allmulticast mode [ 387.994527][T19955] bridge0: port 1(ipvlan0) entered blocking state [ 388.001265][T19955] bridge0: port 1(ipvlan0) entered disabled state [ 388.024376][T19905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.031457][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.057501][T19905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.070219][T19905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.077231][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.103383][T19905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.126133][ T145] hsr_slave_0: left promiscuous mode [ 388.156227][ T145] hsr_slave_1: left promiscuous mode [ 388.170599][ T145] veth1_macvtap: left promiscuous mode [ 388.176133][ T145] veth0_macvtap: left promiscuous mode [ 388.231636][T19972] netlink: 'syz.0.5633': attribute type 13 has an invalid length. [ 388.324829][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5630'. [ 388.356329][T19905] hsr_slave_0: entered promiscuous mode [ 388.371490][T19905] hsr_slave_1: entered promiscuous mode [ 388.383351][T19905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.398916][T19905] Cannot create hsr debugfs directory [ 388.401294][ T3375] hid-generic 0000:0000:40000.008D: unknown main item tag 0x0 [ 388.414164][T19984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.423025][ T3375] hid-generic 0000:0000:40000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 388.433614][T19984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.468479][T19987] loop5: detected capacity change from 0 to 1024 [ 388.477835][T19989] sd 0:0:1:0: device reset [ 388.506820][T19987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.627966][T19996] netlink: 'syz.4.5640': attribute type 13 has an invalid length. [ 388.636303][T19996] gretap0: refused to change device tx_queue_len [ 388.642844][T19996] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.768847][T19905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.779030][T19905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.788346][T19905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.797689][T19905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.845920][T19905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.860467][T19905] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.879386][T17013] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.886536][T17013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.900482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.907721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.058431][T20013] netlink: 'syz.0.5643': attribute type 13 has an invalid length. [ 389.066581][T20013] gretap0: refused to change device tx_queue_len [ 389.073056][T20013] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 389.096373][T19905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.185411][T19905] veth0_vlan: entered promiscuous mode [ 389.197235][T19905] veth1_vlan: entered promiscuous mode [ 389.221690][T19905] veth0_macvtap: entered promiscuous mode [ 389.233061][T19905] veth1_macvtap: entered promiscuous mode [ 389.248888][T19905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.259507][T19905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.269405][T19905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.279903][T19905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.347103][T19905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.362191][T19905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.372856][T19905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.382923][T19905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.393420][T19905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.404333][T19905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.404458][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.414201][T19905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.429430][T19905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.438228][T19905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.447025][T19905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.593018][T20038] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5613'. [ 389.593492][T20034] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5613'. [ 389.665854][T20040] sd 0:0:1:0: device reset [ 389.685384][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5647'. [ 389.787970][T20048] sd 0:0:1:0: device reset [ 389.818106][T20036] loop4: detected capacity change from 0 to 128 [ 389.933678][T20059] netlink: 'syz.1.5654': attribute type 13 has an invalid length. [ 389.953309][T20059] gretap0: refused to change device tx_queue_len [ 389.959901][T20059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 389.986874][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 389.986974][ T30] audit: type=1326 audit(1741793816.502:22686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 390.019013][T20062] FAULT_INJECTION: forcing a failure. [ 390.019013][T20062] name failslab, interval 1, probability 0, space 0, times 0 [ 390.031818][T20062] CPU: 0 UID: 0 PID: 20062 Comm: syz.4.5657 Tainted: G W 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 390.031857][T20062] Tainted: [W]=WARN [ 390.031921][T20062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.031935][T20062] Call Trace: [ 390.031941][T20062] [ 390.031948][T20062] dump_stack_lvl+0xf2/0x150 [ 390.032042][T20062] dump_stack+0x15/0x1a [ 390.032064][T20062] should_fail_ex+0x24a/0x260 [ 390.032105][T20062] should_failslab+0x8f/0xb0 [ 390.032147][T20062] kmem_cache_alloc_noprof+0x52/0x320 [ 390.032254][T20062] ? audit_log_start+0x34c/0x6b0 [ 390.032297][T20062] audit_log_start+0x34c/0x6b0 [ 390.032343][T20062] audit_seccomp+0x4b/0x130 [ 390.032432][T20062] __seccomp_filter+0x6fa/0x1180 [ 390.032465][T20062] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 390.032529][T20062] ? vfs_write+0x644/0x920 [ 390.032569][T20062] ? putname+0xcf/0xf0 [ 390.032597][T20062] __secure_computing+0x9f/0x1c0 [ 390.032646][T20062] syscall_trace_enter+0xd1/0x1f0 [ 390.032751][T20062] ? fpregs_assert_state_consistent+0x83/0xa0 [ 390.032844][T20062] do_syscall_64+0xaa/0x1c0 [ 390.032885][T20062] ? clear_bhb_loop+0x55/0xb0 [ 390.032922][T20062] ? clear_bhb_loop+0x55/0xb0 [ 390.032960][T20062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.032989][T20062] RIP: 0033:0x7feedb0bd169 [ 390.033005][T20062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.033028][T20062] RSP: 002b:00007feed9721038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 390.033096][T20062] RAX: ffffffffffffffda RBX: 00007feedb2d5fa0 RCX: 00007feedb0bd169 [ 390.033113][T20062] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000000 [ 390.033129][T20062] RBP: 00007feed9721090 R08: 0000000000000000 R09: 0000000000000000 [ 390.033144][T20062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.033172][T20062] R13: 0000000000000000 R14: 00007feedb2d5fa0 R15: 00007ffe26cc8ae8 [ 390.033191][T20062] [ 390.033200][T20062] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 390.067963][ T30] audit: type=1326 audit(1741793816.542:22687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 390.070625][T20062] audit: out of memory in audit_log_start [ 390.268091][T20073] loop0: detected capacity change from 0 to 128 [ 390.273463][ T30] audit: type=1326 audit(1741793816.542:22688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 390.303513][ T30] audit: type=1326 audit(1741793816.542:22689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 390.303671][ T30] audit: type=1326 audit(1741793816.542:22690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 390.350802][ T30] audit: type=1326 audit(1741793816.542:22691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedb0bd169 code=0x7ffc0000 [ 390.374630][ T30] audit: type=1326 audit(1741793816.542:22692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feedb0bbad0 code=0x7ffc0000 [ 390.398338][ T30] audit: type=1326 audit(1741793816.542:22693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feedb0bbc1f code=0x7ffc0000 [ 390.521001][T20079] netlink: 'syz.5.5662': attribute type 13 has an invalid length. [ 390.604129][T20091] sd 0:0:1:0: device reset [ 390.611246][T20089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.621263][T20089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.630144][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5661'. [ 390.774055][T20107] loop5: detected capacity change from 0 to 1024 [ 390.785293][T20107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.915871][T20105] loop1: detected capacity change from 0 to 128 [ 391.234364][T20126] sd 0:0:1:0: device reset [ 391.237476][T20127] validate_nla: 1 callbacks suppressed [ 391.237497][T20127] netlink: 'syz.0.5680': attribute type 13 has an invalid length. [ 391.253604][T20127] gretap0: refused to change device tx_queue_len [ 391.260283][T20127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 391.287099][T20122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5679'. [ 391.561587][T20151] loop4: detected capacity change from 0 to 512 [ 391.570912][T20151] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5690: bg 0: block 16: invalid block bitmap [ 391.584525][T20151] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 391.594160][T20151] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5690: invalid indirect mapped block 5 (level 0) [ 391.608500][T20151] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5690: invalid indirect mapped block 4294967295 (level 1) [ 391.623215][T20151] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5690: invalid indirect mapped block 4294967295 (level 2) [ 391.639460][T20151] EXT4-fs (loop4): 1 truncate cleaned up [ 391.645859][T20151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.684238][T20151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.707735][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.728737][T20154] sd 0:0:1:0: device reset [ 391.754525][T20158] sd 0:0:1:0: device reset [ 391.880275][T20168] netlink: 'syz.4.5697': attribute type 13 has an invalid length. [ 391.930068][T20177] loop4: detected capacity change from 0 to 512 [ 391.939520][T20177] FAULT_INJECTION: forcing a failure. [ 391.939520][T20177] name failslab, interval 1, probability 0, space 0, times 0 [ 391.952326][T20177] CPU: 0 UID: 0 PID: 20177 Comm: syz.4.5701 Tainted: G W 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 391.952364][T20177] Tainted: [W]=WARN [ 391.952373][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.952447][T20177] Call Trace: [ 391.952456][T20177] [ 391.952465][T20177] dump_stack_lvl+0xf2/0x150 [ 391.952500][T20177] dump_stack+0x15/0x1a [ 391.952552][T20177] should_fail_ex+0x24a/0x260 [ 391.952587][T20177] should_failslab+0x8f/0xb0 [ 391.952625][T20177] kmem_cache_alloc_noprof+0x52/0x320 [ 391.952652][T20177] ? audit_log_start+0x34c/0x6b0 [ 391.952763][T20177] audit_log_start+0x34c/0x6b0 [ 391.952810][T20177] audit_seccomp+0x4b/0x130 [ 391.952901][T20177] __seccomp_filter+0x6fa/0x1180 [ 391.953014][T20177] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 391.953054][T20177] ? vfs_write+0x644/0x920 [ 391.953105][T20177] __secure_computing+0x9f/0x1c0 [ 391.953129][T20177] syscall_trace_enter+0xd1/0x1f0 [ 391.953154][T20177] ? fpregs_assert_state_consistent+0x83/0xa0 [ 391.953245][T20177] do_syscall_64+0xaa/0x1c0 [ 391.953346][T20177] ? clear_bhb_loop+0x55/0xb0 [ 391.953380][T20177] ? clear_bhb_loop+0x55/0xb0 [ 391.953486][T20177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.953527][T20177] RIP: 0033:0x7feedb0bd169 [ 391.953544][T20177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.953567][T20177] RSP: 002b:00007feed9721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.953587][T20177] RAX: ffffffffffffffda RBX: 00007feedb2d5fa0 RCX: 00007feedb0bd169 [ 391.953603][T20177] RDX: 0000000000000048 RSI: 0000400000000200 RDI: 0000000000000007 [ 391.953619][T20177] RBP: 00007feed9721090 R08: 0000000000000000 R09: 0000000000000000 [ 391.953634][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.953649][T20177] R13: 0000000000000000 R14: 00007feedb2d5fa0 R15: 00007ffe26cc8ae8 [ 391.953672][T20177] [ 391.954046][T20177] syz_tun: tun_net_xmit 86 [ 392.025869][T20179] netlink: 'syz.4.5701': attribute type 10 has an invalid length. [ 392.130628][T20181] loop0: detected capacity change from 0 to 512 [ 392.133693][T20179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5701'. [ 392.156627][T20181] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5703: bg 0: block 16: invalid block bitmap [ 392.194290][T20181] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 392.206917][T20179] team0: Port device geneve1 added [ 392.216318][T20181] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5703: invalid indirect mapped block 5 (level 0) [ 392.231942][T20181] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5703: invalid indirect mapped block 4294967295 (level 1) [ 392.246920][T20181] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5703: invalid indirect mapped block 4294967295 (level 2) [ 392.261565][T20181] EXT4-fs (loop0): 1 truncate cleaned up [ 392.269256][T20181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.287709][T20181] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.301669][T20187] sd 0:0:1:0: device reset [ 392.354017][T20184] loop5: detected capacity change from 0 to 128 [ 392.374707][T20190] loop0: detected capacity change from 0 to 512 [ 392.395679][T20190] netlink: 'syz.0.5706': attribute type 10 has an invalid length. [ 392.403605][T20190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5706'. [ 392.491904][T20199] loop0: detected capacity change from 0 to 512 [ 392.509620][T20202] netlink: 'syz.4.5712': attribute type 13 has an invalid length. [ 392.517628][T20205] loop5: detected capacity change from 0 to 1024 [ 392.540362][T20205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.584542][T20216] netlink: 'syz.3.5713': attribute type 13 has an invalid length. [ 392.607064][T20215] loop4: detected capacity change from 0 to 512 [ 392.616085][T20216] gretap0: refused to change device tx_queue_len [ 392.622563][T20216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 392.641141][T20215] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5716: bg 0: block 16: invalid block bitmap [ 392.654531][T20215] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 392.663642][T20215] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5716: invalid indirect mapped block 5 (level 0) [ 392.677773][T20215] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5716: invalid indirect mapped block 4294967295 (level 1) [ 392.696089][T20215] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5716: invalid indirect mapped block 4294967295 (level 2) [ 392.716504][T20226] loop0: detected capacity change from 0 to 1024 [ 392.724245][T20226] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 392.735265][T20226] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 392.745454][T20215] EXT4-fs (loop4): 1 truncate cleaned up [ 392.751682][T20215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.765718][T20215] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.774923][T20226] JBD2: no valid journal superblock found [ 392.781100][T20226] EXT4-fs (loop0): Could not load journal inode [ 392.969239][T20230] loop4: detected capacity change from 0 to 128 [ 392.998213][ C0] syz_tun: tun_net_xmit 86 [ 393.354355][T13436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.397337][T20242] sd 0:0:1:0: device reset [ 393.481912][T20247] netlink: 'syz.5.5725': attribute type 13 has an invalid length. [ 393.490288][T20247] gretap0: refused to change device tx_queue_len [ 393.496656][T20247] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 393.538962][T20253] loop3: detected capacity change from 0 to 512 [ 393.544535][T20255] loop0: detected capacity change from 0 to 1024 [ 393.557237][T20253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5728: bg 0: block 16: invalid block bitmap [ 393.568771][T20255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.571870][T20253] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 393.591677][T20253] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5728: invalid indirect mapped block 5 (level 0) [ 393.605310][T20253] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5728: invalid indirect mapped block 4294967295 (level 1) [ 393.619637][T20253] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5728: invalid indirect mapped block 4294967295 (level 2) [ 393.634247][T20253] EXT4-fs (loop3): 1 truncate cleaned up [ 393.640559][T20253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.654336][T20253] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.683824][T20255] ================================================================== [ 393.691988][T20255] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 393.701434][T20255] [ 393.703788][T20255] read-write to 0xffff888106765cb8 of 4 bytes by task 20261 on cpu 1: [ 393.712067][T20255] __writeback_single_inode+0x1f4/0x850 [ 393.717661][T20255] writeback_single_inode+0x16c/0x3f0 [ 393.723162][T20255] sync_inode_metadata+0x5c/0x90 [ 393.728240][T20255] generic_buffers_fsync_noflush+0xd8/0x120 [ 393.734178][T20255] ext4_sync_file+0x1ff/0x6c0 [ 393.738905][T20255] vfs_fsync_range+0x116/0x130 [ 393.743710][T20255] ext4_buffered_write_iter+0x358/0x3c0 [ 393.749307][T20255] ext4_file_write_iter+0x383/0xf20 [ 393.754553][T20255] iter_file_splice_write+0x5f1/0x980 [ 393.759978][T20255] direct_splice_actor+0x160/0x2c0 [ 393.765115][T20255] splice_direct_to_actor+0x302/0x670 [ 393.770515][T20255] do_splice_direct+0xd7/0x150 [ 393.775298][T20255] do_sendfile+0x398/0x660 [ 393.779819][T20255] __x64_sys_sendfile64+0x110/0x150 [ 393.785060][T20255] x64_sys_call+0xfbd/0x2dc0 [ 393.789700][T20255] do_syscall_64+0xc9/0x1c0 [ 393.794231][T20255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.800154][T20255] [ 393.802486][T20255] read to 0xffff888106765cb8 of 4 bytes by task 20255 on cpu 0: [ 393.810234][T20255] generic_buffers_fsync_noflush+0x83/0x120 [ 393.816157][T20255] ext4_sync_file+0x1ff/0x6c0 [ 393.820875][T20255] vfs_fsync_range+0x116/0x130 [ 393.825676][T20255] ext4_buffered_write_iter+0x358/0x3c0 [ 393.831295][T20255] ext4_file_write_iter+0x383/0xf20 [ 393.836539][T20255] iter_file_splice_write+0x5f1/0x980 [ 393.842040][T20255] direct_splice_actor+0x160/0x2c0 [ 393.847273][T20255] splice_direct_to_actor+0x302/0x670 [ 393.852667][T20255] do_splice_direct+0xd7/0x150 [ 393.857460][T20255] do_sendfile+0x398/0x660 [ 393.861890][T20255] __x64_sys_sendfile64+0x110/0x150 [ 393.867118][T20255] x64_sys_call+0xfbd/0x2dc0 [ 393.871735][T20255] do_syscall_64+0xc9/0x1c0 [ 393.876271][T20255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.882191][T20255] [ 393.884519][T20255] value changed: 0x0000003a -> 0x00000002 [ 393.890254][T20255] [ 393.892587][T20255] Reported by Kernel Concurrency Sanitizer on: [ 393.898748][T20255] CPU: 0 UID: 0 PID: 20255 Comm: syz.0.5729 Tainted: G W 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 393.911038][T20255] Tainted: [W]=WARN [ 393.914851][T20255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.924930][T20255] ================================================================== [ 394.038204][ C0] syz_tun: tun_net_xmit 86 [ 394.457768][T12051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.