last executing test programs: 2.326625934s ago: executing program 4 (id=536): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,posixacl,privport,afid=0x0000000000000001,cache=mmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,msize=0x0000000000000fff,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xf3a, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/241, 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000c9c7db77450000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000050000000000170000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r12, 0xff08, 0x0) tee(r0, r5, 0xf3a, 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6) 2.272408444s ago: executing program 1 (id=537): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (fail_nth: 1) 1.859508387s ago: executing program 1 (id=538): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) 1.603163179s ago: executing program 2 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe4}}, 0x0) 1.569995049s ago: executing program 2 (id=541): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000300)=""/275, 0x113, 0x40000002, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pimreg\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [], 0x0, 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0x3}, 0x18) shmctl$SHM_LOCK(0x0, 0xb) 1.519369399s ago: executing program 2 (id=542): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}}}, 0x32) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000380)="0a98bae3fb6520730413cf1f1328966066a5b606209e9b42cd35a6d4ef213f", 0x1f}, {&(0x7f0000000400)="22ec95c2b8b49b0946a779b4f6d072ec7620ef5c2310890e466a3fb2628a6f0ed035c87b", 0x24}, {&(0x7f0000000440)="9e211e3879994732768fad6000336a366c", 0x11}, {&(0x7f0000000500)="a3358904da306d6b4984afbeabfc1ce13e070280c8ba7423554620c78c5ef3e57e1ebf182b95454698745557c3cac78154dae703f3da3525f92251b84df0277917af9bfd3b634c25e44719935d691d2a33fd90208407217f7f60b9c237f2e344e24432d023a0f3fb60876ea796f1acf13bc0cbb17b2712706ebdf7497443", 0x7e}, {&(0x7f0000001040)="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", 0x4ad}], 0x5) 1.518855649s ago: executing program 1 (id=543): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001000000000000000000008500000036000000c5000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x0, 0xfffffffffffffff3}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000380)=ANY=[], 0x1, 0x285, &(0x7f0000000d80)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f040000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) 1.4270607s ago: executing program 4 (id=545): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r2) 1.38823581s ago: executing program 4 (id=546): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000f00)={0x1d, r0, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f000001f900)={0x1d, r0, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) 1.38738965s ago: executing program 2 (id=547): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000050000000000170000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(r0, r4, 0xf3a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 1.326226401s ago: executing program 4 (id=548): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) memfd_secret(0x0) 1.294787041s ago: executing program 4 (id=550): io_uring_setup(0x4f01, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.129678192s ago: executing program 1 (id=552): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000300)=""/275, 0x113, 0x40000002, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4, 0x0, 0x3}, 0x18) shmctl$SHM_LOCK(0x0, 0xb) 1.064533963s ago: executing program 1 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "d1ddbe17f36539c9653070792cc4f1c0207aa4d36e0ae764313f66701ee3265a15f3ef9159991751beecd685df35a666457316b94b521d75ee49ab6c6c33dfef", 0x33}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='/dev/vhost-vsock\x00', r1) listen(r0, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r2, 0x4, 0x4, &(0x7f00000023c0)=[{}, {}, {}, {}], 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0xb10, 0x2}, 0x8, 0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ppoll(&(0x7f00000003c0)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 470.431297ms ago: executing program 2 (id=560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) memfd_secret(0x0) 454.181437ms ago: executing program 2 (id=562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa2180c20000000800450000140000000000739078ac1414bbac141435"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x78) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r4, 0x0, 0x2}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0) pipe(&(0x7f0000000040)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0xf7, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r8}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 411.606397ms ago: executing program 4 (id=565): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,posixacl,privport,afid=0x0000000000000001,cache=mmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',cache=none,msize=0x0000000000000fff,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/241, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000c9c7db7745000000ccfb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_pidfd_open(r13, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r14, 0xff08, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(r0, r6, 0xf3a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) 359.062167ms ago: executing program 0 (id=566): socket$inet(0x2, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x20028004}, 0x24004000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x40808c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 358.324377ms ago: executing program 0 (id=567): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000300)=""/275, 0x113, 0x40000002, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4, 0x0, 0x3}, 0x18) shmctl$SHM_LOCK(0x0, 0xb) 313.210738ms ago: executing program 0 (id=568): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b1300000000000000000000008000000000000031fc113b6eef6d1b03710ee7940a72983be61ffb84ab1fa67a3b792976e9e54e3d817abc4dfe8d6d57d94fb6a09c1e3eef135db66069f87b7609aeac8856a006e36871da4aec2139fd21d2e1a9857bbfe8f170e969ecaa84fa34546eb56b4aeadbbdc7a2fabecc107c16ad5ec6b2d43e0945719ddceb1baddfdb9d9f4125f3a2e3434d5ad188f7d9c8b10c0c456888d2f7564c4f335537eec35b0ff1e123d4a1cf5dee77a65e618a5f3e30908fee616cfa6dadf4ffc7771b7e9eeaabb364112d9b4e9510b04e0768abc83899ff5bf62792fa7cf04b0c4558e4526414c95d0b54", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 312.746978ms ago: executing program 0 (id=569): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) 200.245588ms ago: executing program 3 (id=570): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6800000010001ffffcffffeb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001024000040001280080001007369740034000280060008000d00000006000d0003000000080014000900000008000200ffffffff0800140000080000060011004e22000008000a00", @ANYRES32], 0x68}}, 0x400c0c0) 187.357019ms ago: executing program 1 (id=571): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000050000000000170000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(r0, r4, 0xf3a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 149.070688ms ago: executing program 3 (id=572): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r2) 148.625009ms ago: executing program 3 (id=573): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000f00)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18) bind$can_j1939(r0, &(0x7f000001f900)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x2}, 0x2}, 0x18) 129.353469ms ago: executing program 3 (id=574): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000440)=@newtaction={0xb8, 0x30, 0x9, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_bpf={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x0, 0x0, 0x0, 0xffffffff}, {0x3, 0x4, 0x20, 0x1000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7}}]}, {0x1b, 0x6, "792ac9039dfd1456f92ad1edf0d767ef737dde033e1000"}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) listen(r2, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000040), 0x80000) ppoll(&(0x7f0000000000)=[{r2, 0xa001}], 0x1, 0x0, 0x0, 0x0) unshare(0x2a020480) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000340)={0xab, 0x7, 0x4, "4bbec2b8bc06ff0d43aaf525ee3ba0558b3b4f56629097f144fcb2c7c811643b66502c7d0a1c6e73f494f14a48438b8fabfac5b77aeb91c0ab0b51e08b98f5244a7b5d7ce034947a5f1aea2ed6f3e9b33dd47ff0eddc23acd7002847dcc778acbd12c110e61ba422bdb678803e765191ae00cbf0404ed0cf1fd49f906467d4aea93f84ee3c3e7678c7d162f77af7d4bfbbea15f5c2267e08f78c9a019a44b674e5bb5017170d47c0004aa2"}) sendto$inet6(r7, 0x0, 0x0, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x7}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) unshare(0x2040400) 128.969919ms ago: executing program 0 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') stat(0x0, 0x0) 67.638019ms ago: executing program 0 (id=576): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='transo=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,posixacl,privport,afid=0x0000000000000001,cache=mmap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',cache=none,msize=0x0000000000000fff,\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/241, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x12, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='statm\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000c9c7db7745000000ccfb00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='mm_vmscan_throttled\x00', r0, 0x0, 0x6}, 0x18) getgroups(0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000c00) exit(0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_pidfd_open(r13, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r14, 0xff08, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') tee(r0, r6, 0xf3a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) 14.45725ms ago: executing program 3 (id=577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) setregid(0x0, 0xee01) 0s ago: executing program 3 (id=578): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3, 0x0, 0x3}, 0x18) shmctl$SHM_LOCK(0x0, 0xb) 0s ago: executing program 3 (id=579): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2b00000004000000", @ANYRES32=r4, @ANYBLOB="fbad799895d182949d417284a307d2af04ed6c00384ba6fd9b78740aea3be5ed0ac8c0e1018c9ad2f7336fc821d260def999f7b1e0ceed53bb88a59dc7901e754b635876d02570b2fe42f6e6b003381a237e9dc50c5b58c91b183e7a179a339dd6b3bf3597dbb91cac797021214eefc7ee7fc687d3c1ca601a074daa3c22c909e01bed73522ae038b880c5a9c1d69443dcb501f0b6dc2935e8b0bf426f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000002c0)=""/239, &(0x7f0000000080)=0xef) (async) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0) kernel console output (not intermixed with test programs): romiscuous mode [ 35.978681][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.987148][ T3301] veth0_vlan: entered promiscuous mode [ 35.998541][ T3301] veth1_vlan: entered promiscuous mode [ 36.006638][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.023566][ T3304] veth0_macvtap: entered promiscuous mode [ 36.037756][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.046617][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.055404][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.064342][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.076793][ T3304] veth1_macvtap: entered promiscuous mode [ 36.098928][ T3309] veth0_vlan: entered promiscuous mode [ 36.106885][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.117515][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.128053][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.137133][ T3301] veth0_macvtap: entered promiscuous mode [ 36.145067][ T3301] veth1_macvtap: entered promiscuous mode [ 36.156964][ T3309] veth1_vlan: entered promiscuous mode [ 36.165514][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 36.165531][ T30] audit: type=1400 audit(1741793913.719:107): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.WjrpHf/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.178315][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.206553][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.216425][ T30] audit: type=1400 audit(1741793913.739:108): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.222580][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.238510][ T30] audit: type=1400 audit(1741793913.739:109): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.WjrpHf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.238547][ T30] audit: type=1400 audit(1741793913.739:110): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.273354][ T3309] veth0_macvtap: entered promiscuous mode [ 36.292984][ T30] audit: type=1400 audit(1741793913.739:111): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.WjrpHf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.306966][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.325414][ T30] audit: type=1400 audit(1741793913.739:112): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.WjrpHf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.334132][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.361681][ T30] audit: type=1400 audit(1741793913.739:113): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.370373][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.398790][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.409563][ T30] audit: type=1400 audit(1741793913.779:114): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.432635][ T30] audit: type=1400 audit(1741793913.779:115): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.456700][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.472594][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.483106][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.492969][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.503551][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.514183][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.527908][ T3309] veth1_macvtap: entered promiscuous mode [ 36.542992][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.553530][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.561100][ T30] audit: type=1400 audit(1741793914.099:116): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.563434][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.598076][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.610054][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.626743][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.635519][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.644485][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.653374][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.669782][ T3303] veth0_vlan: entered promiscuous mode [ 36.685144][ T3441] ipvlan2: entered promiscuous mode [ 36.690511][ T3441] ipvlan2: entered allmulticast mode [ 36.695947][ T3441] bridge0: entered allmulticast mode [ 36.702452][ T3441] bridge0: port 3(ipvlan2) entered blocking state [ 36.709044][ T3441] bridge0: port 3(ipvlan2) entered disabled state [ 36.724070][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.734581][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.744490][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.755110][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.765136][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.775586][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.786366][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.798268][ T3303] veth1_vlan: entered promiscuous mode [ 36.811218][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.821788][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.831650][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.842326][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.852507][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.863272][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.873914][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.894310][ T3303] veth0_macvtap: entered promiscuous mode [ 36.911392][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.920201][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.928984][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.937861][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.949571][ T3303] veth1_macvtap: entered promiscuous mode [ 36.951150][ T3448] Zero length message leads to an empty skb [ 36.960429][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.971776][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.981714][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.992266][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.002259][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.012756][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.022649][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.033144][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.047446][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.057775][ T3451] loop3: detected capacity change from 0 to 512 [ 37.079447][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.090095][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.099970][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.110445][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.120335][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.130791][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.140731][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.151248][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.151605][ T3457] loop1: detected capacity change from 0 to 2048 [ 37.164034][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.168952][ T3451] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.9: bg 0: block 16: invalid block bitmap [ 37.177237][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.195894][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.204614][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.213377][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.236078][ T3451] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.254102][ T3457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.266434][ T3451] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9: invalid indirect mapped block 5 (level 0) [ 37.275406][ T3457] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.285869][ T3451] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9: invalid indirect mapped block 4294967295 (level 1) [ 37.312043][ T3451] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9: invalid indirect mapped block 4294967295 (level 2) [ 37.342794][ T3451] EXT4-fs (loop3): 1 truncate cleaned up [ 37.353196][ T3451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.367855][ T3451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.463694][ T3472] loop2: detected capacity change from 0 to 512 [ 37.484081][ T3477] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.544011][ T3477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.579954][ T3472] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.12: bg 0: block 16: invalid block bitmap [ 37.592505][ T3477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.601575][ T3472] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.626437][ T3472] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.12: invalid indirect mapped block 5 (level 0) [ 37.659865][ T3472] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.12: invalid indirect mapped block 4294967295 (level 1) [ 37.697127][ T3472] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.12: invalid indirect mapped block 4294967295 (level 2) [ 37.732410][ T3472] EXT4-fs (loop2): 1 truncate cleaned up [ 37.758518][ T3472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.815748][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.862639][ T3499] netlink: 'syz.3.23': attribute type 13 has an invalid length. [ 37.884330][ T3497] loop4: detected capacity change from 0 to 512 [ 37.894160][ T29] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 37.910630][ T3499] gretap0: refused to change device tx_queue_len [ 37.911308][ T3497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.25: bg 0: block 16: invalid block bitmap [ 37.917099][ T3499] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 37.939857][ T3497] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.949564][ T29] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 37.966673][ T29] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.966673][ T29] [ 37.978697][ T3497] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.25: invalid indirect mapped block 5 (level 0) [ 37.999392][ T29] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 38.012228][ T29] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.012228][ T29] [ 38.013766][ T3497] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.25: invalid indirect mapped block 4294967295 (level 1) [ 38.022054][ T29] EXT4-fs (loop1): Total free blocks count 0 [ 38.041835][ T29] EXT4-fs (loop1): Free/Dirty block details [ 38.042016][ T3503] loop2: detected capacity change from 0 to 1024 [ 38.047778][ T29] EXT4-fs (loop1): free_blocks=0 [ 38.047796][ T29] EXT4-fs (loop1): dirty_blocks=2048 [ 38.064470][ T29] EXT4-fs (loop1): Block reservation details [ 38.068452][ T3503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.087801][ T3497] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.25: invalid indirect mapped block 4294967295 (level 2) [ 38.110018][ T3497] EXT4-fs (loop4): 1 truncate cleaned up [ 38.119162][ T3497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.133732][ T3497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.216120][ T3516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.592826][ T3525] loop1: detected capacity change from 0 to 128 [ 38.695138][ T3528] loop3: detected capacity change from 0 to 1024 [ 38.726545][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.771658][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.918906][ T3532] loop4: detected capacity change from 0 to 2048 [ 38.957400][ T3532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.996440][ T3532] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.041875][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.151899][ T3545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.236213][ T3545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.271088][ T3535] loop3: detected capacity change from 0 to 128 [ 39.301648][ T29] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 39.344311][ T29] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 39.358150][ T29] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.358150][ T29] [ 39.393895][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 39.406762][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.406762][ T37] [ 39.416888][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 39.422897][ T37] EXT4-fs (loop4): Free/Dirty block details [ 39.428688][ T3552] netlink: 'syz.0.43': attribute type 13 has an invalid length. [ 39.428887][ T37] EXT4-fs (loop4): free_blocks=0 [ 39.441456][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 39.446850][ T37] EXT4-fs (loop4): Block reservation details [ 39.458052][ T3552] gretap0: refused to change device tx_queue_len [ 39.464710][ T3552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.513670][ T3557] loop3: detected capacity change from 0 to 1024 [ 39.544935][ T3554] loop1: detected capacity change from 0 to 512 [ 39.554779][ T3557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.562737][ T3559] loop4: detected capacity change from 0 to 512 [ 39.582749][ T3559] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.41: bg 0: block 16: invalid block bitmap [ 39.596596][ T3554] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.44: bg 0: block 16: invalid block bitmap [ 39.597903][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.611319][ T3559] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.627253][ T3554] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.636057][ T3559] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.41: invalid indirect mapped block 5 (level 0) [ 39.648756][ T3554] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 5 (level 0) [ 39.665400][ T3559] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.41: invalid indirect mapped block 4294967295 (level 1) [ 39.666097][ T3554] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 4294967295 (level 1) [ 39.682533][ T3559] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.41: invalid indirect mapped block 4294967295 (level 2) [ 39.696278][ T3554] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 4294967295 (level 2) [ 39.708656][ T3559] EXT4-fs (loop4): 1 truncate cleaned up [ 39.728222][ T3554] EXT4-fs (loop1): 1 truncate cleaned up [ 39.730031][ T3559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.734493][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.760710][ T3554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.761392][ T3559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.848150][ T3570] sd 0:0:1:0: device reset [ 39.915541][ T3575] loop1: detected capacity change from 0 to 1024 [ 39.918613][ T3577] SELinux: Context Ü is not valid (left unmapped). [ 39.948097][ T3575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.051712][ T3583] loop2: detected capacity change from 0 to 1024 [ 40.073241][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.097780][ T3586] tmpfs: Unknown parameter 'kmem_cache_free' [ 40.343153][ T3592] loop0: detected capacity change from 0 to 2048 [ 40.358648][ T3592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.373997][ T3592] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.619594][ T92] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 40.649998][ T92] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 40.662692][ T92] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.662692][ T92] [ 40.713760][ T3596] loop3: detected capacity change from 0 to 1024 [ 40.723925][ T29] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 40.736790][ T29] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.736790][ T29] [ 40.746696][ T29] EXT4-fs (loop0): Total free blocks count 0 [ 40.752759][ T29] EXT4-fs (loop0): Free/Dirty block details [ 40.758806][ T29] EXT4-fs (loop0): free_blocks=0 [ 40.758822][ T29] EXT4-fs (loop0): dirty_blocks=2048 [ 40.769235][ T29] EXT4-fs (loop0): Block reservation details [ 40.779871][ T3596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.072009][ T3583] syz.2.51 (3583) used greatest stack depth: 10928 bytes left [ 41.097012][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.107997][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.137164][ T3605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.156071][ T3605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.390579][ T3603] loop0: detected capacity change from 0 to 128 [ 41.419272][ T3609] loop2: detected capacity change from 0 to 128 [ 41.541193][ T3615] sd 0:0:1:0: device reset [ 41.696349][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.698475][ T3621] netlink: 'syz.0.62': attribute type 13 has an invalid length. [ 41.713555][ T3621] gretap0: refused to change device tx_queue_len [ 41.720011][ T3621] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.790208][ T3629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.68'. [ 41.813734][ T25] hid-generic 0000:0000:40000.0001: unknown main item tag 0x0 [ 41.822049][ T25] hid-generic 0000:0000:40000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.834217][ T3633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.843728][ T3633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.854828][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 41.854843][ T30] audit: type=1400 audit(1741793919.409:186): avc: denied { setopt } for pid=3632 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.882770][ T30] audit: type=1400 audit(1741793919.439:187): avc: denied { write } for pid=3632 comm="syz.2.67" name="hidraw0" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.012191][ T3627] loop3: detected capacity change from 0 to 128 [ 42.038973][ T3629] loop1: detected capacity change from 0 to 128 [ 42.127251][ T3639] loop3: detected capacity change from 0 to 512 [ 42.138501][ T3639] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.69: bg 0: block 16: invalid block bitmap [ 42.151344][ T3639] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.160458][ T3639] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.69: invalid indirect mapped block 5 (level 0) [ 42.173873][ T3639] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.69: invalid indirect mapped block 4294967295 (level 1) [ 42.188751][ T3639] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.69: invalid indirect mapped block 4294967295 (level 2) [ 42.203136][ T3639] EXT4-fs (loop3): 1 truncate cleaned up [ 42.209462][ T3639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.223113][ T3639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.275620][ T30] audit: type=1400 audit(1741793919.829:188): avc: denied { ioctl } for pid=3644 comm="syz.3.71" path="socket:[4029]" dev="sockfs" ino=4029 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.335418][ T3641] loop1: detected capacity change from 0 to 128 [ 42.362988][ T3647] loop3: detected capacity change from 0 to 1024 [ 42.372610][ T30] audit: type=1400 audit(1741793919.929:189): avc: denied { mounton } for pid=3644 comm="syz.3.71" path="/20/file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 42.399611][ T3647] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.410698][ T3647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.425933][ T3647] JBD2: no valid journal superblock found [ 42.431742][ T3647] EXT4-fs (loop3): Could not load journal inode [ 42.445066][ T30] audit: type=1400 audit(1741793920.009:190): avc: denied { accept } for pid=3644 comm="syz.3.71" path="/20/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 42.455646][ T3650] sd 0:0:1:0: device reset [ 42.594552][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.622431][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.639651][ T3651] loop1: detected capacity change from 0 to 128 [ 42.751567][ T3662] loop1: detected capacity change from 0 to 2048 [ 42.778340][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.791446][ T3662] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.852871][ T3671] netlink: 'syz.0.80': attribute type 13 has an invalid length. [ 42.862617][ T3671] gretap0: refused to change device tx_queue_len [ 42.869052][ T3671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.966553][ T52] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 42.981401][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 42.994101][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.994101][ T52] [ 43.021381][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 43.034151][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.034151][ T37] [ 43.043840][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 43.049869][ T37] EXT4-fs (loop1): Free/Dirty block details [ 43.055881][ T37] EXT4-fs (loop1): free_blocks=0 [ 43.059164][ T3677] loop4: detected capacity change from 0 to 512 [ 43.060824][ T37] EXT4-fs (loop1): dirty_blocks=2048 [ 43.060841][ T37] EXT4-fs (loop1): Block reservation details [ 43.069555][ T3677] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.82: bg 0: block 16: invalid block bitmap [ 43.099587][ T3677] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.117179][ T3677] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.82: invalid indirect mapped block 5 (level 0) [ 43.134794][ T3677] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.82: invalid indirect mapped block 4294967295 (level 1) [ 43.150373][ T3677] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.82: invalid indirect mapped block 4294967295 (level 2) [ 43.165983][ T3677] EXT4-fs (loop4): 1 truncate cleaned up [ 43.182405][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.211742][ T30] audit: type=1400 audit(1741793920.739:191): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.231611][ T3682] loop2: detected capacity change from 0 to 512 [ 43.235951][ T30] audit: type=1400 audit(1741793920.739:192): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.266241][ T30] audit: type=1400 audit(1741793920.739:193): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.291939][ T30] audit: type=1400 audit(1741793920.759:194): avc: denied { create } for pid=3681 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.311162][ T30] audit: type=1400 audit(1741793920.759:195): avc: denied { setopt } for pid=3681 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.351574][ T3682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.84: bg 0: block 16: invalid block bitmap [ 43.376961][ T3682] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.393826][ T3682] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.84: invalid indirect mapped block 5 (level 0) [ 43.398970][ T3690] loop3: detected capacity change from 0 to 1024 [ 43.407884][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.435841][ T3682] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.84: invalid indirect mapped block 4294967295 (level 1) [ 43.460266][ T3682] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.84: invalid indirect mapped block 4294967295 (level 2) [ 43.460617][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.484159][ T3682] EXT4-fs (loop2): 1 truncate cleaned up [ 43.492585][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.501661][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.515043][ T3682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.531018][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.557339][ T3682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.848229][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.876129][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.985454][ T3722] netlink: 'syz.2.97': attribute type 13 has an invalid length. [ 44.004298][ T3722] gretap0: refused to change device tx_queue_len [ 44.007917][ T3726] loop1: detected capacity change from 0 to 512 [ 44.010788][ T3722] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.029852][ T3726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.101: bg 0: block 16: invalid block bitmap [ 44.046932][ T3726] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.057435][ T3726] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.101: invalid indirect mapped block 5 (level 0) [ 44.071635][ T3726] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.101: invalid indirect mapped block 4294967295 (level 1) [ 44.086748][ T3726] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.101: invalid indirect mapped block 4294967295 (level 2) [ 44.107065][ T3726] EXT4-fs (loop1): 1 truncate cleaned up [ 44.115345][ T3726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.142783][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.179674][ T3735] loop1: detected capacity change from 0 to 1024 [ 44.195296][ T3735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.271968][ T3731] loop4: detected capacity change from 0 to 128 [ 44.335136][ T3740] tmpfs: Unknown parameter 'kmem_cache_free' [ 44.404794][ T3743] netlink: 'syz.4.105': attribute type 13 has an invalid length. [ 44.422626][ T3743] gretap0: refused to change device tx_queue_len [ 44.429184][ T3743] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.557415][ T3749] loop3: detected capacity change from 0 to 1024 [ 44.568418][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.189122][ T3735] syz.1.104 (3735) used greatest stack depth: 9560 bytes left [ 45.227657][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.288397][ T3763] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 45.305591][ T3762] loop1: detected capacity change from 0 to 512 [ 45.313052][ T3763] gretap0: refused to change device tx_queue_len [ 45.319574][ T3763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.348668][ T3762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.110: bg 0: block 16: invalid block bitmap [ 45.361933][ T3762] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 45.386212][ T3762] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.110: invalid indirect mapped block 5 (level 0) [ 45.431356][ T3762] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.110: invalid indirect mapped block 4294967295 (level 1) [ 45.452337][ T3762] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.110: invalid indirect mapped block 4294967295 (level 2) [ 45.452548][ T3762] EXT4-fs (loop1): 1 truncate cleaned up [ 45.453119][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.454096][ T3762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.560854][ T3771] loop1: detected capacity change from 0 to 128 [ 45.571182][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.599499][ T3774] loop3: detected capacity change from 0 to 1024 [ 45.621096][ T3774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.664043][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.672814][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.764420][ T3789] netlink: 'syz.2.118': attribute type 13 has an invalid length. [ 45.772586][ T3789] gretap0: refused to change device tx_queue_len [ 45.779148][ T3789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.112227][ T3796] loop4: detected capacity change from 0 to 1024 [ 46.126212][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.153688][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.227267][ T3801] loop4: detected capacity change from 0 to 1024 [ 46.237299][ T3803] sd 0:0:1:0: device reset [ 46.257355][ T3801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.371131][ C1] hrtimer: interrupt took 27088 ns [ 46.428306][ T3809] tmpfs: Unknown parameter 'kmem_cache_free' [ 46.568777][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669387][ T3814] ipvlan2: entered promiscuous mode [ 46.674724][ T3814] ipvlan2: entered allmulticast mode [ 46.681724][ T3814] bridge0: port 3(ipvlan2) entered blocking state [ 46.688279][ T3814] bridge0: port 3(ipvlan2) entered disabled state [ 46.946678][ T3818] loop3: detected capacity change from 0 to 128 [ 47.030431][ T3821] loop3: detected capacity change from 0 to 1024 [ 47.045313][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.087753][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.169444][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.208044][ T3826] loop4: detected capacity change from 0 to 512 [ 47.217723][ T3826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.130: bg 0: block 16: invalid block bitmap [ 47.231420][ T3826] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 47.240890][ T3826] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.130: invalid indirect mapped block 5 (level 0) [ 47.254552][ T3826] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.130: invalid indirect mapped block 4294967295 (level 1) [ 47.269748][ T3826] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.130: invalid indirect mapped block 4294967295 (level 2) [ 47.284448][ T3826] EXT4-fs (loop4): 1 truncate cleaned up [ 47.306228][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.320369][ T3826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.404011][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.413173][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.557889][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 47.557988][ T30] audit: type=1400 audit(1741793925.119:300): avc: denied { ioctl } for pid=3841 comm="syz.0.136" path="socket:[6204]" dev="sockfs" ino=6204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.618018][ T3843] loop0: detected capacity change from 0 to 1024 [ 47.627997][ T30] audit: type=1400 audit(1741793925.189:301): avc: denied { mounton } for pid=3841 comm="syz.0.136" path="/22/file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 47.651285][ T3843] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.662481][ T3843] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.672893][ T3843] JBD2: no valid journal superblock found [ 47.678742][ T3843] EXT4-fs (loop0): Could not load journal inode [ 47.697341][ T30] audit: type=1400 audit(1741793925.249:302): avc: denied { accept } for pid=3841 comm="syz.0.136" path="/22/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 47.733440][ T30] audit: type=1326 audit(1741793925.289:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.757029][ T30] audit: type=1326 audit(1741793925.289:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.780457][ T30] audit: type=1326 audit(1741793925.289:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.803955][ T30] audit: type=1326 audit(1741793925.289:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.827255][ T30] audit: type=1326 audit(1741793925.289:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.855751][ T30] audit: type=1326 audit(1741793925.349:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.873869][ T3848] loop3: detected capacity change from 0 to 512 [ 47.879070][ T30] audit: type=1326 audit(1741793925.349:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3845 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768e00d169 code=0x7ffc0000 [ 47.907823][ T3848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.139: bg 0: block 16: invalid block bitmap [ 47.921380][ T3848] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 47.930481][ T3848] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.139: invalid indirect mapped block 5 (level 0) [ 47.944557][ T3848] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.139: invalid indirect mapped block 4294967295 (level 1) [ 47.959752][ T3848] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.139: invalid indirect mapped block 4294967295 (level 2) [ 47.974582][ T3848] EXT4-fs (loop3): 1 truncate cleaned up [ 47.982075][ T3848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.995204][ T3848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.127820][ T3851] loop4: detected capacity change from 0 to 128 [ 48.202887][ T3858] loop4: detected capacity change from 0 to 512 [ 48.211017][ T3858] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.142: bg 0: block 16: invalid block bitmap [ 48.223864][ T3858] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 48.232908][ T3858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.142: invalid indirect mapped block 5 (level 0) [ 48.246439][ T3858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.142: invalid indirect mapped block 4294967295 (level 1) [ 48.260551][ T3858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.142: invalid indirect mapped block 4294967295 (level 2) [ 48.275439][ T3858] EXT4-fs (loop4): 1 truncate cleaned up [ 48.281514][ T3858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.294273][ T3858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.369067][ T3865] loop4: detected capacity change from 0 to 1024 [ 48.383193][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.521420][ T3874] tmpfs: Unknown parameter 'kmem_cache_free' [ 48.650497][ T3873] loop0: detected capacity change from 0 to 128 [ 48.743973][ T3877] loop0: detected capacity change from 0 to 1024 [ 48.758635][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.787215][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.868300][ T3884] ipvlan2: entered promiscuous mode [ 48.873656][ T3884] ipvlan2: entered allmulticast mode [ 48.879210][ T3884] bridge0: entered allmulticast mode [ 48.886712][ T3884] bridge0: port 3(ipvlan2) entered blocking state [ 48.893202][ T3884] bridge0: port 3(ipvlan2) entered disabled state [ 49.032333][ T3889] loop0: detected capacity change from 0 to 512 [ 49.051406][ T3889] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.154: bg 0: block 16: invalid block bitmap [ 49.064094][ T3889] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.074447][ T3889] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.154: invalid indirect mapped block 5 (level 0) [ 49.088273][ T3889] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.154: invalid indirect mapped block 4294967295 (level 1) [ 49.103543][ T3889] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.154: invalid indirect mapped block 4294967295 (level 2) [ 49.118046][ T3889] EXT4-fs (loop0): 1 truncate cleaned up [ 49.124646][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.411664][ T3903] sd 0:0:1:0: device reset [ 49.451068][ T3906] loop0: detected capacity change from 0 to 1024 [ 49.514929][ T3907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'. [ 49.582029][ T3911] netlink: 'syz.0.162': attribute type 13 has an invalid length. [ 49.598409][ T3911] gretap0: refused to change device tx_queue_len [ 49.604806][ T3911] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.690035][ T3924] netlink: 'syz.1.164': attribute type 13 has an invalid length. [ 49.720629][ T3924] gretap0: refused to change device tx_queue_len [ 49.727221][ T3924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.732940][ T3928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.169'. [ 49.838195][ T3940] netlink: 'syz.2.172': attribute type 13 has an invalid length. [ 49.847793][ T3940] gretap0: refused to change device tx_queue_len [ 49.854214][ T3940] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.001733][ T3946] loop4: detected capacity change from 0 to 512 [ 50.009902][ T3946] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.173: bg 0: block 16: invalid block bitmap [ 50.022500][ T3946] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 50.031486][ T3946] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.173: invalid indirect mapped block 5 (level 0) [ 50.045053][ T3946] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.173: invalid indirect mapped block 4294967295 (level 1) [ 50.059681][ T3946] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.173: invalid indirect mapped block 4294967295 (level 2) [ 50.073814][ T3946] EXT4-fs (loop4): 1 truncate cleaned up [ 50.115535][ T3951] loop4: detected capacity change from 0 to 1024 [ 50.240851][ T3954] tmpfs: Unknown parameter 'kmem_cache_free' [ 50.389848][ T3958] sd 0:0:1:0: device reset [ 50.656225][ T3972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.182'. [ 50.722025][ T3974] loop2: detected capacity change from 0 to 1024 [ 50.879402][ T3970] loop1: detected capacity change from 0 to 128 [ 51.048950][ T3987] netlink: 'syz.0.187': attribute type 13 has an invalid length. [ 51.057145][ T3987] gretap0: refused to change device tx_queue_len [ 51.063548][ T3987] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.236334][ T4003] netlink: 64 bytes leftover after parsing attributes in process `syz.4.194'. [ 51.383221][ T3990] loop1: detected capacity change from 0 to 128 [ 51.542031][ T4014] loop2: detected capacity change from 0 to 128 [ 51.609417][ T4023] loop1: detected capacity change from 0 to 1024 [ 51.938135][ T4046] loop0: detected capacity change from 0 to 1024 [ 52.099714][ T4049] loop4: detected capacity change from 0 to 128 [ 52.231342][ T4054] sd 0:0:1:0: device reset [ 52.766796][ T4058] loop4: detected capacity change from 0 to 128 [ 52.927133][ T4071] loop4: detected capacity change from 0 to 2048 [ 52.957176][ T4071] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.969480][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 52.969497][ T30] audit: type=1400 audit(1741793930.539:363): avc: denied { read write } for pid=4068 comm="syz.4.216" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.054770][ T30] audit: type=1400 audit(1741793930.559:364): avc: denied { open } for pid=4068 comm="syz.4.216" path="/49/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.244587][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 53.259976][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 53.272830][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.272830][ T37] [ 53.302253][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 53.315100][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.315100][ T12] [ 53.324875][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 53.331242][ T12] EXT4-fs (loop4): Free/Dirty block details [ 53.337216][ T12] EXT4-fs (loop4): free_blocks=0 [ 53.342171][ T12] EXT4-fs (loop4): dirty_blocks=2048 [ 53.347606][ T12] EXT4-fs (loop4): Block reservation details [ 53.353672][ T12] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 53.486887][ T4088] netlink: 'syz.4.221': attribute type 13 has an invalid length. [ 53.494812][ T4088] gretap0: refused to change device tx_queue_len [ 53.501296][ T4088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.291826][ T4095] sd 0:0:1:0: device reset [ 54.335025][ T4099] loop4: detected capacity change from 0 to 1024 [ 54.359422][ T4099] tmpfs: Unknown parameter 'kmem_cache_free' [ 54.458937][ T4107] loop3: detected capacity change from 0 to 512 [ 54.471081][ T4107] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.229: bg 0: block 16: invalid block bitmap [ 54.487216][ T4107] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 54.496178][ T4107] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.229: invalid indirect mapped block 5 (level 0) [ 54.510980][ T4107] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.229: invalid indirect mapped block 4294967295 (level 1) [ 54.525262][ T4107] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.229: invalid indirect mapped block 4294967295 (level 2) [ 54.539795][ T4107] EXT4-fs (loop3): 1 truncate cleaned up [ 54.552581][ T4103] loop4: detected capacity change from 0 to 128 [ 54.634115][ T4113] loop4: detected capacity change from 0 to 2048 [ 54.677179][ T4113] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.775276][ T4118] sd 0:0:1:0: device reset [ 54.909628][ T4126] loop2: detected capacity change from 0 to 1024 [ 54.944817][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 54.961786][ T4129] netlink: 'syz.3.235': attribute type 13 has an invalid length. [ 54.969782][ T4129] gretap0: refused to change device tx_queue_len [ 54.970581][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 54.976158][ T4129] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.988864][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.988864][ T37] [ 55.020100][ T4130] tmpfs: Unknown parameter 'kmem_cache_free' [ 55.036406][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 55.049398][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.049398][ T52] [ 55.059116][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 55.065146][ T52] EXT4-fs (loop4): Free/Dirty block details [ 55.071101][ T52] EXT4-fs (loop4): free_blocks=0 [ 55.076451][ T52] EXT4-fs (loop4): dirty_blocks=2048 [ 55.081766][ T52] EXT4-fs (loop4): Block reservation details [ 55.087879][ T52] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 55.195491][ T4135] loop4: detected capacity change from 0 to 512 [ 55.208448][ T4135] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.237: bg 0: block 16: invalid block bitmap [ 55.220908][ T4135] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 55.230976][ T4135] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.237: invalid indirect mapped block 5 (level 0) [ 55.244292][ T4135] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.237: invalid indirect mapped block 4294967295 (level 1) [ 55.262016][ T4135] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.237: invalid indirect mapped block 4294967295 (level 2) [ 55.277038][ T4135] EXT4-fs (loop4): 1 truncate cleaned up [ 55.316741][ T4139] loop4: detected capacity change from 0 to 1024 [ 55.385746][ T4142] loop4: detected capacity change from 0 to 1024 [ 55.412007][ T4142] tmpfs: Unknown parameter 'kmem_cache_free' [ 55.617266][ T4149] loop4: detected capacity change from 0 to 128 [ 55.704899][ T4152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.715719][ T4152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.029510][ T4169] loop1: detected capacity change from 0 to 1024 [ 56.037032][ T4165] loop3: detected capacity change from 0 to 128 [ 56.083812][ T4169] tmpfs: Unknown parameter 'kmem_cache_free' [ 56.145102][ T4174] loop1: detected capacity change from 0 to 1024 [ 56.251228][ T4182] netlink: 'syz.2.254': attribute type 13 has an invalid length. [ 56.265216][ T4182] gretap0: refused to change device tx_queue_len [ 56.271622][ T4182] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.335183][ T4185] loop4: detected capacity change from 0 to 2048 [ 56.383742][ T4185] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.429165][ T4191] loop3: detected capacity change from 0 to 512 [ 56.441835][ T4191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.256: bg 0: block 16: invalid block bitmap [ 56.478887][ T4191] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.509295][ T4191] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.256: invalid indirect mapped block 5 (level 0) [ 56.577991][ T4198] loop0: detected capacity change from 0 to 512 [ 56.587005][ T4191] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.256: invalid indirect mapped block 4294967295 (level 1) [ 56.607870][ T4198] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.258: bg 0: block 16: invalid block bitmap [ 56.642020][ T4198] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.651338][ T4191] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.256: invalid indirect mapped block 4294967295 (level 2) [ 56.666406][ T4198] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.258: invalid indirect mapped block 5 (level 0) [ 56.681572][ T4191] EXT4-fs (loop3): 1 truncate cleaned up [ 56.718988][ T4198] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.258: invalid indirect mapped block 4294967295 (level 1) [ 56.734800][ T4198] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.258: invalid indirect mapped block 4294967295 (level 2) [ 56.753833][ T4198] EXT4-fs (loop0): 1 truncate cleaned up [ 56.770860][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 56.787233][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 56.800301][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.800301][ T37] [ 56.833455][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 56.846484][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.846484][ T37] [ 56.856496][ T37] EXT4-fs (loop4): Total free blocks count 0 [ 56.863130][ T37] EXT4-fs (loop4): Free/Dirty block details [ 56.869451][ T37] EXT4-fs (loop4): free_blocks=0 [ 56.874498][ T37] EXT4-fs (loop4): dirty_blocks=2048 [ 56.879857][ T37] EXT4-fs (loop4): Block reservation details [ 56.885916][ T37] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 56.993248][ T4205] loop3: detected capacity change from 0 to 1024 [ 57.003620][ T4203] loop0: detected capacity change from 0 to 2048 [ 57.028068][ T4205] tmpfs: Unknown parameter 'kmem_cache_free' [ 57.057235][ T4212] loop2: detected capacity change from 0 to 1024 [ 57.064202][ T4212] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.064299][ T4203] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.075199][ T4212] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.107248][ T4212] JBD2: no valid journal superblock found [ 57.113133][ T4212] EXT4-fs (loop2): Could not load journal inode [ 57.232650][ T4220] loop3: detected capacity change from 0 to 512 [ 57.237249][ T4224] loop1: detected capacity change from 0 to 1024 [ 57.265297][ T4220] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.265: bg 0: block 16: invalid block bitmap [ 57.267865][ T4224] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.288639][ T4224] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.301572][ T4220] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.312285][ T4220] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.265: invalid indirect mapped block 5 (level 0) [ 57.326926][ T4220] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.265: invalid indirect mapped block 4294967295 (level 1) [ 57.343408][ T4220] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.265: invalid indirect mapped block 4294967295 (level 2) [ 57.350812][ T4224] JBD2: no valid journal superblock found [ 57.358973][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 57.363001][ T4224] EXT4-fs (loop1): Could not load journal inode [ 57.597944][ T4226] loop4: detected capacity change from 0 to 128 [ 57.630928][ T4234] loop3: detected capacity change from 0 to 512 [ 57.664569][ T4234] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.272: bg 0: block 16: invalid block bitmap [ 57.684336][ T4234] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.701517][ T4234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.272: invalid indirect mapped block 5 (level 0) [ 57.717017][ T4234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.272: invalid indirect mapped block 4294967295 (level 1) [ 57.754578][ T51] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 57.773135][ T4238] loop1: detected capacity change from 0 to 128 [ 57.782057][ T4234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.272: invalid indirect mapped block 4294967295 (level 2) [ 57.801060][ T4234] EXT4-fs (loop3): 1 truncate cleaned up [ 57.812146][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 57.824861][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.824861][ T51] [ 57.838267][ T4242] netlink: 'syz.2.274': attribute type 13 has an invalid length. [ 57.846300][ T4242] gretap0: refused to change device tx_queue_len [ 57.852662][ T4242] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 57.882894][ T4243] loop4: detected capacity change from 0 to 1024 [ 57.901549][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 57.914488][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.914488][ T51] [ 57.924202][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 57.930340][ T51] EXT4-fs (loop0): Free/Dirty block details [ 57.936279][ T51] EXT4-fs (loop0): free_blocks=0 [ 57.941252][ T51] EXT4-fs (loop0): dirty_blocks=2048 [ 57.946667][ T51] EXT4-fs (loop0): Block reservation details [ 57.952716][ T51] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 58.005595][ T4251] loop1: detected capacity change from 0 to 1024 [ 58.027880][ T4251] tmpfs: Unknown parameter 'kmem_cache_free' [ 58.196037][ T30] audit: type=1400 audit(1741793935.759:365): avc: denied { module_request } for pid=4260 comm="syz.0.273" kmod="fs-hfsplus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.381258][ T4275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.285'. [ 58.436791][ T4278] loop1: detected capacity change from 0 to 1024 [ 58.503611][ T4283] syz.1.288: attempt to access beyond end of device [ 58.503611][ T4283] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 58.504323][ T30] audit: type=1400 audit(1741793936.059:366): avc: denied { mounton } for pid=4282 comm="syz.1.288" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.621393][ T4283] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 58.772553][ T4290] loop0: detected capacity change from 0 to 128 [ 58.779160][ T4291] loop1: detected capacity change from 0 to 512 [ 58.796516][ T3002] udevd[3002]: worker [3470] terminated by signal 33 (Unknown signal 33) [ 58.832853][ T4291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.291: bg 0: block 16: invalid block bitmap [ 58.845941][ T4291] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 58.854917][ T4291] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.291: invalid indirect mapped block 5 (level 0) [ 58.868662][ T4291] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.291: invalid indirect mapped block 4294967295 (level 1) [ 58.886136][ T4291] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.291: invalid indirect mapped block 4294967295 (level 2) [ 58.932289][ T4291] EXT4-fs (loop1): 1 truncate cleaned up [ 59.029939][ T4311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.041080][ T4306] loop0: detected capacity change from 0 to 2048 [ 59.066965][ T4311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.090714][ T4306] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.123215][ T4316] netlink: 'syz.1.299': attribute type 13 has an invalid length. [ 59.131337][ T4316] gretap0: refused to change device tx_queue_len [ 59.137737][ T4316] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 59.238042][ T2965] hid-generic 0000:0000:40000.0002: unknown main item tag 0x0 [ 59.246333][ T2965] hid-generic 0000:0000:40000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.258557][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.271024][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.287075][ T30] audit: type=1400 audit(1741793936.849:367): avc: denied { setopt } for pid=4321 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.334150][ T51] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 59.350917][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 59.363607][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.363607][ T51] [ 59.401103][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 59.413965][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.413965][ T51] [ 59.423786][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 59.429950][ T51] EXT4-fs (loop0): Free/Dirty block details [ 59.436009][ T51] EXT4-fs (loop0): free_blocks=0 [ 59.441141][ T51] EXT4-fs (loop0): dirty_blocks=2048 [ 59.446569][ T51] EXT4-fs (loop0): Block reservation details [ 59.452569][ T51] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 59.496124][ T4335] loop2: detected capacity change from 0 to 1024 [ 59.518471][ T30] audit: type=1400 audit(1741793937.079:368): avc: denied { create } for pid=4337 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.519282][ T4338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.551897][ T30] audit: type=1400 audit(1741793937.079:369): avc: denied { write } for pid=4337 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.571894][ T30] audit: type=1400 audit(1741793937.079:370): avc: denied { nlmsg_write } for pid=4337 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.592683][ T30] audit: type=1400 audit(1741793937.109:371): avc: denied { sys_module } for pid=4337 comm="syz.0.301" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.675771][ T30] audit: type=1400 audit(1741793937.229:372): avc: denied { create } for pid=4349 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.696075][ T4350] FAULT_INJECTION: forcing a failure. [ 59.696075][ T4350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.709297][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.4.307 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 59.709327][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.709365][ T4350] Call Trace: [ 59.709372][ T4350] [ 59.709396][ T4350] dump_stack_lvl+0xf2/0x150 [ 59.709424][ T4350] dump_stack+0x15/0x1a [ 59.709495][ T4350] should_fail_ex+0x24a/0x260 [ 59.709532][ T4350] should_fail+0xb/0x10 [ 59.709566][ T4350] should_fail_usercopy+0x1a/0x20 [ 59.709604][ T4350] _copy_from_user+0x1c/0xa0 [ 59.709627][ T4350] copy_msghdr_from_user+0x54/0x2a0 [ 59.709680][ T4350] ? __fget_files+0x17c/0x1c0 [ 59.709721][ T4350] __sys_sendmmsg+0x1e8/0x4b0 [ 59.709779][ T4350] __x64_sys_sendmmsg+0x57/0x70 [ 59.709813][ T4350] x64_sys_call+0x29aa/0x2dc0 [ 59.709840][ T4350] do_syscall_64+0xc9/0x1c0 [ 59.709872][ T4350] ? clear_bhb_loop+0x55/0xb0 [ 59.709954][ T4350] ? clear_bhb_loop+0x55/0xb0 [ 59.709990][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.710022][ T4350] RIP: 0033:0x7f4e261cd169 [ 59.710045][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.710062][ T4350] RSP: 002b:00007f4e24831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.710080][ T4350] RAX: ffffffffffffffda RBX: 00007f4e263e5fa0 RCX: 00007f4e261cd169 [ 59.710162][ T4350] RDX: 0000000000000001 RSI: 0000400000000340 RDI: 0000000000000003 [ 59.710176][ T4350] RBP: 00007f4e24831090 R08: 0000000000000000 R09: 0000000000000000 [ 59.710195][ T4350] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.710210][ T4350] R13: 0000000000000000 R14: 00007f4e263e5fa0 R15: 00007ffc87c925b8 [ 59.710232][ T4350] [ 59.984548][ T4362] loop4: detected capacity change from 0 to 2048 [ 59.997646][ T4362] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.262236][ T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 60.306114][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 60.318968][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.318968][ T52] [ 60.405668][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 60.418514][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.418514][ T52] [ 60.428184][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 60.434215][ T52] EXT4-fs (loop4): Free/Dirty block details [ 60.440766][ T52] EXT4-fs (loop4): free_blocks=0 [ 60.445731][ T52] EXT4-fs (loop4): dirty_blocks=2048 [ 60.451080][ T52] EXT4-fs (loop4): Block reservation details [ 60.457259][ T52] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 60.509771][ T30] audit: type=1400 audit(1741793938.069:373): avc: denied { relabelfrom } for pid=4371 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.529645][ T30] audit: type=1400 audit(1741793938.069:374): avc: denied { relabelto } for pid=4371 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.561291][ T4375] syz.2.317 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.573195][ T4375] FAULT_INJECTION: forcing a failure. [ 60.573195][ T4375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.586391][ T4375] CPU: 1 UID: 0 PID: 4375 Comm: syz.2.317 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 60.586420][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.586435][ T4375] Call Trace: [ 60.586443][ T4375] [ 60.586452][ T4375] dump_stack_lvl+0xf2/0x150 [ 60.586491][ T4375] dump_stack+0x15/0x1a [ 60.586517][ T4375] should_fail_ex+0x24a/0x260 [ 60.586553][ T4375] should_fail+0xb/0x10 [ 60.586596][ T4375] should_fail_usercopy+0x1a/0x20 [ 60.586631][ T4375] _copy_to_user+0x20/0xa0 [ 60.586653][ T4375] simple_read_from_buffer+0xa0/0x110 [ 60.586683][ T4375] proc_fail_nth_read+0xf9/0x140 [ 60.586838][ T4375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.586911][ T4375] vfs_read+0x19b/0x6f0 [ 60.586939][ T4375] ? __rcu_read_unlock+0x4e/0x70 [ 60.586989][ T4375] ? __fget_files+0x17c/0x1c0 [ 60.587025][ T4375] ksys_read+0xe8/0x1b0 [ 60.587053][ T4375] __x64_sys_read+0x42/0x50 [ 60.587187][ T4375] x64_sys_call+0x2874/0x2dc0 [ 60.587220][ T4375] do_syscall_64+0xc9/0x1c0 [ 60.587335][ T4375] ? clear_bhb_loop+0x55/0xb0 [ 60.587366][ T4375] ? clear_bhb_loop+0x55/0xb0 [ 60.587399][ T4375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.587431][ T4375] RIP: 0033:0x7f4dd02cbb7c [ 60.587449][ T4375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.587543][ T4375] RSP: 002b:00007f4dce937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.587564][ T4375] RAX: ffffffffffffffda RBX: 00007f4dd04e5fa0 RCX: 00007f4dd02cbb7c [ 60.587576][ T4375] RDX: 000000000000000f RSI: 00007f4dce9370a0 RDI: 0000000000000004 [ 60.587588][ T4375] RBP: 00007f4dce937090 R08: 0000000000000000 R09: 0000000000000000 [ 60.587602][ T4375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.587615][ T4375] R13: 0000000000000000 R14: 00007f4dd04e5fa0 R15: 00007fff9474ed98 [ 60.587636][ T4375] [ 60.844247][ T4384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 60.905235][ T4388] netlink: 'syz.3.322': attribute type 4 has an invalid length. [ 60.913086][ T4388] netlink: 152 bytes leftover after parsing attributes in process `syz.3.322'. [ 60.935465][ T4391] netlink: 'syz.2.321': attribute type 13 has an invalid length. [ 60.943683][ T4391] gretap0: refused to change device tx_queue_len [ 60.950099][ T4391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.976824][ T4388] : renamed from bond0 (while UP) [ 61.046843][ T4383] loop1: detected capacity change from 0 to 128 [ 61.060050][ T4397] loop3: detected capacity change from 0 to 512 [ 61.083269][ T4397] journal_path: Non-blockdev passed as './bus' [ 61.089547][ T4397] EXT4-fs: error: could not find journal device path [ 61.180661][ T4405] loop3: detected capacity change from 0 to 1024 [ 61.191158][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 61.200129][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.207650][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.215563][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.223121][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.337008][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.345767][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.388086][ T4423] loop1: detected capacity change from 0 to 512 [ 61.400829][ T4423] journal_path: Lookup failure for './file0/../file0' [ 61.407790][ T4423] EXT4-fs: error: could not find journal device path [ 61.423510][ T4421] loop4: detected capacity change from 0 to 512 [ 61.437810][ T4421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.335: bg 0: block 16: invalid block bitmap [ 61.464173][ T4421] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 61.474756][ T4421] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.335: invalid indirect mapped block 5 (level 0) [ 61.505088][ T4421] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.335: invalid indirect mapped block 4294967295 (level 1) [ 61.528392][ T4428] loop1: detected capacity change from 0 to 2048 [ 61.535117][ T4421] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.335: invalid indirect mapped block 4294967295 (level 2) [ 61.551679][ T4421] EXT4-fs (loop4): 1 truncate cleaned up [ 61.559142][ T4428] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.732195][ T4432] loop4: detected capacity change from 0 to 1024 [ 61.756936][ T4432] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 61.767903][ T4432] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 61.786968][ T4432] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.798079][ T4432] EXT4-fs (loop4): invalid journal inode [ 61.801085][ T4434] loop2: detected capacity change from 0 to 1024 [ 61.803776][ T4432] EXT4-fs (loop4): can't get journal size [ 61.815842][ T51] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 61.831904][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 61.844660][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.844660][ T51] [ 61.874078][ T4432] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.338: blocks 2-2 from inode overlap system zone [ 61.889873][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 61.902728][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.902728][ T51] [ 61.903846][ T4432] EXT4-fs (loop4): failed to initialize system zone (-117) [ 61.912389][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 61.912409][ T51] EXT4-fs (loop1): Free/Dirty block details [ 61.912421][ T51] EXT4-fs (loop1): free_blocks=0 [ 61.912435][ T51] EXT4-fs (loop1): dirty_blocks=2048 [ 61.941873][ T51] EXT4-fs (loop1): Block reservation details [ 61.947913][ T51] EXT4-fs (loop1): i_reserved_data_blocks=128 [ 61.959320][ T4432] EXT4-fs (loop4): mount failed [ 62.136147][ T3376] IPVS: starting estimator thread 0... [ 62.153433][ T4451] loop4: detected capacity change from 0 to 2048 [ 62.181640][ T4458] loop1: detected capacity change from 0 to 2048 [ 62.199916][ T4451] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.228718][ T4453] IPVS: using max 2256 ests per chain, 112800 per kthread [ 62.261893][ T4458] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.287330][ T4467] loop2: detected capacity change from 0 to 1024 [ 62.310241][ T4469] netlink: 'syz.4.350': attribute type 13 has an invalid length. [ 62.318266][ T4469] gretap0: refused to change device tx_queue_len [ 62.324627][ T4469] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.324779][ T4456] loop3: detected capacity change from 0 to 128 [ 62.457477][ T4473] tmpfs: Unknown parameter 'kmem_cache_free' [ 62.527960][ T51] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 62.546245][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 62.558925][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.558925][ T51] [ 62.594049][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 62.606973][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.606973][ T52] [ 62.616819][ T52] EXT4-fs (loop1): Total free blocks count 0 [ 62.622906][ T52] EXT4-fs (loop1): Free/Dirty block details [ 62.628919][ T52] EXT4-fs (loop1): free_blocks=0 [ 62.633867][ T52] EXT4-fs (loop1): dirty_blocks=2048 [ 62.639242][ T52] EXT4-fs (loop1): Block reservation details [ 62.645234][ T52] EXT4-fs (loop1): i_reserved_data_blocks=128 [ 62.760474][ T4485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.773024][ T4485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.789501][ T4489] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.800394][ T4489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 62.931071][ T4495] loop3: detected capacity change from 0 to 1024 [ 62.944323][ T4495] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.955281][ T4495] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.988182][ T4495] JBD2: no valid journal superblock found [ 62.994036][ T4495] EXT4-fs (loop3): Could not load journal inode [ 63.126179][ T4497] loop3: detected capacity change from 0 to 512 [ 63.147330][ T4497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.361: bg 0: block 16: invalid block bitmap [ 63.170943][ T4497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.179924][ T4499] loop4: detected capacity change from 0 to 2048 [ 63.199695][ T4502] loop2: detected capacity change from 0 to 2048 [ 63.206843][ T4497] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.361: invalid indirect mapped block 5 (level 0) [ 63.221298][ T4497] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.361: invalid indirect mapped block 4294967295 (level 1) [ 63.221533][ T4497] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.361: invalid indirect mapped block 4294967295 (level 2) [ 63.221775][ T4497] EXT4-fs (loop3): 1 truncate cleaned up [ 63.237646][ T4499] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.267416][ T4502] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.347326][ T4512] loop0: detected capacity change from 0 to 512 [ 63.366234][ T4514] loop1: detected capacity change from 0 to 1024 [ 63.368116][ T4516] loop2: detected capacity change from 0 to 1024 [ 63.373559][ T4512] journal_path: Lookup failure for './file0/../file0' [ 63.385996][ T4512] EXT4-fs: error: could not find journal device path [ 63.386000][ T4511] loop3: detected capacity change from 0 to 1024 [ 63.400203][ T4511] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.411156][ T4511] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.434167][ T4511] JBD2: no valid journal superblock found [ 63.439990][ T4511] EXT4-fs (loop3): Could not load journal inode [ 63.574178][ T4527] loop0: detected capacity change from 0 to 1024 [ 63.583820][ T4527] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.594827][ T4527] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.607937][ T4527] JBD2: no valid journal superblock found [ 63.613765][ T4527] EXT4-fs (loop0): Could not load journal inode [ 63.667947][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 63.685311][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 63.685346][ T30] audit: type=1400 audit(1741793941.239:399): avc: denied { map } for pid=4533 comm="syz.0.374" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.715719][ T30] audit: type=1400 audit(1741793941.239:400): avc: denied { read write } for pid=4533 comm="syz.0.374" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.768548][ T30] audit: type=1400 audit(1741793941.319:401): avc: denied { bind } for pid=4533 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.787807][ T30] audit: type=1400 audit(1741793941.319:402): avc: denied { name_bind } for pid=4533 comm="syz.0.374" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.809563][ T30] audit: type=1400 audit(1741793941.319:403): avc: denied { node_bind } for pid=4533 comm="syz.0.374" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 63.831105][ T30] audit: type=1400 audit(1741793941.319:404): avc: denied { connect } for pid=4533 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.850609][ T30] audit: type=1400 audit(1741793941.319:405): avc: denied { name_connect } for pid=4533 comm="syz.0.374" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.886641][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 63.899349][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.899349][ T51] [ 63.915373][ T30] audit: type=1400 audit(1741793941.469:406): avc: denied { shutdown } for pid=4533 comm="syz.0.374" laddr=fe80::b lport=54716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.948292][ T92] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 63.961158][ T92] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.961158][ T92] [ 63.963464][ T30] audit: type=1326 audit(1741793941.519:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6083a1d169 code=0x7ffc0000 [ 63.970913][ T92] EXT4-fs (loop4): Total free blocks count 0 [ 63.970931][ T92] EXT4-fs (loop4): Free/Dirty block details [ 64.006711][ T92] EXT4-fs (loop4): free_blocks=0 [ 64.012195][ T92] EXT4-fs (loop4): dirty_blocks=2048 [ 64.017523][ T92] EXT4-fs (loop4): Block reservation details [ 64.023624][ T92] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 64.047678][ T30] audit: type=1326 audit(1741793941.559:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6083a1d169 code=0x7ffc0000 [ 64.075718][ T4540] loop0: detected capacity change from 0 to 512 [ 64.082713][ T4540] EXT4-fs: Ignoring removed orlov option [ 64.091550][ T4540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.107993][ T4540] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c028, mo2=0002] [ 64.116253][ T4540] System zones: 0-2, 18-18, 34-35 [ 64.122206][ T4540] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.223069][ T4544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.231644][ T4544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.307762][ T4548] loop4: detected capacity change from 0 to 1024 [ 64.401215][ T4562] loop4: detected capacity change from 0 to 2048 [ 64.418400][ T4562] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.608428][ T4567] loop4: detected capacity change from 0 to 128 [ 64.755288][ T4585] loop2: detected capacity change from 0 to 512 [ 64.775533][ T4585] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.389: bg 0: block 16: invalid block bitmap [ 64.788398][ T4585] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.799833][ T4585] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.389: invalid indirect mapped block 5 (level 0) [ 64.813298][ T4593] loop0: detected capacity change from 0 to 1024 [ 64.814137][ T4585] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.389: invalid indirect mapped block 4294967295 (level 1) [ 64.833864][ T4585] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.389: invalid indirect mapped block 4294967295 (level 2) [ 64.848566][ T4585] EXT4-fs (loop2): 1 truncate cleaned up [ 64.950691][ T4604] FAULT_INJECTION: forcing a failure. [ 64.950691][ T4604] name failslab, interval 1, probability 0, space 0, times 1 [ 64.963566][ T4604] CPU: 0 UID: 0 PID: 4604 Comm: syz.2.397 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 64.963615][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.963626][ T4604] Call Trace: [ 64.963657][ T4604] [ 64.963665][ T4604] dump_stack_lvl+0xf2/0x150 [ 64.963703][ T4604] dump_stack+0x15/0x1a [ 64.963728][ T4604] should_fail_ex+0x24a/0x260 [ 64.963762][ T4604] ? do_mq_timedreceive+0x23f/0x6d0 [ 64.963785][ T4604] should_failslab+0x8f/0xb0 [ 64.963855][ T4604] __kmalloc_cache_noprof+0x4e/0x320 [ 64.963881][ T4604] do_mq_timedreceive+0x23f/0x6d0 [ 64.963909][ T4604] __x64_sys_mq_timedreceive+0xca/0x150 [ 64.963949][ T4604] x64_sys_call+0x18f1/0x2dc0 [ 64.964016][ T4604] do_syscall_64+0xc9/0x1c0 [ 64.964103][ T4604] ? clear_bhb_loop+0x55/0xb0 [ 64.964133][ T4604] ? clear_bhb_loop+0x55/0xb0 [ 64.964162][ T4604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.964192][ T4604] RIP: 0033:0x7f4dd02cd169 [ 64.964209][ T4604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.964277][ T4604] RSP: 002b:00007f4dce937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 64.964373][ T4604] RAX: ffffffffffffffda RBX: 00007f4dd04e5fa0 RCX: 00007f4dd02cd169 [ 64.964385][ T4604] RDX: 00000000000000cc RSI: 0000400000000180 RDI: 0000000000000003 [ 64.964458][ T4604] RBP: 00007f4dce937090 R08: 0000000000000000 R09: 0000000000000000 [ 64.964471][ T4604] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.964485][ T4604] R13: 0000000000000000 R14: 00007f4dd04e5fa0 R15: 00007fff9474ed98 [ 64.964504][ T4604] [ 65.138244][ T4604] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 65.277728][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.290696][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.305258][ T4623] loop4: detected capacity change from 0 to 1024 [ 65.368852][ T4634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 65.377066][ T4605] loop0: detected capacity change from 0 to 128 [ 65.463136][ T4643] FAULT_INJECTION: forcing a failure. [ 65.463136][ T4643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.476302][ T4643] CPU: 1 UID: 0 PID: 4643 Comm: syz.4.412 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 65.476333][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.476348][ T4643] Call Trace: [ 65.476356][ T4643] [ 65.476364][ T4643] dump_stack_lvl+0xf2/0x150 [ 65.476400][ T4643] dump_stack+0x15/0x1a [ 65.476421][ T4643] should_fail_ex+0x24a/0x260 [ 65.476508][ T4643] should_fail+0xb/0x10 [ 65.476610][ T4643] should_fail_usercopy+0x1a/0x20 [ 65.476649][ T4643] _copy_from_user+0x1c/0xa0 [ 65.476668][ T4643] do_seccomp+0x15b/0xa60 [ 65.476693][ T4643] ? ksys_write+0x176/0x1b0 [ 65.476740][ T4643] __x64_sys_seccomp+0x40/0x50 [ 65.476786][ T4643] x64_sys_call+0x27fc/0x2dc0 [ 65.476814][ T4643] do_syscall_64+0xc9/0x1c0 [ 65.476864][ T4643] ? clear_bhb_loop+0x55/0xb0 [ 65.476897][ T4643] ? clear_bhb_loop+0x55/0xb0 [ 65.476925][ T4643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.477017][ T4643] RIP: 0033:0x7f4e261cd169 [ 65.477030][ T4643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.477044][ T4643] RSP: 002b:00007f4e24831038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 65.477148][ T4643] RAX: ffffffffffffffda RBX: 00007f4e263e5fa0 RCX: 00007f4e261cd169 [ 65.477158][ T4643] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000001 [ 65.477168][ T4643] RBP: 00007f4e24831090 R08: 0000000000000000 R09: 0000000000000000 [ 65.477178][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.477187][ T4643] R13: 0000000000000000 R14: 00007f4e263e5fa0 R15: 00007ffc87c925b8 [ 65.477202][ T4643] [ 65.794620][ T4662] loop4: detected capacity change from 0 to 1024 [ 65.867741][ T4671] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 65.877482][ T4671] Cannot find del_set index 0 as target [ 65.886898][ T4671] loop4: detected capacity change from 0 to 256 [ 65.893401][ T4671] vfat: Unknown parameter '+}[@' [ 65.984911][ T4673] loop2: detected capacity change from 0 to 512 [ 65.993076][ T4673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.422: bg 0: block 16: invalid block bitmap [ 66.005691][ T4673] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.014591][ T4673] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.422: invalid indirect mapped block 5 (level 0) [ 66.027851][ T4673] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.422: invalid indirect mapped block 4294967295 (level 1) [ 66.042063][ T4673] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.422: invalid indirect mapped block 4294967295 (level 2) [ 66.056317][ T4673] EXT4-fs (loop2): 1 truncate cleaned up [ 66.112441][ T4680] FAULT_INJECTION: forcing a failure. [ 66.112441][ T4680] name failslab, interval 1, probability 0, space 0, times 0 [ 66.125169][ T4680] CPU: 1 UID: 0 PID: 4680 Comm: syz.2.425 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 66.125199][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.125216][ T4680] Call Trace: [ 66.125224][ T4680] [ 66.125232][ T4680] dump_stack_lvl+0xf2/0x150 [ 66.125293][ T4680] dump_stack+0x15/0x1a [ 66.125313][ T4680] should_fail_ex+0x24a/0x260 [ 66.125340][ T4680] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 66.125363][ T4680] should_failslab+0x8f/0xb0 [ 66.125418][ T4680] __kmalloc_cache_noprof+0x4e/0x320 [ 66.125440][ T4680] __se_sys_memfd_create+0x1ea/0x5a0 [ 66.125517][ T4680] __x64_sys_memfd_create+0x31/0x40 [ 66.125538][ T4680] x64_sys_call+0x2d4c/0x2dc0 [ 66.125607][ T4680] do_syscall_64+0xc9/0x1c0 [ 66.125706][ T4680] ? clear_bhb_loop+0x55/0xb0 [ 66.125729][ T4680] ? clear_bhb_loop+0x55/0xb0 [ 66.125808][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.125841][ T4680] RIP: 0033:0x7f4dd02cd169 [ 66.125858][ T4680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.125879][ T4680] RSP: 002b:00007f4dce936e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 66.125900][ T4680] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007f4dd02cd169 [ 66.125914][ T4680] RDX: 00007f4dce936ef0 RSI: 0000000000000000 RDI: 00007f4dd034ec3c [ 66.125924][ T4680] RBP: 0000400000002400 R08: 00007f4dce936bb7 R09: 00007f4dce936e40 [ 66.125954][ T4680] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000000 [ 66.125964][ T4680] R13: 00007f4dce936ef0 R14: 00007f4dce936eb0 R15: 0000400000000180 [ 66.125980][ T4680] [ 66.343601][ T4688] loop2: detected capacity change from 0 to 1024 [ 66.382005][ T4693] loop1: detected capacity change from 0 to 1024 [ 66.396003][ T4695] loop2: detected capacity change from 0 to 1024 [ 66.414100][ T4701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.423106][ T4701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.704310][ T4707] loop3: detected capacity change from 0 to 512 [ 66.754706][ T4707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.434: bg 0: block 16: invalid block bitmap [ 66.767589][ T4707] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.776759][ T4707] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.434: invalid indirect mapped block 5 (level 0) [ 66.790458][ T4707] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.434: invalid indirect mapped block 4294967295 (level 1) [ 66.808448][ T4707] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.434: invalid indirect mapped block 4294967295 (level 2) [ 66.837905][ T4707] EXT4-fs (loop3): 1 truncate cleaned up [ 66.863379][ T4714] loop4: detected capacity change from 0 to 512 [ 66.882917][ T4714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.437: bg 0: block 16: invalid block bitmap [ 66.905686][ T4717] loop3: detected capacity change from 0 to 512 [ 66.912367][ T4717] journal_path: Non-blockdev passed as './bus' [ 66.918758][ T4717] EXT4-fs: error: could not find journal device path [ 66.947078][ T4714] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.984899][ T4714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.437: invalid indirect mapped block 5 (level 0) [ 67.016004][ T4714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.437: invalid indirect mapped block 4294967295 (level 1) [ 67.033409][ T4722] loop3: detected capacity change from 0 to 512 [ 67.040137][ T4722] journal_path: Non-blockdev passed as './bus' [ 67.046390][ T4722] EXT4-fs: error: could not find journal device path [ 67.122583][ T4714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.437: invalid indirect mapped block 4294967295 (level 2) [ 67.152744][ T4714] EXT4-fs (loop4): 1 truncate cleaned up [ 67.222857][ T4729] loop3: detected capacity change from 0 to 1024 [ 67.283417][ T4729] EXT4-fs mount: 111 callbacks suppressed [ 67.283436][ T4729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.364315][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.490835][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.033673][ T4762] loop2: detected capacity change from 0 to 128 [ 68.154439][ T4775] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.305095][ T4782] loop0: detected capacity change from 0 to 512 [ 68.325111][ T4782] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 68.333020][ T4782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.464'. [ 68.348457][ T4782] team0: Port device geneve1 added [ 68.396095][ T4788] loop2: detected capacity change from 0 to 512 [ 68.404041][ T4788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.467: bg 0: block 16: invalid block bitmap [ 68.417440][ T4788] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.425395][ T4790] netlink: 'syz.3.466': attribute type 13 has an invalid length. [ 68.426409][ T4788] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.467: invalid indirect mapped block 5 (level 0) [ 68.434160][ T4790] gretap0: refused to change device tx_queue_len [ 68.451468][ T4788] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.467: invalid indirect mapped block 4294967295 (level 1) [ 68.453337][ T4790] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 68.468760][ T4788] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.467: invalid indirect mapped block 4294967295 (level 2) [ 68.497263][ T4788] EXT4-fs (loop2): 1 truncate cleaned up [ 68.503261][ T4788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.516053][ T4788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.577258][ T4797] loop2: detected capacity change from 0 to 512 [ 68.585433][ T4797] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.469: bg 0: block 16: invalid block bitmap [ 68.598108][ T4797] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.607083][ T4797] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.469: invalid indirect mapped block 5 (level 0) [ 68.620332][ T4797] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.469: invalid indirect mapped block 4294967295 (level 1) [ 68.634508][ T4797] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.469: invalid indirect mapped block 4294967295 (level 2) [ 68.649291][ T4797] EXT4-fs (loop2): 1 truncate cleaned up [ 68.655282][ T4797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.668400][ T4797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.697582][ T4802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.470'. [ 68.727184][ T4804] loop2: detected capacity change from 0 to 2048 [ 68.737328][ T4804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.749459][ T4804] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.772107][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.053330][ T4822] netlink: 'syz.2.478': attribute type 13 has an invalid length. [ 69.061459][ T4822] gretap0: refused to change device tx_queue_len [ 69.067885][ T4822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.156542][ T4826] loop0: detected capacity change from 0 to 512 [ 69.164758][ T4826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.479: bg 0: block 16: invalid block bitmap [ 69.177419][ T4826] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 69.186379][ T4826] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.479: invalid indirect mapped block 5 (level 0) [ 69.199892][ T4826] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.479: invalid indirect mapped block 4294967295 (level 1) [ 69.214312][ T4826] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.479: invalid indirect mapped block 4294967295 (level 2) [ 69.229300][ T4826] EXT4-fs (loop0): 1 truncate cleaned up [ 69.235423][ T4826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.249326][ T4826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.258626][ T4830] loop3: detected capacity change from 0 to 512 [ 69.267296][ T4830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.480: bg 0: block 16: invalid block bitmap [ 69.280026][ T4830] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 69.294777][ T4830] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.480: invalid indirect mapped block 5 (level 0) [ 69.308309][ T4830] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.480: invalid indirect mapped block 4294967295 (level 1) [ 69.322865][ T4830] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.480: invalid indirect mapped block 4294967295 (level 2) [ 69.338342][ T4830] EXT4-fs (loop3): 1 truncate cleaned up [ 69.344378][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.359065][ T4830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.446962][ T4838] netlink: 'syz.3.482': attribute type 13 has an invalid length. [ 69.454866][ T4838] gretap0: refused to change device tx_queue_len [ 69.461302][ T4838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.488619][ T4833] loop0: detected capacity change from 0 to 128 [ 69.550295][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 69.605874][ T4849] loop0: detected capacity change from 0 to 1024 [ 69.614771][ T4849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.111535][ T4863] netlink: 'syz.2.490': attribute type 13 has an invalid length. [ 70.119655][ T4863] gretap0: refused to change device tx_queue_len [ 70.126039][ T4863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.258036][ T4867] loop3: detected capacity change from 0 to 2048 [ 70.287076][ T4867] Alternate GPT is invalid, using primary GPT. [ 70.293415][ T4867] loop3: p1 p2 p3 [ 70.347705][ T4871] loop3: detected capacity change from 0 to 512 [ 70.385605][ T4871] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.492: bg 0: block 16: invalid block bitmap [ 70.402716][ T4871] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 70.411935][ T4871] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.492: invalid indirect mapped block 5 (level 0) [ 70.427423][ T4871] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.492: invalid indirect mapped block 4294967295 (level 1) [ 70.448192][ T4871] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.492: invalid indirect mapped block 4294967295 (level 2) [ 70.467882][ T4871] EXT4-fs (loop3): 1 truncate cleaned up [ 70.474223][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.489634][ T4871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.499747][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.525708][ T4880] loop3: detected capacity change from 0 to 512 [ 70.533274][ T4880] ======================================================= [ 70.533274][ T4880] WARNING: The mand mount option has been deprecated and [ 70.533274][ T4880] and is ignored by this kernel. Remove the mand [ 70.533274][ T4880] option from the mount to silence this warning. [ 70.533274][ T4880] ======================================================= [ 70.536632][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.570604][ T4880] EXT4-fs: inline encryption not supported [ 70.589125][ T4880] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.596005][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.602207][ T4880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.621996][ T4880] EXT4-fs (loop3): 1 truncate cleaned up [ 70.631847][ T4880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.648716][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 70.648734][ T30] audit: type=1400 audit(1741793948.209:597): avc: denied { getopt } for pid=4879 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.688158][ T30] audit: type=1400 audit(1741793948.209:598): avc: denied { remove_name } for pid=4879 comm="syz.3.496" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.689078][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.710788][ T30] audit: type=1400 audit(1741793948.209:599): avc: denied { rename } for pid=4879 comm="syz.3.496" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.741776][ T30] audit: type=1400 audit(1741793948.209:600): avc: denied { create } for pid=4879 comm="syz.3.496" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.122621][ T4896] loop2: detected capacity change from 0 to 512 [ 71.129406][ T4896] journal_path: Non-blockdev passed as './bus' [ 71.135614][ T4896] EXT4-fs: error: could not find journal device path [ 71.254668][ T4908] loop2: detected capacity change from 0 to 1024 [ 71.269682][ T4908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.297829][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.319264][ T4913] loop1: detected capacity change from 0 to 1024 [ 71.338649][ T4913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.669278][ T4921] loop3: detected capacity change from 0 to 512 [ 71.683272][ T4921] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.692391][ T4921] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 71.702930][ T4921] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 71.713221][ T4921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 71.721566][ T4921] System zones: 0-2, 18-18, 34-34 [ 71.727242][ T4921] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 71.743277][ T4921] EXT4-fs (loop3): 1 truncate cleaned up [ 71.749955][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.779796][ T4924] loop4: detected capacity change from 0 to 2048 [ 71.787728][ T4924] EXT4-fs: quotafile must be on filesystem root [ 71.794807][ T30] audit: type=1400 audit(1741793949.329:601): avc: denied { ioctl } for pid=4920 comm="syz.3.508" path="/98/bus/file2" dev="loop3" ino=16 ioctlcmd=0x661a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.822758][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.837151][ T4924] IPv6: sit1: Disabled Multicast RS [ 71.959645][ T4928] loop4: detected capacity change from 0 to 512 [ 71.966054][ T30] audit: type=1326 audit(1741793949.509:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e261cd169 code=0x7ffc0000 [ 71.989540][ T30] audit: type=1326 audit(1741793949.509:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4e261cd169 code=0x7ffc0000 [ 72.012790][ T30] audit: type=1326 audit(1741793949.509:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e261cd169 code=0x7ffc0000 [ 72.036135][ T30] audit: type=1326 audit(1741793949.519:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e261cd169 code=0x7ffc0000 [ 72.059446][ T30] audit: type=1326 audit(1741793949.519:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4e261cd169 code=0x7ffc0000 [ 72.088801][ T4928] netlink: 'syz.4.511': attribute type 10 has an invalid length. [ 72.096610][ T4928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 72.130328][ T4928] team0: Port device geneve1 added [ 72.199646][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.204214][ T4938] loop3: detected capacity change from 0 to 1024 [ 72.232984][ T4938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.246687][ T4946] loop2: detected capacity change from 0 to 256 [ 72.259109][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.260301][ T4946] FAT-fs (loop2): Directory bread(block 64) failed [ 72.274957][ T4946] FAT-fs (loop2): Directory bread(block 65) failed [ 72.281944][ T4946] FAT-fs (loop2): Directory bread(block 66) failed [ 72.290447][ T4947] netlink: 'syz.1.518': attribute type 13 has an invalid length. [ 72.292975][ T4946] FAT-fs (loop2): Directory bread(block 67) failed [ 72.298573][ T4947] gretap0: refused to change device tx_queue_len [ 72.305446][ T4946] FAT-fs (loop2): Directory bread(block 68) failed [ 72.311287][ T4947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 72.320201][ T4946] FAT-fs (loop2): Directory bread(block 69) failed [ 72.341393][ T4946] FAT-fs (loop2): Directory bread(block 70) failed [ 72.348945][ T4946] FAT-fs (loop2): Directory bread(block 71) failed [ 72.355493][ T4946] FAT-fs (loop2): Directory bread(block 72) failed [ 72.363013][ T4946] FAT-fs (loop2): Directory bread(block 73) failed [ 72.510083][ T4949] loop3: detected capacity change from 0 to 128 [ 72.604860][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.604860][ T92] loop2: rw=1, sector=1800, nr_sectors = 12 limit=256 [ 72.622409][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.622409][ T92] loop2: rw=1, sector=1832, nr_sectors = 2376 limit=256 [ 72.640471][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.640471][ T92] loop2: rw=1, sector=4208, nr_sectors = 2888 limit=256 [ 72.658377][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.658377][ T92] loop2: rw=1, sector=7096, nr_sectors = 2048 limit=256 [ 72.675318][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.675318][ T92] loop2: rw=1, sector=9144, nr_sectors = 2048 limit=256 [ 72.692555][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.692555][ T92] loop2: rw=1, sector=11192, nr_sectors = 2048 limit=256 [ 72.716748][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.716748][ T92] loop2: rw=1, sector=13240, nr_sectors = 8152 limit=256 [ 72.737298][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.737298][ T92] loop2: rw=1, sector=21392, nr_sectors = 2048 limit=256 [ 72.755233][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.755233][ T92] loop2: rw=1, sector=23440, nr_sectors = 2048 limit=256 [ 72.774963][ T92] kworker/u8:5: attempt to access beyond end of device [ 72.774963][ T92] loop2: rw=1, sector=25488, nr_sectors = 4328 limit=256 [ 72.816302][ T4959] FAULT_INJECTION: forcing a failure. [ 72.816302][ T4959] name failslab, interval 1, probability 0, space 0, times 0 [ 72.829109][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.4.523 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 72.829139][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.829153][ T4959] Call Trace: [ 72.829160][ T4959] [ 72.829169][ T4959] dump_stack_lvl+0xf2/0x150 [ 72.829243][ T4959] dump_stack+0x15/0x1a [ 72.829269][ T4959] should_fail_ex+0x24a/0x260 [ 72.829302][ T4959] should_failslab+0x8f/0xb0 [ 72.829455][ T4959] kmem_cache_alloc_noprof+0x52/0x320 [ 72.829558][ T4959] ? security_inode_alloc+0x37/0x100 [ 72.829654][ T4959] security_inode_alloc+0x37/0x100 [ 72.829682][ T4959] inode_init_always_gfp+0x4a2/0x4f0 [ 72.829722][ T4959] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 72.829752][ T4959] alloc_inode+0x82/0x160 [ 72.829824][ T4959] new_inode+0x1e/0x100 [ 72.829941][ T4959] shmem_get_inode+0x24e/0x730 [ 72.829971][ T4959] __shmem_file_setup+0x127/0x1f0 [ 72.830014][ T4959] shmem_file_setup+0x3b/0x50 [ 72.830037][ T4959] __se_sys_memfd_create+0x2e1/0x5a0 [ 72.830120][ T4959] __x64_sys_memfd_create+0x31/0x40 [ 72.830145][ T4959] x64_sys_call+0x2d4c/0x2dc0 [ 72.830173][ T4959] do_syscall_64+0xc9/0x1c0 [ 72.830233][ T4959] ? clear_bhb_loop+0x55/0xb0 [ 72.830265][ T4959] ? clear_bhb_loop+0x55/0xb0 [ 72.830293][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.830355][ T4959] RIP: 0033:0x7f4e261cd169 [ 72.830373][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.830395][ T4959] RSP: 002b:00007f4e24830d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 72.830417][ T4959] RAX: ffffffffffffffda RBX: 00000000000005c8 RCX: 00007f4e261cd169 [ 72.830431][ T4959] RDX: 00007f4e24830dec RSI: 0000000000000000 RDI: 00007f4e2624ec3c [ 72.830445][ T4959] RBP: 0000400000000600 R08: 00007f4e24830b07 R09: 0000000000000000 [ 72.830521][ T4959] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 72.830535][ T4959] R13: 00007f4e24830dec R14: 00007f4e24830df0 R15: 00007ffc87c925b8 [ 72.830556][ T4959] [ 73.063155][ T4961] loop2: detected capacity change from 0 to 1024 [ 73.073219][ T4961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.176534][ T4976] loop1: detected capacity change from 0 to 1024 [ 73.188741][ T4976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.208065][ T4979] tmpfs: Unknown parameter 'kmem_cache_free' [ 73.215700][ T4977] mmap: syz.3.528 (4977) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.242097][ T4977] loop3: detected capacity change from 0 to 512 [ 73.248774][ T4977] EXT4-fs: test_dummy_encryption option not supported [ 73.257777][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.321308][ T4983] syzkaller0: entered promiscuous mode [ 73.326869][ T4983] syzkaller0: entered allmulticast mode [ 73.413983][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 73.503992][ T4997] loop1: detected capacity change from 0 to 2048 [ 73.517605][ T4997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.537621][ T5000] netlink: 'syz.4.536': attribute type 13 has an invalid length. [ 73.545574][ T5000] gretap0: refused to change device tx_queue_len [ 73.552025][ T5000] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 73.696096][ T4997] FAULT_INJECTION: forcing a failure. [ 73.696096][ T4997] name failslab, interval 1, probability 0, space 0, times 0 [ 73.708854][ T4997] CPU: 0 UID: 0 PID: 4997 Comm: syz.1.537 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 73.708889][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.708905][ T4997] Call Trace: [ 73.708913][ T4997] [ 73.708922][ T4997] dump_stack_lvl+0xf2/0x150 [ 73.708957][ T4997] dump_stack+0x15/0x1a [ 73.708984][ T4997] should_fail_ex+0x24a/0x260 [ 73.709026][ T4997] should_failslab+0x8f/0xb0 [ 73.709074][ T4997] kmem_cache_alloc_noprof+0x52/0x320 [ 73.709098][ T4997] ? getname_flags+0x81/0x3b0 [ 73.709132][ T4997] getname_flags+0x81/0x3b0 [ 73.709180][ T4997] getname+0x17/0x20 [ 73.709205][ T4997] do_sys_openat2+0x67/0x120 [ 73.709229][ T4997] __x64_sys_creat+0x66/0x90 [ 73.709251][ T4997] x64_sys_call+0x1084/0x2dc0 [ 73.709306][ T4997] do_syscall_64+0xc9/0x1c0 [ 73.709410][ T4997] ? clear_bhb_loop+0x55/0xb0 [ 73.709443][ T4997] ? clear_bhb_loop+0x55/0xb0 [ 73.709473][ T4997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.709499][ T4997] RIP: 0033:0x7f65df15d169 [ 73.709590][ T4997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.709689][ T4997] RSP: 002b:00007f65dd7c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 73.709708][ T4997] RAX: ffffffffffffffda RBX: 00007f65df375fa0 RCX: 00007f65df15d169 [ 73.709723][ T4997] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000400000000280 [ 73.709738][ T4997] RBP: 00007f65dd7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.709752][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.709833][ T4997] R13: 0000000000000000 R14: 00007f65df375fa0 R15: 00007ffca3ee3e78 [ 73.709929][ T4997] [ 73.930160][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.109937][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.276672][ T5015] loop2: detected capacity change from 0 to 1024 [ 74.302287][ T5019] loop0: detected capacity change from 0 to 1024 [ 74.327537][ T5019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.347886][ T5015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.396705][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.495653][ T5033] tmpfs: Unknown parameter 'kmem_cache_free' [ 74.520485][ T5035] loop4: detected capacity change from 0 to 1024 [ 74.545162][ T5017] loop1: detected capacity change from 0 to 128 [ 74.553577][ T5039] netlink: 'syz.2.547': attribute type 13 has an invalid length. [ 74.561556][ T5039] netlink: 'syz.2.547': attribute type 27 has an invalid length. [ 74.572389][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.178036][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.268229][ T5063] loop0: detected capacity change from 0 to 1024 [ 75.278727][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.314083][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.361198][ T5074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.374904][ T5074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.375374][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.460886][ T5085] netlink: 'syz.4.565': attribute type 13 has an invalid length. [ 75.475117][ T5085] gretap0: refused to change device tx_queue_len [ 75.481565][ T5085] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.524282][ T5071] loop3: detected capacity change from 0 to 128 [ 75.663108][ T5104] netlink: 'syz.1.571': attribute type 13 has an invalid length. [ 75.671083][ T5104] netlink: 'syz.1.571': attribute type 27 has an invalid length. [ 75.683615][ T5102] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.736626][ T5109] netlink: 'syz.0.576': attribute type 13 has an invalid length. [ 75.744873][ T5109] gretap0: refused to change device tx_queue_len [ 75.751375][ T5109] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.805008][ T5119] ================================================================== [ 75.813141][ T5119] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 75.820903][ T5119] [ 75.823244][ T5119] write to 0xffff888103322a10 of 8 bytes by task 5117 on cpu 0: [ 75.830884][ T5119] mas_wr_store_entry+0x1222/0x23f0 [ 75.836169][ T5119] mas_store_prealloc+0x6bf/0x960 [ 75.841305][ T5119] commit_merge+0x441/0x740 [ 75.845839][ T5119] vma_expand+0x211/0x360 [ 75.850196][ T5119] vma_merge_new_range+0x2da/0x340 [ 75.855329][ T5119] mmap_region+0x7e0/0x1620 [ 75.859858][ T5119] do_mmap+0x98a/0xc30 [ 75.863958][ T5119] vm_mmap_pgoff+0x16d/0x2d0 [ 75.868752][ T5119] ksys_mmap_pgoff+0xd0/0x330 [ 75.873461][ T5119] x64_sys_call+0x1940/0x2dc0 [ 75.878151][ T5119] do_syscall_64+0xc9/0x1c0 [ 75.882679][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.888585][ T5119] [ 75.890908][ T5119] read to 0xffff888103322a10 of 8 bytes by task 5119 on cpu 1: [ 75.898454][ T5119] mtree_range_walk+0x1b4/0x460 [ 75.903412][ T5119] mas_walk+0x16e/0x320 [ 75.907591][ T5119] lock_vma_under_rcu+0x95/0x270 [ 75.912537][ T5119] exc_page_fault+0x150/0x650 [ 75.917226][ T5119] asm_exc_page_fault+0x26/0x30 [ 75.922090][ T5119] [ 75.924424][ T5119] value changed: 0x00007f768c62ffff -> 0x00007f768c60efff [ 75.931547][ T5119] [ 75.933907][ T5119] Reported by Kernel Concurrency Sanitizer on: [ 75.940099][ T5119] CPU: 1 UID: 0 PID: 5119 Comm: syz.3.579 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 75.950694][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.960753][ T5119] ==================================================================