last executing test programs: 50.276827807s ago: executing program 4 (id=550): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x4}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 50.046160416s ago: executing program 4 (id=554): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]}) r2 = syz_open_procfs(0x0, 0x0) writev(r2, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000240)=[{r4}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc88f, 0x4002, 0x3, 0x357}, 0x0, 0x0) 49.938792075s ago: executing program 4 (id=558): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000fa00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 49.463955743s ago: executing program 4 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 49.295092236s ago: executing program 4 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 49.284645757s ago: executing program 4 (id=568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/24], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000002000000010000000300000002000000", @ANYRES32, @ANYBLOB="04000000000000000000feffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f0000000640)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f00000005c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003040)={0x0, 0x0}, &(0x7f0000000200)=0xc) setreuid(r3, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000007c0)={[{@nouid32}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpquota}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@block_validity}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@quota}], [{@subj_role={'subj_role', 0x3d, '\')'}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf8879807715657a87a69077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a63504", 0xdd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="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", 0x368}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 35.2675308s ago: executing program 32 (id=568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/24], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000002000000010000000300000002000000", @ANYRES32, @ANYBLOB="04000000000000000000feffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f0000000640)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f00000005c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003040)={0x0, 0x0}, &(0x7f0000000200)=0xc) setreuid(r3, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000007c0)={[{@nouid32}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpquota}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@block_validity}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@quota}], [{@subj_role={'subj_role', 0x3d, '\')'}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf8879807715657a87a69077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a63504", 0xdd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="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", 0x368}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.043869601s ago: executing program 3 (id=1350): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x4}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.68006075s ago: executing program 3 (id=1355): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x26000400) socket$pptp(0x18, 0x1, 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.523605253s ago: executing program 3 (id=1362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x8, 0x13, 0x100, &(0x7f00000000c0)="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"}) 6.475670807s ago: executing program 3 (id=1363): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_to_bridge\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108520800072a", 0x2a}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x804}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) read(r2, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") r6 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b2f, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 5.661563962s ago: executing program 3 (id=1376): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000540)=""/66, 0x42, 0x0, &(0x7f0000000300)=""/8, 0x8}}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010101}, 0xa, 0x0, 0x900}}, 0x26) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT], 0x48) eventfd2(0xfffffffc, 0x80801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffd8ef, @my=0x0}, 0x10) connect$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 5.291632562s ago: executing program 3 (id=1383): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000003700)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4000000, 0x74}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000851}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c, 0x0, r7}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) r11 = socket(0x1, 0x5, 0x0) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f00000001c0)={0x80000002}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000e00"], 0x1c}}, 0x40) 5.291182932s ago: executing program 33 (id=1383): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000003700)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4000000, 0x74}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000851}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c, 0x0, r7}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) r11 = socket(0x1, 0x5, 0x0) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f00000001c0)={0x80000002}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000e00"], 0x1c}}, 0x40) 1.573562853s ago: executing program 1 (id=1436): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f0000000000)=@sack_info={0x0, 0xff, 0x10000}, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.441360653s ago: executing program 1 (id=1439): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='BM\xb86\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000f70000000100000008000100030000001c000480050003000100000005000300800000000500030007000000080002"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007f00000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000280)=0x67) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x1, 0xfff, {{0x16, 0x4, 0x1, 0x2f, 0x58, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @rr={0x7, 0x27, 0x60, [@broadcast, @rand_addr=0x64010102, @multicast1, @broadcast, @empty, @rand_addr=0x64010100, @empty, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x1, [0x3ff, 0x7, 0x5, 0xfffffffb, 0x6]}, @ra={0x94, 0x4}]}}}}}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) 1.360448391s ago: executing program 2 (id=1441): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 1.283527987s ago: executing program 1 (id=1445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) unshare(0x26020480) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x160, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x2, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x9}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x40, "c62605ab15d56e02c1b4aa3a2deb607fd360b64aaa19aa84729c035e42d24ab364f754f0"}}]}, 0x160}}, 0x804) timer_delete(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.256703348s ago: executing program 5 (id=1446): r0 = creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x4, 0x6, 0x101}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000001140)=""/4111, 0x100f, 0x9, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x15, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000040)=0x7fffffff, 0x4) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000840)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_pwait2(r0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200), &(0x7f0000000380)={[0x3]}, 0x8) memfd_secret(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r6) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) 1.072055244s ago: executing program 2 (id=1448): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) 983.740481ms ago: executing program 0 (id=1449): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'macsec0\x00', @broadcast}) 983.126781ms ago: executing program 5 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x8, 0x13, 0x100, &(0x7f00000000c0)="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"}) 927.110365ms ago: executing program 5 (id=1451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 893.063918ms ago: executing program 2 (id=1452): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r3, 0x66a8, 0x4000, 0xf, 0x0, 0x18) syslog(0x2, &(0x7f00000000c0)=""/80, 0x50) (fail_nth: 1) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000280)) 667.568386ms ago: executing program 1 (id=1453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000540)=""/66, 0x42, 0x0, &(0x7f0000000300)=""/8, 0x8}}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010101}, 0xa, 0x0, 0x900}}, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT], 0x48) eventfd2(0xfffffffc, 0x80801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffd8ef, @my=0x0}, 0x10) connect$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 656.133808ms ago: executing program 1 (id=1454): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='BM\xb86\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000f70000000100000008000100030000001c000480050003000100000005000300800000000500030007000000080002"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007f00000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000280)=0x67) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x1, 0xfff, {{0x16, 0x4, 0x1, 0x2f, 0x58, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @rr={0x7, 0x27, 0x60, [@broadcast, @rand_addr=0x64010102, @multicast1, @broadcast, @empty, @rand_addr=0x64010100, @empty, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x1, [0x3ff, 0x7, 0x5, 0xfffffffb, 0x6]}, @ra={0x94, 0x4}]}}}}}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) 542.647246ms ago: executing program 2 (id=1455): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x6, 0x40001) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000840)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) sendto$inet6(r1, &(0x7f0000000080)="b301d506", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x28}}], 0x30}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0x13, 0x2014}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r8 = syz_clone(0x801800, &(0x7f00000001c0)="dabc8d467046334d49276d3a3a9bc1611c6e098079d561bd7c8b570e46a6dcb1b8e96b26770eec560018087111ff58512a0757bdbe8ca1234baae4fed024b1db6933bbd962d3fe29554e0aab02eeca89b9ca9628d32f5e42be332cf8596dc181aea505def18d32d8b54b04b4a19a9ad8aec1003606fafed3550b1015ca1c", 0x7e, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000580)="c48302e1c4a9dee33502a5735d405ac3fc7985cb5ea544dfb06c389ef48f2ee1f132dd2597b0ede3e9df0fc30f47a09bd04c1903787b785de95f789741d87422f05d7eb82a219c63fb6ba00273bba7cf100888cee213fd2f0754b4e17e181236f68b2e11e186906698c1659cad3d4a2737619afcb11891b642884b8d61f69b19581c3dfc42b996d08873f565b146cdd4052ca3197fb52e1d75f6fb9aec26f48fd51fb5828235b87eb9695ebc0d3385cbe28430568fb53e1ab54e18ca379198d78384291247646526420981") write$P9_RGETLOCK(r7, &(0x7f0000000400)={0x2b, 0x37, 0x1, {0x1, 0x7, 0x2, r8, 0xd, 'sched_switch\x00'}}, 0x2b) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000fbff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f00000004c0), &(0x7f0000001c40)=r6}, 0x20) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000680)={0xf90, 0x0, 0x0, 'queue0\x00', 0x4}) write$sndseq(r10, &(0x7f00000004c0)=[{0x84, 0x77, 0x1, 0x0, @tick=0x4a, {}, {}, @raw32={[0x7]}}, {0x3, 0xc, 0x80, 0x10, @time={0x5c, 0xffff}, {0x6, 0x7}, {0x0, 0x9}, @time=@time={0x5, 0xb}}, {0x40, 0x0, 0x7, 0x8e, @time={0x10000, 0x7ff}, {0xff, 0x3}, {0x2, 0x2}, @queue={0x2, {0x108, 0x8}}}, {0x9, 0xcc, 0x88, 0x2, @tick=0x8001, {0xe, 0x5}, {0x9, 0xf6}, @time=@tick=0x4}], 0x70) r11 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r11, 0x66a8, 0x4000, 0xf, 0x0, 0x18) syslog(0x2, &(0x7f00000000c0)=""/80, 0x50) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000280)) 492.752731ms ago: executing program 0 (id=1456): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0xfeff}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 491.87011ms ago: executing program 1 (id=1457): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000040)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 439.926475ms ago: executing program 0 (id=1458): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/246) sync_file_range(r1, 0x6, 0x7, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ff07010000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) sendfile(r3, r4, 0x0, 0x1000000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYRESOCT=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @random="7f0a00034011", @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x100000000000000) 438.701395ms ago: executing program 2 (id=1459): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 437.978375ms ago: executing program 5 (id=1460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/246) sync_file_range(r1, 0x6, 0x7, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ff07010000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) sendfile(r3, r4, 0x0, 0x1000000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYRESOCT=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @random="7f0a00034011", @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x100000000000000) 405.391828ms ago: executing program 0 (id=1461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) 373.61509ms ago: executing program 5 (id=1462): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x4}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 329.159414ms ago: executing program 0 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000540)=""/66, 0x42, 0x0, &(0x7f0000000300)=""/8, 0x8}}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010101}, 0xa, 0x0, 0x900}}, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT], 0x48) eventfd2(0xfffffffc, 0x80801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffd8ef, @my=0x0}, 0x10) connect$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 150.838418ms ago: executing program 0 (id=1464): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0x4}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 92.330183ms ago: executing program 2 (id=1465): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[], 0x0) (fail_nth: 6) 0s ago: executing program 5 (id=1466): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='BM\xb86\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000f70000000100000008000100030000001c000480050003000100000005000300800000000500030007000000080002"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007f00000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@mcast2}, &(0x7f0000000280)=0x67) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x1, 0xfff, {{0x16, 0x4, 0x1, 0x2f, 0x58, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @rr={0x7, 0x27, 0x60, [@broadcast, @rand_addr=0x64010102, @multicast1, @broadcast, @empty, @rand_addr=0x64010100, @empty, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x1, [0x3ff, 0x7, 0x5, 0xfffffffb, 0x6]}, @ra={0x94, 0x4}]}}}}}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) kernel console output (not intermixed with test programs): 0 ip=0x7f72e0bbebe9 code=0x7ffc0000 [ 84.664889][ T29] audit: type=1326 audit(1755012647.973:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72e0bbebe9 code=0x7ffc0000 [ 84.689215][ T29] audit: type=1326 audit(1755012647.973:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e0bbebe9 code=0x7ffc0000 [ 84.713228][ T29] audit: type=1326 audit(1755012647.973:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f72e0bbebe9 code=0x7ffc0000 [ 84.738820][ T29] audit: type=1326 audit(1755012648.080:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e0bbebe9 code=0x7ffc0000 [ 84.762791][ T29] audit: type=1326 audit(1755012648.080:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6108 comm="syz.2.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e0bbebe9 code=0x7ffc0000 [ 84.790854][ T6105] lo speed is unknown, defaulting to 1000 [ 84.995718][ T6117] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.145606][ T6138] FAULT_INJECTION: forcing a failure. [ 85.145606][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 85.160862][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.2.914 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 85.160947][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.160963][ T6138] Call Trace: [ 85.160970][ T6138] [ 85.160978][ T6138] __dump_stack+0x1d/0x30 [ 85.161010][ T6138] dump_stack_lvl+0xe8/0x140 [ 85.161031][ T6138] dump_stack+0x15/0x1b [ 85.161050][ T6138] should_fail_ex+0x265/0x280 [ 85.161077][ T6138] should_failslab+0x8c/0xb0 [ 85.161103][ T6138] kmem_cache_alloc_noprof+0x50/0x310 [ 85.161158][ T6138] ? security_inode_alloc+0x37/0x100 [ 85.161190][ T6138] security_inode_alloc+0x37/0x100 [ 85.161283][ T6138] inode_init_always_gfp+0x4b7/0x500 [ 85.161309][ T6138] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 85.161339][ T6138] alloc_inode+0x58/0x170 [ 85.161367][ T6138] new_inode+0x1d/0xe0 [ 85.161404][ T6138] __debugfs_create_file+0x109/0x330 [ 85.161432][ T6138] debugfs_create_file_full+0x3f/0x60 [ 85.161487][ T6138] ? __pfx_sl_setup+0x10/0x10 [ 85.161520][ T6138] ref_tracker_dir_debugfs+0x100/0x1e0 [ 85.161554][ T6138] alloc_netdev_mqs+0x1a2/0xa20 [ 85.161581][ T6138] slip_open+0x2d1/0x920 [ 85.161612][ T6138] ? __pfx_slip_open+0x10/0x10 [ 85.161642][ T6138] tty_ldisc_open+0x5d/0xb0 [ 85.161670][ T6138] tty_set_ldisc+0x1db/0x380 [ 85.161773][ T6138] tiocsetd+0x51/0x60 [ 85.161804][ T6138] tty_ioctl+0xa7f/0xb80 [ 85.161914][ T6138] ? __pfx_tty_ioctl+0x10/0x10 [ 85.162020][ T6138] __se_sys_ioctl+0xcb/0x140 [ 85.162055][ T6138] __x64_sys_ioctl+0x43/0x50 [ 85.162134][ T6138] x64_sys_call+0x1816/0x2ff0 [ 85.162158][ T6138] do_syscall_64+0xd2/0x200 [ 85.162239][ T6138] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.162266][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.162290][ T6138] RIP: 0033:0x7f72e0bbebe9 [ 85.162368][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.162400][ T6138] RSP: 002b:00007f72df627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.162425][ T6138] RAX: ffffffffffffffda RBX: 00007f72e0de5fa0 RCX: 00007f72e0bbebe9 [ 85.162439][ T6138] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000007 [ 85.162470][ T6138] RBP: 00007f72df627090 R08: 0000000000000000 R09: 0000000000000000 [ 85.162484][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.162497][ T6138] R13: 00007f72e0de6038 R14: 00007f72e0de5fa0 R15: 00007ffc5cb4de48 [ 85.162518][ T6138] [ 85.163323][ T6138] debugfs: out of free dentries, can not create file 'netdev@ffff888120a7d550' [ 85.737338][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 85.798804][ T6167] loop3: detected capacity change from 0 to 1024 [ 85.836408][ T6178] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.844643][ T6178] IPv6: Can't replace route, no match found [ 85.984806][ T6192] loop1: detected capacity change from 0 to 2048 [ 86.043877][ T6192] loop1: p2 < > p3 < > [ 86.048196][ T6192] loop1: partition table partially beyond EOD, truncated [ 86.084942][ T6192] loop1: p2 start 4278190080 is beyond EOD, truncated [ 86.274827][ T3411] IPVS: starting estimator thread 0... [ 86.374071][ T6207] lo speed is unknown, defaulting to 1000 [ 86.409701][ T6206] IPVS: using max 2448 ests per chain, 122400 per kthread [ 86.498964][ T6216] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 86.647081][ T6213] lo speed is unknown, defaulting to 1000 [ 86.807982][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 86.862428][ T6235] loop1: detected capacity change from 0 to 2048 [ 86.889800][ T6235] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.905147][ T6235] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 86.909877][ T6240] loop0: detected capacity change from 0 to 1024 [ 86.918182][ T6235] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.918182][ T6235] [ 86.935426][ T6235] EXT4-fs (loop1): Total free blocks count 0 [ 86.941534][ T6235] EXT4-fs (loop1): Free/Dirty block details [ 86.947819][ T6235] EXT4-fs (loop1): free_blocks=2415919104 [ 86.953880][ T6235] EXT4-fs (loop1): dirty_blocks=32 [ 86.959467][ T6235] EXT4-fs (loop1): Block reservation details [ 86.959873][ T6233] serio: Serial port ptm0 [ 86.965640][ T6235] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 87.057182][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 87.096220][ T6258] random: crng reseeded on system resumption [ 87.218795][ T6256] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.324514][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.958'. [ 87.445787][ T6265] loop5: detected capacity change from 0 to 512 [ 87.533316][ T6265] ext4: Unknown parameter 'nouser_xattr' [ 87.699850][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 87.757831][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 87.757852][ T29] audit: type=1326 audit(1755012651.341:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.788029][ T29] audit: type=1326 audit(1755012651.341:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.812190][ T29] audit: type=1326 audit(1755012651.341:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.836180][ T29] audit: type=1326 audit(1755012651.341:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.859975][ T29] audit: type=1326 audit(1755012651.341:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.883892][ T29] audit: type=1326 audit(1755012651.341:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.908866][ T29] audit: type=1326 audit(1755012651.341:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.932928][ T29] audit: type=1326 audit(1755012651.341:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.957852][ T29] audit: type=1326 audit(1755012651.341:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 87.982340][ T29] audit: type=1326 audit(1755012651.341:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b543eebe9 code=0x7ffc0000 [ 88.026466][ T6275] loop3: detected capacity change from 0 to 1024 [ 88.215808][ T6275] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.267081][ T6283] loop5: detected capacity change from 0 to 512 [ 88.314556][ T6281] loop2: detected capacity change from 0 to 8192 [ 88.355716][ T6278] lo speed is unknown, defaulting to 1000 [ 88.418935][ T6275] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.959: bg 0: block 10: padding at end of block bitmap is not set [ 88.453785][ T6275] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.959: Failed to acquire dquot type 0 [ 88.480851][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 88.495976][ T6275] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.959: Failed to acquire dquot type 0 [ 88.532543][ T6275] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.959: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.551456][ T6283] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.964: Failed to acquire dquot type 1 [ 88.583168][ T6283] EXT4-fs (loop5): 1 truncate cleaned up [ 88.589866][ T6275] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.959: Failed to acquire dquot type 0 [ 88.612103][ T6283] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.642823][ T6275] EXT4-fs (loop3): 1 orphan inode deleted [ 88.708598][ T6275] syz.3.959 (6275) used greatest stack depth: 8800 bytes left [ 88.717098][ T6291] loop2: detected capacity change from 0 to 2048 [ 88.742975][ T6291] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.783540][ T6291] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 88.796175][ T6291] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.796175][ T6291] [ 88.806059][ T6291] EXT4-fs (loop2): Total free blocks count 0 [ 88.812374][ T6291] EXT4-fs (loop2): Free/Dirty block details [ 88.818359][ T6291] EXT4-fs (loop2): free_blocks=2415919104 [ 88.824256][ T6291] EXT4-fs (loop2): dirty_blocks=32 [ 88.829686][ T6291] EXT4-fs (loop2): Block reservation details [ 88.836096][ T6291] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 88.930687][ T6297] loop1: detected capacity change from 0 to 2048 [ 88.981850][ T6300] netlink: 44 bytes leftover after parsing attributes in process `syz.5.969'. [ 89.011662][ T6297] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.036076][ T6297] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 89.049176][ T6297] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.049176][ T6297] [ 89.059575][ T6297] EXT4-fs (loop1): Total free blocks count 0 [ 89.065744][ T6297] EXT4-fs (loop1): Free/Dirty block details [ 89.071852][ T6297] EXT4-fs (loop1): free_blocks=2415919104 [ 89.077812][ T6297] EXT4-fs (loop1): dirty_blocks=32 [ 89.083344][ T6297] EXT4-fs (loop1): Block reservation details [ 89.089640][ T6297] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 89.130396][ T6314] tipc: Enabled bearer , priority 0 [ 89.139302][ T6317] loop3: detected capacity change from 0 to 2048 [ 89.185139][ T6317] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.241777][ T6317] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 89.254649][ T6317] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.254649][ T6317] [ 89.264388][ T6317] EXT4-fs (loop3): Total free blocks count 0 [ 89.270489][ T6317] EXT4-fs (loop3): Free/Dirty block details [ 89.276600][ T6317] EXT4-fs (loop3): free_blocks=2415919104 [ 89.282686][ T6317] EXT4-fs (loop3): dirty_blocks=32 [ 89.288160][ T6317] EXT4-fs (loop3): Block reservation details [ 89.294230][ T6317] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 89.319137][ T6305] tipc: Resetting bearer [ 89.343706][ T6305] tipc: Disabling bearer [ 89.484972][ T6343] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 89.492931][ T6343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.987'. [ 89.576360][ T6339] lo speed is unknown, defaulting to 1000 [ 89.588310][ T6348] tipc: Enabled bearer , priority 0 [ 89.638398][ T6347] tipc: Resetting bearer [ 89.639877][ T6355] netlink: 'syz.0.992': attribute type 21 has an invalid length. [ 89.652346][ T6355] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.661391][ T6359] loop3: detected capacity change from 0 to 1024 [ 89.679188][ T6347] tipc: Disabling bearer [ 89.731938][ T6362] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 89.740509][ T6362] veth0: entered promiscuous mode [ 89.789413][ T6370] loop2: detected capacity change from 0 to 2048 [ 89.808592][ T6370] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.832355][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 89.835543][ T6377] vlan2: entered allmulticast mode [ 89.847168][ T6377] bridge_slave_0: entered allmulticast mode [ 89.856268][ T6370] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 89.869150][ T6370] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.869150][ T6370] [ 89.878955][ T6370] EXT4-fs (loop2): Total free blocks count 0 [ 89.885096][ T6370] EXT4-fs (loop2): Free/Dirty block details [ 89.891221][ T6370] EXT4-fs (loop2): free_blocks=2415919104 [ 89.897049][ T6370] EXT4-fs (loop2): dirty_blocks=32 [ 89.902361][ T6370] EXT4-fs (loop2): Block reservation details [ 89.908618][ T6370] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 89.976189][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 90.078853][ T6399] loop2: detected capacity change from 0 to 512 [ 90.106130][ T6399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.141343][ T6399] EXT4-fs (loop2): 1 truncate cleaned up [ 90.149189][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 90.206698][ T6418] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1015'. [ 90.227842][ T6417] netlink: 'syz.1.1014': attribute type 11 has an invalid length. [ 90.237160][ T6417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1014'. [ 90.348346][ T6426] loop1: detected capacity change from 0 to 512 [ 90.368835][ T6426] loop1: detected capacity change from 0 to 1024 [ 90.400243][ T6423] lo speed is unknown, defaulting to 1000 [ 90.419413][ T6354] veth0: left promiscuous mode [ 90.424270][ T6430] loop5: detected capacity change from 0 to 2048 [ 90.448018][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1017'. [ 90.457349][ T6426] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1017'. [ 90.466618][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1017'. [ 90.478595][ T6426] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1017'. [ 90.514118][ T6430] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.552702][ T6430] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 90.565444][ T6430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.565444][ T6430] [ 90.575335][ T6430] EXT4-fs (loop5): Total free blocks count 0 [ 90.581492][ T6430] EXT4-fs (loop5): Free/Dirty block details [ 90.587623][ T6430] EXT4-fs (loop5): free_blocks=2415919104 [ 90.593387][ T6430] EXT4-fs (loop5): dirty_blocks=32 [ 90.598516][ T6430] EXT4-fs (loop5): Block reservation details [ 90.604613][ T6430] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 90.745421][ T6441] tipc: Enabled bearer , priority 0 [ 90.757477][ T6447] loop5: detected capacity change from 0 to 512 [ 90.764541][ T6453] FAULT_INJECTION: forcing a failure. [ 90.764541][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 90.777696][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.2.1027 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 90.777732][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.777747][ T6453] Call Trace: [ 90.777754][ T6453] [ 90.777763][ T6453] __dump_stack+0x1d/0x30 [ 90.777787][ T6453] dump_stack_lvl+0xe8/0x140 [ 90.777805][ T6453] dump_stack+0x15/0x1b [ 90.777821][ T6453] should_fail_ex+0x265/0x280 [ 90.777905][ T6453] should_failslab+0x8c/0xb0 [ 90.777929][ T6453] __kvmalloc_node_noprof+0x123/0x4e0 [ 90.777956][ T6453] ? bpf_int_jit_compile+0x3e2/0xd40 [ 90.778064][ T6453] ? __kmalloc_cache_noprof+0x189/0x320 [ 90.778091][ T6453] bpf_int_jit_compile+0x3e2/0xd40 [ 90.778127][ T6453] ? __pfx___bpf_prog_ret0_warn+0x10/0x10 [ 90.778159][ T6453] bpf_prog_select_runtime+0x468/0x620 [ 90.778269][ T6453] bpf_prepare_filter+0xb7d/0xbd0 [ 90.778294][ T6453] __get_filter+0x1d0/0x230 [ 90.778315][ T6453] sk_reuseport_attach_filter+0x20/0x140 [ 90.778336][ T6453] sk_setsockopt+0x1890/0x20e0 [ 90.778415][ T6453] sock_setsockopt+0x40/0x50 [ 90.778446][ T6453] __sys_setsockopt+0x13a/0x200 [ 90.778468][ T6453] __x64_sys_setsockopt+0x64/0x80 [ 90.778489][ T6453] x64_sys_call+0x20ec/0x2ff0 [ 90.778569][ T6453] do_syscall_64+0xd2/0x200 [ 90.778595][ T6453] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.778641][ T6453] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.778668][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.778780][ T6453] RIP: 0033:0x7f72e0bbebe9 [ 90.778797][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.778816][ T6453] RSP: 002b:00007f72df627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.778838][ T6453] RAX: ffffffffffffffda RBX: 00007f72e0de5fa0 RCX: 00007f72e0bbebe9 [ 90.778852][ T6453] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 90.778865][ T6453] RBP: 00007f72df627090 R08: 0000000000000010 R09: 0000000000000000 [ 90.778927][ T6453] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000002 [ 90.778940][ T6453] R13: 00007f72e0de6038 R14: 00007f72e0de5fa0 R15: 00007ffc5cb4de48 [ 90.778957][ T6453] [ 90.780528][ T6447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.023810][ T6438] tipc: Resetting bearer [ 91.058733][ T6447] EXT4-fs (loop5): 1 truncate cleaned up [ 91.062352][ T6438] tipc: Disabling bearer [ 91.088242][ T6451] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.203194][ T6471] loop3: detected capacity change from 0 to 2048 [ 91.203935][ T6475] loop5: detected capacity change from 0 to 1024 [ 91.293012][ T6475] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.520470][ T6502] tipc: Enabled bearer , priority 0 [ 91.766142][ T6501] tipc: Resetting bearer [ 91.784700][ T6510] loop1: detected capacity change from 0 to 512 [ 91.798757][ T6501] tipc: Disabling bearer [ 91.851335][ T6510] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.1044: invalid fast symlink length 0 [ 91.913679][ T6510] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1044: couldn't read orphan inode 17 (err -117) [ 92.107981][ T6516] loop3: detected capacity change from 0 to 512 [ 92.147447][ T6516] loop3: detected capacity change from 0 to 1024 [ 92.256668][ T6524] loop5: detected capacity change from 0 to 2048 [ 92.351024][ T6539] loop2: detected capacity change from 0 to 512 [ 92.360941][ T6526] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.373559][ T6539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.391733][ T6539] EXT4-fs (loop2): 1 truncate cleaned up [ 92.404794][ T6538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.431034][ T6534] FAULT_INJECTION: forcing a failure. [ 92.431034][ T6534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.444767][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.2.1053 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 92.444861][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.444891][ T6534] Call Trace: [ 92.444897][ T6534] [ 92.444904][ T6534] __dump_stack+0x1d/0x30 [ 92.444926][ T6534] dump_stack_lvl+0xe8/0x140 [ 92.444944][ T6534] dump_stack+0x15/0x1b [ 92.444969][ T6534] should_fail_ex+0x265/0x280 [ 92.444990][ T6534] should_fail+0xb/0x20 [ 92.445038][ T6534] should_fail_usercopy+0x1a/0x20 [ 92.445063][ T6534] _copy_to_user+0x20/0xa0 [ 92.445089][ T6534] simple_read_from_buffer+0xb5/0x130 [ 92.445119][ T6534] proc_fail_nth_read+0x10e/0x150 [ 92.445151][ T6534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.445178][ T6534] vfs_read+0x1a8/0x770 [ 92.445197][ T6534] ? __rcu_read_unlock+0x4f/0x70 [ 92.445304][ T6534] ? __fget_files+0x184/0x1c0 [ 92.445332][ T6534] ksys_read+0xda/0x1a0 [ 92.445358][ T6534] __x64_sys_read+0x40/0x50 [ 92.445383][ T6534] x64_sys_call+0x27bc/0x2ff0 [ 92.445402][ T6534] do_syscall_64+0xd2/0x200 [ 92.445482][ T6534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.445504][ T6534] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.445602][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.445662][ T6534] RIP: 0033:0x7f72e0bbd5fc [ 92.445681][ T6534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.445744][ T6534] RSP: 002b:00007f72df627030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.445829][ T6534] RAX: ffffffffffffffda RBX: 00007f72e0de5fa0 RCX: 00007f72e0bbd5fc [ 92.445842][ T6534] RDX: 000000000000000f RSI: 00007f72df6270a0 RDI: 000000000000000b [ 92.445854][ T6534] RBP: 00007f72df627090 R08: 0000000000000000 R09: 0000000000000000 [ 92.445869][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.445882][ T6534] R13: 00007f72e0de6038 R14: 00007f72e0de5fa0 R15: 00007ffc5cb4de48 [ 92.445904][ T6534] [ 92.828654][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 92.828676][ T29] audit: type=1400 audit(1755012656.792:3953): avc: denied { name_bind } for pid=6564 comm="syz.5.1065" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.871239][ T6569] tipc: Enabled bearer , priority 0 [ 92.891774][ T6555] tipc: Resetting bearer [ 92.910559][ T29] audit: type=1400 audit(1755012656.792:3954): avc: denied { node_bind } for pid=6564 comm="syz.5.1065" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.942703][ T6555] tipc: Disabling bearer [ 92.982718][ T6579] loop5: detected capacity change from 0 to 1024 [ 92.993514][ T29] audit: type=1400 audit(1755012656.953:3955): avc: denied { create } for pid=6578 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.014084][ T29] audit: type=1400 audit(1755012656.953:3956): avc: denied { getopt } for pid=6578 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.034172][ T29] audit: type=1400 audit(1755012656.953:3957): avc: denied { write } for pid=6578 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.055360][ T29] audit: type=1400 audit(1755012656.953:3958): avc: denied { nlmsg_write } for pid=6578 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.103476][ T6586] FAULT_INJECTION: forcing a failure. [ 93.103476][ T6586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.117017][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.1.1072 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 93.117107][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.117121][ T6586] Call Trace: [ 93.117129][ T6586] [ 93.117138][ T6586] __dump_stack+0x1d/0x30 [ 93.117183][ T6586] dump_stack_lvl+0xe8/0x140 [ 93.117255][ T6586] dump_stack+0x15/0x1b [ 93.117274][ T6586] should_fail_ex+0x265/0x280 [ 93.117310][ T6586] should_fail+0xb/0x20 [ 93.117478][ T6586] should_fail_usercopy+0x1a/0x20 [ 93.117504][ T6586] _copy_from_user+0x1c/0xb0 [ 93.117584][ T6586] ___sys_recvmsg+0xaa/0x370 [ 93.117606][ T6586] ? _parse_integer+0x27/0x40 [ 93.117633][ T6586] do_recvmmsg+0x1ef/0x540 [ 93.117739][ T6586] ? fput+0x8f/0xc0 [ 93.117774][ T6586] __x64_sys_recvmmsg+0xe5/0x170 [ 93.117802][ T6586] x64_sys_call+0x27a6/0x2ff0 [ 93.117840][ T6586] do_syscall_64+0xd2/0x200 [ 93.117896][ T6586] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.117923][ T6586] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.118013][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.118038][ T6586] RIP: 0033:0x7f898d25ebe9 [ 93.118056][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.118136][ T6586] RSP: 002b:00007f898bcc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.118156][ T6586] RAX: ffffffffffffffda RBX: 00007f898d485fa0 RCX: 00007f898d25ebe9 [ 93.118168][ T6586] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000003 [ 93.118182][ T6586] RBP: 00007f898bcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.118196][ T6586] R10: 00001000000001de R11: 0000000000000246 R12: 0000000000000001 [ 93.118210][ T6586] R13: 00007f898d486038 R14: 00007f898d485fa0 R15: 00007ffd7b7c04a8 [ 93.118231][ T6586] [ 93.394413][ T6597] loop5: detected capacity change from 0 to 2048 [ 93.426651][ T6605] loop1: detected capacity change from 0 to 512 [ 93.455048][ T6597] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.497534][ T29] audit: type=1326 audit(1755012657.478:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898d25ebe9 code=0x7ffc0000 [ 93.521600][ T29] audit: type=1326 audit(1755012657.489:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898d25ebe9 code=0x7ffc0000 [ 93.545621][ T29] audit: type=1326 audit(1755012657.489:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898d25ebe9 code=0x7ffc0000 [ 93.569947][ T29] audit: type=1326 audit(1755012657.489:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.1.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f898d25ebe9 code=0x7ffc0000 [ 93.602825][ T6597] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 93.615362][ T6597] EXT4-fs (loop5): This should not happen!! Data will be lost [ 93.615362][ T6597] [ 93.625470][ T6597] EXT4-fs (loop5): Total free blocks count 0 [ 93.631980][ T6597] EXT4-fs (loop5): Free/Dirty block details [ 93.638091][ T6597] EXT4-fs (loop5): free_blocks=2415919104 [ 93.644609][ T6597] EXT4-fs (loop5): dirty_blocks=32 [ 93.649872][ T6597] EXT4-fs (loop5): Block reservation details [ 93.656124][ T6597] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 93.763129][ T6628] loop5: detected capacity change from 0 to 128 [ 93.801892][ T6628] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 93.810018][ T6628] FAT-fs (loop5): Filesystem has been set read-only [ 93.824008][ T6628] syz.5.1091: attempt to access beyond end of device [ 93.824008][ T6628] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 93.855969][ T6647] FAULT_INJECTION: forcing a failure. [ 93.855969][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 93.856144][ T6628] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 93.869259][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.3.1096 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 93.869299][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.869314][ T6647] Call Trace: [ 93.869321][ T6647] [ 93.869330][ T6647] __dump_stack+0x1d/0x30 [ 93.869355][ T6647] dump_stack_lvl+0xe8/0x140 [ 93.869377][ T6647] dump_stack+0x15/0x1b [ 93.869404][ T6647] should_fail_ex+0x265/0x280 [ 93.869458][ T6647] should_failslab+0x8c/0xb0 [ 93.869486][ T6647] kmem_cache_alloc_noprof+0x50/0x310 [ 93.869516][ T6647] ? xfrm_state_alloc+0x2c/0x190 [ 93.869547][ T6647] xfrm_state_alloc+0x2c/0x190 [ 93.869579][ T6647] pfkey_add+0x3e5/0x12e0 [ 93.869609][ T6647] pfkey_sendmsg+0x718/0x900 [ 93.869640][ T6647] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 93.869663][ T6647] __sock_sendmsg+0x145/0x180 [ 93.869717][ T6647] ____sys_sendmsg+0x31e/0x4e0 [ 93.869741][ T6647] ___sys_sendmsg+0x17b/0x1d0 [ 93.869772][ T6647] __x64_sys_sendmsg+0xd4/0x160 [ 93.869875][ T6647] x64_sys_call+0x191e/0x2ff0 [ 93.869898][ T6647] do_syscall_64+0xd2/0x200 [ 93.869924][ T6647] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.869948][ T6647] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.870070][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.870158][ T6647] RIP: 0033:0x7f53e551ebe9 [ 93.870177][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.870195][ T6647] RSP: 002b:00007f53e3f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.870216][ T6647] RAX: ffffffffffffffda RBX: 00007f53e5745fa0 RCX: 00007f53e551ebe9 [ 93.870230][ T6647] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 93.870243][ T6647] RBP: 00007f53e3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 93.870272][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.870284][ T6647] R13: 00007f53e5746038 R14: 00007f53e5745fa0 R15: 00007ffdf4cde368 [ 93.870303][ T6647] [ 94.084671][ T6628] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 94.093026][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.093026][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.106801][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.106801][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.122084][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.122084][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.147781][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.147781][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.217425][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.217425][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.237817][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.237817][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.274200][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.274200][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.288280][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.288280][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.302203][ T6628] syz.5.1091: attempt to access beyond end of device [ 94.302203][ T6628] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.368626][ T6667] loop3: detected capacity change from 0 to 512 [ 94.375427][ T6667] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.382233][ T6667] EXT4-fs: Ignoring removed bh option [ 94.390103][ T6667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.568068][ T6672] loop0: detected capacity change from 0 to 2048 [ 95.155229][ T6692] FAULT_INJECTION: forcing a failure. [ 95.155229][ T6692] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.168770][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.5.1111 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 95.168844][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.168856][ T6692] Call Trace: [ 95.168865][ T6692] [ 95.168874][ T6692] __dump_stack+0x1d/0x30 [ 95.168941][ T6692] dump_stack_lvl+0xe8/0x140 [ 95.168964][ T6692] dump_stack+0x15/0x1b [ 95.168985][ T6692] should_fail_ex+0x265/0x280 [ 95.169024][ T6692] should_fail_alloc_page+0xf2/0x100 [ 95.169054][ T6692] __alloc_frozen_pages_noprof+0xff/0x360 [ 95.169089][ T6692] alloc_pages_mpol+0xb3/0x250 [ 95.169193][ T6692] vma_alloc_folio_noprof+0x1aa/0x300 [ 95.169230][ T6692] handle_mm_fault+0xec2/0x2c20 [ 95.169265][ T6692] do_user_addr_fault+0x636/0x1090 [ 95.169449][ T6692] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 95.169549][ T6692] exc_page_fault+0x62/0xa0 [ 95.169576][ T6692] asm_exc_page_fault+0x26/0x30 [ 95.169600][ T6692] RIP: 0033:0x7f7b542b0ba3 [ 95.169619][ T6692] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 95.169686][ T6692] RSP: 002b:00007f7b52e354a0 EFLAGS: 00010206 [ 95.169707][ T6692] RAX: 0000000000002000 RBX: 00007f7b52e35540 RCX: 00007f7b4aa16000 [ 95.169722][ T6692] RDX: 00007f7b52e356e0 RSI: 0000000000000007 RDI: 00007f7b52e355e0 [ 95.169736][ T6692] RBP: 0000000000000064 R08: 0000000000000009 R09: 00000000000001ae [ 95.169748][ T6692] R10: 00000000000001b6 R11: 00007f7b52e35540 R12: 0000000000000001 [ 95.169760][ T6692] R13: 00007f7b5448d980 R14: 00000000000000ed R15: 00007f7b52e355e0 [ 95.169777][ T6692] [ 95.169789][ T6692] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 95.354483][ T6687] loop1: detected capacity change from 0 to 2048 [ 95.605072][ T6667] EXT4-fs (loop3): 1 truncate cleaned up [ 95.611820][ T6667] EXT4-fs mount: 43 callbacks suppressed [ 95.611838][ T6667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.644192][ T6672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.863471][ T6697] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.871284][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.933311][ T6687] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.948885][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.989153][ T6687] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 96.002054][ T6687] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.002054][ T6687] [ 96.011993][ T6687] EXT4-fs (loop1): Total free blocks count 0 [ 96.018692][ T6687] EXT4-fs (loop1): Free/Dirty block details [ 96.024838][ T6687] EXT4-fs (loop1): free_blocks=2415919104 [ 96.030830][ T6687] EXT4-fs (loop1): dirty_blocks=32 [ 96.036416][ T6687] EXT4-fs (loop1): Block reservation details [ 96.043391][ T6687] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 96.076975][ T6704] loop2: detected capacity change from 0 to 512 [ 96.091806][ T6704] EXT4-fs: Ignoring removed orlov option [ 96.109970][ T6704] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 96.133972][ T6692] loop5: detected capacity change from 0 to 1024 [ 96.142014][ T6704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 96.161675][ T6704] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1114: corrupted in-inode xattr: e_value size too large [ 96.177130][ T6692] EXT4-fs: inline encryption not supported [ 96.183165][ T6692] EXT4-fs: Ignoring removed i_version option [ 96.240058][ T6704] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1114: couldn't read orphan inode 15 (err -117) [ 96.258335][ T6692] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.270735][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.281268][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.291360][ T6704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.366983][ T6692] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1111: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.416878][ T6692] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1111: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.462691][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.492164][ T6692] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1111: Failed to acquire dquot type 0 [ 96.534851][ T6724] syz.2.1120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.555991][ T6692] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 96.593170][ T6692] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1111: mark_inode_dirty error [ 96.613210][ T6716] syz!: rxe_newlink: already configured on team_slave_0 [ 96.619521][ T6692] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 96.629386][ T6729] loop3: detected capacity change from 0 to 2048 [ 96.631975][ T6692] EXT4-fs (loop5): 1 orphan inode deleted [ 96.645635][ T6692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.662531][ T122] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.689106][ T6731] tipc: Enabled bearer , priority 0 [ 96.697137][ T6730] tipc: Resetting bearer [ 96.709394][ T6733] FAULT_INJECTION: forcing a failure. [ 96.709394][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.722542][ T6730] tipc: Disabling bearer [ 96.723173][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.0.1125 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 96.723202][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.723216][ T6733] Call Trace: [ 96.723223][ T6733] [ 96.723230][ T6733] __dump_stack+0x1d/0x30 [ 96.723280][ T6733] dump_stack_lvl+0xe8/0x140 [ 96.723300][ T6733] dump_stack+0x15/0x1b [ 96.723316][ T6733] should_fail_ex+0x265/0x280 [ 96.723338][ T6733] should_fail+0xb/0x20 [ 96.723419][ T6733] should_fail_usercopy+0x1a/0x20 [ 96.723441][ T6733] _copy_from_user+0x1c/0xb0 [ 96.723469][ T6733] ___sys_sendmsg+0xc1/0x1d0 [ 96.723500][ T6733] __x64_sys_sendmsg+0xd4/0x160 [ 96.723594][ T6733] x64_sys_call+0x191e/0x2ff0 [ 96.723674][ T6733] do_syscall_64+0xd2/0x200 [ 96.723789][ T6733] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.723814][ T6733] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.723838][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.723860][ T6733] RIP: 0033:0x7f14a3dfebe9 [ 96.723877][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.723957][ T6733] RSP: 002b:00007f14a285f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.724045][ T6733] RAX: ffffffffffffffda RBX: 00007f14a4025fa0 RCX: 00007f14a3dfebe9 [ 96.724132][ T6733] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 96.724145][ T6733] RBP: 00007f14a285f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.724157][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.724255][ T6733] R13: 00007f14a4026038 R14: 00007f14a4025fa0 R15: 00007ffea5066018 [ 96.724273][ T6733] [ 96.724385][ T122] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 96.921915][ T6735] __nla_validate_parse: 16 callbacks suppressed [ 96.921940][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 96.938163][ T6737] loop0: detected capacity change from 0 to 2048 [ 96.945740][ T6692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.955596][ T6692] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.1111: Invalid inode table block 1 in block_group 0 [ 96.970118][ T6692] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 96.970874][ T6729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.003592][ T6737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.025061][ T6692] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.1111: mark_inode_dirty error [ 97.034165][ T6737] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.066915][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.098017][ T6737] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 97.098053][ T6737] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.098053][ T6737] [ 97.098084][ T6737] EXT4-fs (loop0): Total free blocks count 0 [ 97.098100][ T6737] EXT4-fs (loop0): Free/Dirty block details [ 97.098182][ T6737] EXT4-fs (loop0): free_blocks=2415919104 [ 97.098198][ T6737] EXT4-fs (loop0): dirty_blocks=32 [ 97.098225][ T6737] EXT4-fs (loop0): Block reservation details [ 97.098236][ T6737] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 97.127142][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.287378][ T6768] FAULT_INJECTION: forcing a failure. [ 97.287378][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.301050][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.3.1138 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 97.301083][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.301096][ T6768] Call Trace: [ 97.301106][ T6768] [ 97.301200][ T6768] __dump_stack+0x1d/0x30 [ 97.301224][ T6768] dump_stack_lvl+0xe8/0x140 [ 97.301245][ T6768] dump_stack+0x15/0x1b [ 97.301331][ T6768] should_fail_ex+0x265/0x280 [ 97.301380][ T6768] should_fail+0xb/0x20 [ 97.301411][ T6768] should_fail_usercopy+0x1a/0x20 [ 97.301437][ T6768] _copy_to_user+0x20/0xa0 [ 97.301517][ T6768] simple_read_from_buffer+0xb5/0x130 [ 97.301543][ T6768] proc_fail_nth_read+0x10e/0x150 [ 97.301570][ T6768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.301631][ T6768] vfs_read+0x1a8/0x770 [ 97.301668][ T6768] ? __pfx_pollwake+0x10/0x10 [ 97.301691][ T6768] ? __pfx_pollwake+0x10/0x10 [ 97.301713][ T6768] ksys_read+0xda/0x1a0 [ 97.301733][ T6768] __x64_sys_read+0x40/0x50 [ 97.301776][ T6768] x64_sys_call+0x27bc/0x2ff0 [ 97.301800][ T6768] do_syscall_64+0xd2/0x200 [ 97.301881][ T6768] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.301924][ T6768] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.301951][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.301975][ T6768] RIP: 0033:0x7f53e551d5fc [ 97.301993][ T6768] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.302012][ T6768] RSP: 002b:00007f53e3f87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.302121][ T6768] RAX: ffffffffffffffda RBX: 00007f53e5745fa0 RCX: 00007f53e551d5fc [ 97.302222][ T6768] RDX: 000000000000000f RSI: 00007f53e3f870a0 RDI: 0000000000000004 [ 97.302235][ T6768] RBP: 00007f53e3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 97.302324][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.302335][ T6768] R13: 00007f53e5746038 R14: 00007f53e5745fa0 R15: 00007ffdf4cde368 [ 97.302353][ T6768] [ 97.324780][ T6758] lo speed is unknown, defaulting to 1000 [ 97.376566][ T6771] tipc: Enabled bearer , priority 0 [ 97.544962][ T6777] loop3: detected capacity change from 0 to 512 [ 97.565782][ T6775] loop5: detected capacity change from 0 to 2048 [ 97.574988][ T6770] tipc: Resetting bearer [ 97.587478][ T6775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.603153][ T6777] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.610700][ T6770] tipc: Disabling bearer [ 97.617080][ T6777] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1142: bg 0: block 248: padding at end of block bitmap is not set [ 97.645936][ T6779] loop0: detected capacity change from 0 to 1024 [ 97.654082][ T6777] __quota_error: 53 callbacks suppressed [ 97.654100][ T6777] Quota error (device loop3): write_blk: dquota write failed [ 97.668154][ T6777] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 97.678394][ T6777] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1142: Failed to acquire dquot type 1 [ 97.690981][ T5770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.700089][ T29] audit: type=1400 audit(1755012661.995:4013): avc: denied { write } for pid=6774 comm="syz.0.1141" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.724362][ T29] audit: type=1400 audit(1755012661.995:4014): avc: denied { bind } for pid=6774 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.744035][ T29] audit: type=1400 audit(1755012661.995:4015): avc: denied { listen } for pid=6774 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.744668][ T6777] EXT4-fs (loop3): 1 truncate cleaned up [ 97.771040][ T6777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.793704][ T6777] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1142: iget: bad i_size value: 360287970189639690 [ 97.814147][ T6787] loop2: detected capacity change from 0 to 2048 [ 97.844630][ T6777] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1142: iget: bad i_size value: 360287970189639690 [ 97.859314][ T6787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.931857][ T6787] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.947688][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.972400][ T6787] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 97.985027][ T6787] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.985027][ T6787] [ 97.995223][ T6787] EXT4-fs (loop2): Total free blocks count 0 [ 98.001505][ T6787] EXT4-fs (loop2): Free/Dirty block details [ 98.007475][ T6787] EXT4-fs (loop2): free_blocks=2415919104 [ 98.013257][ T6787] EXT4-fs (loop2): dirty_blocks=32 [ 98.018656][ T6787] EXT4-fs (loop2): Block reservation details [ 98.025044][ T6787] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 98.076200][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.294457][ T29] audit: type=1326 audit(1755012662.650:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e551ebe9 code=0x7ffc0000 [ 98.318994][ T29] audit: type=1326 audit(1755012662.650:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53e551ebe9 code=0x7ffc0000 [ 98.343259][ T29] audit: type=1326 audit(1755012662.650:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e551ebe9 code=0x7ffc0000 [ 98.369902][ T29] audit: type=1326 audit(1755012662.650:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53e551ebe9 code=0x7ffc0000 [ 98.394390][ T29] audit: type=1326 audit(1755012662.650:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e551ebe9 code=0x7ffc0000 [ 98.419610][ T6811] tipc: Enabled bearer , priority 0 [ 98.449423][ T6810] tipc: Resetting bearer [ 98.490977][ T6810] tipc: Disabling bearer [ 98.562806][ T6826] loop3: detected capacity change from 0 to 2048 [ 98.637418][ T6798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1145'. [ 98.672424][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.792491][ T6826] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.831611][ T6826] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 98.844320][ T6826] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.844320][ T6826] [ 98.854499][ T6826] EXT4-fs (loop3): Total free blocks count 0 [ 98.860688][ T6826] EXT4-fs (loop3): Free/Dirty block details [ 98.866847][ T6826] EXT4-fs (loop3): free_blocks=2415919104 [ 98.873221][ T6826] EXT4-fs (loop3): dirty_blocks=32 [ 98.878402][ T6826] EXT4-fs (loop3): Block reservation details [ 98.884441][ T6826] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 98.906447][ T6846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'. [ 98.915606][ T6846] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1167'. [ 98.992761][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.005148][ T6846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'. [ 99.046005][ T6846] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1167'. [ 99.055304][ T6846] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1167'. [ 99.137594][ T6855] tipc: Enabled bearer , priority 0 [ 99.155968][ T6854] tipc: Resetting bearer [ 99.171645][ T6854] tipc: Disabling bearer [ 99.377893][ T6881] loop2: detected capacity change from 0 to 2048 [ 99.412046][ T6887] loop5: detected capacity change from 0 to 2048 [ 99.439639][ T6889] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.446990][ T6875] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.448122][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.471033][ T6887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.531193][ T6881] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.547206][ T5770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.608921][ T6881] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 99.621965][ T6881] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.621965][ T6881] [ 99.632072][ T6881] EXT4-fs (loop2): Total free blocks count 0 [ 99.638523][ T6881] EXT4-fs (loop2): Free/Dirty block details [ 99.644680][ T6881] EXT4-fs (loop2): free_blocks=2415919104 [ 99.650537][ T6881] EXT4-fs (loop2): dirty_blocks=32 [ 99.655778][ T6881] EXT4-fs (loop2): Block reservation details [ 99.662002][ T6881] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 99.699262][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.750226][ T6901] tipc: Enabled bearer , priority 0 [ 99.779608][ T6899] tipc: Resetting bearer [ 99.824109][ T6899] tipc: Disabling bearer [ 99.917711][ T6916] loop1: detected capacity change from 0 to 2048 [ 100.037916][ T6917] loop0: detected capacity change from 0 to 128 [ 100.076928][ T6916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.178586][ T6924] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 100.186516][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.197740][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 100.287277][ T6936] loop1: detected capacity change from 0 to 2048 [ 100.323599][ T6936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.356300][ T6936] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.411816][ T6936] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 100.424642][ T6936] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.424642][ T6936] [ 100.434555][ T6936] EXT4-fs (loop1): Total free blocks count 0 [ 100.441264][ T6936] EXT4-fs (loop1): Free/Dirty block details [ 100.447477][ T6936] EXT4-fs (loop1): free_blocks=2415919104 [ 100.453685][ T6936] EXT4-fs (loop1): dirty_blocks=32 [ 100.459090][ T6936] EXT4-fs (loop1): Block reservation details [ 100.465158][ T6936] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 100.482111][ T6958] tipc: Enabled bearer , priority 0 [ 100.510086][ T12] tipc: Resetting bearer [ 100.519308][ T6953] tipc: Resetting bearer [ 100.531931][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.555200][ T6953] tipc: Disabling bearer [ 100.703513][ T6980] loop2: detected capacity change from 0 to 1024 [ 100.714862][ T6980] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.767365][ T6980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1218: bg 0: block 10: padding at end of block bitmap is not set [ 100.795744][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 100.816066][ T6980] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1218: Failed to acquire dquot type 0 [ 100.826559][ T6972] syz!: rxe_newlink: already configured on team_slave_0 [ 100.872303][ T6980] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1218: Failed to acquire dquot type 0 [ 100.896028][ T6980] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1218: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.938454][ T6980] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1218: Failed to acquire dquot type 0 [ 100.963098][ T6980] EXT4-fs (loop2): 1 orphan inode deleted [ 100.964645][ T7000] loop0: detected capacity change from 0 to 2048 [ 100.976300][ T6980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.042793][ T7000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.057679][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.100508][ T7000] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.116834][ T7000] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 101.129709][ T7000] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.129709][ T7000] [ 101.139739][ T7000] EXT4-fs (loop0): Total free blocks count 0 [ 101.145814][ T7000] EXT4-fs (loop0): Free/Dirty block details [ 101.152103][ T7000] EXT4-fs (loop0): free_blocks=2415919104 [ 101.157976][ T7000] EXT4-fs (loop0): dirty_blocks=32 [ 101.163162][ T7000] EXT4-fs (loop0): Block reservation details [ 101.169212][ T7000] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 101.249112][ T7014] lo speed is unknown, defaulting to 1000 [ 101.463970][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.535693][ T7019] tipc: Enabled bearer , priority 0 [ 101.660075][ T7022] FAULT_INJECTION: forcing a failure. [ 101.660075][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.673228][ T7022] CPU: 1 UID: 0 PID: 7022 Comm: syz.3.1232 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 101.673260][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.673272][ T7022] Call Trace: [ 101.673280][ T7022] [ 101.673288][ T7022] __dump_stack+0x1d/0x30 [ 101.673372][ T7022] dump_stack_lvl+0xe8/0x140 [ 101.673395][ T7022] dump_stack+0x15/0x1b [ 101.673414][ T7022] should_fail_ex+0x265/0x280 [ 101.673437][ T7022] should_fail+0xb/0x20 [ 101.673453][ T7022] should_fail_usercopy+0x1a/0x20 [ 101.673505][ T7022] _copy_to_user+0x20/0xa0 [ 101.673531][ T7022] rng_dev_read+0x3ef/0x740 [ 101.673551][ T7022] ? __pfx_rng_dev_read+0x10/0x10 [ 101.673578][ T7022] vfs_readv+0x3fb/0x690 [ 101.673616][ T7022] __x64_sys_preadv+0xfd/0x1c0 [ 101.673646][ T7022] x64_sys_call+0x282a/0x2ff0 [ 101.673668][ T7022] do_syscall_64+0xd2/0x200 [ 101.673753][ T7022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.673779][ T7022] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.673802][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.673826][ T7022] RIP: 0033:0x7f53e551ebe9 [ 101.673866][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.673883][ T7022] RSP: 002b:00007f53e3f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.673981][ T7022] RAX: ffffffffffffffda RBX: 00007f53e5745fa0 RCX: 00007f53e551ebe9 [ 101.673993][ T7022] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 101.674005][ T7022] RBP: 00007f53e3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 101.674020][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.674032][ T7022] R13: 00007f53e5746038 R14: 00007f53e5745fa0 R15: 00007ffdf4cde368 [ 101.674125][ T7022] [ 101.859769][ T7016] tipc: Resetting bearer [ 101.963492][ T7016] tipc: Disabling bearer [ 101.982479][ T7024] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.044793][ T7039] FAULT_INJECTION: forcing a failure. [ 102.044793][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 102.057949][ T7039] CPU: 1 UID: 0 PID: 7039 Comm: syz.1.1238 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 102.057981][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.057994][ T7039] Call Trace: [ 102.058001][ T7039] [ 102.058008][ T7039] __dump_stack+0x1d/0x30 [ 102.058034][ T7039] dump_stack_lvl+0xe8/0x140 [ 102.058063][ T7039] dump_stack+0x15/0x1b [ 102.058080][ T7039] should_fail_ex+0x265/0x280 [ 102.058117][ T7039] should_failslab+0x8c/0xb0 [ 102.058146][ T7039] kmem_cache_alloc_node_noprof+0x57/0x320 [ 102.058185][ T7039] ? __alloc_skb+0x101/0x320 [ 102.058234][ T7039] __alloc_skb+0x101/0x320 [ 102.058267][ T7039] nexthop_notify+0x1b7/0x2d0 [ 102.058295][ T7039] rtm_new_nexthop+0x34bf/0x4530 [ 102.058347][ T7039] ? bpf_trace_run3+0x12c/0x1d0 [ 102.058386][ T7039] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 102.058414][ T7039] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 102.058506][ T7039] netlink_rcv_skb+0x120/0x220 [ 102.058576][ T7039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.058680][ T7039] rtnetlink_rcv+0x1c/0x30 [ 102.058706][ T7039] netlink_unicast+0x5c0/0x690 [ 102.058752][ T7039] netlink_sendmsg+0x58b/0x6b0 [ 102.058778][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.058800][ T7039] __sock_sendmsg+0x145/0x180 [ 102.058827][ T7039] ____sys_sendmsg+0x345/0x4e0 [ 102.058853][ T7039] ___sys_sendmsg+0x17b/0x1d0 [ 102.058887][ T7039] __sys_sendmmsg+0x178/0x300 [ 102.058975][ T7039] __x64_sys_sendmmsg+0x57/0x70 [ 102.058998][ T7039] x64_sys_call+0x1c4a/0x2ff0 [ 102.059021][ T7039] do_syscall_64+0xd2/0x200 [ 102.059079][ T7039] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.059105][ T7039] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.059132][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.059155][ T7039] RIP: 0033:0x7f898d25ebe9 [ 102.059174][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.059262][ T7039] RSP: 002b:00007f898bcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.059296][ T7039] RAX: ffffffffffffffda RBX: 00007f898d485fa0 RCX: 00007f898d25ebe9 [ 102.059309][ T7039] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 102.059323][ T7039] RBP: 00007f898bcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.059337][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.059350][ T7039] R13: 00007f898d486038 R14: 00007f898d485fa0 R15: 00007ffd7b7c04a8 [ 102.059369][ T7039] [ 102.333300][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.342522][ T7045] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.375303][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.384960][ T7045] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.385585][ T7047] loop5: detected capacity change from 0 to 2048 [ 102.394474][ T7045] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.483372][ T7047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.516008][ T7065] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1248'. [ 102.525256][ T7065] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1248'. [ 102.555199][ T7047] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.578263][ T7047] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 102.591650][ T7047] EXT4-fs (loop5): This should not happen!! Data will be lost [ 102.591650][ T7047] [ 102.601601][ T7047] EXT4-fs (loop5): Total free blocks count 0 [ 102.607743][ T7047] EXT4-fs (loop5): Free/Dirty block details [ 102.613746][ T7047] EXT4-fs (loop5): free_blocks=2415919104 [ 102.619674][ T7047] EXT4-fs (loop5): dirty_blocks=32 [ 102.624865][ T7047] EXT4-fs (loop5): Block reservation details [ 102.630882][ T7047] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 102.645007][ T7068] loop2: detected capacity change from 0 to 2048 [ 102.673237][ T7068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.693860][ T5770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.720629][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.736825][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 102.736845][ T29] audit: type=1326 audit(1755012667.413:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.1.1250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f898d25ebe9 code=0x0 [ 102.844232][ T29] audit: type=1400 audit(1755012667.467:4059): avc: denied { ioctl } for pid=7088 comm="syz.3.1258" path="socket:[16615]" dev="sockfs" ino=16615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.874687][ T7087] tipc: Started in network mode [ 102.879786][ T7087] tipc: Node identity ba4779ee15af, cluster identity 4711 [ 102.887188][ T7087] tipc: Enabled bearer , priority 0 [ 102.895784][ T7086] tipc: Resetting bearer [ 102.917710][ T7086] tipc: Disabling bearer [ 102.962854][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1261'. [ 102.972220][ T7103] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1261'. [ 102.996866][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1261'. [ 103.083618][ T7112] loop3: detected capacity change from 0 to 2048 [ 103.170289][ T7112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.199131][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.264916][ T7121] FAULT_INJECTION: forcing a failure. [ 103.264916][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 103.278112][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.5.1267 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 103.278213][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.278225][ T7121] Call Trace: [ 103.278234][ T7121] [ 103.278242][ T7121] __dump_stack+0x1d/0x30 [ 103.278269][ T7121] dump_stack_lvl+0xe8/0x140 [ 103.278316][ T7121] dump_stack+0x15/0x1b [ 103.278331][ T7121] should_fail_ex+0x265/0x280 [ 103.278356][ T7121] should_failslab+0x8c/0xb0 [ 103.278385][ T7121] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 103.278445][ T7121] ? sidtab_sid2str_get+0xa0/0x130 [ 103.278467][ T7121] ? skb_put+0xa9/0xf0 [ 103.278504][ T7121] kmemdup_noprof+0x2b/0x70 [ 103.278534][ T7121] sidtab_sid2str_get+0xa0/0x130 [ 103.278556][ T7121] security_sid_to_context_core+0x1eb/0x2e0 [ 103.278583][ T7121] security_sid_to_context+0x27/0x40 [ 103.278644][ T7121] avc_audit_post_callback+0x9d/0x520 [ 103.278668][ T7121] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 103.278692][ T7121] common_lsm_audit+0x1b8/0x230 [ 103.278757][ T7121] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 103.278785][ T7121] ? avc_denied+0xe4/0x100 [ 103.278812][ T7121] slow_avc_audit+0x104/0x140 [ 103.278838][ T7121] avc_has_perm+0x13a/0x180 [ 103.278868][ T7121] selinux_socket_sendmsg+0x175/0x1b0 [ 103.279002][ T7121] security_socket_sendmsg+0x48/0x80 [ 103.279102][ T7121] __sock_sendmsg+0x30/0x180 [ 103.279133][ T7121] __sys_sendto+0x268/0x330 [ 103.279248][ T7121] __x64_sys_sendto+0x76/0x90 [ 103.279374][ T7121] x64_sys_call+0x2d05/0x2ff0 [ 103.279398][ T7121] do_syscall_64+0xd2/0x200 [ 103.279424][ T7121] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.279456][ T7121] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.279484][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.279510][ T7121] RIP: 0033:0x7f7b543eebe9 [ 103.279529][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.279550][ T7121] RSP: 002b:00007f7b52e15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 103.279587][ T7121] RAX: ffffffffffffffda RBX: 00007f7b54616180 RCX: 00007f7b543eebe9 [ 103.279599][ T7121] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000008 [ 103.279611][ T7121] RBP: 00007f7b52e15090 R08: 0000200000000440 R09: 000000000000001c [ 103.279623][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.279635][ T7121] R13: 00007f7b54616218 R14: 00007f7b54616180 R15: 00007fffd1780d98 [ 103.279652][ T7121] [ 103.579562][ T29] audit: type=1400 audit(1755012667.982:4060): avc: denied { write } for pid=7113 comm="syz.5.1267" ssid=137 tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.592293][ T7125] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 103.597108][ T29] audit: type=1400 audit(1755012668.004:4061): avc: denied { connect } for pid=7113 comm="syz.5.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.624937][ T29] audit: type=1400 audit(1755012668.004:4062): avc: denied { name_connect } for pid=7113 comm="syz.5.1267" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 103.647695][ T29] audit: type=1400 audit(1755012668.004:4063): avc: denied { setopt } for pid=7113 comm="syz.5.1267" lport=41041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.670598][ T7125] FAULT_INJECTION: forcing a failure. [ 103.670598][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 103.683771][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.3.1269 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 103.683841][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.683855][ T7125] Call Trace: [ 103.683863][ T7125] [ 103.683872][ T7125] __dump_stack+0x1d/0x30 [ 103.683936][ T7125] dump_stack_lvl+0xe8/0x140 [ 103.683957][ T7125] dump_stack+0x15/0x1b [ 103.683974][ T7125] should_fail_ex+0x265/0x280 [ 103.683994][ T7125] should_failslab+0x8c/0xb0 [ 103.684017][ T7125] kmem_cache_alloc_node_noprof+0x57/0x320 [ 103.684095][ T7125] ? __alloc_skb+0x101/0x320 [ 103.684181][ T7125] __alloc_skb+0x101/0x320 [ 103.684207][ T7125] ? radix_tree_lookup+0xfa/0x140 [ 103.684228][ T7125] tca_action_gd+0x77d/0x1290 [ 103.684273][ T7125] ? __nla_validate_parse+0x1652/0x1d00 [ 103.684392][ T7125] ? __nla_parse+0x40/0x60 [ 103.684419][ T7125] tc_ctl_action+0x208/0x830 [ 103.684473][ T7125] ? xa_load+0xb1/0xe0 [ 103.684499][ T7125] ? __kfree_skb+0x109/0x150 [ 103.684518][ T7125] ? kmem_cache_free+0xdf/0x300 [ 103.684549][ T7125] ? __kfree_skb+0x109/0x150 [ 103.684644][ T7125] ? nlmon_xmit+0x4f/0x60 [ 103.684673][ T7125] ? consume_skb+0x49/0x150 [ 103.684715][ T7125] ? nlmon_xmit+0x4f/0x60 [ 103.684743][ T7125] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 103.684769][ T7125] ? __dev_queue_xmit+0x1200/0x2000 [ 103.684791][ T7125] ? __dev_queue_xmit+0x182/0x2000 [ 103.684876][ T7125] ? __pfx_tc_ctl_action+0x10/0x10 [ 103.684978][ T7125] rtnetlink_rcv_msg+0x65a/0x6d0 [ 103.685080][ T7125] netlink_rcv_skb+0x120/0x220 [ 103.685103][ T7125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.685168][ T7125] rtnetlink_rcv+0x1c/0x30 [ 103.685262][ T7125] netlink_unicast+0x5c0/0x690 [ 103.685302][ T7125] netlink_sendmsg+0x58b/0x6b0 [ 103.685328][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.685351][ T7125] __sock_sendmsg+0x145/0x180 [ 103.685456][ T7125] ____sys_sendmsg+0x31e/0x4e0 [ 103.685481][ T7125] ___sys_sendmsg+0x17b/0x1d0 [ 103.685536][ T7125] __x64_sys_sendmsg+0xd4/0x160 [ 103.685562][ T7125] x64_sys_call+0x191e/0x2ff0 [ 103.685582][ T7125] do_syscall_64+0xd2/0x200 [ 103.685629][ T7125] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.685658][ T7125] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.685687][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.685713][ T7125] RIP: 0033:0x7f53e551ebe9 [ 103.685730][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.685798][ T7125] RSP: 002b:00007f53e3f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.685888][ T7125] RAX: ffffffffffffffda RBX: 00007f53e5745fa0 RCX: 00007f53e551ebe9 [ 103.685944][ T7125] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 103.685956][ T7125] RBP: 00007f53e3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 103.685968][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.685980][ T7125] R13: 00007f53e5746038 R14: 00007f53e5745fa0 R15: 00007ffdf4cde368 [ 103.686049][ T7125] [ 104.054535][ T29] audit: type=1400 audit(1755012668.830:4064): avc: denied { create } for pid=7130 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.134983][ T29] audit: type=1400 audit(1755012668.905:4065): avc: denied { ioctl } for pid=7130 comm="syz.0.1273" path="socket:[16700]" dev="sockfs" ino=16700 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.160490][ T29] audit: type=1400 audit(1755012668.905:4066): avc: denied { write } for pid=7130 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.193772][ T7137] tipc: Enabled bearer , priority 0 [ 104.224250][ T7136] tipc: Resetting bearer [ 104.243333][ T7136] tipc: Disabling bearer [ 104.292772][ T29] audit: type=1326 audit(1755012668.980:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 104.337340][ T7156] loop3: detected capacity change from 0 to 512 [ 104.371546][ T7155] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.457814][ T7160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7160 comm=syz.1.1281 [ 104.924888][ T7186] tipc: Enabled bearer , priority 0 [ 104.953126][ T7185] tipc: Resetting bearer [ 104.993397][ T7185] tipc: Disabling bearer [ 105.015372][ T7192] loop2: detected capacity change from 0 to 512 [ 105.069485][ T7192] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.183463][ T7208] FAULT_INJECTION: forcing a failure. [ 105.183463][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 105.196579][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.3.1301 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 105.196710][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.196730][ T7208] Call Trace: [ 105.196737][ T7208] [ 105.196745][ T7208] __dump_stack+0x1d/0x30 [ 105.196772][ T7208] dump_stack_lvl+0xe8/0x140 [ 105.196796][ T7208] dump_stack+0x15/0x1b [ 105.196814][ T7208] should_fail_ex+0x265/0x280 [ 105.196893][ T7208] should_failslab+0x8c/0xb0 [ 105.196916][ T7208] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 105.196947][ T7208] ? sidtab_sid2str_get+0xa0/0x130 [ 105.196974][ T7208] kmemdup_noprof+0x2b/0x70 [ 105.197052][ T7208] sidtab_sid2str_get+0xa0/0x130 [ 105.197105][ T7208] security_sid_to_context_core+0x1eb/0x2e0 [ 105.197127][ T7208] security_sid_to_context+0x27/0x40 [ 105.197145][ T7208] selinux_lsmprop_to_secctx+0x67/0xf0 [ 105.197170][ T7208] security_lsmprop_to_secctx+0x43/0x80 [ 105.197196][ T7208] audit_log_task_context+0x77/0x190 [ 105.197232][ T7208] audit_log_task+0xf4/0x250 [ 105.197271][ T7208] audit_seccomp+0x61/0x100 [ 105.197312][ T7208] ? __seccomp_filter+0x68c/0x10d0 [ 105.197317][ T7192] EXT4-fs (loop2): mount failed [ 105.197336][ T7208] __seccomp_filter+0x69d/0x10d0 [ 105.197381][ T7208] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 105.197472][ T7208] ? vfs_write+0x7e8/0x960 [ 105.197494][ T7208] ? __rcu_read_unlock+0x4f/0x70 [ 105.197516][ T7208] ? __fget_files+0x184/0x1c0 [ 105.197542][ T7208] __secure_computing+0x82/0x150 [ 105.197615][ T7208] syscall_trace_enter+0xcf/0x1e0 [ 105.197760][ T7208] do_syscall_64+0xac/0x200 [ 105.197808][ T7208] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.197832][ T7208] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.197856][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.197878][ T7208] RIP: 0033:0x7f53e551ebe9 [ 105.197895][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.197957][ T7208] RSP: 002b:00007f53e3f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.197977][ T7208] RAX: ffffffffffffffda RBX: 00007f53e5745fa0 RCX: 00007f53e551ebe9 [ 105.197991][ T7208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048000000 [ 105.198003][ T7208] RBP: 00007f53e3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 105.198016][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.198028][ T7208] R13: 00007f53e5746038 R14: 00007f53e5745fa0 R15: 00007ffdf4cde368 [ 105.198095][ T7208] [ 105.239517][ T7208] lo speed is unknown, defaulting to 1000 [ 105.427040][ T7210] loop3: detected capacity change from 0 to 128 [ 105.460025][ T7192] FAULT_INJECTION: forcing a failure. [ 105.460025][ T7192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.479447][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.2.1296 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 105.479540][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.479621][ T7192] Call Trace: [ 105.479627][ T7192] [ 105.479634][ T7192] __dump_stack+0x1d/0x30 [ 105.479658][ T7192] dump_stack_lvl+0xe8/0x140 [ 105.479700][ T7192] dump_stack+0x15/0x1b [ 105.479716][ T7192] should_fail_ex+0x265/0x280 [ 105.479736][ T7192] should_fail+0xb/0x20 [ 105.479801][ T7192] should_fail_usercopy+0x1a/0x20 [ 105.479854][ T7192] _copy_from_user+0x1c/0xb0 [ 105.479900][ T7192] ___sys_sendmsg+0xc1/0x1d0 [ 105.479936][ T7192] __x64_sys_sendmsg+0xd4/0x160 [ 105.479958][ T7192] x64_sys_call+0x191e/0x2ff0 [ 105.479977][ T7192] do_syscall_64+0xd2/0x200 [ 105.480004][ T7192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.480083][ T7192] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.480134][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.480263][ T7192] RIP: 0033:0x7f72e0bbebe9 [ 105.480280][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.480340][ T7192] RSP: 002b:00007f72df627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.480362][ T7192] RAX: ffffffffffffffda RBX: 00007f72e0de5fa0 RCX: 00007f72e0bbebe9 [ 105.480375][ T7192] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 105.480388][ T7192] RBP: 00007f72df627090 R08: 0000000000000000 R09: 0000000000000000 [ 105.480401][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.480414][ T7192] R13: 00007f72e0de6038 R14: 00007f72e0de5fa0 R15: 00007ffc5cb4de48 [ 105.480430][ T7192] [ 105.480843][ T7194] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.538303][ T7210] netlink: 'syz.3.1301': attribute type 11 has an invalid length. [ 105.677054][ T7224] syz.3.1301 (7224): attempted to duplicate a private mapping with mremap. This is not supported. [ 105.810693][ T7237] loop0: detected capacity change from 0 to 2048 [ 105.844282][ T7229] tipc: Enabled bearer , priority 0 [ 105.873055][ T7228] tipc: Resetting bearer [ 105.905999][ T7237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.934656][ T7228] tipc: Disabling bearer [ 106.009941][ T7237] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.047395][ T7237] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 106.060244][ T7237] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.060244][ T7237] [ 106.070371][ T7237] EXT4-fs (loop0): Total free blocks count 0 [ 106.076612][ T7237] EXT4-fs (loop0): Free/Dirty block details [ 106.082839][ T7237] EXT4-fs (loop0): free_blocks=2415919104 [ 106.088754][ T7237] EXT4-fs (loop0): dirty_blocks=32 [ 106.094190][ T7237] EXT4-fs (loop0): Block reservation details [ 106.100378][ T7237] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 106.152733][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.233588][ T7269] loop2: detected capacity change from 0 to 128 [ 106.326933][ T7273] loop5: detected capacity change from 0 to 1024 [ 106.345358][ T7273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.567771][ T7288] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 106.746628][ T7299] loop3: detected capacity change from 0 to 2048 [ 106.941137][ T7299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.042920][ T7299] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.168524][ T7299] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 107.181195][ T7299] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.181195][ T7299] [ 107.190888][ T7299] EXT4-fs (loop3): Total free blocks count 0 [ 107.196908][ T7299] EXT4-fs (loop3): Free/Dirty block details [ 107.203051][ T7299] EXT4-fs (loop3): free_blocks=2415919104 [ 107.209054][ T7299] EXT4-fs (loop3): dirty_blocks=32 [ 107.214278][ T7299] EXT4-fs (loop3): Block reservation details [ 107.220612][ T7299] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 107.231467][ T5770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.292474][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.304984][ T7325] __nla_validate_parse: 26 callbacks suppressed [ 107.305009][ T7325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1340'. [ 107.342364][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 107.360601][ T7321] tipc: Enabled bearer , priority 0 [ 107.370027][ T7330] FAULT_INJECTION: forcing a failure. [ 107.370027][ T7330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.383430][ T7330] CPU: 1 UID: 0 PID: 7330 Comm: syz.3.1344 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 107.383460][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.383472][ T7330] Call Trace: [ 107.383480][ T7330] [ 107.383487][ T7330] __dump_stack+0x1d/0x30 [ 107.383510][ T7330] dump_stack_lvl+0xe8/0x140 [ 107.383527][ T7330] dump_stack+0x15/0x1b [ 107.383580][ T7330] should_fail_ex+0x265/0x280 [ 107.383600][ T7330] should_fail+0xb/0x20 [ 107.383616][ T7330] should_fail_usercopy+0x1a/0x20 [ 107.383636][ T7330] _copy_to_user+0x20/0xa0 [ 107.383666][ T7330] simple_read_from_buffer+0xb5/0x130 [ 107.383687][ T7330] proc_fail_nth_read+0x10e/0x150 [ 107.383711][ T7330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.383784][ T7330] vfs_read+0x1a8/0x770 [ 107.383803][ T7330] ? __fput+0x555/0x650 [ 107.383828][ T7330] ? kmem_cache_free+0x202/0x300 [ 107.383885][ T7330] ? percpu_counter_add_batch+0xb6/0x130 [ 107.383903][ T7330] ? __fput+0x555/0x650 [ 107.383991][ T7330] ksys_read+0xda/0x1a0 [ 107.384011][ T7330] __x64_sys_read+0x40/0x50 [ 107.384031][ T7330] x64_sys_call+0x27bc/0x2ff0 [ 107.384051][ T7330] do_syscall_64+0xd2/0x200 [ 107.384074][ T7330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.384223][ T7330] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.384298][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.384319][ T7330] RIP: 0033:0x7f53e551d5fc [ 107.384335][ T7330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.384374][ T7330] RSP: 002b:00007f53e3f87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.384394][ T7330] RAX: ffffffffffffffda RBX: 00007f53e5745fa0 RCX: 00007f53e551d5fc [ 107.384405][ T7330] RDX: 000000000000000f RSI: 00007f53e3f870a0 RDI: 0000000000000008 [ 107.384485][ T7330] RBP: 00007f53e3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 107.384496][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.384507][ T7330] R13: 00007f53e5746038 R14: 00007f53e5745fa0 R15: 00007ffdf4cde368 [ 107.384524][ T7330] [ 107.385686][ T7320] tipc: Resetting bearer [ 107.677230][ T7320] tipc: Disabling bearer [ 107.734731][ T7338] syz!: rxe_newlink: already configured on team_slave_0 [ 107.816963][ T7340] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.836076][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 107.836099][ T29] audit: type=1400 audit(1755012672.885:4097): avc: denied { nlmsg_read } for pid=7353 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.873898][ T7354] netlink: 'syz.1.1354': attribute type 25 has an invalid length. [ 107.923625][ T29] audit: type=1400 audit(1755012672.982:4098): avc: denied { listen } for pid=7353 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.943338][ T29] audit: type=1400 audit(1755012672.982:4099): avc: denied { accept } for pid=7353 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.003993][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1357'. [ 108.043981][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 108.109539][ T7367] bridge0: port 3(vlan2) entered blocking state [ 108.116138][ T7367] bridge0: port 3(vlan2) entered disabled state [ 108.128712][ T7367] vlan2: entered allmulticast mode [ 108.133978][ T7367] bridge0: entered allmulticast mode [ 108.141040][ T7367] vlan2: left allmulticast mode [ 108.145991][ T7367] bridge0: left allmulticast mode [ 108.207228][ T29] audit: type=1400 audit(1755012673.282:4100): avc: denied { append } for pid=7375 comm="syz.3.1363" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.240579][ T7376] loop3: detected capacity change from 0 to 512 [ 108.248745][ T7374] tipc: Enabled bearer , priority 0 [ 108.257614][ T7373] tipc: Resetting bearer [ 108.263718][ T7376] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.307786][ T7373] tipc: Disabling bearer [ 108.327015][ T7376] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.349873][ T7376] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1363: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 108.419482][ T29] audit: type=1326 audit(1755012673.508:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 108.443129][ T29] audit: type=1326 audit(1755012673.508:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 108.467330][ T29] audit: type=1326 audit(1755012673.508:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 108.491095][ T29] audit: type=1326 audit(1755012673.508:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 108.514718][ T29] audit: type=1326 audit(1755012673.508:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 108.538557][ T29] audit: type=1326 audit(1755012673.508:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a3dfebe9 code=0x7ffc0000 [ 108.566802][ T7376] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1363: Bad quota inode: 3, type: 0 [ 108.591713][ T7376] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.606661][ T7376] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 108.624696][ T3390] kernel write not supported for file /vcsa1 (pid: 3390 comm: kworker/1:4) [ 108.652521][ T7387] FAULT_INJECTION: forcing a failure. [ 108.652521][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.666040][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.1.1369 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 108.666104][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.666119][ T7387] Call Trace: [ 108.666129][ T7387] [ 108.666140][ T7387] __dump_stack+0x1d/0x30 [ 108.666167][ T7387] dump_stack_lvl+0xe8/0x140 [ 108.666189][ T7387] dump_stack+0x15/0x1b [ 108.666207][ T7387] should_fail_ex+0x265/0x280 [ 108.666300][ T7387] should_fail+0xb/0x20 [ 108.666319][ T7387] should_fail_usercopy+0x1a/0x20 [ 108.666342][ T7387] _copy_from_iter+0xcf/0xe40 [ 108.666420][ T7387] ? __alloc_skb+0x1b2/0x320 [ 108.666454][ T7387] ? __alloc_skb+0x1b2/0x320 [ 108.666488][ T7387] ? __build_skb_around+0x1a0/0x200 [ 108.666534][ T7387] udplite_getfrag+0x42/0xb0 [ 108.666567][ T7387] __ip6_append_data+0x231a/0x2390 [ 108.666611][ T7387] ? __pfx_udplite_getfrag+0x10/0x10 [ 108.666646][ T7387] ip6_append_data+0x13b/0x250 [ 108.666668][ T7387] ? __pfx_udplite_getfrag+0x10/0x10 [ 108.666753][ T7387] udpv6_sendmsg+0x880/0x1590 [ 108.666827][ T7387] ? __pfx_udplite_getfrag+0x10/0x10 [ 108.666852][ T7387] ? __rcu_read_unlock+0x4f/0x70 [ 108.666948][ T7387] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 108.666972][ T7387] inet6_sendmsg+0xac/0xd0 [ 108.667021][ T7387] __sock_sendmsg+0x8b/0x180 [ 108.667087][ T7387] ____sys_sendmsg+0x31e/0x4e0 [ 108.667109][ T7387] ___sys_sendmsg+0x17b/0x1d0 [ 108.667175][ T7387] __x64_sys_sendmsg+0xd4/0x160 [ 108.667197][ T7387] x64_sys_call+0x191e/0x2ff0 [ 108.667217][ T7387] do_syscall_64+0xd2/0x200 [ 108.667240][ T7387] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.667351][ T7387] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.667373][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.667414][ T7387] RIP: 0033:0x7f898d25ebe9 [ 108.667430][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.667447][ T7387] RSP: 002b:00007f898bcc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.667467][ T7387] RAX: ffffffffffffffda RBX: 00007f898d485fa0 RCX: 00007f898d25ebe9 [ 108.667522][ T7387] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.667534][ T7387] RBP: 00007f898bcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.667545][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.667573][ T7387] R13: 00007f898d486038 R14: 00007f898d485fa0 R15: 00007ffd7b7c04a8 [ 108.667590][ T7387] [ 108.702513][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.727354][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 109.012196][ T3309] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 109.065193][ T3309] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 109.096173][ T3309] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 109.151556][ T7404] tipc: Enabled bearer , priority 0 [ 109.168894][ T7408] SELinux: Context @ is not valid (left unmapped). [ 109.191297][ T7403] tipc: Resetting bearer [ 109.211403][ T7403] tipc: Disabling bearer [ 109.260488][ T7412] loop0: detected capacity change from 0 to 1024 [ 109.308844][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.328416][ T7412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.342081][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.432004][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.482322][ T7421] FAULT_INJECTION: forcing a failure. [ 109.482322][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.491616][ T7412] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1381: Allocating blocks 449-513 which overlap fs metadata [ 109.495579][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.0.1381 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 109.495607][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.495619][ T7421] Call Trace: [ 109.495629][ T7421] [ 109.495638][ T7421] __dump_stack+0x1d/0x30 [ 109.495662][ T7421] dump_stack_lvl+0xe8/0x140 [ 109.495750][ T7421] dump_stack+0x15/0x1b [ 109.495766][ T7421] should_fail_ex+0x265/0x280 [ 109.495862][ T7421] should_fail+0xb/0x20 [ 109.495879][ T7421] should_fail_usercopy+0x1a/0x20 [ 109.495901][ T7421] strncpy_from_user+0x25/0x230 [ 109.495946][ T7421] path_setxattrat+0xeb/0x310 [ 109.495990][ T7421] __x64_sys_fsetxattr+0x6b/0x80 [ 109.496015][ T7421] x64_sys_call+0x1ced/0x2ff0 [ 109.496081][ T7421] do_syscall_64+0xd2/0x200 [ 109.496108][ T7421] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.496166][ T7421] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.496190][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.496213][ T7421] RIP: 0033:0x7f14a3dfebe9 [ 109.496231][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.496313][ T7421] RSP: 002b:00007f14a283e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 109.496333][ T7421] RAX: ffffffffffffffda RBX: 00007f14a4026090 RCX: 00007f14a3dfebe9 [ 109.496346][ T7421] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 109.496359][ T7421] RBP: 00007f14a283e090 R08: 0000000000000000 R09: 0000000000000000 [ 109.496372][ T7421] R10: 00000000000007c8 R11: 0000000000000246 R12: 0000000000000001 [ 109.496384][ T7421] R13: 00007f14a4026128 R14: 00007f14a4026090 R15: 00007ffea5066018 [ 109.496402][ T7421] [ 109.698780][ T7411] EXT4-fs (loop0): pa ffff8881036d74d0: logic 48, phys. 177, len 21 [ 109.706977][ T7411] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 109.730603][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.835230][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.861000][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.900277][ T7430] syzkaller0: entered allmulticast mode [ 109.906211][ T7430] syzkaller0: entered promiscuous mode [ 109.919327][ T7430] syzkaller0 (unregistering): left allmulticast mode [ 109.926204][ T7430] syzkaller0 (unregistering): left promiscuous mode [ 110.016828][ T7419] lo speed is unknown, defaulting to 1000 [ 110.142038][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.158736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.176096][ T12] bond0 (unregistering): Released all slaves [ 110.187489][ T7445] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 110.187501][ T7443] IPVS: stopping master sync thread 7445 ... [ 110.187765][ T7446] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 110.218582][ T7444] FAULT_INJECTION: forcing a failure. [ 110.218582][ T7444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.232042][ T7444] CPU: 1 UID: 0 PID: 7444 Comm: syz.1.1389 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 110.232085][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.232152][ T7444] Call Trace: [ 110.232161][ T7444] [ 110.232171][ T7444] __dump_stack+0x1d/0x30 [ 110.232193][ T7444] dump_stack_lvl+0xe8/0x140 [ 110.232213][ T7444] dump_stack+0x15/0x1b [ 110.232231][ T7444] should_fail_ex+0x265/0x280 [ 110.232318][ T7444] should_fail+0xb/0x20 [ 110.232415][ T7444] should_fail_usercopy+0x1a/0x20 [ 110.232500][ T7444] _copy_from_user+0x1c/0xb0 [ 110.232527][ T7444] do_ip_vs_set_ctl+0x1a1/0x8c0 [ 110.232603][ T7444] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 110.232626][ T7444] ? xfd_validate_state+0x45/0xf0 [ 110.232667][ T7444] ? do_ip_setsockopt+0x1af3/0x2240 [ 110.232710][ T7444] nf_setsockopt+0x196/0x1b0 [ 110.232735][ T7444] ip_setsockopt+0x102/0x110 [ 110.232763][ T7444] tcp_setsockopt+0x98/0xb0 [ 110.232783][ T7444] sock_common_setsockopt+0x69/0x80 [ 110.232889][ T7444] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.232915][ T7444] smc_setsockopt+0x183/0x750 [ 110.233013][ T7444] ? __pfx_smc_setsockopt+0x10/0x10 [ 110.233038][ T7444] __sys_setsockopt+0x184/0x200 [ 110.233073][ T7444] __x64_sys_setsockopt+0x64/0x80 [ 110.233146][ T7444] x64_sys_call+0x20ec/0x2ff0 [ 110.233293][ T7444] do_syscall_64+0xd2/0x200 [ 110.233322][ T7444] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.233349][ T7444] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.233371][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.233482][ T7444] RIP: 0033:0x7f898d25ebe9 [ 110.233497][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.233518][ T7444] RSP: 002b:00007f898bca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.233542][ T7444] RAX: ffffffffffffffda RBX: 00007f898d486090 RCX: 00007f898d25ebe9 [ 110.233557][ T7444] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000005 [ 110.233571][ T7444] RBP: 00007f898bca6090 R08: 0000000000000018 R09: 0000000000000000 [ 110.233583][ T7444] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 110.233620][ T7444] R13: 00007f898d486128 R14: 00007f898d486090 R15: 00007ffd7b7c04a8 [ 110.233641][ T7444] [ 110.670450][ T12] tipc: Left network mode [ 110.744389][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 110.753693][ T7459] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1393'. [ 110.822362][ T7460] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 110.837999][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 110.847506][ T7459] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1393'. [ 110.856662][ T7459] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1393'. [ 110.868650][ T7466] FAULT_INJECTION: forcing a failure. [ 110.868650][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.882286][ T7466] CPU: 1 UID: 0 PID: 7466 Comm: syz.1.1395 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 110.882397][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.882461][ T7466] Call Trace: [ 110.882469][ T7466] [ 110.882479][ T7466] __dump_stack+0x1d/0x30 [ 110.882505][ T7466] dump_stack_lvl+0xe8/0x140 [ 110.882524][ T7466] dump_stack+0x15/0x1b [ 110.882558][ T7466] should_fail_ex+0x265/0x280 [ 110.882598][ T7466] should_fail+0xb/0x20 [ 110.882617][ T7466] should_fail_usercopy+0x1a/0x20 [ 110.882637][ T7466] _copy_from_user+0x1c/0xb0 [ 110.882665][ T7466] do_ip_vs_set_ctl+0x1a1/0x8c0 [ 110.882697][ T7466] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 110.882821][ T7466] ? xfd_validate_state+0x45/0xf0 [ 110.882864][ T7466] ? do_ip_setsockopt+0x1af3/0x2240 [ 110.882899][ T7466] nf_setsockopt+0x196/0x1b0 [ 110.882967][ T7466] ip_setsockopt+0x102/0x110 [ 110.883001][ T7466] tcp_setsockopt+0x98/0xb0 [ 110.883022][ T7466] sock_common_setsockopt+0x69/0x80 [ 110.883091][ T7466] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.883122][ T7466] smc_setsockopt+0x183/0x750 [ 110.883151][ T7466] ? __pfx_smc_setsockopt+0x10/0x10 [ 110.883222][ T7466] __sys_setsockopt+0x184/0x200 [ 110.883308][ T7466] __x64_sys_setsockopt+0x64/0x80 [ 110.883329][ T7466] x64_sys_call+0x20ec/0x2ff0 [ 110.883349][ T7466] do_syscall_64+0xd2/0x200 [ 110.883373][ T7466] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.883507][ T7466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.883589][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.883631][ T7466] RIP: 0033:0x7f898d25ebe9 [ 110.883649][ T7466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.883668][ T7466] RSP: 002b:00007f898bca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.883690][ T7466] RAX: ffffffffffffffda RBX: 00007f898d486090 RCX: 00007f898d25ebe9 [ 110.883702][ T7466] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 110.883715][ T7466] RBP: 00007f898bca6090 R08: 0000000000000018 R09: 0000000000000000 [ 110.883795][ T7466] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 110.883807][ T7466] R13: 00007f898d486128 R14: 00007f898d486090 R15: 00007ffd7b7c04a8 [ 110.883824][ T7466] [ 111.124278][ T12] hsr_slave_0: left promiscuous mode [ 111.139804][ T12] hsr_slave_1: left promiscuous mode [ 111.161085][ T12] veth1_macvtap: left promiscuous mode [ 111.185096][ T12] veth0_macvtap: left promiscuous mode [ 111.195460][ T12] veth1_vlan: left promiscuous mode [ 111.203453][ T12] veth0_vlan: left promiscuous mode [ 111.308307][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.318588][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.358277][ T7419] chnl_net:caif_netlink_parms(): no params data found [ 111.385301][ T7478] tipc: Enabled bearer , priority 0 [ 111.412045][ T7468] tipc: Resetting bearer [ 111.425297][ T7468] tipc: Disabling bearer [ 111.559968][ T7505] bridge0: port 3(vlan2) entered blocking state [ 111.566426][ T7505] bridge0: port 3(vlan2) entered disabled state [ 111.617843][ T7505] vlan2: entered allmulticast mode [ 111.623373][ T7505] bridge0: entered allmulticast mode [ 111.654355][ T7505] vlan2: left allmulticast mode [ 111.659602][ T7505] bridge0: left allmulticast mode [ 111.671538][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.679019][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.685021][ T7514] loop5: detected capacity change from 0 to 2048 [ 111.700299][ T7419] bridge_slave_0: entered allmulticast mode [ 111.714321][ T7419] bridge_slave_0: entered promiscuous mode [ 111.728693][ T7511] hsr_slave_0 (unregistering): left promiscuous mode [ 111.738575][ T7514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.759670][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.767007][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.818911][ T7514] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.854366][ T7419] bridge_slave_1: entered allmulticast mode [ 111.875725][ T7419] bridge_slave_1: entered promiscuous mode [ 111.882471][ T7514] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 111.895279][ T7514] EXT4-fs (loop5): This should not happen!! Data will be lost [ 111.895279][ T7514] [ 111.895477][ T7532] FAULT_INJECTION: forcing a failure. [ 111.895477][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 111.905104][ T7514] EXT4-fs (loop5): Total free blocks count 0 [ 111.918181][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.0.1416 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 111.918286][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.918299][ T7532] Call Trace: [ 111.918305][ T7532] [ 111.918314][ T7532] __dump_stack+0x1d/0x30 [ 111.918352][ T7532] dump_stack_lvl+0xe8/0x140 [ 111.918372][ T7532] dump_stack+0x15/0x1b [ 111.918447][ T7532] should_fail_ex+0x265/0x280 [ 111.918469][ T7532] ? syslog_print+0x6c/0x540 [ 111.918498][ T7532] should_failslab+0x8c/0xb0 [ 111.918523][ T7532] __kmalloc_cache_noprof+0x4c/0x320 [ 111.918563][ T7532] syslog_print+0x6c/0x540 [ 111.918647][ T7532] ? avc_has_perm+0xf7/0x180 [ 111.918679][ T7532] do_syslog+0x52b/0x7e0 [ 111.918710][ T7532] ? ksys_write+0x192/0x1a0 [ 111.918733][ T7532] __x64_sys_syslog+0x41/0x50 [ 111.918764][ T7532] x64_sys_call+0x2f36/0x2ff0 [ 111.918803][ T7532] do_syscall_64+0xd2/0x200 [ 111.918829][ T7532] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.918934][ T7532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.918958][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.919042][ T7532] RIP: 0033:0x7f14a3dfebe9 [ 111.919061][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.919078][ T7532] RSP: 002b:00007f14a285f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 111.919099][ T7532] RAX: ffffffffffffffda RBX: 00007f14a4025fa0 RCX: 00007f14a3dfebe9 [ 111.919173][ T7532] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000002 [ 111.919186][ T7532] RBP: 00007f14a285f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.919210][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.919223][ T7532] R13: 00007f14a4026038 R14: 00007f14a4025fa0 R15: 00007ffea5066018 [ 111.919241][ T7532] [ 112.115986][ T7514] EXT4-fs (loop5): Free/Dirty block details [ 112.121997][ T7514] EXT4-fs (loop5): free_blocks=2415919104 [ 112.127819][ T7514] EXT4-fs (loop5): dirty_blocks=32 [ 112.133091][ T7514] EXT4-fs (loop5): Block reservation details [ 112.139172][ T7514] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 112.182098][ T5770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.200513][ T7542] tipc: Enabled bearer , priority 0 [ 112.209137][ T7419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.231113][ T7419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.242804][ T7535] tipc: Resetting bearer [ 112.263830][ T7535] tipc: Disabling bearer [ 112.310779][ T7419] team0: Port device team_slave_0 added [ 112.317946][ T7419] team0: Port device team_slave_1 added [ 112.362730][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.369888][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.396876][ T7419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.433361][ T7558] __nla_validate_parse: 6 callbacks suppressed [ 112.433380][ T7558] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1426'. [ 112.463070][ T7552] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 112.471607][ T7552] tipc: Enabled bearer , priority 10 [ 112.486743][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1427'. [ 112.495878][ T7560] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1427'. [ 112.508197][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1427'. [ 112.523354][ T7560] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1427'. [ 112.532626][ T7560] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1427'. [ 112.555692][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 112.555713][ T29] audit: type=1400 audit(1755012677.949:4622): avc: denied { ioctl } for pid=7557 comm="syz.1.1426" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.594882][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.601972][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.628145][ T7419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.639265][ T29] audit: type=1400 audit(1755012677.992:4623): avc: denied { write } for pid=7565 comm="syz.5.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.654760][ T7568] loop2: detected capacity change from 0 to 2048 [ 112.659037][ T29] audit: type=1400 audit(1755012677.992:4624): avc: denied { getopt } for pid=7565 comm="syz.5.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.685475][ T29] audit: type=1400 audit(1755012678.003:4625): avc: denied { read write } for pid=7565 comm="syz.5.1428" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.692763][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.709181][ T29] audit: type=1400 audit(1755012678.003:4626): avc: denied { open } for pid=7565 comm="syz.5.1428" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.744941][ T29] audit: type=1400 audit(1755012678.003:4627): avc: denied { ioctl } for pid=7565 comm="syz.5.1428" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.809795][ T7419] hsr_slave_0: entered promiscuous mode [ 112.819339][ T7568] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.834408][ T7568] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 112.834648][ T7419] hsr_slave_1: entered promiscuous mode [ 112.847256][ T7568] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.847256][ T7568] [ 112.862636][ T7568] EXT4-fs (loop2): Total free blocks count 0 [ 112.867441][ T7419] debugfs: 'hsr0' already exists in 'hsr' [ 112.868795][ T7568] EXT4-fs (loop2): Free/Dirty block details [ 112.874688][ T7419] Cannot create hsr debugfs directory [ 112.880875][ T7568] EXT4-fs (loop2): free_blocks=2415919104 [ 112.887041][ T7556] lo speed is unknown, defaulting to 1000 [ 112.892344][ T7568] EXT4-fs (loop2): dirty_blocks=32 [ 112.903386][ T7568] EXT4-fs (loop2): Block reservation details [ 112.909567][ T7568] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 112.974940][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.113020][ T29] audit: type=1400 audit(1755012678.550:4628): avc: denied { watch watch_reads } for pid=7584 comm="syz.1.1436" path="/298/file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.116748][ T7583] tipc: Enabled bearer , priority 0 [ 113.165938][ T29] audit: type=1400 audit(1755012678.593:4629): avc: denied { execute } for pid=7584 comm="syz.1.1436" name="file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.188517][ T29] audit: type=1400 audit(1755012678.593:4630): avc: denied { execute_no_trans } for pid=7584 comm="syz.1.1436" path="/298/file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.217183][ T7580] tipc: Resetting bearer [ 113.233018][ T7580] tipc: Disabling bearer [ 113.256924][ T7419] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.267208][ T7419] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.282266][ T7419] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.297109][ T7419] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.358215][ T7595] loop2: detected capacity change from 0 to 2048 [ 113.391232][ T7595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.403719][ T29] audit: type=1400 audit(1755012678.829:4631): avc: denied { setopt } for pid=7604 comm="syz.1.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.423840][ T7595] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.468296][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 113.479626][ T7595] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 113.482983][ T7419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.492265][ T7595] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.492265][ T7595] [ 113.492305][ T7595] EXT4-fs (loop2): Total free blocks count 0 [ 113.492321][ T7595] EXT4-fs (loop2): Free/Dirty block details [ 113.492334][ T7595] EXT4-fs (loop2): free_blocks=2415919104 [ 113.518551][ T7419] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.521825][ T7595] EXT4-fs (loop2): dirty_blocks=32 [ 113.521845][ T7595] EXT4-fs (loop2): Block reservation details [ 113.521858][ T7595] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 113.527602][ T3383] tipc: Node number set to 2951248366 [ 113.565267][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.572425][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.599303][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.606462][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.614371][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.760297][ T7626] macsec0: entered promiscuous mode [ 113.765994][ T7626] macsec0: entered allmulticast mode [ 113.771395][ T7626] veth1_macvtap: entered allmulticast mode [ 113.782310][ T7636] FAULT_INJECTION: forcing a failure. [ 113.782310][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 113.795543][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.2.1452 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 113.795580][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.795595][ T7636] Call Trace: [ 113.795605][ T7636] [ 113.795615][ T7636] __dump_stack+0x1d/0x30 [ 113.795641][ T7636] dump_stack_lvl+0xe8/0x140 [ 113.795665][ T7636] dump_stack+0x15/0x1b [ 113.795688][ T7636] should_fail_ex+0x265/0x280 [ 113.795712][ T7636] ? syslog_print+0x6c/0x540 [ 113.795778][ T7636] should_failslab+0x8c/0xb0 [ 113.795802][ T7636] __kmalloc_cache_noprof+0x4c/0x320 [ 113.795832][ T7636] syslog_print+0x6c/0x540 [ 113.795864][ T7636] ? avc_has_perm+0xf7/0x180 [ 113.795973][ T7636] do_syslog+0x52b/0x7e0 [ 113.796009][ T7636] ? ksys_write+0x192/0x1a0 [ 113.796037][ T7636] __x64_sys_syslog+0x41/0x50 [ 113.796081][ T7636] x64_sys_call+0x2f36/0x2ff0 [ 113.796187][ T7636] do_syscall_64+0xd2/0x200 [ 113.796213][ T7636] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.796238][ T7636] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.796264][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.796329][ T7636] RIP: 0033:0x7f72e0bbebe9 [ 113.796348][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.796369][ T7636] RSP: 002b:00007f72df627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 113.796396][ T7636] RAX: ffffffffffffffda RBX: 00007f72e0de5fa0 RCX: 00007f72e0bbebe9 [ 113.796411][ T7636] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000002 [ 113.796467][ T7636] RBP: 00007f72df627090 R08: 0000000000000000 R09: 0000000000000000 [ 113.796482][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.796496][ T7636] R13: 00007f72e0de6038 R14: 00007f72e0de5fa0 R15: 00007ffc5cb4de48 [ 113.796653][ T7636] [ 114.003362][ T7419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.014446][ T7419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.087397][ T7633] tipc: Enabled bearer , priority 0 [ 114.104591][ T7632] tipc: Resetting bearer [ 114.129448][ T7632] tipc: Disabling bearer [ 114.167191][ T7419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.235768][ T7661] loop2: detected capacity change from 0 to 2048 [ 114.308607][ T7661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.396874][ T7661] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.441272][ T7661] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 114.454189][ T7661] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.454189][ T7661] [ 114.464025][ T7661] EXT4-fs (loop2): Total free blocks count 0 [ 114.470025][ T7661] EXT4-fs (loop2): Free/Dirty block details [ 114.476035][ T7661] EXT4-fs (loop2): free_blocks=2415919104 [ 114.482111][ T7661] EXT4-fs (loop2): dirty_blocks=32 [ 114.487255][ T7661] EXT4-fs (loop2): Block reservation details [ 114.493452][ T7661] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 114.527866][ T7653] lo speed is unknown, defaulting to 1000 [ 114.562625][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.563729][ T7419] veth0_vlan: entered promiscuous mode [ 114.582768][ T7670] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 114.586197][ T7419] veth1_vlan: entered promiscuous mode [ 114.635450][ T7690] FAULT_INJECTION: forcing a failure. [ 114.635450][ T7690] name failslab, interval 1, probability 0, space 0, times 0 [ 114.648545][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.2.1465 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 114.648580][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.648594][ T7690] Call Trace: [ 114.648600][ T7690] [ 114.648661][ T7690] __dump_stack+0x1d/0x30 [ 114.648683][ T7690] dump_stack_lvl+0xe8/0x140 [ 114.648701][ T7690] dump_stack+0x15/0x1b [ 114.648716][ T7690] should_fail_ex+0x265/0x280 [ 114.648783][ T7690] ? raw_open+0x5b/0x1d0 [ 114.648816][ T7690] should_failslab+0x8c/0xb0 [ 114.649046][ T7690] __kmalloc_cache_noprof+0x4c/0x320 [ 114.649141][ T7690] ? avc_has_perm+0xf7/0x180 [ 114.649165][ T7690] ? __pfx_raw_open+0x10/0x10 [ 114.649190][ T7690] raw_open+0x5b/0x1d0 [ 114.649256][ T7690] ? __pfx_raw_open+0x10/0x10 [ 114.649281][ T7690] misc_open+0x1d3/0x200 [ 114.649303][ T7690] chrdev_open+0x2eb/0x3a0 [ 114.649378][ T7690] do_dentry_open+0x646/0xa20 [ 114.649404][ T7690] ? __pfx_chrdev_open+0x10/0x10 [ 114.649454][ T7690] vfs_open+0x37/0x1e0 [ 114.649491][ T7690] path_openat+0x1c5e/0x2170 [ 114.649509][ T7690] ? css_rstat_updated+0xb7/0x240 [ 114.649542][ T7690] do_filp_open+0x109/0x230 [ 114.649600][ T7690] do_sys_openat2+0xa6/0x110 [ 114.649672][ T7690] __x64_sys_openat+0xf2/0x120 [ 114.649708][ T7690] x64_sys_call+0x2e9c/0x2ff0 [ 114.649731][ T7690] do_syscall_64+0xd2/0x200 [ 114.649837][ T7690] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.649934][ T7690] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.649957][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.649978][ T7690] RIP: 0033:0x7f72e0bbd550 [ 114.649994][ T7690] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 114.650057][ T7690] RSP: 002b:00007f72df624ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 114.650087][ T7690] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f72e0bbd550 [ 114.650101][ T7690] RDX: 0000000000000002 RSI: 00007f72e0c41af4 RDI: 00000000ffffff9c [ 114.650117][ T7690] RBP: 00007f72e0c41af4 R08: 0000000000000000 R09: 0000000000000000 [ 114.650131][ T7690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 114.650206][ T7690] R13: 00000000000000b3 R14: 0000200000000000 R15: 00007ffc5cb4de48 [ 114.650223][ T7690] [ 114.893531][ T7419] veth0_macvtap: entered promiscuous mode [ 114.903716][ T7419] veth1_macvtap: entered promiscuous mode [ 114.938373][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.962802][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.973921][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.989613][ T3301] ================================================================== [ 114.997775][ T3301] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 115.005648][ T3301] [ 115.008100][ T3301] read-write to 0xffff888121e83270 of 8 bytes by task 7693 on cpu 0: [ 115.016206][ T3301] inode_add_bytes+0x47/0xe0 [ 115.020855][ T3301] __dquot_alloc_space+0x180/0x8a0 [ 115.026015][ T3301] shmem_inode_acct_blocks+0x129/0x240 [ 115.031520][ T3301] shmem_get_folio_gfp+0x5a7/0xd60 [ 115.036697][ T3301] shmem_write_begin+0xa8/0x190 [ 115.041655][ T3301] generic_perform_write+0x184/0x490 [ 115.047051][ T3301] shmem_file_write_iter+0xc5/0xf0 [ 115.052189][ T3301] __kernel_write_iter+0x2d6/0x540 [ 115.057341][ T3301] dump_user_range+0x61e/0x8f0 [ 115.062152][ T3301] elf_core_dump+0x1e00/0x1f90 [ 115.067078][ T3301] coredump_write+0xb0d/0xe30 [ 115.071787][ T3301] vfs_coredump+0x142f/0x20c0 [ 115.076629][ T3301] get_signal+0xd85/0xf70 [ 115.080584][ T7684] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.081170][ T3301] arch_do_signal_or_restart+0x96/0x480 [ 115.093680][ T3301] irqentry_exit_to_user_mode+0x5e/0xa0 [ 115.099252][ T3301] irqentry_exit+0x12/0x50 [ 115.103733][ T3301] asm_exc_page_fault+0x26/0x30 [ 115.108614][ T3301] [ 115.110956][ T3301] read to 0xffff888121e83270 of 8 bytes by task 3301 on cpu 1: [ 115.118510][ T3301] generic_fillattr+0x27d/0x340 [ 115.123462][ T3301] shmem_getattr+0x181/0x200 [ 115.128064][ T3301] vfs_getattr_nosec+0x143/0x1e0 [ 115.133450][ T3301] vfs_statx+0x113/0x390 [ 115.137875][ T3301] vfs_fstatat+0x115/0x170 [ 115.142330][ T3301] __se_sys_newfstatat+0x55/0x260 [ 115.147602][ T3301] __x64_sys_newfstatat+0x55/0x70 [ 115.152722][ T3301] x64_sys_call+0x135a/0x2ff0 [ 115.157495][ T3301] do_syscall_64+0xd2/0x200 [ 115.162026][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.167937][ T3301] [ 115.170264][ T3301] value changed: 0x0000000000000fb8 -> 0x0000000000000fe0 [ 115.177541][ T3301] [ 115.180003][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 115.186240][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 115.199089][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.209323][ T3301] ================================================================== [ 115.282392][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 115.329225][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.356803][ T122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.765298][ T58] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.834358][ T58] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.908658][ T58] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.992400][ T58] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.065818][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.125396][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.179960][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.238484][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.307013][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.366305][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.422236][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.478274][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.552206][ T58] bridge_slave_1: left allmulticast mode [ 116.557885][ T58] bridge_slave_1: left promiscuous mode [ 116.563656][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.572226][ T58] bridge_slave_0: left allmulticast mode [ 116.577972][ T58] bridge_slave_0: left promiscuous mode [ 116.583751][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.593289][ T58] bridge_slave_1: left allmulticast mode [ 116.599145][ T58] bridge_slave_1: left promiscuous mode [ 116.605074][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.613346][ T58] bridge_slave_0: left allmulticast mode [ 116.619081][ T58] bridge_slave_0: left promiscuous mode [ 116.624914][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.633880][ T58] bridge_slave_1: left allmulticast mode [ 116.639542][ T58] bridge_slave_1: left promiscuous mode [ 116.645260][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.653496][ T58] bridge_slave_0: left allmulticast mode [ 116.659160][ T58] bridge_slave_0: left promiscuous mode [ 116.665052][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.786623][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.796835][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.806766][ T58] bond0 (unregistering): Released all slaves [ 116.869726][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.880306][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.890561][ T58] bond0 (unregistering): Released all slaves [ 116.953548][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.964595][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.974869][ T58] bond0 (unregistering): Released all slaves [ 117.021767][ T58] tipc: Left network mode [ 117.026484][ T58] tipc: Left network mode [ 117.031491][ T58] tipc: Disabling bearer [ 117.036752][ T58] tipc: Left network mode [ 117.042704][ T58] IPVS: stopping master sync thread 7446 ... [ 117.105714][ T58] hsr_slave_0: left promiscuous mode [ 117.113199][ T58] hsr_slave_1: left promiscuous mode [ 117.121251][ T58] hsr_slave_0: left promiscuous mode [ 117.127043][ T58] hsr_slave_1: left promiscuous mode [ 117.135417][ T58] hsr_slave_0: left promiscuous mode [ 117.141647][ T58] hsr_slave_1: left promiscuous mode [ 117.154358][ T58] veth1_macvtap: left promiscuous mode [ 117.160339][ T58] veth0_macvtap: left promiscuous mode [ 117.166634][ T58] veth1_vlan: left promiscuous mode [ 117.172012][ T58] veth0_vlan: left promiscuous mode [ 117.178217][ T58] veth0_macvtap: left promiscuous mode [ 117.183827][ T58] veth1_vlan: left promiscuous mode [ 117.189540][ T58] veth0_vlan: left promiscuous mode [ 117.195605][ T58] veth1_macvtap: left promiscuous mode [ 117.201182][ T58] veth0_macvtap: left promiscuous mode [ 117.207259][ T58] veth1_vlan: left promiscuous mode [ 117.213261][ T58] veth0_vlan: left promiscuous mode [ 117.374132][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.385357][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.393801][ T3433] smc: removing ib device syz! [ 117.446679][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.456977][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.514951][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.525704][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.559276][ T9] lo speed is unknown, defaulting to 1000 [ 117.565195][ T9] infiniband syz0: ib_query_port failed (-19) [ 117.989466][ T58] IPVS: stop unused estimator thread 0... [ 118.036123][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.081540][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.137291][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.202598][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.271855][ T58] bridge_slave_1: left allmulticast mode [ 118.277650][ T58] bridge_slave_1: left promiscuous mode [ 118.283466][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.291451][ T58] bridge_slave_0: left allmulticast mode [ 118.297199][ T58] bridge_slave_0: left promiscuous mode [ 118.303280][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.399645][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.410009][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.420360][ T58] bond0 (unregistering): Released all slaves [ 118.455764][ T58] hsr_slave_0: left promiscuous mode [ 118.461843][ T58] hsr_slave_1: left promiscuous mode [ 118.467559][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.475056][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.483040][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.490607][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.501674][ T58] veth1_macvtap: left promiscuous mode [ 118.507707][ T58] veth0_macvtap: left promiscuous mode [ 118.513220][ T58] veth1_vlan: left promiscuous mode [ 118.519236][ T58] veth0_vlan: left promiscuous mode [ 118.590759][ T58] team0 (unregistering): Port device team_slave_1 removed [ 118.602440][ T58] team0 (unregistering): Port device team_slave_0 removed