last executing test programs: 20m1.958724032s ago: executing program 32 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000004100000000000000010000", @ANYBLOB, @ANYRES32], 0x48) unshare(0x62040200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40842, 0x0) 18m20.898959429s ago: executing program 33 (id=4584): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 18m14.643618113s ago: executing program 34 (id=4403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) socket$nl_route(0x10, 0x3, 0x0) 8m22.895275357s ago: executing program 35 (id=12231): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x113d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x23, 0x101}}) 7m41.048655128s ago: executing program 36 (id=13278): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) tee(r0, r3, 0xffffffffffffffff, 0x0) 7m18.840735502s ago: executing program 5 (id=14247): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae001020000f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) 7m18.824481282s ago: executing program 5 (id=14248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340), 0x1, 0x553, &(0x7f0000001080)="$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") unshare(0x6020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 7m18.786912842s ago: executing program 5 (id=14249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e7fadeca8d79e34c8612886a99059e9e61be6c4cbded75a6b16d", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc8c4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) setreuid(0x0, 0xee00) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r8) 7m18.566595614s ago: executing program 5 (id=14257): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 7m18.528296774s ago: executing program 5 (id=14259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r2}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 7m18.375315025s ago: executing program 5 (id=14262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 7m18.326957565s ago: executing program 37 (id=14262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 7m17.151644004s ago: executing program 7 (id=14283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 7m17.092928014s ago: executing program 7 (id=14285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 7m16.973248945s ago: executing program 7 (id=14288): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345}) io_uring_enter(r2, 0x47ba, 0xda2a, 0x62, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 7m16.873301705s ago: executing program 9 (id=14289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) close(r1) 7m16.869596536s ago: executing program 7 (id=14290): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xc0085504, &(0x7f00000000c0)={{r1}, "c4005a51cf48a456fe399e96793568de827d6e3af15928143f77a2c2bf19506fac2c94a8808e7365569e94b6012f452ddbdb4acaadf3199a4fa57eab4549a87e05bb9a155f3d08704dc753cff79d5128dc113e58ecd5a19e0bc7bef139e74acaed4f126be4cc57e22d44a734c7f2c44b2b2dc3ecfb59318827549e5b2679b3cc4f9e5df2bc30b674fb5f8e181e7dab6cc37989c9911a3d5b32ac444ebf78c76d68c313ed1bcaa4bfcdddc200878c72704b48f4cda8c86a41c703694c1e57aaf73751f45d5ed54010c14c30ea8ca2f620ab57b6ad6bdf3263aeab2de44576b10a1040c6cc84fc79371589e025b227baf26e0c5bda231531365c778ef42bc49fd603b98b7b5173f2f1669834e8cd5167092f5d56e6c2623165710ec863179f143dba38551641ea77676773f3a18e97ada500fe448f172e6e714e16079d8233626d4c5c08c9117c5872c5d815ae0d481c25f2cfd2c76c6723e5ee78d5941b7d49e3d123294dd4c04c2691c5d086393047e3fd027daebf2114d1e9da89a36a49f7a411638060e87593ed8e45fb4292ff888e2eb7b776c9428623a34454eb2f11a47b43707e4b161faa8b8dc0d9cb2a0ac253ab41d0172190749ae06af564cabff5a0ba5df004c44138b49d2e17944f6588839fdedcf6ddef583df85490fa3a956e416e02943d56f734c3d3aa8b4898544e8f417c79bb5532b4ab2393c6723488c627a285686a0dac4cd6df370ab806b80f251256cfc058f8c2c2b46dca533048a18315caca12ad5915f077285ffbe1a4b5f46f2af4e45695348200e1f5a57a698acae6b4f6124fc076af5f40c3461e91b2639a84be51abe62d27cde1642731d31ae1264d20a21011bd221f8d0e4fc9835ccb61405e1ba6fcd48b9d3487909f89a0f40f91abfd3d33876b707d908bd2b076d37f5b2e2d530210e3930cf0418c3a7d8d4ac8cd16b4d2b2d4ebf6134c88813a808d82c86a20b7beb6534bb112b374d5b0a2beacb4e37872a2df879ebd568f0b20ce7d4aeb5ef6c960093b8a3d0e0332d821fdd099269364539d876caf78e60232baf7cc26589453666f17f94ac05fc2b752546a9586f9f18288e5944effa6f912709652113377ee14d949842910b0af467706b42d969908840fe55857f526694cdacb7735f2e0bdc49ca50ca57193aec63535f679e1486185bae007a7cd345bf8d7428e1a2881f6d327ee34ef0bbd67b51d25000fc59ed894c001ca327898dc4a3e7c33e20542772f31e7f125eedec11604b6569f051e643bff91d616284d2ea0f25320c22caba4d681781a13bf341dc22f882540aaab75d5bba9bbfe8aa960705d1d903a7ed8b7a14cc18b2ec9d1640ba3b6cfd7b06cde4f7b23d1eb42fa57d2b2206c6cd6f84a5b7d682a09064e341c844edd3361f2e457a5057e1c3d97916190d9749adbadb70797f1729cc01c6146a23942e245021fe02748e2235582b36df8236c8b25fa94d1ed7e495f0df447b36f609b17526b2c8c43f1ded38f99344f2553fd911deed701d89fdf92ed6368d74f6f09ce2d26a3916f28eda4fac022f043aff14bab96f3841980533b2f935cfe7e40ad9cc77557d50a32a73aa71ae37a0cece6580887608d028b55fa7a1a1cf214098fe13c1a32ee5890e3d2c9a4dd3041f89bac353aa1641df4375080b2181555e9667082a35b041645be39a47298b747eed9d127d8d342b620d0ecd2a48a86bd7dbfa04b3cfad62f5b1055b2259dc64b02d27599fff87c8303b47174e3ee66645d1eaaa05d63bad90ef4fdb97d21b478b37c313571d5776495460b57ba25dc2a5def286c8e81a3fdaa3dfb1dfb9deec86aa3629a03b9722bd95a96972a32552ba5d74f03989c73598b3ba0ef19151631ba4cf90d1bcc35c7cd2fecd6c271564df5ed232581417488454f5878f09523ce1b966162808d13a86872ad04bc777544ae4477459d197c6aaecf52e229a6cc94d151e014b589311f8e5bb7eb57605a80c11a7df2110b70735ae34a21e467f7bd8c3f81c1f9dfcf9464365566786b086637717df597c05b45249b04faa2269ca5a3fca2f1797682f24a34c9f70c27b6dd47fe9f6f006c934481524985afeec903f160c4e2c36c2bbe2081ff33733ca17ca2a2d794fd3af80d5a1adcbfa384e1ba851f4a554433e532f321b332d640513c9df326ddaa4691201f94d1b4b82b8201bb986e00242fce6588d906cd820640a59707cecf78533496fdc49d90effde5769812ae474ef31adb849542ef23359a640eeeadecf273713a46e96c836823012fc190c8d1dd88d965fbe11074da36375c11fedc648160b55b8b8bc830b72a6f98b1396a72d96f06fab40ddd4729dc162d30e8a34c4041cc22fd62eb501fa685ae7d53376cca12e40f53edd0ae8abbb666c75a6ca8658b4ef8810931158868afb757831d14e81cdadc995fcb98e2da293004c4a00626d08d6f1f997ccd63a1a103d292d29cdf15b2c4bca2f34ba406a47d9a184ed712356257ec45aa9a8ed8b8daca20f6a2edb1494a2af100000000000000006f1bfeb0edfdb1f10b66753f3fe900b95be3aafbfb5e2976de8b2c6b485243770da0cdc8f4d7384b6f39817f5661429442b20cab08cc28cf814ebf10d7ad4de140241ec169d70781524127a9454e5f1ee9fd5652818683a2f7ff0b11c8fea2ff7398e01df48c8eb62123f2630d561470003d020f4cc8923654fcf65d400ed0792af6bf1876099951e938adc275f47b9ba178b8ae3e9b295fab66c144ad8ad2fd29bced367833b76b2f0ded8dfead5dfccfc9ba2d658688abeb41f53eaf6efa82e5947f8d7a6e1010517032443507f5bd419317324000ca02e49db1cb985f8f11149496bfe54629f3f759c3100e0ab50c95446fd390a87b884930763ac810bdcdaee81b64343b955eba24d34d816bcf3eb5df1b6b44317e033a9015640942da607e3ea61727b97eab7511ff680dc5f4e54fa19e07c0023152272edc066010e661de98f73f913bc04983b325ff62134b41081dce65528af69b5206f9522b3e09f78dea218621e60f5ca9c58212526d96aace431133528b8a5354b213ef4883ef271e488bf629284c277843202bf7a41dbe2616e8338ab14f83bd6da1d1c4a4b50b6372564187a497036f2040f77c099bd0d98d3e4eebd4bf433360c518fc965e966642a22a335f3a9688336bd254dc9fe32632d4c1599c6b72fca290d9cae38548f4ad5d2a165053b7d392276d81ff26e97ebcfa210eddc832240de22bbfc6623929aa2d8bad6c41db54e2125063f9153e98b2316ae5e9d51a3a9efe5a81242f7045dbafa8db63cafad19e32b767dcd5adfd5e5459dce45c71f61a18a3e6a7de43bd61d6015fac48dcecb60795e02b30dc04cc4a408abc2dee10a97fb387a229ba5c07cebc63037c0102c846393b2bf865db38e51ce44b5cede8d530cb6496e5a34b9b0b060b8bd6f98cd53169518a1732d92af494c351f8ce753754f7d944865de345d8520a9232a1c5e516e61f23c39e09bac5d7c70a478e0b7a3208f61f090f69b9ab33da7a8ae16626c3d26f11065fd46851eff2c5968f937e90abe02555cad9e54b4bcaf3ee55aba96406cd457e27c1ad5b9cc640afff1d94d7d5f854fd50a66bf37355c548f840129ae0d81dc23202e4d7921236172d1c4920c1bf5e7bfad21740acd8f5fa278b6de2336276e271045d0ef0a9a566ae988269cb16f7eee941941d3a9f05d754cbb92a27ad9cb374872c3566a9db35920d63f0cfa69ef8dfc41f307f7c1f1ae712e3f6001e57e1de99777212ede107b692182c507b168c77a3824f0cd663f6d2ffe73e3d90587b3444e9a3cb093ddefd2869db927938ecf6cbd16a85d0849b7c829a37b70b24868e7ab1aa2adc012d85a8bf374225281b50882a40e6bed667f0538d8c85768cc9d8537bedfebe64cddf937a150c565e3824a75f5e7a173fed0ed3b3aa8750fde47ce1c219d5fc1977abc24c7a28aa8251e29a17eee3405d4c1f1f5e8b53df9425d6dde4b9de4715097c58062a977637b42974a40f0bf24dcca060871b759e5f42a12da7d89a494468f6c91c47ac17e7bfd61e62872541fd5d3941c0f0ebca3de06ca63cb52b186737fc61ade4eaed0fd5dd1eb4b8e2d2ebb689741fb354c8bbdc9092f68a156952395585113d78254ec826ba49204d76b8dcd854c4cf942c50c38ad5f8db2bf032d5eced178b25e56f9b39961aea03785119cab42fffbbbeaa15f0c21511f441fd72ab25014dbe5a35dfe295486e0d2e5803304deff8736e1d8df7886e4725321bc450c68459f01b5b3014735e81f989945e59b4c5e367976e90124e9cf422cc0f0d624627ab83ccd65ac7c1b91424672ebb3d91d932994c6e215a9d60efb6ed87eb579951668273e9a38f9089179459d2f670a21bd999a97c968891c59402d188dc601ef033fb9af3291b8778f2a38d379913a02d2215f2960f80847afe4d65f1fc7bcd1995e83fc88d87d799af0bf16060780efc8dbd08b041d8c2f646ca18ea18d3d295e172b344b6aea8d2a2620b6379c5c368459fee07bfcc83c83acaf3dc67755bbe8fe58b1a39051ef2327b30c886a0a5183e38c199e32365cb8194deade3262ea5ffa559b789da10f2948e135ce5858e1b016c153b14795a085b5bef350f95487a3f748afa943179d87a1e8828edc33804c2ea49979074fe162a8a36689286c390585d9f83645be3b921c4a6678b8ffd7edfb7a85265d5796ce4f12595b364fcc81b58c267beaa85dd47ad8c55783fe526d6dd0e3cc1f70a7e88d6f826b18aeab8282ff8e2a13ee8f03fab41be97af13c87883f87e6f0bdda04deebc05e35b601a55cc984478a997725d3faab2101cd9596c757c659e6b6c9178f620fbdcb87e399404f4bcd9b57dd1013818e58a785bed0a7fd1f5e5e355816ceba6745a42e10a145c87aedede2e0bed7bc75015a8354ba95a226c87df41d41e4ae368c4e84e8a032c48977601d71eae547f95375746e1f9c86135481bd09a08fee04db26b96cc9327bbde61cec27a56d114cc0e6459170e6cc44d846a2a55046b505e14dbdac32aa759e5d0268fe819a3dc503247b6c24c1607b4742671f5ad63c21812b1904b3c39ec8734fb1ee77a124a29c50154f53c89754f5e4719cc0279c851a63fc33e16f2393e5134568b78126b5680664fcd1fbf9d6bf4efdadc120bbb4f21ddd7bf4c445a534631c5f2c4b51d7842743493b4a13bb99f160987284bc7960aaa6d40dbe05e20f42ff48425d1c8166b7fd457d33d808b456b7b11d3d3c1f445a9698ee8a473fb116c5c4824fa224088fa6f031f07f2972e62592d59536dc4cbe3c1cb33e922b0f35f79f1df10ab43e1d3e5dc480bdd8a7039f71ee9c73f976809ec2853ad0c18e4f0ee73fd1361591375d3db6c822e7baae597fc454aae7b426922e9fd9a87fe52a25d5cd03434d7ffb9f319fbeb403c0836f2117cf851bf7660ecb567a6cd918e85190683c1c0a79da1cd92b8527400008f047a436a4859be0e7b9469c6830a81d81f93ea8ba1b614de4386296089c9b34f4b8116ae7afedd43f6a82abf4302e4d8a9fba0b87347df1f5bb676f496bf29bf9ea9e3ea4bd1dd3f3d4feb7609f96424f35035b5a13fd6efd0441dea1c1f17feae7d5a1ef77aa05537fc87cc2021c92d5cbbbd159258a45972e112e123e306ef0daa36e1ff069be815c5d0b74b6b41c6d5b76c04057de0a43c2e40b04fc11b60f0f1e7ff0b88fb600d79e03cc8b73fed0af95601acca00"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r2, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000010c0)=[0x0, 0x0, 0x0], &(0x7f0000001100), 0x0, 0xb9, &(0x7f0000001140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x70, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x0, 0xc, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) timer_gettime(0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @remote}, 0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000001640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') readlinkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 7m16.795900396s ago: executing program 9 (id=14291): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x58cf02, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 7m16.766155776s ago: executing program 9 (id=14292): r0 = io_uring_setup(0x2aaa, &(0x7f0000000400)={0x0, 0x72c8, 0x8, 0x0, 0x3d2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000cce000/0x3000)=nil, 0x3000, 0xb, 0x59032, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x7, 0x0, 0x80, 0xfffffffe}]}, 0x10) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000380)={0x10000000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000004c0)={{r7}, 0x7, 0xf, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) setsockopt(0xffffffffffffffff, 0xb2, 0x5, &(0x7f0000000a00)="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", 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r9, 0x0, 0xf7}, 0x18) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) inotify_init() 7m16.30038946s ago: executing program 7 (id=14294): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 7m16.24330682s ago: executing program 7 (id=14296): socket(0x0, 0x800, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m15.835139033s ago: executing program 9 (id=14307): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) shmdt(0x0) 7m15.801442073s ago: executing program 9 (id=14308): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 7m15.669700473s ago: executing program 9 (id=14309): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) readlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/1, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7m1.196793914s ago: executing program 38 (id=14296): socket(0x0, 0x800, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m0.628427968s ago: executing program 39 (id=14309): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) readlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/1, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m1.324913577s ago: executing program 0 (id=18407): socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1a0, 0x178, 0xc, 0x0, 0x178, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) accept$unix(0xffffffffffffffff, &(0x7f0000001b40), 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) 2m0.657212702s ago: executing program 0 (id=18415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x5b26}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2m0.614670292s ago: executing program 0 (id=18417): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000100000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/8, 0x8}, {0x0}], 0x2, 0x8, 0xffffff10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) keyctl$update(0x2, 0x0, 0x0, 0x0) open(0x0, 0x143c62, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x12, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000400)={0x0, 0x0}) unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000500)=""/164, 0xa4) fsetxattr$security_selinux(r6, &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:iptables_conf_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) memfd_create(0x0, 0x18) 2m0.204926015s ago: executing program 0 (id=18426): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x500, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000004c0)=0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f00000005c0)=""/73, 0x49, 0x0, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x9, 0x1, 0x2, "403c1f950c00007e55d848600000ff726802de"}) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) splice(r8, 0x0, r7, 0x0, 0x7ffff000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x1d, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x798}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x63}, @generic={0x7, 0x2, 0x9, 0x2, 0x2d}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @exit], &(0x7f0000000340)='syzkaller\x00', 0x9af9, 0xa3, &(0x7f0000000400)=""/163, 0x41000, 0x6, '\x00', r4, @fallback=0x33, r5, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0xf5a0, 0xbb31}, 0x10, r6, r2, 0x5, &(0x7f0000000780), &(0x7f00000007c0)=[{0x4, 0x1, 0x9, 0x5}, {0x2, 0x1, 0x8, 0x9}, {0x5, 0x2, 0xf, 0x5}, {0x3, 0x4, 0x9, 0x6}, {0x2, 0x1, 0x9, 0x1}], 0x10, 0x7, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1m59.990162126s ago: executing program 0 (id=18432): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_submit(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fc, 0x8, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m59.835578427s ago: executing program 0 (id=18436): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, 0x0}, 0x20) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m44.809405582s ago: executing program 40 (id=18436): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, 0x0}, 0x20) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m35.999888363s ago: executing program 1 (id=18891): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x2000000, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 1m35.863054774s ago: executing program 1 (id=18895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c"], 0x20}}, 0x0) 1m35.824786434s ago: executing program 1 (id=18896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100001040000003f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400000004002d80080003"], 0x40}, 0x1, 0xd}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=r1, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m35.649540826s ago: executing program 1 (id=18900): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000100000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{0x0}], 0x1, 0x8, 0xffffff10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) keyctl$update(0x2, 0x0, 0x0, 0x0) open(0x0, 0x143c62, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x12, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000400)={0x0, 0x0}) unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000500)=""/164, 0xa4) fsetxattr$security_selinux(r6, &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:iptables_conf_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) memfd_create(0x0, 0x18) 1m35.113095129s ago: executing program 1 (id=18915): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) io_submit(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fc, 0x8, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m34.865462111s ago: executing program 1 (id=18922): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x201, 0x0, "5f330000a90100f9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000280)=0x13) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x286f, 0x800, 0x2, 0x3bb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000ac0)=0x1, 0x4) preadv(r5, &(0x7f0000000380)=[{0x0, 0x4055}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0xfffffffd) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000001865000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r9 = syz_open_dev$mouse(&(0x7f0000000040), 0xe, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000640)={0x1, 0x1, 0x1000, 0x4d, &(0x7f0000000480)="0db80509a4d96766a2d3e55ed0e851c30acc23b4a585ed5fd142a5fcf284f70e0ebd4fc340ab172c036e6a5b2b220223d7adee2affea202b016733fe0dd0a472612bf1c58114edb4456ae3b59b", 0x42, 0x0, &(0x7f00000005c0)="7f5460be558b4040947f5d3030ba41ffed8a42a639ff29a100fcb34e80eb2ab253fabb2dad81265096a95f2a67ca78f3623d39973d8df6c0c70dfd98d3ba36b033ad"}) 1m19.842806996s ago: executing program 41 (id=18922): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x201, 0x0, "5f330000a90100f9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000280)=0x13) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x286f, 0x800, 0x2, 0x3bb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r5 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000ac0)=0x1, 0x4) preadv(r5, &(0x7f0000000380)=[{0x0, 0x4055}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0xfffffffd) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000001865000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r9 = syz_open_dev$mouse(&(0x7f0000000040), 0xe, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000640)={0x1, 0x1, 0x1000, 0x4d, &(0x7f0000000480)="0db80509a4d96766a2d3e55ed0e851c30acc23b4a585ed5fd142a5fcf284f70e0ebd4fc340ab172c036e6a5b2b220223d7adee2affea202b016733fe0dd0a472612bf1c58114edb4456ae3b59b", 0x42, 0x0, &(0x7f00000005c0)="7f5460be558b4040947f5d3030ba41ffed8a42a639ff29a100fcb34e80eb2ab253fabb2dad81265096a95f2a67ca78f3623d39973d8df6c0c70dfd98d3ba36b033ad"}) 2.353226413s ago: executing program 2 (id=21473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) 2.324808023s ago: executing program 2 (id=21475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) getpgrp(0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r2, 0x8004b709, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000003c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000300000008000000d7ca000008000000", @ANYRES32, @ANYBLOB="443ba40000000000000000000007000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000400"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2.237804464s ago: executing program 2 (id=21477): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 2.112945145s ago: executing program 2 (id=21482): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0xffffefff, 0x0, 0x10000000, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r0, 0x80047456, &(0x7f0000000740)) io_setup(0x30, &(0x7f0000000600)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x404}}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6522}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r3, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r3, 0x8, 0x40000, 0x10000) semop(0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x24}]) 1.890457326s ago: executing program 2 (id=21487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71063e43659e40a67d23252500"], 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="75731f1e65722e5d5d2e5b23252500"], 0x0, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000009000000000000000000000018110000256d3d7af948740668c4f168db957a194c41736fd7", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x3ff, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x3, 0x2, 0xc, 0x7}, {0x4, 0x4, 0x6, 0x3}, {0x3, 0x5, 0x7, 0xb}, {0x4, 0x5, 0xe, 0x8}, {0x1, 0x80e, 0x7, 0x5}], 0x10, 0x4, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r1}, 0xc) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x4, 0x8, 0xd31, 0x2, 0x3e, 0x519, 0x2bc, 0x38, 0x31f, 0x6, 0x9, 0x20, 0x2, 0x4, 0x9, 0x8001}, [{0x7, 0x4d9, 0xd, 0x3, 0x5, 0x3c, 0x80, 0x8000}, {0x70000000, 0xc073, 0x9, 0xfa1, 0x81, 0x4, 0xf3, 0x5}], "290028624c11643bd98eb28002e59127f7ebd0dcd3d7f4e91ba567dc55e6b70b2ef111b9e4173626d85975333e10416ae08bb0d3bcc884706730ade23f28798b4bfc997db79af8dce2be75e62490e4da80edd756cb4c05b9b7fe63b5dfb4ae459e80d425e330e1c908cd874d3c30313096f65358dce3ddd3c6a6fc9fe20a3a8b55fa30b79c54a21f4396b698dcaf80ecebb5b972d4811d97909bd44c04379595ba9e90a27e3ecfb6af5cb372a11bba200b65272f9b959236940c4beb45ad82c7350a03f6693358dc5ecfc41671070b7295", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb49) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x40000, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.33698181s ago: executing program 2 (id=21497): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000001840)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4064000}, 0x20060001) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/209}, {&(0x7f0000000680)=""/254}, {&(0x7f0000000380)=""/60, 0x3d}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x208, 0x3a8, 0x3a8, 0x208, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @mcast1, [], [0xff, 0x0, 0xffffffff], 'vlan1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x0, 0xff}, 0x0, 0xf8, 0x118, 0x700, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r8, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) r9 = syz_open_dev$sg(&(0x7f0000000340), 0xd7b, 0x400000) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) 1.033053032s ago: executing program 4 (id=21503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) 784.787224ms ago: executing program 6 (id=21507): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 596.566715ms ago: executing program 6 (id=21509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 553.729715ms ago: executing program 6 (id=21510): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) getpgrp(0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r2, 0x8004b709, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000003c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000300000008000000d7ca000008000000", @ANYRES32, @ANYBLOB="443ba40000000000000000000007000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000400"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 553.350145ms ago: executing program 4 (id=21511): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x500, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r3 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETNCNT(0x0, 0x6, 0xe, &(0x7f0000000340)=""/74) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYBLOB="00000098ee385bd2bdb897f3ff62032acc0000000000b7080000000000007b8af8fff8cab5c8dcbd56b000000000077c020000f8ffffffb703000008004000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2100000000fffe00000000000000100000040000", @ANYRES32, @ANYBLOB="0000000000000000000baa010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) 552.879005ms ago: executing program 8 (id=21512): socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x0, 0x20}, @ipv4=@udp={{0xd, 0x4, 0x3, 0x1b, 0x98, 0x66, 0x0, 0x41, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x7, "99b3f5656e"}, {0x0, 0x12, "f7470032b0a311d58850844df5991b21"}]}]}}, {0x4e20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "e59676053333c98aab3d501bf817920a8da263cfc38b2e308ac6288f78165e39", "7d591a13c426e5901e02555e5cf04d15", {"853745e0ace7a15e4078ad604dbe515d", 'O2\\\x00'}}}}}, 0xa6) 528.893615ms ago: executing program 6 (id=21513): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 492.186466ms ago: executing program 8 (id=21514): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x47, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x8000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) r7 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x4, 0x4, 0x1, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xe6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x102020, 0x0, 0x0, 0x6, 0x7, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r7, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000400), 0x1, 0x76f, &(0x7f0000001580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 491.549976ms ago: executing program 3 (id=21515): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d", 0x64}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) 429.355886ms ago: executing program 3 (id=21516): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71063e43659e40a67d23252500"], 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="75731f1e65722e5d5d2e5b23252500"], 0x0, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r5 = dup3(r4, r0, 0x0) r6 = signalfd4(r1, &(0x7f0000000440)={[0x1]}, 0x8, 0x100800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000009000000000000000000000018110000256d3d7af948740668c4f168db957a194c41736fd7", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x3ff, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x3, 0x2, 0xc, 0x7}, {0x4, 0x4, 0x6, 0x3}, {0x3, 0x5, 0x7, 0xb}, {0x4, 0x5, 0xe, 0x8}, {0x1, 0x80e, 0x7, 0x5}], 0x10, 0x4, @void, @value}, 0x94) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r1}, 0xc) write$binfmt_elf32(r5, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x4, 0x8, 0xd31, 0x2, 0x3e, 0x519, 0x2bc, 0x38, 0x31f, 0x6, 0x9, 0x20, 0x2, 0x4, 0x9, 0x8001}, [{0x7, 0x4d9, 0xd, 0x3, 0x5, 0x3c, 0x80, 0x8000}, {0x70000000, 0xc073, 0x9, 0xfa1, 0x81, 0x4, 0xf3, 0x5}], "290028624c11643bd98eb28002e59127f7ebd0dcd3d7f4e91ba567dc55e6b70b2ef111b9e4173626d85975333e10416ae08bb0d3bcc884706730ade23f28798b4bfc997db79af8dce2be75e62490e4da80edd756cb4c05b9b7fe63b5dfb4ae459e80d425e330e1c908cd874d3c30313096f65358dce3ddd3c6a6fc9fe20a3a8b55fa30b79c54a21f4396b698dcaf80ecebb5b972d4811d97909bd44c04379595ba9e90a27e3ecfb6af5cb372a11bba200b65272f9b959236940c4beb45ad82c7350a03f6693358dc5ecfc41671070b7295", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb49) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="8000000077b63a195de92b2e53e36292ba61419abb35a45d0a8150cfa49dadd78f04", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0003000000060011001c000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00260c00000600110076020000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x40000, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 413.620726ms ago: executing program 6 (id=21517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpu.stat\x00', 0x275a, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006040)={0x0}, 0x18) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") 369.100136ms ago: executing program 4 (id=21518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090001000000aa224024ed80680cad44a34889b100000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, 0x0}, 0x20) 367.911427ms ago: executing program 8 (id=21519): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) getpgrp(0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r2, 0x8004b709, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000003c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000300000008000000d7ca000008000000", @ANYRES32, @ANYBLOB="443ba40000000000000000000007000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000400"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 367.310307ms ago: executing program 3 (id=21520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 295.561377ms ago: executing program 3 (id=21521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) getpgrp(0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r2, 0x8004b709, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000003c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000300000008000000d7ca000008000000", @ANYRES32, @ANYBLOB="443ba40000000000000000000007000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000400"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 295.236147ms ago: executing program 4 (id=21522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) 294.578397ms ago: executing program 8 (id=21523): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 262.365228ms ago: executing program 4 (id=21524): socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x0, 0x20}, @ipv4=@udp={{0xd, 0x4, 0x3, 0x1b, 0x98, 0x66, 0x0, 0x41, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@cipso={0x86, 0x1f, 0x3, [{0x1, 0x7, "99b3f5656e"}, {0x0, 0x12, "f7470032b0a311d58850844df5991b21"}]}]}}, {0x4e20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "e59676053333c98aab3d501bf817920a8da263cfc38b2e308ac6288f78165e39", "7d591a13c426e5901e02555e5cf04d15", {"853745e0ace7a15e4078ad604dbe515d", 'O2\\\x00'}}}}}, 0xa6) 261.612607ms ago: executing program 3 (id=21525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="f7", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x4880) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r3, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x102000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}, {@msize}, {@nodevmap}, {@directio}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@version_L}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@fowner_gt={'fowner>', r4}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_lt={'fowner<', r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x65, 0x33, 0x64, 0x30, 0x34, 0x61], 0x2d, [0x36, 0x38, 0x64, 0x61], 0x2d, [0x63, 0x32, 0x62, 0x62], 0x2d, [0x32, 0x65, 0x0, 0x30], 0x2d, [0x37, 0x36, 0x61, 0x35, 0x64, 0x63, 0x67, 0x66]}}}]}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7490, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 149.202518ms ago: executing program 8 (id=21526): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d", 0x64}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) 147.140348ms ago: executing program 8 (id=21527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="75731f1e65722e5d5d2e5b23252500"], 0x0, 0x2) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x40) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r5 = dup3(r4, r0, 0x0) r6 = signalfd4(r1, &(0x7f0000000440)={[0x1]}, 0x8, 0x100800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000009000000000000000000000018110000256d3d7af948740668c4f168db957a194c41736fd7", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x3ff, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x3, 0x2, 0xc, 0x7}, {0x4, 0x4, 0x6, 0x3}, {0x3, 0x5, 0x7, 0xb}, {0x4, 0x5, 0xe, 0x8}, {0x1, 0x80e, 0x7, 0x5}], 0x10, 0x4, @void, @value}, 0x94) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r1}, 0xc) write$binfmt_elf32(r5, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x4, 0x8, 0xd31, 0x2, 0x3e, 0x519, 0x2bc, 0x38, 0x31f, 0x6, 0x9, 0x20, 0x2, 0x4, 0x9, 0x8001}, [{0x7, 0x4d9, 0xd, 0x3, 0x5, 0x3c, 0x80, 0x8000}, {0x70000000, 0xc073, 0x9, 0xfa1, 0x81, 0x4, 0xf3, 0x5}], "290028624c11643bd98eb28002e59127f7ebd0dcd3d7f4e91ba567dc55e6b70b2ef111b9e4173626d85975333e10416ae08bb0d3bcc884706730ade23f28798b4bfc997db79af8dce2be75e62490e4da80edd756cb4c05b9b7fe63b5dfb4ae459e80d425e330e1c908cd874d3c30313096f65358dce3ddd3c6a6fc9fe20a3a8b55fa30b79c54a21f4396b698dcaf80ecebb5b972d4811d97909bd44c04379595ba9e90a27e3ecfb6af5cb372a11bba200b65272f9b959236940c4beb45ad82c7350a03f6693358dc5ecfc41671070b7295", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb49) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="8000000077b63a195de92b2e53e36292ba61419abb35a45d0a8150cfa49dadd78f04", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0003000000060011001c000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00260c00000600110076020000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x9) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x40) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x40000, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000300)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x0) 124.866938ms ago: executing program 4 (id=21528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = syz_clone(0x44060000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f00000032c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f00000048c0)=[{&(0x7f0000003340)=""/6, 0x6}], 0x1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000440)='oom_adj\x00') timer_create(0x7, &(0x7f0000001300)={0x0, 0x4, 0x2, @thr={&(0x7f00000001c0)="14fc3bb2e0b0ba57c2bba27893c2464ce6c2ac0c2146fe0682d8756c87fb65d0e79975b24b229b0e122caee10fa0", &(0x7f0000001240)="948a0cb1dbc886a4bcd6cf8f3cb82b5dc2c7cbdaf5b74a3c3a149633636b6061ec37140732d44657435eca57f5433905c4659bc830eed0bc9c7324d5d520953b262cb77b32d6546e2f224ffc5b48f240ef025b08de090d03f8a5aa3b6fb7033f01d4f0c3109a201b8b04308e3a20da97a6d3bd4446b03a9d247811d5c95ab8233eab98efe3d43f4f51a982832984cd876f9364d4f8da6fb7fecd29e2a463d09223401c"}}, &(0x7f0000001340)=0x0) timer_settime(r3, 0x0, &(0x7f0000001380)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="0c87f8859aeb2dd6a9b1dd403a606c2151c7162a5f130c25ef6b8515aa8f84a4b622e8c03e1ea86be7f0534276010032b04de57e437f631e0a61965959cd735447819f5b8045845b0da377d7f04d5f16d0447c7f635663e4259516a12c06b4b6aa2c7e6ba0b729e1e7db60639a7e41f169f5812448836421810c3acda845eb83481328175b2d4761c5a9f12d1e21e6f36a9e2c709e1e997a2cb1a60faed9c0", 0x9f, 0x4000850, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffe, @private2, 0x5}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$rfkill(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) 64.225169ms ago: executing program 3 (id=21529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=21530): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffb477, @void, @value}, 0x94) setuid(0xee01) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000008000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffb477, @void, @value}, 0x94) (async) setuid(0xee01) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$inet(0x2, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000008000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000001000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) kernel console output (not intermixed with test programs): system 00000000-0000-0000-0000-000000000000. [ 1206.338217][T29972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20154'. [ 1206.347352][T29972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20154'. [ 1206.356845][T29972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20154'. [ 1206.368245][T29970] loop4: detected capacity change from 0 to 2048 [ 1206.376683][T29972] Cannot find add_set index 0 as target [ 1206.403151][T29970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.420193][T29982] loop3: detected capacity change from 0 to 2048 [ 1206.426784][T29980] Cannot find del_set index 4 as target [ 1206.456280][T29982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.501416][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.554688][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.648829][T30004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30004 comm=syz.3.20169 [ 1206.661557][T30004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30004 comm=syz.3.20169 [ 1206.720858][T30008] loop4: detected capacity change from 0 to 2048 [ 1206.758415][T30008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.808700][T30120] loop2: detected capacity change from 0 to 1024 [ 1206.817286][T30120] EXT4-fs: Ignoring removed orlov option [ 1206.817427][T30118] loop3: detected capacity change from 0 to 2048 [ 1206.823083][T30120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.858843][T30120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.863498][T30118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.900794][T30120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.919728][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.977471][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.020133][T30136] loop3: detected capacity change from 0 to 2048 [ 1207.037593][T30130] loop6: detected capacity change from 0 to 512 [ 1207.060643][T30136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.066015][T30142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30142 comm=syz.8.20184 [ 1207.085415][T30142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30142 comm=syz.8.20184 [ 1207.085737][T30140] loop4: detected capacity change from 0 to 2048 [ 1207.120019][T30130] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1207.133942][T30130] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1207.147854][T30140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.180851][T30130] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1207.223990][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.250919][T30130] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.20180: attempt to clear invalid blocks 2 len 1 [ 1207.301194][T30130] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20180: invalid indirect mapped block 1819239214 (level 0) [ 1207.328525][T30130] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20180: invalid indirect mapped block 1819239214 (level 1) [ 1207.368856][T30130] EXT4-fs (loop6): 1 truncate cleaned up [ 1207.396109][T30257] loop4: detected capacity change from 0 to 2048 [ 1207.413424][T30259] loop3: detected capacity change from 0 to 2048 [ 1207.424183][T30261] Cannot find del_set index 4 as target [ 1207.547510][T30278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30278 comm=syz.4.20197 [ 1207.560349][T30278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30278 comm=syz.4.20197 [ 1207.569689][T30272] loop3: detected capacity change from 0 to 512 [ 1207.610658][T30272] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1207.619473][T30272] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1207.632325][T30272] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1207.654278][T30272] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20194: attempt to clear invalid blocks 2 len 1 [ 1207.672176][T30272] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20194: invalid indirect mapped block 1819239214 (level 0) [ 1207.693616][T30272] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20194: invalid indirect mapped block 1819239214 (level 1) [ 1207.712306][T30272] EXT4-fs (loop3): 1 truncate cleaned up [ 1207.749657][T30291] Cannot find del_set index 4 as target [ 1207.783949][T30296] loop3: detected capacity change from 0 to 2048 [ 1207.826505][T30298] loop2: detected capacity change from 0 to 2048 [ 1207.921515][T30313] Cannot find add_set index 0 as target [ 1207.943328][T30319] loop6: detected capacity change from 0 to 2048 [ 1207.955362][T30317] loop3: detected capacity change from 0 to 2048 [ 1208.083980][T30339] Cannot find del_set index 4 as target [ 1208.258981][T30449] loop4: detected capacity change from 0 to 2048 [ 1208.265366][T30458] loop6: detected capacity change from 0 to 2048 [ 1208.316955][T30464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30464 comm=syz.8.20231 [ 1208.329680][T30464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30464 comm=syz.8.20231 [ 1208.345467][T30454] loop2: detected capacity change from 0 to 512 [ 1208.405444][T30454] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1208.413620][T30454] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1208.453126][T30454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1208.474428][T30454] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20228: attempt to clear invalid blocks 2 len 1 [ 1208.499935][T30454] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20228: invalid indirect mapped block 1819239214 (level 0) [ 1208.535508][T30454] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20228: invalid indirect mapped block 1819239214 (level 1) [ 1208.567634][T30454] EXT4-fs (loop2): 1 truncate cleaned up [ 1208.587124][T30469] loop3: detected capacity change from 0 to 512 [ 1208.652269][T30469] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1208.663817][T30469] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1208.670211][T30490] loop4: detected capacity change from 0 to 512 [ 1208.698202][T30469] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1208.717214][T30490] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1208.721291][T30469] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20233: attempt to clear invalid blocks 2 len 1 [ 1208.723570][T30490] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1208.747035][T30490] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1208.747585][T30490] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20241: attempt to clear invalid blocks 2 len 1 [ 1208.747741][T30490] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20241: invalid indirect mapped block 1819239214 (level 0) [ 1208.791056][T30490] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20241: invalid indirect mapped block 1819239214 (level 1) [ 1208.806764][T30490] EXT4-fs (loop4): 1 truncate cleaned up [ 1208.812518][T30498] Cannot find del_set index 4 as target [ 1208.830209][T30469] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20233: invalid indirect mapped block 1819239214 (level 0) [ 1208.841218][T30502] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1208.857062][T30469] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20233: invalid indirect mapped block 1819239214 (level 1) [ 1208.906797][T30469] EXT4-fs (loop3): 1 truncate cleaned up [ 1209.052576][T30528] Cannot find del_set index 4 as target [ 1209.095485][T30521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.130163][T30534] loop3: detected capacity change from 0 to 1024 [ 1209.144198][T30534] EXT4-fs: Ignoring removed orlov option [ 1209.149973][T30534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1209.155028][T30542] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1209.260300][T30540] loop2: detected capacity change from 0 to 512 [ 1209.295549][T30540] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1209.302315][T30540] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1209.336677][T30540] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1209.353817][T23955] page_pool_release_retry() stalled pool shutdown: id 342, 51 inflight 60 sec [ 1209.379934][T30540] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20260: attempt to clear invalid blocks 2 len 1 [ 1209.395477][T30540] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20260: invalid indirect mapped block 1819239214 (level 0) [ 1209.413964][T30540] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20260: invalid indirect mapped block 1819239214 (level 1) [ 1209.434227][T30568] Cannot find del_set index 4 as target [ 1209.456052][T30540] EXT4-fs (loop2): 1 truncate cleaned up [ 1209.466180][T30572] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1209.535369][T30577] Cannot find del_set index 4 as target [ 1209.541124][T30580] loop6: detected capacity change from 0 to 2048 [ 1209.552589][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 1209.552608][ T30] audit: type=1326 audit(2000018488.610:112528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.584225][ T30] audit: type=1326 audit(2000018488.610:112529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.608214][ T30] audit: type=1326 audit(2000018488.610:112530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.609738][T30586] loop2: detected capacity change from 0 to 2048 [ 1209.632030][ T30] audit: type=1326 audit(2000018488.610:112531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.632080][ T30] audit: type=1326 audit(2000018488.610:112532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.686187][ T30] audit: type=1326 audit(2000018488.610:112533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.709896][ T30] audit: type=1326 audit(2000018488.610:112534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.733806][ T30] audit: type=1326 audit(2000018488.610:112535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.757747][ T30] audit: type=1326 audit(2000018488.610:112536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.781591][ T30] audit: type=1326 audit(2000018488.610:112537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30573 comm="syz.4.20277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1209.852687][T30696] loop6: detected capacity change from 0 to 2048 [ 1209.961579][T30705] loop4: detected capacity change from 0 to 1024 [ 1209.971442][T30705] EXT4-fs: Ignoring removed orlov option [ 1209.977285][T30705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1209.994908][T30707] Cannot find del_set index 4 as target [ 1210.040226][T30711] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1210.153151][T30723] loop3: detected capacity change from 0 to 2048 [ 1210.168968][T30726] loop6: detected capacity change from 0 to 1024 [ 1210.186225][T30726] EXT4-fs: Ignoring removed orlov option [ 1210.192081][T30726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1210.334547][T30742] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1210.371736][T30744] loop3: detected capacity change from 0 to 2048 [ 1210.472974][T20149] page_pool_release_retry() stalled pool shutdown: id 319, 51 inflight 181 sec [ 1210.855629][T30884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30884 comm=syz.3.20322 [ 1210.868358][T30884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30884 comm=syz.3.20322 [ 1211.274241][T30995] loop6: detected capacity change from 0 to 512 [ 1211.289067][T31118] Cannot find del_set index 4 as target [ 1211.307432][T30995] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.20326: casefold flag without casefold feature [ 1211.328295][T30995] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.20326: couldn't read orphan inode 15 (err -117) [ 1211.357433][T31130] loop2: detected capacity change from 0 to 512 [ 1211.364371][T31130] EXT4-fs: Ignoring removed mblk_io_submit option [ 1211.372911][T31130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1211.390830][T31130] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.20341: casefold flag without casefold feature [ 1211.410984][T31130] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.20341: couldn't read orphan inode 15 (err -117) [ 1211.486820][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20349'. [ 1211.496063][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20349'. [ 1211.522622][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20349'. [ 1211.533133][T31147] Cannot find add_set index 0 as target [ 1211.776501][T31262] delete_channel: no stack [ 1211.792489][T31262] delete_channel: no stack [ 1211.985780][T31468] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1212.047192][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20362'. [ 1212.056405][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20362'. [ 1212.085075][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20362'. [ 1212.184631][T31584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31584 comm=syz.3.20366 [ 1212.197327][T31584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31584 comm=syz.3.20366 [ 1212.259416][T31581] loop6: detected capacity change from 0 to 512 [ 1212.291516][T31581] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1212.299240][T31581] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1212.354132][T31581] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1212.392853][T31581] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.20364: attempt to clear invalid blocks 2 len 1 [ 1212.409913][T31581] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20364: invalid indirect mapped block 1819239214 (level 0) [ 1212.428425][T31581] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20364: invalid indirect mapped block 1819239214 (level 1) [ 1212.458714][T31581] EXT4-fs (loop6): 1 truncate cleaned up [ 1212.497919][T31710] delete_channel: no stack [ 1212.522399][T31710] delete_channel: no stack [ 1212.546853][T31708] loop3: detected capacity change from 0 to 512 [ 1212.579581][T31704] loop4: detected capacity change from 0 to 512 [ 1212.607153][T31708] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1212.619860][T31708] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1212.636325][T31708] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1212.664819][T31704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1212.681110][T31704] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1212.699311][T31708] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20376: attempt to clear invalid blocks 2 len 1 [ 1212.719942][T31704] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1212.740871][T31708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20376: invalid indirect mapped block 1819239214 (level 0) [ 1212.767384][T31704] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20375: attempt to clear invalid blocks 2 len 1 [ 1212.784142][T31708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20376: invalid indirect mapped block 1819239214 (level 1) [ 1212.801467][T31704] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20375: invalid indirect mapped block 1819239214 (level 0) [ 1212.811209][T31824] loop2: detected capacity change from 0 to 1024 [ 1212.822793][T31708] EXT4-fs (loop3): 1 truncate cleaned up [ 1212.829373][T31704] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20375: invalid indirect mapped block 1819239214 (level 1) [ 1212.832737][T31824] EXT4-fs: Ignoring removed orlov option [ 1212.849516][T31824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1212.859711][T31704] EXT4-fs (loop4): 1 truncate cleaned up [ 1212.929893][T31823] loop6: detected capacity change from 0 to 512 [ 1213.046490][T31823] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1213.053967][T31823] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1213.089545][T31943] loop4: detected capacity change from 0 to 2048 [ 1213.094525][T31823] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1213.135176][T31823] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.20382: attempt to clear invalid blocks 2 len 1 [ 1213.172556][T31823] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20382: invalid indirect mapped block 1819239214 (level 0) [ 1213.194377][T31823] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20382: invalid indirect mapped block 1819239214 (level 1) [ 1213.226296][T31823] EXT4-fs (loop6): 1 truncate cleaned up [ 1213.233803][T31956] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1213.309809][T31966] delete_channel: no stack [ 1213.322397][T31966] delete_channel: no stack [ 1213.466623][T32085] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1213.600859][T32100] loop2: detected capacity change from 0 to 2048 [ 1213.651919][T32106] Cannot find add_set index 0 as target [ 1213.698851][T32111] loop3: detected capacity change from 0 to 2048 [ 1213.726108][T32116] loop2: detected capacity change from 0 to 512 [ 1213.752191][T32116] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1213.772644][T32116] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1213.786744][T32116] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.20422: Failed to acquire dquot type 1 [ 1213.828816][T32116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20422: bg 0: block 40: padding at end of block bitmap is not set [ 1213.829030][T32116] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1213.829404][T32116] EXT4-fs (loop2): 1 truncate cleaned up [ 1213.907134][T32146] delete_channel: no stack [ 1213.921076][T32146] delete_channel: no stack [ 1213.928557][T32147] loop3: detected capacity change from 0 to 2048 [ 1214.084846][T32164] Cannot find del_set index 4 as target [ 1214.270287][T32181] loop3: detected capacity change from 0 to 512 [ 1214.335331][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20456'. [ 1214.347348][T32294] loop2: detected capacity change from 0 to 2048 [ 1214.356097][T32297] Cannot find del_set index 4 as target [ 1214.357912][T32181] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1214.368690][T32181] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1214.382019][T32181] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1214.411833][T32181] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20452: attempt to clear invalid blocks 2 len 1 [ 1214.429708][T32181] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20452: invalid indirect mapped block 1819239214 (level 0) [ 1214.448124][T32181] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20452: invalid indirect mapped block 1819239214 (level 1) [ 1214.476257][T32181] EXT4-fs (loop3): 1 truncate cleaned up [ 1214.603773][T32415] Cannot find add_set index 0 as target [ 1214.655648][T32412] loop4: detected capacity change from 0 to 512 [ 1214.673243][T32410] loop2: detected capacity change from 0 to 512 [ 1214.742692][T32412] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1214.750059][T32412] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1214.757261][T32425] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1214.766260][T32412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1214.796693][T32410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1214.804149][T32410] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1214.820535][T32410] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1214.848765][T32412] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20462: attempt to clear invalid blocks 2 len 1 [ 1214.897326][T32435] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1214.906886][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1214.906904][ T30] audit: type=1400 audit(2000019005.981:112647): avc: denied { getopt } for pid=32434 comm="syz.8.20474" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1214.936551][T32410] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20463: attempt to clear invalid blocks 2 len 1 [ 1214.965339][T32412] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20462: invalid indirect mapped block 1819239214 (level 0) [ 1214.985016][ T30] audit: type=1400 audit(2000019006.011:112648): avc: denied { ioctl } for pid=32434 comm="syz.8.20474" path="socket:[183887]" dev="sockfs" ino=183887 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1215.012125][T32412] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20462: invalid indirect mapped block 1819239214 (level 1) [ 1215.039774][T32410] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20463: invalid indirect mapped block 1819239214 (level 0) [ 1215.063824][T32412] EXT4-fs (loop4): 1 truncate cleaned up [ 1215.103782][T32410] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20463: invalid indirect mapped block 1819239214 (level 1) [ 1215.133712][T32644] loop3: detected capacity change from 0 to 2048 [ 1215.180750][T32410] EXT4-fs (loop2): 1 truncate cleaned up [ 1215.324332][ T355] Cannot find del_set index 4 as target [ 1215.368305][ T30] audit: type=1326 audit(2000019006.431:112649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f082713d169 code=0x0 [ 1215.420244][ T400] loop4: detected capacity change from 0 to 1024 [ 1215.447972][ T400] EXT4-fs: Ignoring removed orlov option [ 1215.453765][ T400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1215.494754][ T405] loop3: detected capacity change from 0 to 2048 [ 1215.520571][ T30] audit: type=1326 audit(2000019006.591:112650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1215.582165][ T30] audit: type=1326 audit(2000019006.591:112651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1215.605936][ T30] audit: type=1326 audit(2000019006.591:112652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1215.629657][ T30] audit: type=1326 audit(2000019006.591:112653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1215.653490][ T30] audit: type=1326 audit(2000019006.591:112654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1215.677370][ T30] audit: type=1326 audit(2000019006.591:112655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=379 comm="syz.4.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1215.802560][ T30] audit: type=1400 audit(2000019006.861:112656): avc: denied { create } for pid=531 comm="syz.3.20492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1215.805799][ T532] loop3: detected capacity change from 0 to 1024 [ 1215.861533][ T532] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1215.872663][ T532] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1215.891133][ T532] JBD2: no valid journal superblock found [ 1215.896939][ T532] EXT4-fs (loop3): Could not load journal inode [ 1215.943987][ T532] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.20492'. [ 1215.960632][ T541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=541 comm=syz.8.20495 [ 1215.973233][ T541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=541 comm=syz.8.20495 [ 1216.068322][ T547] loop6: detected capacity change from 0 to 2048 [ 1216.145499][ T659] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1216.174263][ T661] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1216.218592][ T666] delete_channel: no stack [ 1216.223420][ T666] delete_channel: no stack [ 1216.364328][ T785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=785 comm=syz.2.20511 [ 1216.377080][ T785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=785 comm=syz.2.20511 [ 1216.440195][ T787] Cannot find add_set index 0 as target [ 1216.454389][ T791] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1216.572446][ T807] loop3: detected capacity change from 0 to 1024 [ 1216.579203][ T807] EXT4-fs: Ignoring removed orlov option [ 1216.585096][ T807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1216.751198][ T826] Cannot find add_set index 0 as target [ 1216.836062][ T834] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1216.846430][ T832] loop6: detected capacity change from 0 to 2048 [ 1216.883627][ T836] loop2: detected capacity change from 0 to 512 [ 1216.936938][ T836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1216.944644][ T836] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1216.965158][ T836] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1216.986341][ T847] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1216.989535][ T836] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20535: attempt to clear invalid blocks 2 len 1 [ 1217.010084][ T836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20535: invalid indirect mapped block 1819239214 (level 0) [ 1217.033891][ T836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20535: invalid indirect mapped block 1819239214 (level 1) [ 1217.071454][ T836] EXT4-fs (loop2): 1 truncate cleaned up [ 1217.093257][ T853] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1217.141826][ T858] Cannot find add_set index 0 as target [ 1217.189827][ T862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=862 comm=syz.4.20545 [ 1217.202473][ T862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=862 comm=syz.4.20545 [ 1217.258636][ T868] loop6: detected capacity change from 0 to 2048 [ 1217.346115][ T977] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1217.558374][ T1004] loop3: detected capacity change from 0 to 2048 [ 1217.575867][ T996] loop4: detected capacity change from 0 to 512 [ 1217.638090][ T996] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1217.647395][ T996] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1217.661367][ T1010] loop2: detected capacity change from 0 to 512 [ 1217.692436][ T1010] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1217.702078][ T1010] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1217.702158][ T996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1217.738964][ T1010] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1217.741085][ T996] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20558: attempt to clear invalid blocks 2 len 1 [ 1217.778740][T20149] page_pool_release_retry() stalled pool shutdown: id 320, 51 inflight 181 sec [ 1217.787806][T20149] page_pool_release_retry() stalled pool shutdown: id 323, 51 inflight 120 sec [ 1217.812540][ T996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20558: invalid indirect mapped block 1819239214 (level 0) [ 1217.828264][ T1010] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20565: attempt to clear invalid blocks 2 len 1 [ 1217.843619][ T1029] Cannot find add_set index 0 as target [ 1217.847704][ T996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20558: invalid indirect mapped block 1819239214 (level 1) [ 1217.886257][ T1010] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20565: invalid indirect mapped block 1819239214 (level 0) [ 1217.914085][ T1010] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20565: invalid indirect mapped block 1819239214 (level 1) [ 1217.936415][ T996] EXT4-fs (loop4): 1 truncate cleaned up [ 1217.947748][ T1010] EXT4-fs (loop2): 1 truncate cleaned up [ 1218.007233][ T1040] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1218.111292][ T1059] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1218.114841][ T1063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1063 comm=syz.3.20588 [ 1218.131229][ T1063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1063 comm=syz.3.20588 [ 1218.212415][ T1074] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1218.277105][ T1070] loop6: detected capacity change from 0 to 512 [ 1218.312397][ T1150] loop2: detected capacity change from 0 to 2048 [ 1218.390528][ T1070] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1218.397993][ T1191] loop4: detected capacity change from 0 to 2048 [ 1218.398024][ T1070] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1218.423219][ T1194] loop3: detected capacity change from 0 to 1024 [ 1218.432089][ T1194] EXT4-fs: Ignoring removed orlov option [ 1218.437955][ T1194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1218.446651][ T1070] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1218.489458][ T1070] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.20593: attempt to clear invalid blocks 2 len 1 [ 1218.526037][ T1070] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20593: invalid indirect mapped block 1819239214 (level 0) [ 1218.549174][ T1070] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20593: invalid indirect mapped block 1819239214 (level 1) [ 1218.569229][ T1210] loop4: detected capacity change from 0 to 2048 [ 1218.577428][ T1070] EXT4-fs (loop6): 1 truncate cleaned up [ 1218.611027][ T1217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1218.662448][ T1224] Cannot find add_set index 0 as target [ 1218.832972][ T1251] Cannot find add_set index 0 as target [ 1218.888140][ T1266] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1218.945715][ T1279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1279 comm=syz.6.20632 [ 1218.950552][ T1283] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1218.958498][ T1279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1279 comm=syz.6.20632 [ 1219.028572][ T1290] loop4: detected capacity change from 0 to 2048 [ 1219.102422][ T1297] loop2: detected capacity change from 0 to 1024 [ 1219.113704][ T1297] EXT4-fs: Ignoring removed orlov option [ 1219.119844][ T1297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1219.129469][ T1297] /dev/loop2: Can't open blockdev [ 1219.197174][ T1306] Cannot find add_set index 0 as target [ 1219.271849][ T1315] Cannot find del_set index 4 as target [ 1219.330746][ T1318] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1219.416373][ T1424] loop6: detected capacity change from 0 to 2048 [ 1219.549501][ T1444] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1219.592203][ T1446] loop3: detected capacity change from 0 to 512 [ 1219.629610][ T1446] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1219.634542][ T1453] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1219.635997][ T1446] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1219.689559][ T1446] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1219.727302][ T1446] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20661: attempt to clear invalid blocks 2 len 1 [ 1219.748922][ T1457] loop6: detected capacity change from 0 to 512 [ 1219.767492][ T1446] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20661: invalid indirect mapped block 1819239214 (level 0) [ 1219.785418][ T1446] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20661: invalid indirect mapped block 1819239214 (level 1) [ 1219.807976][ T1446] EXT4-fs (loop3): 1 truncate cleaned up [ 1219.811151][ T1457] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1219.821436][ T1457] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1219.841326][ T1457] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1219.860830][ T1457] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.20666: attempt to clear invalid blocks 2 len 1 [ 1219.891594][ T1457] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20666: invalid indirect mapped block 1819239214 (level 0) [ 1219.927068][ T1457] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20666: invalid indirect mapped block 1819239214 (level 1) [ 1219.947198][ T1457] EXT4-fs (loop6): 1 truncate cleaned up [ 1219.984127][ T1462] loop3: detected capacity change from 0 to 2048 [ 1220.015130][ T1466] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1220.065467][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1220.065484][ T30] audit: type=1326 audit(2000019011.133:112797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.6.20672" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4bd01d169 code=0x0 [ 1220.140180][ T1475] loop6: detected capacity change from 0 to 1024 [ 1220.155667][ T1475] EXT4-fs: Ignoring removed orlov option [ 1220.161523][ T1475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1220.175018][ T30] audit: type=1400 audit(2000019011.243:112798): avc: denied { bind } for pid=1478 comm="syz.8.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1220.194989][ T30] audit: type=1400 audit(2000019011.243:112799): avc: denied { setopt } for pid=1478 comm="syz.8.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1220.215137][ T30] audit: type=1400 audit(2000019011.243:112800): avc: denied { write } for pid=1478 comm="syz.8.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1220.270189][ T30] audit: type=1326 audit(2000019011.343:112801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.6.20672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1220.294046][ T30] audit: type=1326 audit(2000019011.343:112802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.6.20672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1220.317912][ T30] audit: type=1326 audit(2000019011.343:112803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.6.20672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1220.341804][ T30] audit: type=1326 audit(2000019011.343:112804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.6.20672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1220.365675][ T30] audit: type=1326 audit(2000019011.343:112805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.6.20672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1220.412484][ T1602] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1220.483186][ T1606] Cannot find del_set index 4 as target [ 1220.493971][ T30] audit: type=1326 audit(2000019011.563:112806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1608 comm="syz.4.20681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1220.604314][ T1615] loop3: detected capacity change from 0 to 512 [ 1220.647547][ T1615] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1220.653474][ T1626] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1220.654644][ T1615] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1220.697347][ T1630] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1220.712962][ T1615] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1220.719002][ T1628] lo speed is unknown, defaulting to 1000 [ 1220.746067][ T1631] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1220.754988][ T1615] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20686: attempt to clear invalid blocks 2 len 1 [ 1220.788681][ T1615] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20686: invalid indirect mapped block 1819239214 (level 0) [ 1220.792489][ T1631] loop2: detected capacity change from 0 to 1024 [ 1220.825422][ T1628] lo speed is unknown, defaulting to 1000 [ 1220.828739][ T1615] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20686: invalid indirect mapped block 1819239214 (level 1) [ 1220.832686][ T1628] lo speed is unknown, defaulting to 1000 [ 1220.852155][ T1631] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1220.865247][ T1615] EXT4-fs (loop3): 1 truncate cleaned up [ 1220.872004][ T1631] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1220.891442][ T1631] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1220.962353][ T1631] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 1220.995072][ T1631] EXT4-fs (loop2): Remounting filesystem read-only [ 1221.041636][ T1631] EXT4-fs (loop2): 1 orphan inode deleted [ 1221.062668][ T1647] loop6: detected capacity change from 0 to 2048 [ 1221.071036][ T1631] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 1221.086728][ T1670] loop3: detected capacity change from 0 to 512 [ 1221.105026][ T1670] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1221.111635][ T1670] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1221.128644][ T1647] FAULT_INJECTION: forcing a failure. [ 1221.128644][ T1647] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.141472][ T1647] CPU: 0 UID: 0 PID: 1647 Comm: syz.6.20696 Tainted: G W 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 1221.141577][ T1647] Tainted: [W]=WARN [ 1221.141584][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1221.141599][ T1647] Call Trace: [ 1221.141607][ T1647] [ 1221.141618][ T1647] dump_stack_lvl+0xf2/0x150 [ 1221.141654][ T1647] dump_stack+0x15/0x1a [ 1221.141729][ T1647] should_fail_ex+0x24a/0x260 [ 1221.141777][ T1647] ? __iomap_dio_rw+0x144/0x1110 [ 1221.141810][ T1647] should_failslab+0x8f/0xb0 [ 1221.141857][ T1647] __kmalloc_cache_noprof+0x4e/0x320 [ 1221.141885][ T1647] __iomap_dio_rw+0x144/0x1110 [ 1221.141923][ T1647] ? ext4_xattr_security_get+0x32/0x40 [ 1221.142006][ T1647] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 1221.142032][ T1647] ? __vfs_getxattr+0x29f/0x2b0 [ 1221.142089][ T1647] iomap_dio_rw+0x40/0x90 [ 1221.142120][ T1647] ext4_file_write_iter+0xb71/0xf20 [ 1221.142205][ T1647] do_iter_readv_writev+0x403/0x4b0 [ 1221.142274][ T1647] vfs_writev+0x2d9/0x880 [ 1221.142294][ T1647] ? proc_fail_nth_write+0x12a/0x150 [ 1221.142341][ T1647] __se_sys_pwritev2+0x100/0x1c0 [ 1221.142417][ T1647] __x64_sys_pwritev2+0x78/0x90 [ 1221.142452][ T1647] x64_sys_call+0x2afe/0x2dc0 [ 1221.142485][ T1647] do_syscall_64+0xc9/0x1c0 [ 1221.142548][ T1647] ? clear_bhb_loop+0x55/0xb0 [ 1221.142593][ T1647] ? clear_bhb_loop+0x55/0xb0 [ 1221.142621][ T1647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.142652][ T1647] RIP: 0033:0x7fd4bd01d169 [ 1221.142736][ T1647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1221.142754][ T1647] RSP: 002b:00007fd4bb687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1221.142772][ T1647] RAX: ffffffffffffffda RBX: 00007fd4bd235fa0 RCX: 00007fd4bd01d169 [ 1221.142785][ T1647] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000006 [ 1221.142797][ T1647] RBP: 00007fd4bb687090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.142808][ T1647] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 1221.142820][ T1647] R13: 0000000000000000 R14: 00007fd4bd235fa0 R15: 00007fff3274b628 [ 1221.142845][ T1647] [ 1221.386003][ T1670] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1221.401298][ T1670] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20698: attempt to clear invalid blocks 2 len 1 [ 1221.422262][ T1670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20698: invalid indirect mapped block 1819239214 (level 0) [ 1221.439628][ T1670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20698: invalid indirect mapped block 1819239214 (level 1) [ 1221.455995][ T1670] EXT4-fs (loop3): 1 truncate cleaned up [ 1221.507863][T23974] page_pool_release_retry() stalled pool shutdown: id 324, 51 inflight 121 sec [ 1221.556899][ T1751] loop4: detected capacity change from 0 to 2048 [ 1221.558716][ T1754] loop2: detected capacity change from 0 to 2048 [ 1221.571582][ T1757] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1221.725698][ T1769] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1221.745484][ T1768] selinux_netlink_send: 4 callbacks suppressed [ 1221.745504][ T1768] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1768 comm=syz.4.20705 [ 1221.764340][ T1768] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1768 comm=syz.4.20705 [ 1221.848569][ T1780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1780 comm=syz.8.20710 [ 1221.851744][ T1782] delete_channel: no stack [ 1221.861164][ T1780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1780 comm=syz.8.20710 [ 1221.874923][ T1783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1783 comm=syz.2.20707 [ 1221.890903][ T1783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1783 comm=syz.2.20707 [ 1221.890991][ T1782] delete_channel: no stack [ 1221.940461][ T1784] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1222.016421][ T1866] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 1222.076073][ T1994] loop6: detected capacity change from 0 to 2048 [ 1222.098976][ T2000] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1222.108552][ T1996] Cannot find add_set index 0 as target [ 1222.214882][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 1222.222716][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 1222.241435][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.249241][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.256927][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.264626][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.272621][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.280374][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.288057][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.295731][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.303446][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.311129][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.318835][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.326533][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.334234][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.342035][T23974] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 1222.368737][T23974] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 1222.378845][ T2017] Cannot find del_set index 4 as target [ 1222.410052][ T2026] Cannot find add_set index 0 as target [ 1222.435379][ T2019] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1222.466410][ T2031] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 1222.538928][ T2037] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1222.629311][ T2042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2042 comm=syz.8.20736 [ 1222.641926][ T2042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2042 comm=syz.8.20736 [ 1222.772602][ T2043] loop2: detected capacity change from 0 to 512 [ 1222.819282][ T2043] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1222.826915][ T2043] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1222.828805][ T2151] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1222.854263][ T2043] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1222.891640][ T2157] loop4: detected capacity change from 0 to 2048 [ 1222.893430][ T2043] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20747: attempt to clear invalid blocks 2 len 1 [ 1222.923026][ T2043] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20747: invalid indirect mapped block 1819239214 (level 0) [ 1222.942903][ T2161] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1222.952456][ T2043] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20747: invalid indirect mapped block 1819239214 (level 1) [ 1222.982853][ T2167] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1222.996630][ T2043] EXT4-fs (loop2): 1 truncate cleaned up [ 1223.042911][ T2173] loop4: detected capacity change from 0 to 512 [ 1223.052880][ T2173] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1223.059471][ T2173] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1223.073780][ T2173] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1223.089473][ T2173] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20750: attempt to clear invalid blocks 2 len 1 [ 1223.105509][ T2173] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20750: invalid indirect mapped block 1819239214 (level 0) [ 1223.123105][ T2173] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20750: invalid indirect mapped block 1819239214 (level 1) [ 1223.147890][ T2173] EXT4-fs (loop4): 1 truncate cleaned up [ 1223.172127][ T2171] loop3: detected capacity change from 0 to 512 [ 1223.204426][ T2184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2184 comm=syz.6.20754 [ 1223.217087][ T2184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2184 comm=syz.6.20754 [ 1223.232918][ T2189] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1223.246415][ T2171] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1223.253886][ T2171] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1223.275862][ T2192] loop4: detected capacity change from 0 to 1024 [ 1223.285709][ T2191] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1223.299552][ T2192] EXT4-fs: Ignoring removed orlov option [ 1223.305380][ T2192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1223.332980][ T2171] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1223.383148][ T2201] Cannot find add_set index 0 as target [ 1223.398751][ T2171] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20751: attempt to clear invalid blocks 2 len 1 [ 1223.449492][ T2171] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20751: invalid indirect mapped block 1819239214 (level 0) [ 1223.477944][ T2171] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20751: invalid indirect mapped block 1819239214 (level 1) [ 1223.509332][ T2171] EXT4-fs (loop3): 1 truncate cleaned up [ 1223.853819][ T2226] delete_channel: no stack [ 1223.859401][ T2226] delete_channel: no stack [ 1224.001454][ T2244] Cannot find del_set index 4 as target [ 1224.046724][ T2243] loop3: detected capacity change from 0 to 512 [ 1224.076584][ T2248] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1224.095462][ T2243] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1224.103571][ T2243] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1224.117235][ T2243] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1224.142825][ T2243] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20778: attempt to clear invalid blocks 2 len 1 [ 1224.162830][ T2243] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20778: invalid indirect mapped block 1819239214 (level 0) [ 1224.207666][ T2243] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20778: invalid indirect mapped block 1819239214 (level 1) [ 1224.247818][ T2243] EXT4-fs (loop3): 1 truncate cleaned up [ 1224.404427][ T2268] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1224.407139][ T2270] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1224.544404][ T2278] loop3: detected capacity change from 0 to 1024 [ 1224.576243][ T2278] EXT4-fs: Ignoring removed orlov option [ 1224.582062][ T2278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1224.600342][ T2284] Cannot find del_set index 4 as target [ 1224.868531][ T2308] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1224.928401][ T2312] Cannot find add_set index 0 as target [ 1225.045077][ T2325] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1225.149284][ T2333] loop4: detected capacity change from 0 to 512 [ 1225.159991][ T2338] Cannot find del_set index 4 as target [ 1225.199108][ T2333] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1225.208014][ T2333] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1225.238480][ T2344] Cannot find add_set index 0 as target [ 1225.247385][ T2333] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1225.372444][ T2333] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20819: attempt to clear invalid blocks 2 len 1 [ 1225.402618][ T2333] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20819: invalid indirect mapped block 1819239214 (level 0) [ 1225.421171][ T2333] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20819: invalid indirect mapped block 1819239214 (level 1) [ 1225.454653][ T2333] EXT4-fs (loop4): 1 truncate cleaned up [ 1225.542461][ T2465] Cannot find del_set index 4 as target [ 1225.618667][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 1225.618685][ T30] audit: type=1326 audit(2000019016.696:112909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.651819][ T30] audit: type=1326 audit(2000019016.696:112910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.675804][ T30] audit: type=1326 audit(2000019016.696:112911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.699550][ T30] audit: type=1326 audit(2000019016.696:112912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.723429][ T30] audit: type=1326 audit(2000019016.696:112913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.724942][ T2529] connsecmark_tg_check: 2 callbacks suppressed [ 1225.724976][ T2529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1225.747290][ T30] audit: type=1326 audit(2000019016.696:112914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.785617][ T30] audit: type=1326 audit(2000019016.696:112915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.809473][ T30] audit: type=1326 audit(2000019016.696:112916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.833257][ T30] audit: type=1326 audit(2000019016.696:112917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.857079][ T30] audit: type=1326 audit(2000019016.696:112918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2474 comm="syz.8.20837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1225.977536][ T2706] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1226.017203][ T2708] loop3: detected capacity change from 0 to 1024 [ 1226.024708][ T2708] EXT4-fs: Ignoring removed orlov option [ 1226.030549][ T2708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1226.085949][ T2720] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1226.193350][ T2730] loop6: detected capacity change from 0 to 512 [ 1226.209724][ T2736] Cannot find del_set index 4 as target [ 1226.229742][ T2730] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1226.237990][ T2730] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1226.254882][ T2730] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1226.275184][ T2730] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.20862: attempt to clear invalid blocks 2 len 1 [ 1226.296274][ T2730] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20862: invalid indirect mapped block 1819239214 (level 0) [ 1226.314595][ T2730] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.20862: invalid indirect mapped block 1819239214 (level 1) [ 1226.334433][ T2730] EXT4-fs (loop6): 1 truncate cleaned up [ 1226.405730][ T2751] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1226.433637][ T2755] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1226.626967][ T2780] Cannot find add_set index 0 as target [ 1226.677056][ T2785] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1226.822511][ T2810] loop3: detected capacity change from 0 to 512 [ 1226.833942][ T2810] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1226.840654][ T2810] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1226.849301][ T2817] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1226.850879][ T2810] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1226.874364][ T2810] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20903: attempt to clear invalid blocks 2 len 1 [ 1226.880921][ T2818] Cannot find add_set index 0 as target [ 1226.889439][ T2810] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20903: invalid indirect mapped block 1819239214 (level 0) [ 1226.907530][ T2810] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20903: invalid indirect mapped block 1819239214 (level 1) [ 1226.916511][ T2821] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1226.939989][ T2810] EXT4-fs (loop3): 1 truncate cleaned up [ 1227.090106][ T2840] loop6: detected capacity change from 0 to 1024 [ 1227.096835][ T2841] Cannot find del_set index 4 as target [ 1227.127754][ T2840] EXT4-fs: Ignoring removed orlov option [ 1227.133555][ T2840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1227.224157][ T2852] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1227.255344][ T2854] Cannot find add_set index 0 as target [ 1227.312262][ T2858] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1227.407307][ T2866] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1227.534604][ T2885] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1227.635786][ T2900] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1227.691960][ T2903] loop4: detected capacity change from 0 to 512 [ 1227.709207][ T2909] selinux_netlink_send: 20 callbacks suppressed [ 1227.709291][ T2909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2909 comm=syz.8.20949 [ 1227.728499][ T2909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2909 comm=syz.8.20949 [ 1227.749798][ T2903] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1227.762171][ T2903] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1227.797546][ T2903] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1227.837105][ T2903] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20945: attempt to clear invalid blocks 2 len 1 [ 1227.844232][ T2921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2921 comm=syz.3.20954 [ 1227.863617][ T2921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2921 comm=syz.3.20954 [ 1227.898257][ T2903] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20945: invalid indirect mapped block 1819239214 (level 0) [ 1227.928950][ T2926] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1227.970363][ T2903] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20945: invalid indirect mapped block 1819239214 (level 1) [ 1227.996783][T23974] page_pool_release_retry() stalled pool shutdown: id 327, 51 inflight 120 sec [ 1228.004012][ T2903] EXT4-fs (loop4): 1 truncate cleaned up [ 1228.095548][ T2939] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1228.197921][ T2947] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1228.208600][ T2948] Cannot find del_set index 4 as target [ 1228.259890][ T2944] loop3: detected capacity change from 0 to 512 [ 1228.299406][ T2954] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1228.347241][ T2956] Cannot find add_set index 0 as target [ 1228.376728][ T2944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1228.383756][ T2944] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1228.442828][ T2944] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1228.493399][ T2966] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1228.504681][ T2944] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20964: attempt to clear invalid blocks 2 len 1 [ 1228.552011][ T2944] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20964: invalid indirect mapped block 1819239214 (level 0) [ 1228.598971][ T2944] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20964: invalid indirect mapped block 1819239214 (level 1) [ 1228.662818][ T2971] loop2: detected capacity change from 0 to 512 [ 1228.674481][ T2944] EXT4-fs (loop3): 1 truncate cleaned up [ 1228.690642][ T2979] loop4: detected capacity change from 0 to 512 [ 1228.703280][ T2944] EXT4-fs mount: 161 callbacks suppressed [ 1228.703314][ T2944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1228.734651][ T2979] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1228.736922][ T2971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1228.741066][ T2979] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1228.741442][ T2979] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 1228.748214][ T2971] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1228.756056][ T2979] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1228.765133][ T2979] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20978: attempt to clear invalid blocks 2 len 1 [ 1228.765297][ T2979] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20978: invalid indirect mapped block 1819239214 (level 0) [ 1228.765430][ T2979] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.20978: invalid indirect mapped block 1819239214 (level 1) [ 1228.765686][ T2979] EXT4-fs (loop4): 1 truncate cleaned up [ 1228.766302][ T2979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1228.836346][ T2971] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1228.860900][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.892930][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.915501][ T2995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2995 comm=syz.8.20986 [ 1228.928196][ T2995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2995 comm=syz.8.20986 [ 1228.941678][ T2971] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.20975: attempt to clear invalid blocks 2 len 1 [ 1228.977959][ T2971] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20975: invalid indirect mapped block 1819239214 (level 0) [ 1229.007477][ T3004] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1229.018839][ T2971] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.20975: invalid indirect mapped block 1819239214 (level 1) [ 1229.076531][ T3000] loop3: detected capacity change from 0 to 512 [ 1229.087088][ T2971] EXT4-fs (loop2): 1 truncate cleaned up [ 1229.103261][ T2971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1229.130817][ T3000] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1229.137729][ T3000] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1229.169684][ T3000] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1229.215728][ T3000] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.20991: attempt to clear invalid blocks 2 len 1 [ 1229.245198][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.255499][ T3000] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20991: invalid indirect mapped block 1819239214 (level 0) [ 1229.273173][ T3000] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.20991: invalid indirect mapped block 1819239214 (level 1) [ 1229.305773][ T3021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3021 comm=syz.6.20997 [ 1229.318449][ T3021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3021 comm=syz.6.20997 [ 1229.324060][ T3000] EXT4-fs (loop3): 1 truncate cleaned up [ 1229.372713][ T3029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3029 comm=syz.4.21001 [ 1229.385326][ T3029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3029 comm=syz.4.21001 [ 1229.400140][ T3000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1229.463466][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.859779][ T3062] loop6: detected capacity change from 0 to 512 [ 1229.931227][ T3062] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1229.943483][ T3062] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1229.968792][ T3062] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1229.991563][ T3062] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.21015: attempt to clear invalid blocks 2 len 1 [ 1230.036491][ T3062] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.21015: invalid indirect mapped block 1819239214 (level 0) [ 1230.065000][ T3062] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.21015: invalid indirect mapped block 1819239214 (level 1) [ 1230.095616][ T3062] EXT4-fs (loop6): 1 truncate cleaned up [ 1230.124098][ T3062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1230.190693][ T4134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.507113][ T3146] Cannot find del_set index 4 as target [ 1230.586638][ T3155] loop4: detected capacity change from 0 to 512 [ 1230.609839][ T3155] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1230.617085][ T3155] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1230.654807][ T3155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1230.679431][ T3155] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.21055: attempt to clear invalid blocks 2 len 1 [ 1230.701885][ T3155] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21055: invalid indirect mapped block 1819239214 (level 0) [ 1230.729101][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1230.729116][ T30] audit: type=1326 audit(2000019021.809:113059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.736204][ T3155] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21055: invalid indirect mapped block 1819239214 (level 1) [ 1230.779306][ T30] audit: type=1326 audit(2000019021.839:113060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.803204][ T30] audit: type=1326 audit(2000019021.839:113061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.815851][ T3170] FAULT_INJECTION: forcing a failure. [ 1230.815851][ T3170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.827252][ T30] audit: type=1326 audit(2000019021.839:113062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.839990][ T3170] CPU: 1 UID: 0 PID: 3170 Comm: syz.6.21063 Tainted: G W 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 1230.840024][ T3170] Tainted: [W]=WARN [ 1230.840030][ T3170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1230.840045][ T3170] Call Trace: [ 1230.840053][ T3170] [ 1230.840063][ T3170] dump_stack_lvl+0xf2/0x150 [ 1230.840104][ T3170] dump_stack+0x15/0x1a [ 1230.840164][ T3170] should_fail_ex+0x24a/0x260 [ 1230.840205][ T3170] should_fail+0xb/0x10 [ 1230.840252][ T3170] should_fail_usercopy+0x1a/0x20 [ 1230.840351][ T3170] _copy_from_user+0x1c/0xa0 [ 1230.840377][ T3170] copy_msghdr_from_user+0x54/0x2a0 [ 1230.840478][ T3170] ? __fget_files+0x17c/0x1c0 [ 1230.840525][ T3170] __sys_sendmmsg+0x1e8/0x4b0 [ 1230.840621][ T3170] __x64_sys_sendmmsg+0x57/0x70 [ 1230.840677][ T3170] x64_sys_call+0x29aa/0x2dc0 [ 1230.840711][ T3170] do_syscall_64+0xc9/0x1c0 [ 1230.840753][ T3170] ? clear_bhb_loop+0x55/0xb0 [ 1230.840796][ T3170] ? clear_bhb_loop+0x55/0xb0 [ 1230.840898][ T3170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.840932][ T3170] RIP: 0033:0x7fd4bd01d169 [ 1230.840953][ T3170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.840976][ T3170] RSP: 002b:00007fd4bb687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1230.841048][ T3170] RAX: ffffffffffffffda RBX: 00007fd4bd235fa0 RCX: 00007fd4bd01d169 [ 1230.841065][ T3170] RDX: 0000000000000001 RSI: 0000400000003a80 RDI: 0000000000000003 [ 1230.841081][ T3170] RBP: 00007fd4bb687090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.841096][ T3170] R10: 000000002c000811 R11: 0000000000000246 R12: 0000000000000001 [ 1230.841112][ T3170] R13: 0000000000000000 R14: 00007fd4bd235fa0 R15: 00007fff3274b628 [ 1230.841140][ T3170] [ 1230.879104][ T3155] EXT4-fs (loop4): 1 truncate cleaned up [ 1230.879804][ T30] audit: type=1326 audit(2000019021.839:113063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.879894][ T30] audit: type=1326 audit(2000019021.839:113064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.879940][ T30] audit: type=1326 audit(2000019021.839:113065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.880027][ T30] audit: type=1326 audit(2000019021.839:113066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.933540][ T3175] Cannot find del_set index 4 as target [ 1230.938229][ T30] audit: type=1326 audit(2000019021.839:113067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1230.946172][ T3155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1230.947772][ T30] audit: type=1326 audit(2000019021.839:113068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3163 comm="syz.2.21059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b3fd169 code=0x7ffc0000 [ 1231.296773][ T3308] Cannot find del_set index 4 as target [ 1231.400714][ T3418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.442271][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.460005][ T3418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.502922][ T3433] connsecmark_tg_check: 10 callbacks suppressed [ 1231.502940][ T3433] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1231.541478][ T3418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.597936][ T3442] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1231.625097][ T3418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.726700][ T3418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.753575][ T3418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.786902][ T3418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.808933][ T3418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.821722][ T3465] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1232.145942][ T3494] loop2: detected capacity change from 0 to 512 [ 1232.215031][ T3494] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1232.223437][ T3494] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1232.249620][ T3501] loop3: detected capacity change from 0 to 512 [ 1232.276725][ T3494] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1232.299484][ T3565] Cannot find add_set index 0 as target [ 1232.305222][ T3494] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.21116: attempt to clear invalid blocks 2 len 1 [ 1232.308000][ T3576] delete_channel: no stack [ 1232.329093][ T3501] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1232.336920][ T3501] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1232.346958][ T3576] delete_channel: no stack [ 1232.355396][ T3494] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21116: invalid indirect mapped block 1819239214 (level 0) [ 1232.376430][ T3494] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21116: invalid indirect mapped block 1819239214 (level 1) [ 1232.378126][ T3609] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1232.404638][ T3501] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1232.432954][ T3501] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.21119: attempt to clear invalid blocks 2 len 1 [ 1232.448391][ T3494] EXT4-fs (loop2): 1 truncate cleaned up [ 1232.468943][ T3501] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21119: invalid indirect mapped block 1819239214 (level 0) [ 1232.495965][ T3494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1232.507489][ T3501] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21119: invalid indirect mapped block 1819239214 (level 1) [ 1232.559646][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.603857][ T3501] EXT4-fs (loop3): 1 truncate cleaned up [ 1232.616219][ T3619] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1232.629729][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1232.751054][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.850813][ T3736] selinux_netlink_send: 14 callbacks suppressed [ 1232.850835][ T3736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3736 comm=syz.3.21132 [ 1232.870078][ T3736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3736 comm=syz.3.21132 [ 1232.873851][ T3738] delete_channel: no stack [ 1232.904617][ T3738] delete_channel: no stack [ 1233.201420][ T3852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3852 comm=syz.4.21140 [ 1233.214501][ T3852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3852 comm=syz.4.21140 [ 1233.421972][T23956] page_pool_release_retry() stalled pool shutdown: id 351, 38 inflight 60 sec [ 1233.484015][ T3969] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1233.562314][ T3967] loop4: detected capacity change from 0 to 512 [ 1233.590350][ T3967] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1233.598067][ T3967] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1233.617361][ T3967] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1233.637804][ T3967] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.21148: attempt to clear invalid blocks 2 len 1 [ 1233.643421][ T3973] loop2: detected capacity change from 0 to 512 [ 1233.654492][ T3967] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21148: invalid indirect mapped block 1819239214 (level 0) [ 1233.677009][ T3967] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21148: invalid indirect mapped block 1819239214 (level 1) [ 1233.677350][ T3978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3978 comm=syz.8.21153 [ 1233.677377][ T3978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3978 comm=syz.8.21153 [ 1233.734240][ T3967] EXT4-fs (loop4): 1 truncate cleaned up [ 1233.745117][ T3967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1233.800218][ T3973] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1233.819288][ T3973] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1233.846649][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.939222][ T3973] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1233.975218][ T3993] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1233.997270][ T3973] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.21151: attempt to clear invalid blocks 2 len 1 [ 1234.037354][ T3987] loop4: detected capacity change from 0 to 512 [ 1234.048101][ T3973] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21151: invalid indirect mapped block 1819239214 (level 0) [ 1234.099861][ T3973] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21151: invalid indirect mapped block 1819239214 (level 1) [ 1234.109935][ T4002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4002 comm=syz.3.21164 [ 1234.126838][ T4002] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4002 comm=syz.3.21164 [ 1234.143449][ T3973] EXT4-fs (loop2): 1 truncate cleaned up [ 1234.178035][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1234.203972][ T3987] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1234.211248][ T3987] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1234.233639][ T3987] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1234.248998][ T4006] loop3: detected capacity change from 0 to 1024 [ 1234.249390][ T4006] EXT4-fs: Ignoring removed orlov option [ 1234.249443][ T4006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1234.273403][ T3987] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.21157: attempt to clear invalid blocks 2 len 1 [ 1234.296434][ T3987] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21157: invalid indirect mapped block 1819239214 (level 0) [ 1234.315841][ T4009] Cannot find del_set index 4 as target [ 1234.324322][ T3987] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21157: invalid indirect mapped block 1819239214 (level 1) [ 1234.335813][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.351721][ T3987] EXT4-fs (loop4): 1 truncate cleaned up [ 1234.352382][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.377140][ T3987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1234.404300][ T4006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.441633][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.494857][ T4020] delete_channel: no stack [ 1234.499492][ T4020] delete_channel: no stack [ 1234.533116][ T3997] lo speed is unknown, defaulting to 1000 [ 1234.539550][ T4026] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1234.616610][ T4031] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1235.060497][ T4052] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1235.267372][ T3997] lo speed is unknown, defaulting to 1000 [ 1235.298438][ T3997] lo speed is unknown, defaulting to 1000 [ 1235.489889][ T4078] loop3: detected capacity change from 0 to 1024 [ 1235.522623][ T4078] EXT4-fs: Ignoring removed orlov option [ 1235.528384][ T4078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1235.583150][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.613442][ T4078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.629898][ T4086] netlink: 9 bytes leftover after parsing attributes in process `syz.4.21198'. [ 1235.771349][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 1235.771367][ T30] audit: type=1326 audit(2000019026.851:113312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.21201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1235.825748][ T30] audit: type=1326 audit(2000019026.851:113313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.21201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1235.849622][ T30] audit: type=1326 audit(2000019026.881:113314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.21201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1235.873357][ T30] audit: type=1326 audit(2000019026.881:113315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.21201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1235.897058][ T30] audit: type=1326 audit(2000019026.881:113316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.21201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082713d169 code=0x7ffc0000 [ 1236.119680][ T4205] loop2: detected capacity change from 0 to 512 [ 1236.184988][ T4205] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1236.193422][ T4205] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1236.193754][ T4210] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1236.234802][ T4205] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1236.285185][ T30] audit: type=1326 audit(2000019027.361:113317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.21210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1236.287112][ T4205] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.21207: attempt to clear invalid blocks 2 len 1 [ 1236.355211][ T30] audit: type=1326 audit(2000019027.391:113318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.21210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1236.379011][ T30] audit: type=1326 audit(2000019027.391:113319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.21210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1236.402897][ T30] audit: type=1326 audit(2000019027.391:113320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.21210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1236.426642][ T30] audit: type=1326 audit(2000019027.391:113321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.6.21210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1236.428884][ T4205] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21207: invalid indirect mapped block 1819239214 (level 0) [ 1236.441926][ T4205] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21207: invalid indirect mapped block 1819239214 (level 1) [ 1236.497291][ T4205] EXT4-fs (loop2): 1 truncate cleaned up [ 1236.511138][ T4381] connsecmark_tg_check: 3 callbacks suppressed [ 1236.511153][ T4381] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1236.531999][ T4404] delete_channel: no stack [ 1236.536715][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1236.539526][ T4404] delete_channel: no stack [ 1236.584138][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.622701][ T4430] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1236.834327][ T4453] Cannot find del_set index 4 as target [ 1236.852769][ T4450] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1236.912240][ T4457] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1237.135366][ T4480] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1237.192442][ T4484] Cannot find del_set index 4 as target [ 1237.412773][ T4500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4500 comm=syz.2.21250 [ 1237.425773][ T4500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4500 comm=syz.2.21250 [ 1237.498464][ T4509] Cannot find del_set index 4 as target [ 1238.118703][ T4646] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1238.329780][ T4763] selinux_netlink_send: 2 callbacks suppressed [ 1238.329805][ T4763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4763 comm=syz.3.21280 [ 1238.348594][ T4763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4763 comm=syz.3.21280 [ 1238.486840][ T4870] Cannot find del_set index 4 as target [ 1238.591871][ T4876] FAULT_INJECTION: forcing a failure. [ 1238.591871][ T4876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.592458][ T4875] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1238.604981][ T4876] CPU: 0 UID: 0 PID: 4876 Comm: syz.4.21285 Tainted: G W 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 1238.605021][ T4876] Tainted: [W]=WARN [ 1238.605028][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1238.605072][ T4876] Call Trace: [ 1238.605090][ T4876] [ 1238.605102][ T4876] dump_stack_lvl+0xf2/0x150 [ 1238.605141][ T4876] dump_stack+0x15/0x1a [ 1238.605168][ T4876] should_fail_ex+0x24a/0x260 [ 1238.605210][ T4876] should_fail+0xb/0x10 [ 1238.605312][ T4876] should_fail_usercopy+0x1a/0x20 [ 1238.605353][ T4876] _copy_from_user+0x1c/0xa0 [ 1238.605379][ T4876] copy_msghdr_from_user+0x54/0x2a0 [ 1238.605423][ T4876] ? __fget_files+0x17c/0x1c0 [ 1238.605558][ T4876] __sys_sendmsg+0x13e/0x230 [ 1238.605679][ T4876] __x64_sys_sendmsg+0x46/0x50 [ 1238.605713][ T4876] x64_sys_call+0x2734/0x2dc0 [ 1238.605747][ T4876] do_syscall_64+0xc9/0x1c0 [ 1238.605791][ T4876] ? clear_bhb_loop+0x55/0xb0 [ 1238.605882][ T4876] ? clear_bhb_loop+0x55/0xb0 [ 1238.605917][ T4876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.605957][ T4876] RIP: 0033:0x7f082713d169 [ 1238.605978][ T4876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.606000][ T4876] RSP: 002b:00007f08257a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.606037][ T4876] RAX: ffffffffffffffda RBX: 00007f0827355fa0 RCX: 00007f082713d169 [ 1238.606053][ T4876] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 1238.606069][ T4876] RBP: 00007f08257a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.606090][ T4876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.606104][ T4876] R13: 0000000000000000 R14: 00007f0827355fa0 R15: 00007ffce0cab898 [ 1238.606132][ T4876] [ 1238.866521][ T4884] random: crng reseeded on system resumption [ 1238.966647][ T4884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21286'. [ 1238.990997][ T4895] Cannot find del_set index 4 as target [ 1239.051549][ T4899] loop4: detected capacity change from 0 to 1024 [ 1239.058230][ T4899] EXT4-fs: Ignoring removed orlov option [ 1239.064089][ T4899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1239.093114][ T4899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.112640][ T4899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.142642][ T4915] loop3: detected capacity change from 0 to 1024 [ 1239.151914][ T4915] EXT4-fs: Ignoring removed orlov option [ 1239.158086][ T4915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1239.171725][ T4917] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1239.183693][ T4915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.204805][ T4915] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.350666][ T4926] netlink: 'syz.6.21303': attribute type 1 has an invalid length. [ 1239.395002][ T4928] loop6: detected capacity change from 0 to 2048 [ 1239.413511][ T4928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.581519][ T4949] loop2: detected capacity change from 0 to 2048 [ 1239.599970][ T4949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.631388][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.661327][ T4953] syzkaller1: entered promiscuous mode [ 1239.666840][ T4953] syzkaller1: entered allmulticast mode [ 1239.774255][ T4957] tmpfs: Unknown parameter 'nr_inodes52' [ 1239.832936][ T4961] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 1239.985831][ T5076] delete_channel: no stack [ 1239.991876][ T5076] delete_channel: no stack [ 1240.020607][ T5078] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1240.105664][ T5191] loop4: detected capacity change from 0 to 1024 [ 1240.114063][ T5191] EXT4-fs: Ignoring removed orlov option [ 1240.120092][ T5191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1240.146107][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.181498][ T5191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.215381][ T5193] infiniband syz!: set down [ 1240.220253][ T5193] infiniband syz!: added team_slave_0 [ 1240.248944][ T5193] RDS/IB: syz!: added [ 1240.255102][ T5193] smc: adding ib device syz! with port count 1 [ 1240.261489][ T5193] smc: ib device syz! port 1 has pnetid [ 1240.267876][ T4134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.336467][ T5302] loop6: detected capacity change from 0 to 2048 [ 1240.372451][ T5302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.554287][ T4134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.608262][ T5418] FAULT_INJECTION: forcing a failure. [ 1240.608262][ T5418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.619524][ T5420] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1240.621520][ T5418] CPU: 1 UID: 0 PID: 5418 Comm: syz.6.21335 Tainted: G W 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 1240.621607][ T5418] Tainted: [W]=WARN [ 1240.621616][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1240.621638][ T5418] Call Trace: [ 1240.621646][ T5418] [ 1240.621667][ T5418] dump_stack_lvl+0xf2/0x150 [ 1240.621744][ T5418] dump_stack+0x15/0x1a [ 1240.621771][ T5418] should_fail_ex+0x24a/0x260 [ 1240.621814][ T5418] should_fail+0xb/0x10 [ 1240.621851][ T5418] should_fail_usercopy+0x1a/0x20 [ 1240.621913][ T5418] _copy_from_user+0x1c/0xa0 [ 1240.621940][ T5418] do_ipv6_setsockopt+0x1ef/0x2250 [ 1240.622162][ T5418] ? kstrtoull+0x110/0x140 [ 1240.622195][ T5418] ? kstrtouint+0x77/0xc0 [ 1240.622226][ T5418] ? __rcu_read_unlock+0x4e/0x70 [ 1240.622256][ T5418] ? avc_has_perm_noaudit+0x1cc/0x210 [ 1240.622304][ T5418] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 1240.622365][ T5418] ipv6_setsockopt+0x57/0x130 [ 1240.622489][ T5418] udpv6_setsockopt+0x95/0xb0 [ 1240.622527][ T5418] sock_common_setsockopt+0x64/0x80 [ 1240.622627][ T5418] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1240.622679][ T5418] __sys_setsockopt+0x187/0x200 [ 1240.622742][ T5418] __x64_sys_setsockopt+0x66/0x80 [ 1240.622768][ T5418] x64_sys_call+0x282e/0x2dc0 [ 1240.622794][ T5418] do_syscall_64+0xc9/0x1c0 [ 1240.622828][ T5418] ? clear_bhb_loop+0x55/0xb0 [ 1240.622890][ T5418] ? clear_bhb_loop+0x55/0xb0 [ 1240.622927][ T5418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.623007][ T5418] RIP: 0033:0x7fd4bd01d169 [ 1240.623027][ T5418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.623050][ T5418] RSP: 002b:00007fd4bb687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1240.623074][ T5418] RAX: ffffffffffffffda RBX: 00007fd4bd235fa0 RCX: 00007fd4bd01d169 [ 1240.623090][ T5418] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1240.623105][ T5418] RBP: 00007fd4bb687090 R08: 00000000000004b8 R09: 0000000000000000 [ 1240.623121][ T5418] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1240.623136][ T5418] R13: 0000000000000000 R14: 00007fd4bd235fa0 R15: 00007fff3274b628 [ 1240.623167][ T5418] [ 1240.769078][ T5424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5424 comm=syz.6.21339 [ 1240.855241][ T5430] delete_channel: no stack [ 1240.864352][ T5424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5424 comm=syz.6.21339 [ 1240.868974][ T5430] delete_channel: no stack [ 1240.933899][ T5439] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1240.966727][ T5488] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1240.970556][ T5445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5445 comm=syz.3.21344 [ 1240.987853][ T5445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5445 comm=syz.3.21344 [ 1241.058461][ T5546] Cannot find add_set index 0 as target [ 1241.135408][ T5543] loop4: detected capacity change from 0 to 512 [ 1241.216250][ T5543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1241.230699][ T5543] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1241.271432][ T5543] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1241.305747][ T5543] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.21346: attempt to clear invalid blocks 2 len 1 [ 1241.346236][ T5543] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21346: invalid indirect mapped block 1819239214 (level 0) [ 1241.374495][ T5543] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21346: invalid indirect mapped block 1819239214 (level 1) [ 1241.396988][ T5653] loop3: detected capacity change from 0 to 512 [ 1241.443259][ T5543] EXT4-fs (loop4): 1 truncate cleaned up [ 1241.447277][ T5664] loop2: detected capacity change from 0 to 2048 [ 1241.466376][ T5543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1241.483693][ T5653] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1241.494512][ T5653] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1241.516649][ T5664] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1241.552433][ T5653] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1241.571899][ T5653] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.21352: attempt to clear invalid blocks 2 len 1 [ 1241.595587][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.595713][ T5653] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21352: invalid indirect mapped block 1819239214 (level 0) [ 1241.634659][ T5653] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21352: invalid indirect mapped block 1819239214 (level 1) [ 1241.648181][ T5676] connsecmark_tg_check: 1 callbacks suppressed [ 1241.648204][ T5676] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1241.665217][ T5653] EXT4-fs (loop3): 1 truncate cleaned up [ 1241.685106][ T5672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1241.697163][ T5653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1241.797089][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.842153][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 1241.842169][ T30] audit: type=1326 audit(2000019288.921:113514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1241.872223][ T30] audit: type=1326 audit(2000019288.921:113515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1241.896223][ T30] audit: type=1326 audit(2000019288.921:113516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1241.919922][ T30] audit: type=1326 audit(2000019288.921:113517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1241.944008][ T30] audit: type=1326 audit(2000019288.921:113518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1241.967761][ T30] audit: type=1326 audit(2000019288.921:113519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1241.991511][ T30] audit: type=1326 audit(2000019288.921:113520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1242.015300][ T30] audit: type=1326 audit(2000019288.921:113521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1242.066442][ T30] audit: type=1326 audit(2000019289.011:113522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1242.090258][ T30] audit: type=1326 audit(2000019289.011:113523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.8.21368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067a1d169 code=0x7ffc0000 [ 1242.153300][ T5802] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1242.163282][ T5718] loop2: detected capacity change from 0 to 512 [ 1242.226414][ T5804] loop3: detected capacity change from 0 to 512 [ 1242.232467][ T5718] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1242.242841][ T5718] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1242.262994][ T5812] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1242.280876][ T5718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1242.300638][ T5718] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.21371: attempt to clear invalid blocks 2 len 1 [ 1242.304753][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21379'. [ 1242.324683][ T5718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21371: invalid indirect mapped block 1819239214 (level 0) [ 1242.346440][ T5804] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1242.353933][ T5804] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1242.366722][ T5816] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1242.379343][ T5718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21371: invalid indirect mapped block 1819239214 (level 1) [ 1242.400017][ T5804] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1242.428183][ T5804] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.21374: attempt to clear invalid blocks 2 len 1 [ 1242.435184][ T5718] EXT4-fs (loop2): 1 truncate cleaned up [ 1242.443067][ T5804] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21374: invalid indirect mapped block 1819239214 (level 0) [ 1242.464011][ T5820] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1242.466111][ T5804] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21374: invalid indirect mapped block 1819239214 (level 1) [ 1242.493145][ T5718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1242.510864][ T5804] EXT4-fs (loop3): 1 truncate cleaned up [ 1242.544553][ T5804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1242.576027][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.638721][ T5830] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1242.653015][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.729098][ T5834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21390'. [ 1242.760441][ T5876] FAULT_INJECTION: forcing a failure. [ 1242.760441][ T5876] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.773405][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.3.21392 Tainted: G W 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 1242.773440][ T5876] Tainted: [W]=WARN [ 1242.773449][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1242.773463][ T5876] Call Trace: [ 1242.773471][ T5876] [ 1242.773481][ T5876] dump_stack_lvl+0xf2/0x150 [ 1242.773513][ T5876] dump_stack+0x15/0x1a [ 1242.773542][ T5876] should_fail_ex+0x24a/0x260 [ 1242.773621][ T5876] should_failslab+0x8f/0xb0 [ 1242.773651][ T5876] kmem_cache_alloc_noprof+0x52/0x320 [ 1242.773673][ T5876] ? alloc_empty_file+0xd0/0x200 [ 1242.773756][ T5876] alloc_empty_file+0xd0/0x200 [ 1242.773779][ T5876] path_openat+0x6a/0x1fc0 [ 1242.773804][ T5876] ? _parse_integer_limit+0x167/0x180 [ 1242.773945][ T5876] ? _parse_integer+0x27/0x30 [ 1242.773975][ T5876] ? kstrtoull+0x110/0x140 [ 1242.774005][ T5876] ? kstrtouint+0x77/0xc0 [ 1242.774033][ T5876] ? kstrtouint_from_user+0xb0/0xe0 [ 1242.774131][ T5876] do_filp_open+0x107/0x230 [ 1242.774168][ T5876] do_sys_openat2+0xab/0x120 [ 1242.774195][ T5876] __x64_sys_openat+0xf3/0x120 [ 1242.774286][ T5876] x64_sys_call+0x2b30/0x2dc0 [ 1242.774396][ T5876] do_syscall_64+0xc9/0x1c0 [ 1242.774435][ T5876] ? clear_bhb_loop+0x55/0xb0 [ 1242.774589][ T5876] ? clear_bhb_loop+0x55/0xb0 [ 1242.774650][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.774777][ T5876] RIP: 0033:0x7f58baabd169 [ 1242.774795][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1242.774813][ T5876] RSP: 002b:00007f58b9121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1242.774834][ T5876] RAX: ffffffffffffffda RBX: 00007f58bacd5fa0 RCX: 00007f58baabd169 [ 1242.774849][ T5876] RDX: 0000000000000802 RSI: 0000400000001040 RDI: ffffffffffffff9c [ 1242.774863][ T5876] RBP: 00007f58b9121090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.774877][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.774891][ T5876] R13: 0000000000000000 R14: 00007f58bacd5fa0 R15: 00007ffc11df4ef8 [ 1242.774953][ T5876] [ 1243.025025][ T5895] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1243.091668][ T6035] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1243.277380][ T6071] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1243.285533][ T6065] loop3: detected capacity change from 0 to 512 [ 1243.332499][ T6074] syzkaller1: entered promiscuous mode [ 1243.338276][ T6074] syzkaller1: entered allmulticast mode [ 1243.348803][ T6065] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1243.356091][ T6065] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1243.378352][ T6065] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1243.424580][ T6065] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.21402: attempt to clear invalid blocks 2 len 1 [ 1243.477464][ T6065] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21402: invalid indirect mapped block 1819239214 (level 0) [ 1243.509265][ T6065] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.21402: invalid indirect mapped block 1819239214 (level 1) [ 1243.537094][ T6087] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1243.551306][ T6065] EXT4-fs (loop3): 1 truncate cleaned up [ 1243.551989][ T6091] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1243.566789][ T6090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6090 comm=syz.8.21416 [ 1243.579491][ T6090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6090 comm=syz.8.21416 [ 1243.584711][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1243.668021][T21548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.681800][ T6097] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1243.752355][ T6105] Cannot find add_set index 0 as target [ 1243.837187][ T6104] loop2: detected capacity change from 0 to 512 [ 1243.875753][ T6104] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1243.883346][ T6104] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1243.921118][ T6104] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1243.938259][ T6115] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1243.962807][ T6104] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.21422: attempt to clear invalid blocks 2 len 1 [ 1243.986653][ T6104] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21422: invalid indirect mapped block 1819239214 (level 0) [ 1243.999608][ T6118] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1244.030791][ T6104] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21422: invalid indirect mapped block 1819239214 (level 1) [ 1244.071569][ T6104] EXT4-fs (loop2): 1 truncate cleaned up [ 1244.095554][ T6104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1244.128874][ T6122] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6122 comm=syz.3.21431 [ 1244.131795][ T6124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6124 comm=syz.6.21432 [ 1244.141585][ T6122] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6122 comm=syz.3.21431 [ 1244.154103][ T6124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6124 comm=syz.6.21432 [ 1244.201365][ T6120] loop4: detected capacity change from 0 to 512 [ 1244.239448][ T6120] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1244.248666][ T6120] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1244.268225][ T6120] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1244.293650][ T6171] Cannot find add_set index 0 as target [ 1244.306733][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.318013][ T6120] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.21430: attempt to clear invalid blocks 2 len 1 [ 1244.335884][ T6120] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21430: invalid indirect mapped block 1819239214 (level 0) [ 1244.363067][ T6120] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21430: invalid indirect mapped block 1819239214 (level 1) [ 1244.408906][ T6120] EXT4-fs (loop4): 1 truncate cleaned up [ 1244.444595][ T6120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1244.539578][T21316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.588058][ T6291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6291 comm=syz.6.21445 [ 1244.600790][ T6291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6291 comm=syz.6.21445 [ 1244.630280][T23974] page_pool_release_retry() stalled pool shutdown: id 305, 51 inflight 243 sec [ 1244.762279][ T6317] loop2: detected capacity change from 0 to 512 [ 1244.811311][ T6317] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1244.818146][ T6317] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1244.874280][ T6317] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1244.885179][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21454'. [ 1244.898975][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21454'. [ 1244.908044][ T6484] netlink: 'syz.6.21454': attribute type 7 has an invalid length. [ 1244.923720][ T6484] netlink: 108 bytes leftover after parsing attributes in process `syz.6.21454'. [ 1244.933031][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21454'. [ 1244.942560][ T6317] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.21444: attempt to clear invalid blocks 2 len 1 [ 1244.958113][ T6317] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21444: invalid indirect mapped block 1819239214 (level 0) [ 1244.994777][ T6317] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.21444: invalid indirect mapped block 1819239214 (level 1) [ 1245.023198][ T6317] EXT4-fs (loop2): 1 truncate cleaned up [ 1245.040198][ T6317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1245.093533][ T6501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6501 comm=syz.6.21458 [ 1245.106354][ T6501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6501 comm=syz.6.21458 [ 1245.176797][T23955] page_pool_release_retry() stalled pool shutdown: id 309, 51 inflight 242 sec [ 1245.199079][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.219823][ T6511] lo speed is unknown, defaulting to 1000 [ 1245.248474][ T6533] Cannot find add_set index 0 as target [ 1245.303380][ T6624] loop3: detected capacity change from 0 to 1024 [ 1245.320220][ T6624] EXT4-fs: Ignoring removed orlov option [ 1245.326116][ T6624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1245.333542][ T6511] lo speed is unknown, defaulting to 1000 [ 1245.340358][ T6511] lo speed is unknown, defaulting to 1000 [ 1245.370056][ T6624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.385068][ T6624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.455489][ T6636] loop6: detected capacity change from 0 to 2048 [ 1245.481071][ T6636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.736522][ T4134] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.784232][ T6663] Cannot find add_set index 0 as target [ 1245.857898][ T6671] loop2: detected capacity change from 0 to 1024 [ 1245.870795][ T6671] EXT4-fs: Ignoring removed nobh option [ 1245.876482][ T6671] EXT4-fs: Ignoring removed bh option [ 1245.895161][ T6671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.049004][T17415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.078893][ T6683] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1246.684318][ T6866] loop3: detected capacity change from 0 to 1024 [ 1246.695264][ T6867] 9pnet_fd: Insufficient options for proto=fd [ 1246.703756][ T6866] EXT4-fs: Ignoring removed orlov option [ 1246.709558][ T6866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1246.716731][T23973] page_pool_release_retry() stalled pool shutdown: id 312, 51 inflight 242 sec [ 1246.738018][ T6869] connsecmark_tg_check: 3 callbacks suppressed [ 1246.738039][ T6869] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1246.759097][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.795517][ T6866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.844322][ T6874] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1246.975699][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 1246.975784][ T30] audit: type=1326 audit(2000019550.064:113660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.038089][ T30] audit: type=1326 audit(2000019550.094:113661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.061934][ T30] audit: type=1326 audit(2000019550.094:113662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.085710][ T30] audit: type=1326 audit(2000019550.094:113663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.109491][ T30] audit: type=1326 audit(2000019550.104:113664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.133215][ T30] audit: type=1326 audit(2000019550.104:113665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.157007][ T30] audit: type=1326 audit(2000019550.104:113666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.180812][ T30] audit: type=1326 audit(2000019550.104:113667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.204488][ T30] audit: type=1326 audit(2000019550.104:113668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.228207][ T30] audit: type=1326 audit(2000019550.104:113669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.21505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bd01d169 code=0x7ffc0000 [ 1247.295437][ T6889] Cannot find add_set index 0 as target [ 1247.332794][ T6887] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1247.461788][ T6904] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1247.618123][ T7009] loop6: detected capacity change from 0 to 512 [ 1247.676570][ T7009] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1247.683915][ T7009] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1247.703091][ T7009] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1247.722955][ T7124] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1247.763157][ T7009] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.21517: attempt to clear invalid blocks 2 len 1 [ 1247.818055][ T7009] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.21517: invalid indirect mapped block 1819239214 (level 0) [ 1247.847394][ T7009] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.21517: invalid indirect mapped block 1819239214 (level 1) [ 1247.887560][ T7009] EXT4-fs (loop6): 1 truncate cleaned up [ 1247.919327][ T7239] lo speed is unknown, defaulting to 1000 [ 1247.946271][ T4134] ================================================================== [ 1247.954399][ T4134] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 1247.961709][ T4134] [ 1247.964036][ T4134] read-write to 0xffff888237c2ba28 of 8 bytes by task 7240 on cpu 0: [ 1247.972102][ T4134] __find_get_block+0x42e/0x890 [ 1247.976969][ T4134] bdev_getblk+0x30/0x3b0 [ 1247.981319][ T4134] __ext4_get_inode_loc+0x2f7/0x940 [ 1247.986533][ T4134] ext4_reserve_inode_write+0xb0/0x200 [ 1247.991995][ T4134] __ext4_mark_inode_dirty+0x8e/0x440 [ 1247.997383][ T4134] ext4_dirty_inode+0x91/0xb0 [ 1248.002065][ T4134] __mark_inode_dirty+0x166/0x7e0 [ 1248.007122][ T4134] file_update_time+0x285/0x2b0 [ 1248.011977][ T4134] ext4_page_mkwrite+0x19e/0xb70 [ 1248.016947][ T4134] handle_mm_fault+0x12f7/0x2b00 [ 1248.021902][ T4134] exc_page_fault+0x3b9/0x650 [ 1248.026675][ T4134] asm_exc_page_fault+0x26/0x30 [ 1248.031551][ T4134] [ 1248.033889][ T4134] read to 0xffff888237c2ba28 of 8 bytes by task 4134 on cpu 1: [ 1248.041458][ T4134] has_bh_in_lru+0x35/0x1f0 [ 1248.045986][ T4134] smp_call_function_many_cond+0x305/0xbb0 [ 1248.051836][ T4134] on_each_cpu_cond_mask+0x3c/0x90 [ 1248.056954][ T4134] invalidate_bh_lrus+0x2a/0x30 [ 1248.061820][ T4134] blkdev_flush_mapping+0x9b/0x1a0 [ 1248.066950][ T4134] bdev_release+0x2f9/0x420 [ 1248.071467][ T4134] blkdev_release+0x15/0x20 [ 1248.075989][ T4134] __fput+0x2ac/0x640 [ 1248.079979][ T4134] ____fput+0x1c/0x30 [ 1248.083965][ T4134] task_work_run+0x13a/0x1a0 [ 1248.088607][ T4134] syscall_exit_to_user_mode+0xa8/0x120 [ 1248.094170][ T4134] do_syscall_64+0xd6/0x1c0 [ 1248.098688][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.104591][ T4134] [ 1248.106914][ T4134] value changed: 0x0000000000000000 -> 0xffff888100779138 [ 1248.114017][ T4134] [ 1248.116344][ T4134] Reported by Kernel Concurrency Sanitizer on: [ 1248.122500][ T4134] CPU: 1 UID: 0 PID: 4134 Comm: syz-executor Tainted: G W 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 1248.134836][ T4134] Tainted: [W]=WARN [ 1248.138644][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1248.148707][ T4134] ================================================================== [ 1248.200387][ T7239] lo speed is unknown, defaulting to 1000 [ 1248.206599][ T7239] lo speed is unknown, defaulting to 1000 [ 1254.930729][T23955] page_pool_release_retry() stalled pool shutdown: id 335, 51 inflight 121 sec [ 1256.130209][T23974] page_pool_release_retry() stalled pool shutdown: id 316, 51 inflight 241 sec