last executing test programs: 2.164464726s ago: executing program 1 (id=1307): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="06000500080000000a000400ffffffffffff000006000500010000001400140076657468315f766c616e00000000000008000a00e0"], 0x90}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000f40)='./file1\x00', 0x8041, &(0x7f0000001000)={[{@stripe={'stripe', 0x3d, 0xa}}, {@grpjquota}, {@oldalloc}, {@noquota}, {@grpjquota}, {@block_validity}, {@abort}, {@minixdf}, {@auto_da_alloc}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') close_range(0xffffffffffffffff, r4, 0x2) r5 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0x0, 0xffffffffffffffff, 0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f0000000ec0), &(0x7f0000000f00), 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x1f87, &(0x7f00000006c0)={0x0, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001700)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x0, 0x1d0, 0x3f8, 0x3f8, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff000000], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4, 0x8, 0x24}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 1.864097s ago: executing program 1 (id=1314): r0 = open(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfff, 0x1, 0x0, 0x696, r1, 0x9, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r5, &(0x7f0000000340), 0x4) fsetxattr(r0, &(0x7f00000007c0)=@known='user.syz\x00', &(0x7f0000000080)='netm0\x00\x00\x00\x00\x00\x8eI\xa7\xb01\xf8\x00`C\xa5\xdcf\xd3\x05', 0x18, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4) socket$inet6(0xa, 0x1, 0x0) 1.802607005s ago: executing program 1 (id=1317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="850000002f000000350000000000ba00850000007d00000095000000000000004cf12aa56cd902e2bcccc7933216c775f4ca019700f81f06a9cf64f5e0a141d524581835d8050864d20000000201000000fa22beb5cf918d4aec7520ea98165b61a3cf5fc6dd8442230e7953f91136aa1f7035175135230163cf09494997cb0269fc9c7d49313ad360e5158a10861aaac07bdef9798e1c8fee9ed0f9dce435554bc34e6bdea4217ce4a98af8ad0887c697acd962000a9c13ecee6156c599c7b293de0019b27de967bfb3fe241454a04080bf668ce021879c820f9b80fe2338a894113532b18ac1440000000000000000000000000000004daac70ad892dd079b9f63237fd1fb7172e92af51bd123e665aa5424d28b055f23e9775ae17049b7226f795d551790818818d2e1f186ebe26e72"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153}, 0x15) socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000002200), 0x0) fallocate(r3, 0x19, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x11f06) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002000)=r4, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), 0x0}, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000480)=[@request_death], 0x0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000019c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r6 = socket(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/251, 0xfb}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0) 1.592635742s ago: executing program 3 (id=1323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a4693989c36ffffffffffffd0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1530f8d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c11090000000000000000b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117fcb8ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17911540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.470578752s ago: executing program 3 (id=1324): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="06000500080000000a000400ffffffffffff000006000500010000001400140076657468315f766c616e00000000000008000a00e0"], 0x90}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000f40)='./file1\x00', 0x8041, &(0x7f0000001000)={[{@stripe={'stripe', 0x3d, 0xa}}, {@grpjquota}, {@oldalloc}, {@noquota}, {@grpjquota}, {@block_validity}, {@abort}, {@minixdf}, {@auto_da_alloc}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r4 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$eJzs3U9oHOfZAPBn9Em2o/D5C/k+8hnjOGM7BZs6yu4qUSpySDerkTzJalfsropNKYmJ5WAsJyEhpPGhqS9JW1pKTz2muYZcemsptNBD21OhOfTSQyGQU0lLC6WlFFx2dtf6u5JsS3H+/H6L952deead950dz7Oz2pkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCS2kypVE6injcWz6bD1WZazfktpg/q+8WaYovlRiTdf3HgQBzqjTr0fyuT7+s+HY8jvVdH4kC3OBBX777vnsf/d3RkMP8WDbpVx4ZPGlv9Ion4ZrdRl88vLy+9vAcN+Rh952f9gQM7nuWf17vPc1kjbzfz+epclubtZjo9NVV6+MxsO53N61n7XLuTzae1VlbtNFvpydqptDw9PZlmE+eai425mWo9G4x87KFKqTSVPjWxkFVb7Wbj4acm2rUzeb2eN+aKmErptejGPNbdEJ/OO2knq86n6cVLy0uT2zW1G1ReM2b/mg3nyIP3fPjqB3+7tNTdIIdVkvQ3zEq5XKmUpx6dfvSxUmm0UqqsHVFaJ25ExEhEN2JPNlo+RSKu/8/u7cDhNoz083/UI49GLMbZSCONkeJ55TEWtZiJVjRjvvv692Prpm/I/194+M+/3Wq5q/P/IMsfWpl8OIr8f7T36uiw/L+hFXv5aLzXa83qca/E63E1Lsf5WI7lWIqXb6Xmfetr3cPHyO7WNxdZNCKPdjQjj/moFmPS/pg0pmMqpqIUz8SZmI12pDEbedQji3aci3Z0Iiu2qFq0IotqdKIZrUjjZNTiVKRRjumYjslII4uJOBfNWIxGzMVMVItaLsalYr1PrmvXfd949qfP/+7Dt7vDN4LKW3Qk6X6Y6wb9dYugDen+JvL/IEL+/6w50N9n7TR+F/fecHuuF/l/9E43AwAAANhDSfHtexIRY3F/MTSb17Ov3ulmAQAAALuo+F3zkW4x1h26P5Lu8X9pk8j3P/a2AQAAALsjKc6xSyJiPB7oDQ1Ol9rsSwAAAADgU6j4+//RbjEe8UYxwvE/AAAAfMZ8a9g19j/Y17/Gbnthf/Lzv0SrNZZcWzj7YHKl2o2rXvmv3nz94is3auzMHk4O9ispiqnRq3cnETFay44kg6tf/nt/r/yoeD68cgHCYdf6T7ZpQGzdgOJVfDeO9WKOXeiVFwZTeksZn83r2UStWX+8nPS/HOm8+sKlr0fR/W835g8mcfHS8tLEcy8uXyjacq1by7Ur/cvDJ4O5dtCW6/01EPdv3uOx4kSM/nLHe8stre7/SG/2ka37n6xe5ptxvBdzfLxXjq/t/4HuMssTj5ejWj040snOdl69vqr3/VaUN+v5TbwLb8aJXsyJkyd6xSatqKxpxQsbW1FZ3YqdrYsdt+LtY2+c/fuvmkk2uV0rJm+zFQB3ysXiqj8rWeiuIgv963pPN6Gty7t3Dea8mb3cxZVPGYP5V+W60diQ3dNbye5vxslezMne54nRw5vkldIme/SXLr306/4e/ZF3f/ijrx39zY9vPbu9G6d6Mf0i7v3lkBzb7fP31mXVd7pzvDN0ue16JYmx7oTi5kNx9aFLV84/v/T80guVyuRU6ZFS6dFKjBUfFfrFkJbKPACfb9vfY2fbiOSRbY6q773xk4KJeC5ejOW4EKeLsw0i4oHNax1f9TOE09sctY6vusPL6W2OLVdiK+tj959IYkjs5Ko19v8/KIp/7N17AgB77fg2efhG/n/tv/tzbMz/p7c57l6by0/1bpw7ODqO4bl8M1/a4/UBAJ8HWeujZLzzVtJq5QvPlKeny9XOmSxtNWtPp618Zi5L80Yna9XOVBtzWbrQanaatcFXxzNZO20vLiw0W510ttlKF5rt/Gxx5/e0f+v3djZfbXTyWnuhnlXbWVprNjrVWiedydu1dGHxyXrePpO1ipnbC1ktn81r1U7ebKTt5mKrlk2kaTvLVgXmM1mjk8/m2ViaN9KFVj5fbV2LiPrifJbOZO1aK1/oNHsVDpaVN2abrfmi2omN3f/Tx72+AeCT4JXXr14+v7y89PKtDfxhJ8F3uo8AwFqyNAAAAAAAAAAAAAAAfPJtPF2vO/amTgQci1s+ffCV/XE7Zx9+9ga++F7vbdmNCm+nnrvWvKf7+hvLnV8/Nz3w7BNPXB4W8+Qbh878MYvYvp7N/6dsdqrrWwcj9v3k+70xXx4SnIzuck/fj530YsPA9WSLmDu2SwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAof4TAAD///vCWDA=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') close_range(0xffffffffffffffff, r5, 0x2) getpgrp(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f0000000ec0), &(0x7f0000000f00), 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x1f87, &(0x7f00000006c0)={0x0, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001700)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x0, 0x1d0, 0x3f8, 0x3f8, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff000000], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4, 0x8, 0x24}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 1.278638137s ago: executing program 0 (id=1327): dup(0xffffffffffffffff) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x6000000, 0x12) 1.253167989s ago: executing program 0 (id=1328): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = open(0x0, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mlockall(0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) socket$inet6(0xa, 0x1, 0x84) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1400000048fa83bd5c7f67dd492361b8c90174b67b6f8e2e3ac7b154f1e2955d108c72953cac5cc66f08e80e189b802e57b6285882252d8a245790c25e847c57cf7b800b143a4d670e7759a5eaa583d6f09d02b349fcb5bd0422eff1b82946efb03d9b54fb4c733efb09d6ed8d9b79a5ac85cb2993408339aea9b0fd2a958b1f49392f039020811781c88ae79bf7e2bfab4bcb5f149ac19172a54a806a7a64921a373e55", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000c85000)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001c00)={0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000f2cff4)={0x77540947ed9a168d}) 1.144805558s ago: executing program 3 (id=1329): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 968.610972ms ago: executing program 0 (id=1332): mkdir(&(0x7f0000000200)='./file0\x00', 0x118) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fchown(r3, r1, r2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r4, &(0x7f00000002c0)=@reiserfs_2={0x8, 0x2, {0x5, 0x5}}, 0x8000) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910890000ed1f000500000000005869beb6000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) splice(r5, &(0x7f0000000140)=0x9, r4, &(0x7f0000000180)=0x4, 0x4, 0x0) 960.149663ms ago: executing program 1 (id=1333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x6000, &(0x7f0000000440)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x20}}, 0x0) 945.948514ms ago: executing program 0 (id=1334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a4693989c36ffffffffffffd0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1530f8d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c11090000000000000000b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117fcb8ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17911540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc240000"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 945.818874ms ago: executing program 1 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002220702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/../file0\x00', r1, &(0x7f0000000300)='./bus\x00') socket$netlink(0x10, 0x3, 0x15) 892.714458ms ago: executing program 0 (id=1337): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4ae, &(0x7f0000000a00)="$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") statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800, &(0x7f0000000240)) (fail_nth: 8) 869.36425ms ago: executing program 1 (id=1338): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x27) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 553.838666ms ago: executing program 4 (id=1340): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@nodelalloc}, {@norecovery}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001a40)=ANY=[], 0xfd14) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 552.831066ms ago: executing program 0 (id=1342): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x520b, 0x0, &(0x7f0000000100), &(0x7f0000000200)) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x408000, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/mem_sleep', 0x220080, 0x47) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) move_mount(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 455.781053ms ago: executing program 2 (id=1344): mkdir(&(0x7f0000000200)='./file0\x00', 0x118) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fchown(r3, r1, r2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r4, &(0x7f00000002c0)=@reiserfs_2={0x8, 0x2, {0x5, 0x5}}, 0x8000) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910890000ed1f000500000000005869beb6000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) splice(r5, &(0x7f0000000140)=0x9, r4, &(0x7f0000000180)=0x4, 0x4, 0x0) 455.523653ms ago: executing program 2 (id=1345): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000002180)=[{0x0, 0x4}, {0x0, 0x0, 0x700}], 0x2) write(r3, 0x0, 0x0) 455.246204ms ago: executing program 4 (id=1346): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x40, 0x4, 0x80, 0x0, 0x0, 0x80000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, @perf_config_ext={0x1, 0x2}, 0x8000, 0x3, 0x6, 0x4, 0x1, 0x6, 0x4, 0x0, 0x7d, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x703181, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x44}}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x21, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x12042) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000440)={&(0x7f0000000ec0)={0x114, r5, 0xe701ac47a3d23ecd, 0x700, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0xa8, r7, 0x1, 0x0, 0x25dfdbfd, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xa8}}, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x184, r7, 0x0, 0x70bd2b, 0x3, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xfb, 0xa8, @random="e1d248f5e6b0b89c2728157feb42b81a3b65747531d18e92ea9a9f18d01ea9744dc04f2962d23115cbbde4d41d4537cdf76d3eb2d889d3419fa1447fe726d372c56e3c79027600b103a6860fad01c2850798093f2f61a8dc61eca46cb13d9a838cf5b207c8a67d29a902cfa317d97d9d3fcaf38940431c5cbda1957be5c5b5db95139d7b4a92553fe0547a85822947c9051867080d27587164c07a4c1a45db036433c93e1fa8ef406a282821d3f5e22e38be50d6fa4ce3a275a8e73e126609092d34de1cfd5894f071c7d23dd71c2965c5f7a7855f541c29adcdabc977a8334d221a8664ad39ab5c248704519700e570dd82ad32f00d19"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4001}, 0x24004054) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={[0x9]}, 0x8}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x105400, 0x0) 410.701487ms ago: executing program 2 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000011000100"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006970766c616e30"], 0x80}}, 0x0) 409.578127ms ago: executing program 2 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYBLOB="1800000000000000000000000800000018110000", @ANYBLOB="0200000000000000b7026b00000100eaff85007a00008600000095", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x4e) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r4, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='b', 0x1}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='g', 0x1) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4404, &(0x7f0000000240)={[{@block_validity}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@journal_async_commit}, {@minixdf}, {@barrier}]}, 0x3, 0x438, &(0x7f0000001040)="$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") open(0x0, 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x6611, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x58, 0x0}}], 0x6c00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000100001000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="86979bf5c1076b15f961be76be37e18732dfddff01255e0e9f9826d25279269ee756fe1246e983c0578eb728e8e65805a4e995d6db7ff342f086a79f0699b7e4c8e4464c3b20838e363f5c8198004171b8a9e9e4547e2272661f9d4658ba76d38c08904d186549cc987713f6c8ed1bc0c0635c8d838ddb7ba8e3f2f6ec6b9f701050e90664993564a9aa3e319b9a72a2751fe48294bcabee46423dc449e19988c798f86c80ce23ae5918194e05dc631e3272114e02bbc33f0500008a35e91f6684a8f1ee91aa9af85106910f429a6eb627d14eaf1a6a7ea009f46a7b", @ANYRES32=r2, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000004200)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="da0156800c008400030000000000000087b2f02cc8c77d9e5f5cb843ecee31130c2d1e79d80b03090070a1534beaee670600000030a490fec3cabf8305126fbb7279f2a6657bc2cc289b85fa4f96ec050200fd06bd465a9eb8e1bfa8938d4a93181cd69b439e878bb874495000720d891bd7ddaf4ca208000c0068d509fe4238bfb55b051987307059bec3aeca0817cabf386e77dbef43fdfda7a462c11195ace49eb55b62baa33da9ccbbf84fc507699d4278c1f997fa01929a02ef40d32d7a6f85c17da023ec50fcdf06b5a94fd050c584a269c78fd22bfa092a2a2ba7622cbfb317b5ee224857a3795b98bf0ea862bd36f0cb51b07b6d5918f29b3d63221451771e9a246aaab7a9a098531f578546239b8d21892bcf70750f072bfca9e214f6003bb1fd56605e6e01760e8b016a50cc15eb4643cda3807045e1ac848234f2909e568b6f99fc1a53760c0c0c3d44317c", @ANYRESOCT=r6, @ANYBLOB="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", @ANYRES32, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f00000030c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0400f6fffffffffffffc0000f00000000000000000040000140056002001cf2800000000000000000000ff00d2008a80080020000000", @ANYRES32=r6, @ANYRESOCT], 0x3b0}, {&(0x7f0000000f00)=ANY=[@ANYBLOB="6c01001b4971e6a35656afe75d074b437887acc9122b08edd78735e40b661dd47fc0f89658c722f59db7bd4dad9ca2890116a08e9c9ca6738208f4e7a27883e5afd65490249f56e14f14e985f9ba36ed68113473eaefae72d7913631fa71dd4501140025000000000000000000001000000000000108006d000000000000002ff4c2d9191cff1e8278785bba7d1c96b602f08f431b373dbdca7e4a00f7963d7de2a456310d3e43aa2b365a1ca7d01636ee1fc6af39fd3f187495cb7de55a0ac64304c97fc2008df4c66356038cd7801f60a400", @ANYRES32, @ANYRESHEX], 0x16c}], 0x4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) getsockopt$netlink(r9, 0x10e, 0x9, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77662e9bd0e4", @ANYRESHEX]) 300.545826ms ago: executing program 3 (id=1349): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x5, 0x2, 0x9, 0x42}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r2}, &(0x7f0000000000), &(0x7f0000001340)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x10010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) socket$packet(0x11, 0x0, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='page_pool_state_release\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 200.026864ms ago: executing program 4 (id=1350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f00000004c0)={0xf97cff8c, 0x8}, 0x10) 199.809214ms ago: executing program 4 (id=1351): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001800010000000200000000000a00020023000000"], 0x18}}, 0x0) (async, rerun: 64) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async, rerun: 64) r3 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00'/649, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x20051, r3, 0x0) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x8, 0x9, 0x6, 0xfffffffc}]}) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) (async) r7 = io_uring_setup(0x7562, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) io_uring_enter(r6, 0x0, 0x0, 0x1a, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (rerun: 32) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x27) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x4}}, 0xb8}}, 0x40004041) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xa, 0x40, 0x0, 0xff}, {0x80000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d"], 0x24}], 0x1, 0x0, 0x0, 0x40000c0}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x4, 0xcbf2146, 0x8001, 0x7f}, 0x10) 199.592644ms ago: executing program 4 (id=1352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000014c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xffffff17, 0x12, r2, 0x0) fstat(r1, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) getsockopt$inet_mreqn(r3, 0x0, 0xb61490085766ac6a, &(0x7f0000000b80)={@multicast2, @dev, 0x0}, &(0x7f0000000bc0)=0xc) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000c00)={r8, 0x1, 0x6, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000000b40)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000680)=""/218, 0xda}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f00000003c0)=""/173, 0xad}], 0x4, &(0x7f0000000980)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x9b5}, &(0x7f00000004c0)=0x4, &(0x7f0000000500)=0x6, 0xfe51, 0x2, 0x6, 0x1, 0x64, 0x81f6}}, @mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000540)=0x100000000, &(0x7f00000005c0)=0x4, 0x5, 0xa, 0x1, 0x80000001, 0x2, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x13c}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/144, 0x90}, &(0x7f0000000840), 0xc}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xb485}, &(0x7f0000000880)=0x8, &(0x7f00000008c0)=0x7fffffffffffffff, 0x1, 0x8, 0x9, 0x1, 0x40, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x9}, &(0x7f0000000900)=0x6, &(0x7f0000000940)=0x5da4, 0xab0, 0x7ff, 0x9, 0x92eb, 0x67, 0x2}}], 0x1c0}, 0x20046080) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000001ac0)="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", 0x1000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @local}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x60}, 0x1, 0xba01, 0x0, 0x44}, 0x0) 199.420654ms ago: executing program 2 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 182.672015ms ago: executing program 2 (id=1354): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="06000500080000000a000400ffffffffffff000006000500010000001400140076657468315f766c616e00000000000008000a00e0"], 0x90}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000f40)='./file1\x00', 0x8041, &(0x7f0000001000)={[{@stripe={'stripe', 0x3d, 0xa}}, {@grpjquota}, {@oldalloc}, {@noquota}, {@grpjquota}, {@block_validity}, {@abort}, {@minixdf}, {@auto_da_alloc}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r4 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') close_range(0xffffffffffffffff, r5, 0x2) r6 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0x0, 0xffffffffffffffff, 0x4) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) lseek(r5, 0x73, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f0000000ec0), &(0x7f0000000f00), 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001700)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x0, 0x1d0, 0x3f8, 0x3f8, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff000000], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4, 0x8, 0x24}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 132.69459ms ago: executing program 4 (id=1355): socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe(&(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2500, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 64.645285ms ago: executing program 3 (id=1356): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@nodelalloc}, {@norecovery}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, 0x0, 0xfd14) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 0s ago: executing program 3 (id=1357): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) (async) close(r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1a46, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x264c3, 0x81f170e84939e2c0) (async) open(&(0x7f0000000280)='./file0\x00', 0x264c3, 0x81f170e84939e2c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x2, 0x0, 0x0, 0xfd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x2, 0x0, 0x0, 0xfd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) pread64(r6, &(0x7f0000000500)=""/229, 0xe5, 0x7fffffffffffffff) (async) pread64(r6, &(0x7f0000000500)=""/229, 0xe5, 0x7fffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r7, 0x0, 0x0, 0x24000080, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) inotify_init1(0x0) kernel console output (not intermixed with test programs): Enslaving as an active interface with an up link [ 61.452765][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.468420][ T5138] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.500966][ T3192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.511250][ T3192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.529711][ T5107] team0: Port device team_slave_0 added [ 61.536981][ T5107] team0: Port device team_slave_1 added [ 61.584453][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.591409][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.617349][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.643349][ T5151] loop3: detected capacity change from 0 to 164 [ 61.654150][ T5151] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 61.666519][ T3192] bridge_slave_1: left allmulticast mode [ 61.672232][ T3192] bridge_slave_1: left promiscuous mode [ 61.677947][ T3192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.686685][ T3192] bridge_slave_0: left allmulticast mode [ 61.692340][ T3192] bridge_slave_0: left promiscuous mode [ 61.698072][ T3192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.818625][ T3192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.831751][ T3192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.841864][ T3192] bond0 (unregistering): Released all slaves [ 61.850518][ T3192] bond1 (unregistering): Released all slaves [ 61.858821][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.865863][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.891992][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.907050][ T5162] loop1: detected capacity change from 0 to 512 [ 61.914146][ T5162] EXT4-fs: Ignoring removed oldalloc option [ 61.920921][ T5162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.955188][ T5161] veth0_to_hsr: entered promiscuous mode [ 61.960842][ T5165] loop3: detected capacity change from 0 to 256 [ 61.967842][ T5161] batadv_slave_0: entered promiscuous mode [ 61.974272][ T5165] FAT-fs (loop3): Unrecognized mount option "u€f8=1" or missing value [ 61.974402][ T5162] loop1: detected capacity change from 0 to 764 [ 61.988937][ T5162] iso9660: Unknown parameter 'ext3' [ 61.995482][ T5161] veth0_to_hsr: left promiscuous mode [ 62.001957][ T5161] batadv_slave_0: left promiscuous mode [ 62.018356][ T5163] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.027830][ T3192] hsr_slave_0: left promiscuous mode [ 62.037020][ T3192] hsr_slave_1: left promiscuous mode [ 62.043282][ T3192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.050798][ T3192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.061339][ T3192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.068800][ T3192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.082318][ T5161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.096051][ T3192] veth1_macvtap: left promiscuous mode [ 62.097064][ T5167] loop3: detected capacity change from 0 to 128 [ 62.101532][ T3192] veth0_macvtap: left promiscuous mode [ 62.113541][ T3192] veth1_vlan: left promiscuous mode [ 62.118824][ T3192] veth0_vlan: left promiscuous mode [ 62.140200][ T5169] FAULT_INJECTION: forcing a failure. [ 62.140200][ T5169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.153314][ T5169] CPU: 0 PID: 5169 Comm: syz.1.603 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 62.163284][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.173406][ T5169] Call Trace: [ 62.176676][ T5169] [ 62.179657][ T5169] dump_stack_lvl+0xf2/0x150 [ 62.184255][ T5169] dump_stack+0x15/0x20 [ 62.188450][ T5169] should_fail_ex+0x229/0x230 [ 62.193171][ T5169] should_fail+0xb/0x10 [ 62.197391][ T5169] should_fail_usercopy+0x1a/0x20 [ 62.202455][ T5169] copy_page_from_iter_atomic+0x22a/0xda0 [ 62.208272][ T5169] ? shmem_write_begin+0xa0/0x1c0 [ 62.213306][ T5169] ? shmem_write_begin+0x10c/0x1c0 [ 62.218426][ T5169] generic_perform_write+0x21a/0x410 [ 62.223719][ T5169] ? __pfx_shmem_write_end+0x10/0x10 [ 62.229013][ T5169] shmem_file_write_iter+0xc8/0xf0 [ 62.234126][ T5169] vfs_write+0x78f/0x900 [ 62.238403][ T5169] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.244212][ T5169] ksys_write+0xeb/0x1b0 [ 62.248466][ T5169] __x64_sys_write+0x42/0x50 [ 62.253064][ T5169] x64_sys_call+0x27ef/0x2d70 [ 62.257837][ T5169] do_syscall_64+0xc9/0x1c0 [ 62.262344][ T5169] ? clear_bhb_loop+0x55/0xb0 [ 62.267027][ T5169] ? clear_bhb_loop+0x55/0xb0 [ 62.271703][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.277596][ T5169] RIP: 0033:0x7f8b93b0775f [ 62.282050][ T5169] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 62.301726][ T5169] RSP: 002b:00007f8b92d89e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 62.310193][ T5169] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f8b93b0775f [ 62.318161][ T5169] RDX: 0000000000040000 RSI: 00007f8b8a96a000 RDI: 0000000000000005 [ 62.326125][ T5169] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004b3 [ 62.334183][ T5169] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000005 [ 62.342143][ T5169] R13: 00007f8b92d89f00 R14: 00007f8b92d89ec0 R15: 00007f8b8a96a000 [ 62.350102][ T5169] [ 62.355940][ T5169] loop1: detected capacity change from 0 to 512 [ 62.362631][ T5169] EXT4-fs: Ignoring removed nobh option [ 62.387526][ T5169] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 62.399061][ T5169] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 62.409134][ T5169] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.603: Corrupt directory, running e2fsck is recommended [ 62.450995][ T5173] loop2: detected capacity change from 0 to 2048 [ 62.491966][ T3192] team0 (unregistering): Port device team_slave_1 removed [ 62.504957][ T3192] team0 (unregistering): Port device team_slave_0 removed [ 62.505796][ T5169] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 62.532314][ T5169] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.603: corrupted in-inode xattr: invalid ea_ino [ 62.555626][ T5169] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.603: couldn't read orphan inode 15 (err -117) [ 62.606821][ T5107] hsr_slave_0: entered promiscuous mode [ 62.612805][ T5107] hsr_slave_1: entered promiscuous mode [ 62.619246][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.627828][ T5107] Cannot create hsr debugfs directory [ 62.650129][ T29] audit: type=1400 audit(1720177450.706:21047): avc: denied { append } for pid=5174 comm="syz.3.605" name="001" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.712432][ T5177] loop1: detected capacity change from 0 to 4096 [ 62.725694][ T5185] vhci_hcd: default hub control req: 6000 v0000 i0000 l0 [ 62.771959][ T5190] SELinux: policydb version -258872103 does not match my version range 15-33 [ 62.782190][ T5190] SELinux: failed to load policy [ 62.788763][ T5191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'. [ 62.821917][ T5196] loop2: detected capacity change from 0 to 512 [ 62.837223][ T29] audit: type=1400 audit(1720177450.896:21048): avc: denied { create } for pid=5197 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.865610][ T29] audit: type=1400 audit(1720177450.916:21049): avc: denied { listen } for pid=5197 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.885237][ T29] audit: type=1400 audit(1720177450.916:21050): avc: denied { connect } for pid=5197 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.905313][ T29] audit: type=1400 audit(1720177450.916:21051): avc: denied { write } for pid=5197 comm="syz.4.613" path="socket:[12379]" dev="sockfs" ino=12379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.920571][ T5196] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.928816][ T29] audit: type=1400 audit(1720177450.916:21052): avc: denied { create } for pid=5197 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.978249][ T5204] loop4: detected capacity change from 0 to 2048 [ 63.010762][ T5206] capability: warning: `syz.1.616' uses 32-bit capabilities (legacy support in use) [ 63.041198][ T5210] sctp: [Deprecated]: syz.1.619 (pid 5210) Use of int in maxseg socket option. [ 63.041198][ T5210] Use struct sctp_assoc_value instead [ 63.093701][ T5216] loop2: detected capacity change from 0 to 2048 [ 63.111215][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.126705][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.139850][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.151683][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.159650][ T5225] loop4: detected capacity change from 0 to 512 [ 63.166681][ T5226] loop1: detected capacity change from 0 to 2048 [ 63.173729][ T5225] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.200645][ T5225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 63.202965][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.214286][ T5225] System zones: 1-12 [ 63.219319][ T5226] loop1: p1 p2 < > p3 p4 < p5 > [ 63.224265][ T5226] loop1: partition table partially beyond EOD, truncated [ 63.224393][ T5226] loop1: p1 start 2305 is beyond EOD, truncated [ 63.234075][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.237682][ T5226] loop1: p2 start 4294902784 is beyond EOD, truncated [ 63.245513][ T5225] EXT4-fs (loop4): 1 truncate cleaned up [ 63.251055][ T5226] loop1: p3 start 4278191616 is beyond EOD, truncated [ 63.252775][ T5226] loop1: p5 start 2305 is beyond EOD, truncated [ 63.277132][ T5225] syz.4.623 (5225): attempted to duplicate a private mapping with mremap. This is not supported. [ 63.278507][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.294852][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.303387][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.310456][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.334573][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.349722][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5229 comm=syz.2.624 [ 63.422105][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.505288][ T5239] loop4: detected capacity change from 0 to 4096 [ 63.559791][ T5107] veth0_vlan: entered promiscuous mode [ 63.571197][ T5107] veth1_vlan: entered promiscuous mode [ 63.594841][ T5107] veth0_macvtap: entered promiscuous mode [ 63.602338][ T5107] veth1_macvtap: entered promiscuous mode [ 63.616826][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.627775][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.637609][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.648118][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.658075][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.668707][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.678734][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.689316][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.704751][ T5254] loop1: detected capacity change from 0 to 512 [ 63.711509][ T5254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.721918][ T5254] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 63.733236][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.745782][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.752369][ T5261] loop3: detected capacity change from 0 to 2048 [ 63.756259][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.756271][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.782872][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.792912][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.803635][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.813525][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.823972][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.826636][ T5261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.631: bg 0: block 234: padding at end of block bitmap is not set [ 63.836191][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.849060][ T5261] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 63.856641][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.867618][ T5261] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.867618][ T5261] [ 63.876180][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.876209][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.903392][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.912868][ T5266] hsr0: VLAN not yet supported [ 63.913992][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 63.922442][ T5254] xt_CT: No such helper "snmp" [ 63.938129][ T5257] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 63.982642][ T5271] loop4: detected capacity change from 0 to 512 [ 63.993852][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 63.996727][ T5271] EXT4-fs: Ignoring removed nobh option [ 64.008244][ T5242] loop2: detected capacity change from 0 to 4096 [ 64.011062][ T5271] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 64.024802][ T5271] EXT4-fs (loop4): group descriptors corrupted! [ 64.239749][ T5290] loop0: detected capacity change from 0 to 512 [ 64.341500][ T5290] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 64.383053][ T5295] loop4: detected capacity change from 0 to 2048 [ 64.464014][ T5295] loop4: p1 p2 < > p3 p4 < p5 > [ 64.469031][ T5295] loop4: partition table partially beyond EOD, truncated [ 64.493334][ T5261] syz.3.631 (5261) used greatest stack depth: 9576 bytes left [ 64.511022][ T5295] loop4: p1 start 2305 is beyond EOD, truncated [ 64.517361][ T5295] loop4: p2 start 4294902784 is beyond EOD, truncated [ 64.524226][ T5295] loop4: p3 start 4278191616 is beyond EOD, truncated [ 64.599838][ T5295] loop4: p5 start 2305 is beyond EOD, truncated [ 64.657533][ T5298] veth0_to_hsr: entered promiscuous mode [ 64.684585][ T5298] batadv_slave_0: entered promiscuous mode [ 64.699279][ T5298] veth0_to_hsr: left promiscuous mode [ 64.707415][ T5299] loop3: detected capacity change from 0 to 512 [ 64.714082][ T5299] EXT4-fs: Ignoring removed oldalloc option [ 64.722580][ T5298] batadv_slave_0: left promiscuous mode [ 64.729096][ T5299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.807716][ T5298] loop3: detected capacity change from 0 to 764 [ 64.815749][ T5301] loop4: detected capacity change from 0 to 256 [ 64.823111][ T5298] iso9660: Unknown parameter 'ext3' [ 64.875643][ T5301] FAT-fs (loop4): Unrecognized mount option "u€f8=1" or missing value [ 64.916252][ T5303] loop0: detected capacity change from 0 to 4096 [ 64.926227][ T5303] EXT4-fs mount: 40 callbacks suppressed [ 64.926239][ T5303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.937696][ T5301] loop4: detected capacity change from 0 to 128 [ 64.945742][ T5303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.977706][ T5298] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.997152][ T5308] x_tables: duplicate underflow at hook 2 [ 65.023365][ T5301] syzkaller0: entered promiscuous mode [ 65.028976][ T5301] syzkaller0: entered allmulticast mode [ 65.224194][ T5320] loop1: detected capacity change from 0 to 512 [ 65.242775][ T5319] loop0: detected capacity change from 0 to 512 [ 65.301838][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 65.323869][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.401081][ T5319] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.415682][ T5320] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 65.463185][ T5335] loop2: detected capacity change from 0 to 2048 [ 65.474689][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.500716][ T5339] loop4: detected capacity change from 0 to 2048 [ 65.508415][ T5335] loop2: p1 p2 < > p3 p4 < p5 > [ 65.513411][ T5335] loop2: partition table partially beyond EOD, truncated [ 65.520674][ T5341] loop0: detected capacity change from 0 to 256 [ 65.521597][ T5335] loop2: p1 start 2305 is beyond EOD, truncated [ 65.533294][ T5335] loop2: p2 start 4294902784 is beyond EOD, truncated [ 65.540059][ T5335] loop2: p3 start 4278191616 is beyond EOD, truncated [ 65.547512][ T5335] loop2: p5 start 2305 is beyond EOD, truncated [ 65.547974][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.578449][ T5339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.649: bg 0: block 234: padding at end of block bitmap is not set [ 65.592801][ T5339] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 65.605287][ T5339] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.605287][ T5339] [ 65.683355][ T5347] veth0_to_hsr: entered promiscuous mode [ 65.707186][ T5347] batadv_slave_0: entered promiscuous mode [ 65.716295][ T5347] veth0_to_hsr: left promiscuous mode [ 65.722082][ T5347] batadv_slave_0: left promiscuous mode [ 65.736573][ T5348] loop0: detected capacity change from 0 to 512 [ 65.743058][ T5348] EXT4-fs: Ignoring removed oldalloc option [ 65.749466][ T5348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.773648][ T5350] loop2: detected capacity change from 0 to 164 [ 65.780650][ T5350] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 65.798742][ T5347] loop0: detected capacity change from 0 to 764 [ 65.805409][ T5347] iso9660: Unknown parameter 'ext3' [ 65.893845][ T5356] FAULT_INJECTION: forcing a failure. [ 65.893845][ T5356] name failslab, interval 1, probability 0, space 0, times 0 [ 65.906523][ T5356] CPU: 1 PID: 5356 Comm: syz.1.655 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 65.916576][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.926664][ T5356] Call Trace: [ 65.929948][ T5356] [ 65.932864][ T5356] dump_stack_lvl+0xf2/0x150 [ 65.937560][ T5356] dump_stack+0x15/0x20 [ 65.941705][ T5356] should_fail_ex+0x229/0x230 [ 65.946416][ T5356] ? alloc_super+0x3a/0x5b0 [ 65.950970][ T5356] __should_failslab+0x92/0xa0 [ 65.955848][ T5356] should_failslab+0x9/0x20 [ 65.960338][ T5356] kmalloc_trace_noprof+0x4b/0x2a0 [ 65.965478][ T5356] alloc_super+0x3a/0x5b0 [ 65.969839][ T5356] ? __pfx_test_keyed_super+0x10/0x10 [ 65.975201][ T5356] sget_fc+0x1c1/0x5d0 [ 65.979273][ T5356] ? __pfx_set_anon_super_fc+0x10/0x10 [ 65.984720][ T5356] ? __pfx_rpc_fill_super+0x10/0x10 [ 65.989923][ T5356] get_tree_keyed+0x43/0x110 [ 65.994577][ T5356] rpc_fs_get_tree+0x66/0xa0 [ 65.999193][ T5356] vfs_get_tree+0x56/0x1d0 [ 66.003599][ T5356] vfs_cmd_create+0xb9/0x170 [ 66.008201][ T5356] __se_sys_fsconfig+0x5f8/0x8f0 [ 66.013155][ T5356] __x64_sys_fsconfig+0x67/0x80 [ 66.018053][ T5356] x64_sys_call+0x115e/0x2d70 [ 66.022797][ T5356] do_syscall_64+0xc9/0x1c0 [ 66.027291][ T5356] ? clear_bhb_loop+0x55/0xb0 [ 66.031956][ T5356] ? clear_bhb_loop+0x55/0xb0 [ 66.036718][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.042660][ T5356] RIP: 0033:0x7f8b93b08bd9 [ 66.047058][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.066737][ T5356] RSP: 002b:00007f8b92d8a048 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 66.075182][ T5356] RAX: ffffffffffffffda RBX: 00007f8b93c96f60 RCX: 00007f8b93b08bd9 [ 66.083140][ T5356] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 66.091130][ T5356] RBP: 00007f8b92d8a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 66.099126][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.107081][ T5356] R13: 000000000000000b R14: 00007f8b93c96f60 R15: 00007ffdcffa3c18 [ 66.115051][ T5356] [ 66.122005][ T5317] 9pnet_fd: p9_fd_create_tcp (5317): problem connecting socket to 127.0.0.1 [ 66.124479][ T5348] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.156760][ T5359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.658'. [ 66.172379][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 66.172391][ T29] audit: type=1400 audit(1720177454.226:21066): avc: denied { create } for pid=5355 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 66.177302][ T5357] tap0: tun_chr_ioctl cmd 2147767517 [ 66.186194][ T5365] loop3: detected capacity change from 0 to 512 [ 66.210468][ T29] audit: type=1400 audit(1720177454.266:21067): avc: denied { create } for pid=5355 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 66.231710][ T29] audit: type=1400 audit(1720177454.266:21068): avc: denied { write } for pid=5355 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 66.257940][ T5363] macvtap0: entered promiscuous mode [ 66.264237][ T5363] macvtap0: left promiscuous mode [ 66.265388][ T5365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.281803][ T5365] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.293235][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.307946][ T29] audit: type=1400 audit(1720177454.366:21069): avc: denied { getopt } for pid=5362 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.336723][ T5370] loop2: detected capacity change from 0 to 512 [ 66.343084][ T5371] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 66.352173][ T5371] ip6_tunnel: non-ECT from fe80:0040:0000:0000:0000:0000:0000:00aa with DS=0xe [ 66.358598][ T5370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.366146][ T29] audit: type=1400 audit(1720177454.416:21070): avc: denied { setattr } for pid=5364 comm="syz.3.660" path="/80/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.397343][ T5370] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.408333][ T3980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.427805][ T4794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.458518][ T29] audit: type=1326 audit(1720177454.516:21071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5374 comm="syz.4.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f225bd9 code=0x0 [ 66.764757][ T5383] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.121880][ T5387] No such timeout policy "syz0" [ 67.152937][ T29] audit: type=1400 audit(1720177455.206:21072): avc: denied { audit_write } for pid=5386 comm="syz.3.665" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.175692][ T29] audit: type=1107 audit(1720177455.206:21073): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='1Ìøî{kë’p¢Ó—l‡•+I%7ͤmç¦Î[‘4þøðýGç„gž¼Ï³˜~Ú×ÜÄáW’»oN¦Ä–ª`î|™ÛÑîýì×¼¶e2v]€—¿- #(_£)MI‚éiX$5ù„@›¬*¶¶ñ>|¯' [ 67.232558][ T5392] loop1: detected capacity change from 0 to 512 [ 67.292336][ T5395] loop3: detected capacity change from 0 to 128 [ 67.351310][ T5392] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 67.377386][ T5398] loop4: detected capacity change from 0 to 512 [ 67.399054][ T5398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.413472][ T5398] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.469738][ T5398] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.669: corrupted inode contents [ 67.527731][ T29] audit: type=1400 audit(1720177455.576:21074): avc: denied { bind } for pid=5394 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.530807][ T5398] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.669: mark_inode_dirty error [ 67.559002][ T5398] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.669: corrupted inode contents [ 67.570962][ T5398] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.669: mark_inode_dirty error [ 67.596066][ T29] audit: type=1326 audit(1720177455.656:21075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.4.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f225bd9 code=0x0 [ 67.625974][ T5407] loop2: detected capacity change from 0 to 2048 [ 67.635598][ T5407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.693455][ T5407] loop2: detected capacity change from 2048 to 1971 [ 67.700603][ T5407] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #18: comm syz.2.671: corrupted in-inode xattr: bad magic number in in-inode xattr [ 67.715730][ T5407] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #18: comm syz.2.671: corrupted in-inode xattr: bad magic number in in-inode xattr [ 67.736384][ T4794] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /23/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 67.763732][ T5184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.903459][ T5419] loop1: detected capacity change from 0 to 512 [ 67.914892][ T5419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.927451][ T5419] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.949492][ T3856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.978352][ T2273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.079555][ T2273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.122417][ T5437] tap0: tun_chr_ioctl cmd 2147767517 [ 68.129745][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 68.147330][ T2273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.178688][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.185989][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.195972][ T5423] bridge_slave_0: entered allmulticast mode [ 68.202494][ T5423] bridge_slave_0: entered promiscuous mode [ 68.209352][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.216724][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.226073][ T5423] bridge_slave_1: entered allmulticast mode [ 68.226228][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.232507][ T5423] bridge_slave_1: entered promiscuous mode [ 68.253287][ T2273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.278718][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.289266][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.327054][ T5423] team0: Port device team_slave_0 added [ 68.334426][ T5423] team0: Port device team_slave_1 added [ 68.408874][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.415873][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.441854][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.459447][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.466446][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.467433][ T5454] loop3: detected capacity change from 0 to 128 [ 68.492437][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.500039][ T5454] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 68.518931][ T2273] bridge_slave_1: left allmulticast mode [ 68.524694][ T2273] bridge_slave_1: left promiscuous mode [ 68.530370][ T2273] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.543979][ T2273] bridge_slave_0: left allmulticast mode [ 68.549634][ T2273] bridge_slave_0: left promiscuous mode [ 68.555240][ T2273] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.696430][ T2273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.708228][ T2273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.719225][ T2273] bond0 (unregistering): Released all slaves [ 68.741000][ T5423] hsr_slave_0: entered promiscuous mode [ 68.748087][ T5423] hsr_slave_1: entered promiscuous mode [ 68.754977][ T5423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.762692][ T5423] Cannot create hsr debugfs directory [ 68.768822][ T5459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.890482][ T2273] hsr_slave_0: left promiscuous mode [ 68.896272][ T2273] hsr_slave_1: left promiscuous mode [ 68.902045][ T2273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.909770][ T2273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.917385][ T2273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.924906][ T2273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.934496][ T2273] veth1_macvtap: left promiscuous mode [ 68.940094][ T2273] veth0_macvtap: left promiscuous mode [ 68.945715][ T2273] veth1_vlan: left promiscuous mode [ 68.951070][ T2273] veth0_vlan: left promiscuous mode [ 69.011238][ T5467] loop3: detected capacity change from 0 to 512 [ 69.080482][ T5467] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 69.253905][ T5472] loop1: detected capacity change from 0 to 2048 [ 69.274087][ T2273] team0 (unregistering): Port device team_slave_1 removed [ 69.285254][ T2273] team0 (unregistering): Port device team_slave_0 removed [ 69.295862][ T5472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.360347][ T5472] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.685: bg 0: block 234: padding at end of block bitmap is not set [ 69.377323][ T5472] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 69.389945][ T5472] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.389945][ T5472] [ 69.715924][ T5423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.724447][ T5423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.732536][ T5423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.741148][ T5423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.775785][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.787967][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.796776][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.803835][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.821024][ T5423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.831390][ T5423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.843917][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.850958][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.899787][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.957739][ T5423] veth0_vlan: entered promiscuous mode [ 69.965843][ T5423] veth1_vlan: entered promiscuous mode [ 69.980158][ T5423] veth0_macvtap: entered promiscuous mode [ 69.987529][ T5423] veth1_macvtap: entered promiscuous mode [ 69.998006][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.008530][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.018415][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.028887][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.038755][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.049186][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.059013][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.069497][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.080514][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.089599][ T3856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.099962][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.110405][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.120216][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.130638][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.140426][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.150871][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.160662][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.171098][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.181850][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.191839][ T5423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.200572][ T5423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.209346][ T5423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.218097][ T5423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.256431][ T5505] veth0_to_hsr: entered promiscuous mode [ 70.262698][ T5505] batadv_slave_0: entered promiscuous mode [ 70.270035][ T5505] veth0_to_hsr: left promiscuous mode [ 70.275898][ T5505] batadv_slave_0: left promiscuous mode [ 70.295116][ T5507] FAULT_INJECTION: forcing a failure. [ 70.295116][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 70.298703][ T5509] FAULT_INJECTION: forcing a failure. [ 70.298703][ T5509] name failslab, interval 1, probability 0, space 0, times 0 [ 70.307736][ T5507] CPU: 0 PID: 5507 Comm: syz.2.676 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 70.307757][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.307767][ T5507] Call Trace: [ 70.343589][ T5507] [ 70.346505][ T5507] dump_stack_lvl+0xf2/0x150 [ 70.351094][ T5507] dump_stack+0x15/0x20 [ 70.355236][ T5507] should_fail_ex+0x229/0x230 [ 70.359907][ T5507] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 70.366157][ T5507] __should_failslab+0x92/0xa0 [ 70.370913][ T5507] should_failslab+0x9/0x20 [ 70.375407][ T5507] __kmalloc_noprof+0xa5/0x370 [ 70.380163][ T5507] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 70.386284][ T5507] ? ns_capable+0x7d/0xb0 [ 70.390614][ T5507] genl_rcv_msg+0x470/0x6c0 [ 70.395102][ T5507] ? mod_objcg_state+0x2e2/0x4e0 [ 70.400036][ T5507] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 70.405362][ T5507] ? __rcu_read_unlock+0x4e/0x70 [ 70.410366][ T5507] ? avc_has_perm_noaudit+0x1cc/0x210 [ 70.415728][ T5507] netlink_rcv_skb+0x12c/0x230 [ 70.420515][ T5507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.425538][ T5507] genl_rcv+0x28/0x40 [ 70.429516][ T5507] netlink_unicast+0x58d/0x660 [ 70.434267][ T5507] netlink_sendmsg+0x5ca/0x6e0 [ 70.439025][ T5507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.444321][ T5507] __sock_sendmsg+0x140/0x180 [ 70.448988][ T5507] ____sys_sendmsg+0x312/0x410 [ 70.453794][ T5507] __sys_sendmsg+0x1e9/0x280 [ 70.458466][ T5507] __x64_sys_sendmsg+0x46/0x50 [ 70.463217][ T5507] x64_sys_call+0xb25/0x2d70 [ 70.467831][ T5507] do_syscall_64+0xc9/0x1c0 [ 70.472322][ T5507] ? clear_bhb_loop+0x55/0xb0 [ 70.476985][ T5507] ? clear_bhb_loop+0x55/0xb0 [ 70.481728][ T5507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.487647][ T5507] RIP: 0033:0x7f57254a6bd9 [ 70.492054][ T5507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.511729][ T5507] RSP: 002b:00007f5724728048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.520170][ T5507] RAX: ffffffffffffffda RBX: 00007f5725634f60 RCX: 00007f57254a6bd9 [ 70.528204][ T5507] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000006 [ 70.536158][ T5507] RBP: 00007f57247280a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.544139][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.552094][ T5507] R13: 000000000000000b R14: 00007f5725634f60 R15: 00007ffd14569a88 [ 70.560054][ T5507] [ 70.563099][ T5509] CPU: 1 PID: 5509 Comm: syz.4.693 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 70.573117][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.583158][ T5509] Call Trace: [ 70.586426][ T5509] [ 70.589339][ T5509] dump_stack_lvl+0xf2/0x150 [ 70.593924][ T5509] dump_stack+0x15/0x20 [ 70.598084][ T5509] should_fail_ex+0x229/0x230 [ 70.602756][ T5509] ? __alloc_skb+0x10b/0x300 [ 70.607332][ T5509] __should_failslab+0x92/0xa0 [ 70.612120][ T5509] should_failslab+0x9/0x20 [ 70.616613][ T5509] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 70.622414][ T5509] ? nlmon_xmit+0x51/0x60 [ 70.626796][ T5509] __alloc_skb+0x10b/0x300 [ 70.631203][ T5509] netlink_ack+0xef/0x4f0 [ 70.635587][ T5509] netlink_rcv_skb+0x19c/0x230 [ 70.640375][ T5509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.645908][ T5509] rtnetlink_rcv+0x1c/0x30 [ 70.650311][ T5509] netlink_unicast+0x58d/0x660 [ 70.655216][ T5509] netlink_sendmsg+0x5ca/0x6e0 [ 70.659975][ T5509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.665256][ T5509] __sock_sendmsg+0x140/0x180 [ 70.669926][ T5509] ____sys_sendmsg+0x312/0x410 [ 70.674680][ T5509] __sys_sendmsg+0x1e9/0x280 [ 70.679381][ T5509] __x64_sys_sendmsg+0x46/0x50 [ 70.684153][ T5509] x64_sys_call+0xb25/0x2d70 [ 70.688780][ T5509] do_syscall_64+0xc9/0x1c0 [ 70.693275][ T5509] ? clear_bhb_loop+0x55/0xb0 [ 70.697941][ T5509] ? clear_bhb_loop+0x55/0xb0 [ 70.702605][ T5509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.708486][ T5509] RIP: 0033:0x7f6d6f225bd9 [ 70.712883][ T5509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.732476][ T5509] RSP: 002b:00007f6d6e4a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.740873][ T5509] RAX: ffffffffffffffda RBX: 00007f6d6f3b3f60 RCX: 00007f6d6f225bd9 [ 70.748947][ T5509] RDX: 0000000000000000 RSI: 0000000020001280 RDI: 0000000000000003 [ 70.756904][ T5509] RBP: 00007f6d6e4a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.764858][ T5509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.772811][ T5509] R13: 000000000000000b R14: 00007f6d6f3b3f60 R15: 00007fff2814c368 [ 70.780839][ T5509] [ 70.798235][ T5510] loop1: detected capacity change from 0 to 512 [ 70.808744][ T5510] EXT4-fs: Ignoring removed oldalloc option [ 70.816040][ T5510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.861747][ T5505] loop1: detected capacity change from 0 to 764 [ 70.870636][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 70.877688][ T5505] iso9660: Unknown parameter 'ext3' [ 70.885942][ T5528] SELinux: Context Ü is not valid (left unmapped). [ 70.901821][ T5529] bond_slave_0: entered promiscuous mode [ 70.907582][ T5529] bond_slave_1: entered promiscuous mode [ 70.914223][ T5529] vlan2: entered promiscuous mode [ 70.919252][ T5529] bond0: entered promiscuous mode [ 70.924695][ T5529] vlan2: entered allmulticast mode [ 70.929854][ T5529] bond0: entered allmulticast mode [ 70.934982][ T5529] bond_slave_0: entered allmulticast mode [ 70.940780][ T5529] bond_slave_1: entered allmulticast mode [ 70.948344][ T5529] bond0: left allmulticast mode [ 70.953276][ T5529] bond_slave_0: left allmulticast mode [ 70.958763][ T5529] bond_slave_1: left allmulticast mode [ 70.964306][ T5529] bond0: left promiscuous mode [ 70.969197][ T5529] bond_slave_0: left promiscuous mode [ 70.974611][ T5529] bond_slave_1: left promiscuous mode [ 70.984798][ T5505] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.078100][ T5551] netlink: 'syz.1.712': attribute type 7 has an invalid length. [ 71.085793][ T5551] netlink: 'syz.1.712': attribute type 39 has an invalid length. [ 71.101686][ T5551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5551 comm=syz.1.712 [ 71.115735][ T5551] netlink: 'syz.1.712': attribute type 7 has an invalid length. [ 71.123356][ T5551] netlink: 'syz.1.712': attribute type 39 has an invalid length. [ 71.191110][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 71.336594][ T5597] team0: entered promiscuous mode [ 71.341692][ T5597] team_slave_0: entered promiscuous mode [ 71.347521][ T5597] team_slave_1: entered promiscuous mode [ 71.365146][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 71.365171][ T29] audit: type=1400 audit(1720177459.426:21085): avc: denied { bind } for pid=5600 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.401513][ T5603] netlink: 'syz.1.732': attribute type 3 has an invalid length. [ 71.409192][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 71.466109][ T5620] netlink: 76 bytes leftover after parsing attributes in process `syz.1.737'. [ 71.543265][ T5596] team0: left promiscuous mode [ 71.548212][ T5596] team_slave_0: left promiscuous mode [ 71.553741][ T5596] team_slave_1: left promiscuous mode [ 71.589792][ C0] hrtimer: interrupt took 23709 ns [ 71.697823][ T5644] syzkaller0: entered promiscuous mode [ 71.703290][ T5644] syzkaller0: entered allmulticast mode [ 71.765574][ T29] audit: type=1400 audit(1720177459.826:21086): avc: denied { ioctl } for pid=5656 comm="syz.3.755" path="socket:[13271]" dev="sockfs" ino=13271 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.881254][ T5670] syzkaller0: entered promiscuous mode [ 71.887144][ T5670] syzkaller0: entered allmulticast mode [ 71.949456][ T5678] syzkaller0: entered promiscuous mode [ 71.955180][ T5678] syzkaller0: entered allmulticast mode [ 72.012796][ T5682] syzkaller0: refused to change device tx_queue_len [ 72.039011][ T5684] netlink: 'syz.3.766': attribute type 7 has an invalid length. [ 72.046995][ T5684] netlink: 'syz.3.766': attribute type 39 has an invalid length. [ 72.666665][ T5713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5713 comm=syz.4.777 [ 72.707829][ T5715] loop4: detected capacity change from 0 to 128 [ 72.723534][ T5715] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.736702][ T5715] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.795076][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 72.844268][ T3082] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.995894][ T5744] loop4: detected capacity change from 0 to 512 [ 73.024108][ T5744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.043520][ T29] audit: type=1400 audit(1720177461.096:21087): avc: denied { create } for pid=5741 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.073488][ T5744] EXT4-fs (loop4): 1 truncate cleaned up [ 73.082221][ T5744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.093605][ T5755] loop0: detected capacity change from 0 to 512 [ 73.107944][ T5755] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 73.132437][ T29] audit: type=1400 audit(1720177461.126:21088): avc: denied { write } for pid=5741 comm="syz.1.789" path="socket:[15441]" dev="sockfs" ino=15441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.171611][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.215929][ T5761] loop1: detected capacity change from 0 to 1024 [ 73.222951][ T5761] EXT4-fs: Ignoring removed oldalloc option [ 73.233381][ T5766] loop3: detected capacity change from 0 to 128 [ 73.240708][ T5761] EXT4-fs: dax option not supported [ 73.502061][ T29] audit: type=1400 audit(1720177461.556:21089): avc: denied { write } for pid=5806 comm="syz.0.817" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.709644][ T29] audit: type=1400 audit(1720177461.766:21090): avc: denied { read } for pid=5826 comm="syz.0.823" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 73.728020][ T5831] tun0: tun_chr_ioctl cmd 2150131490 [ 73.732690][ T29] audit: type=1400 audit(1720177461.766:21091): avc: denied { open } for pid=5826 comm="syz.0.823" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.931576][ T29] audit: type=1400 audit(1720177462.916:21092): avc: denied { setopt } for pid=5876 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.951188][ T29] audit: type=1400 audit(1720177462.916:21093): avc: denied { bind } for pid=5876 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.388148][ T5890] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 75.593795][ T5901] netlink: 'syz.3.851': attribute type 13 has an invalid length. [ 75.943807][ T29] audit: type=1326 audit(1720177463.996:21094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 75.986220][ T5952] netlink: 'syz.1.873': attribute type 4 has an invalid length. [ 76.005729][ T5952] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 76.047249][ T5948] loop0: detected capacity change from 0 to 128 [ 76.065119][ T5948] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 76.215596][ T5975] loop3: detected capacity change from 0 to 164 [ 76.222523][ T5975] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 76.231979][ T5975] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 76.736505][ T6023] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.901'. [ 76.795790][ T6037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.860750][ T6037] loop0: detected capacity change from 0 to 512 [ 76.868281][ T6037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.881274][ T6037] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 76.895608][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 76.933220][ T6037] xt_CT: No such helper "snmp" [ 77.031953][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 77.044766][ T6049] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.118482][ T6053] loop4: detected capacity change from 0 to 128 [ 77.373256][ T6069] veth0_to_hsr: entered promiscuous mode [ 77.392283][ T6069] batadv_slave_0: entered promiscuous mode [ 77.412050][ T6069] veth0_to_hsr: left promiscuous mode [ 77.426351][ T6069] batadv_slave_0: left promiscuous mode [ 77.437347][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6073 comm=syz.2.919 [ 77.455418][ T6072] loop0: detected capacity change from 0 to 512 [ 77.475568][ T6071] netlink: 'syz.2.919': attribute type 7 has an invalid length. [ 77.483231][ T6071] netlink: 'syz.2.919': attribute type 39 has an invalid length. [ 77.493500][ T6072] EXT4-fs: Ignoring removed oldalloc option [ 77.502070][ T6073] netlink: 'syz.2.919': attribute type 7 has an invalid length. [ 77.509792][ T6073] netlink: 'syz.2.919': attribute type 39 has an invalid length. [ 77.510940][ T6072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.590098][ T6069] loop0: detected capacity change from 0 to 764 [ 77.603397][ T6069] iso9660: Unknown parameter 'ext3' [ 77.617282][ T6076] loop3: detected capacity change from 0 to 512 [ 77.637555][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 77.637634][ T29] audit: type=1326 audit(1720177465.696:21537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.677775][ T8] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 77.685536][ T8] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 77.703281][ T8] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 77.711555][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.721593][ T8] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 77.733956][ T29] audit: type=1326 audit(1720177465.736:21538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.743621][ T6076] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.757355][ T29] audit: type=1326 audit(1720177465.736:21539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.791111][ T29] audit: type=1326 audit(1720177465.736:21540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.809715][ T6069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.814507][ T29] audit: type=1326 audit(1720177465.736:21541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.844346][ T29] audit: type=1326 audit(1720177465.736:21542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.867710][ T29] audit: type=1326 audit(1720177465.736:21543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.891117][ T29] audit: type=1326 audit(1720177465.736:21544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.914490][ T29] audit: type=1326 audit(1720177465.736:21545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.937895][ T29] audit: type=1326 audit(1720177465.736:21546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6074 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57254a6bd9 code=0x7ffc0000 [ 77.979433][ T3980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.999932][ T6086] SELinux: policydb version -258872103 does not match my version range 15-33 [ 78.011184][ T6086] SELinux: failed to load policy [ 78.020240][ T6090] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.051354][ T3158] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 78.059052][ T3158] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 78.067625][ T3158] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 78.084042][ T3158] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.100871][ T6090] loop2: detected capacity change from 0 to 512 [ 78.114013][ T6090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.125388][ T6090] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 78.135156][ T6099] netlink: 'syz.3.930': attribute type 7 has an invalid length. [ 78.142775][ T6099] netlink: 'syz.3.930': attribute type 39 has an invalid length. [ 78.156227][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6099 comm=syz.3.930 [ 78.168568][ T6099] netlink: 'syz.3.930': attribute type 7 has an invalid length. [ 78.176223][ T6099] netlink: 'syz.3.930': attribute type 39 has an invalid length. [ 78.196369][ T6090] xt_CT: No such helper "snmp" [ 78.220534][ T6111] veth0_to_hsr: entered promiscuous mode [ 78.227441][ T6111] batadv_slave_0: entered promiscuous mode [ 78.235222][ T6111] veth0_to_hsr: left promiscuous mode [ 78.241253][ T6111] batadv_slave_0: left promiscuous mode [ 78.259300][ T6112] netlink: 'syz.3.934': attribute type 7 has an invalid length. [ 78.267007][ T6112] netlink: 'syz.3.934': attribute type 39 has an invalid length. [ 78.277760][ T6113] loop4: detected capacity change from 0 to 512 [ 78.289103][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 78.302035][ T6113] EXT4-fs: Ignoring removed oldalloc option [ 78.313407][ T6113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.325071][ T6117] netlink: 96 bytes leftover after parsing attributes in process `syz.3.936'. [ 78.342099][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 78.350135][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 78.359787][ T8] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 78.368515][ T8] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.376172][ T6111] loop4: detected capacity change from 0 to 764 [ 78.385941][ T6111] iso9660: Unknown parameter 'ext3' [ 78.386039][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 78.497095][ T6111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.532348][ T6136] loop1: detected capacity change from 0 to 512 [ 78.543244][ T6138] FAULT_INJECTION: forcing a failure. [ 78.543244][ T6138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.556561][ T6138] CPU: 0 PID: 6138 Comm: syz.4.945 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 78.566603][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 78.576658][ T6138] Call Trace: [ 78.579929][ T6138] [ 78.582847][ T6138] dump_stack_lvl+0xf2/0x150 [ 78.587511][ T6138] dump_stack+0x15/0x20 [ 78.591669][ T6138] should_fail_ex+0x229/0x230 [ 78.596446][ T6138] __should_fail_alloc_page+0xfd/0x110 [ 78.601890][ T6138] __alloc_pages_noprof+0x109/0x360 [ 78.607156][ T6138] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 78.612607][ T6138] shmem_get_folio_gfp+0x3e4/0xb70 [ 78.617777][ T6138] shmem_fallocate+0x583/0x860 [ 78.622542][ T6138] vfs_fallocate+0x380/0x3e0 [ 78.627122][ T6138] __x64_sys_fallocate+0x79/0xc0 [ 78.632182][ T6138] x64_sys_call+0x27b3/0x2d70 [ 78.636846][ T6138] do_syscall_64+0xc9/0x1c0 [ 78.641446][ T6138] ? clear_bhb_loop+0x55/0xb0 [ 78.646108][ T6138] ? clear_bhb_loop+0x55/0xb0 [ 78.650800][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.656683][ T6138] RIP: 0033:0x7f6d6f225bd9 [ 78.661086][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.680749][ T6138] RSP: 002b:00007f6d6e4a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 78.689230][ T6138] RAX: ffffffffffffffda RBX: 00007f6d6f3b3f60 RCX: 00007f6d6f225bd9 [ 78.697183][ T6138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.705143][ T6138] RBP: 00007f6d6e4a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.713155][ T6138] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000002 [ 78.721629][ T6138] R13: 000000000000000b R14: 00007f6d6f3b3f60 R15: 00007fff2814c368 [ 78.729636][ T6138] [ 78.747713][ T6139] loop2: detected capacity change from 0 to 128 [ 78.767339][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.781220][ T6136] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.813773][ T3856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.845005][ T3158] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 78.852740][ T3158] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 78.869968][ T3158] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 78.879820][ T6151] netlink: 96 bytes leftover after parsing attributes in process `syz.1.948'. [ 78.891897][ T3158] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 78.938969][ T6157] veth0_to_hsr: entered promiscuous mode [ 78.946836][ T6157] batadv_slave_0: entered promiscuous mode [ 78.956955][ T6157] veth0_to_hsr: left promiscuous mode [ 78.968897][ T6157] batadv_slave_0: left promiscuous mode [ 78.990893][ T6164] loop1: detected capacity change from 0 to 512 [ 79.018502][ T6164] EXT4-fs: Ignoring removed oldalloc option [ 79.030355][ T6164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.046986][ T6170] loop4: detected capacity change from 0 to 512 [ 79.077540][ T6157] loop1: detected capacity change from 0 to 764 [ 79.084284][ T6157] iso9660: Unknown parameter 'ext3' [ 79.090683][ T6170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.113505][ T6170] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.154900][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.167836][ T6157] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.168741][ T6182] netlink: 96 bytes leftover after parsing attributes in process `syz.0.962'. [ 79.354537][ T6195] loop4: detected capacity change from 0 to 512 [ 79.373527][ T6195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.393942][ T6195] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 79.486526][ T6195] xt_CT: No such helper "snmp" [ 79.516463][ T6211] netlink: 96 bytes leftover after parsing attributes in process `syz.2.973'. [ 79.550583][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 79.559801][ T6213] SELinux: policydb version -258872103 does not match my version range 15-33 [ 79.577776][ T6213] SELinux: failed to load policy [ 79.616288][ T6217] veth0_to_hsr: entered promiscuous mode [ 79.639703][ T6217] batadv_slave_0: entered promiscuous mode [ 79.660913][ T6220] loop1: detected capacity change from 0 to 512 [ 79.671293][ T6217] veth0_to_hsr: left promiscuous mode [ 79.673735][ T6220] EXT4-fs: Ignoring removed oldalloc option [ 79.683639][ T6220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.703118][ T6217] batadv_slave_0: left promiscuous mode [ 79.746697][ T6220] loop1: detected capacity change from 0 to 764 [ 79.753227][ T6220] iso9660: Unknown parameter 'ext3' [ 79.848372][ T6217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.948306][ T6236] loop4: detected capacity change from 0 to 128 [ 80.047521][ T6244] loop2: detected capacity change from 0 to 512 [ 80.106804][ T6249] SELinux: policydb version -258872103 does not match my version range 15-33 [ 80.118674][ T6249] SELinux: failed to load policy [ 80.154866][ T6244] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 80.292763][ T6252] loop3: detected capacity change from 0 to 512 [ 80.309468][ T6252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.343282][ T6252] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 80.426987][ T6252] xt_CT: No such helper "snmp" [ 80.453833][ T6270] veth0_to_hsr: entered promiscuous mode [ 80.468058][ T6270] batadv_slave_0: entered promiscuous mode [ 80.483674][ T6270] veth0_to_hsr: left promiscuous mode [ 80.489741][ T6270] batadv_slave_0: left promiscuous mode [ 80.514533][ T6274] loop0: detected capacity change from 0 to 512 [ 80.528750][ T6274] EXT4-fs: Ignoring removed oldalloc option [ 80.546296][ T6274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.611959][ T6270] loop0: detected capacity change from 0 to 764 [ 80.619556][ T6270] iso9660: Unknown parameter 'ext3' [ 80.650525][ T2762] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 80.658289][ T2762] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 80.668391][ T2762] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 80.677050][ T2762] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 80.755207][ T6270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.793295][ T6293] loop0: detected capacity change from 0 to 512 [ 80.806581][ T6293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.819286][ T6293] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.861341][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.006650][ T6323] veth0_to_hsr: entered promiscuous mode [ 81.012930][ T6323] batadv_slave_0: entered promiscuous mode [ 81.020325][ T6323] veth0_to_hsr: left promiscuous mode [ 81.026523][ T6323] batadv_slave_0: left promiscuous mode [ 81.082285][ T6328] loop3: detected capacity change from 0 to 512 [ 81.114740][ T6330] loop2: detected capacity change from 0 to 128 [ 81.141856][ T6324] loop1: detected capacity change from 0 to 512 [ 81.187723][ T6332] loop4: detected capacity change from 0 to 1024 [ 81.203581][ T6324] EXT4-fs: Ignoring removed oldalloc option [ 81.234326][ T6332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.256641][ T6324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.346624][ T6328] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 81.395892][ T6332] pimreg: entered allmulticast mode [ 81.408913][ T6323] loop1: detected capacity change from 0 to 764 [ 81.423150][ T6323] iso9660: Unknown parameter 'ext3' [ 81.459797][ T6344] loop0: detected capacity change from 0 to 512 [ 81.469577][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.482347][ T6344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.497839][ T6323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 81.505229][ T6344] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.552876][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.150275][ T6378] veth0_to_hsr: entered promiscuous mode [ 82.152588][ T6380] loop4: detected capacity change from 0 to 512 [ 82.171220][ T6378] batadv_slave_0: entered promiscuous mode [ 82.174087][ T6376] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.191085][ T6378] veth0_to_hsr: left promiscuous mode [ 82.198062][ T6378] batadv_slave_0: left promiscuous mode [ 82.207250][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.220036][ T6380] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.235362][ T6385] loop3: detected capacity change from 0 to 512 [ 82.242343][ T6385] EXT4-fs: Ignoring removed oldalloc option [ 82.250277][ T6385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.280714][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.297924][ T6385] loop3: detected capacity change from 0 to 764 [ 82.304507][ T6385] iso9660: Unknown parameter 'ext3' [ 82.377327][ T6388] loop2: detected capacity change from 0 to 512 [ 82.589564][ T6388] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 82.601891][ T6378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 82.627180][ T6398] __nla_validate_parse: 7 callbacks suppressed [ 82.627189][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 82.673525][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 82.673539][ T29] audit: type=1400 audit(1720177470.696:21686): avc: denied { execmem } for pid=6397 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.722965][ T3156] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 82.730775][ T3156] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 82.738633][ T3156] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 82.746591][ T3156] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 82.825079][ T6405] loop3: detected capacity change from 0 to 128 [ 83.114910][ T6420] SELinux: policydb version -258872103 does not match my version range 15-33 [ 83.124360][ T6420] SELinux: failed to load policy [ 83.168978][ T6427] veth0_to_hsr: entered promiscuous mode [ 83.174494][ T6413] loop1: detected capacity change from 0 to 256 [ 83.181567][ T6427] batadv_slave_0: entered promiscuous mode [ 83.190529][ T6427] veth0_to_hsr: left promiscuous mode [ 83.196462][ T6427] batadv_slave_0: left promiscuous mode [ 83.198109][ T6413] FAT-fs (loop1): codepage cp861 not found [ 83.211520][ T6431] loop4: detected capacity change from 0 to 512 [ 83.221003][ T6431] EXT4-fs: Ignoring removed oldalloc option [ 83.229773][ T6431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.234870][ T6434] loop0: detected capacity change from 0 to 512 [ 83.256212][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.268824][ T6434] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.298001][ T6427] loop4: detected capacity change from 0 to 764 [ 83.304479][ T6427] iso9660: Unknown parameter 'ext3' [ 83.313729][ T29] audit: type=1400 audit(1720177471.366:21687): avc: denied { unmount } for pid=3856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.335014][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.391403][ T6427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 83.425276][ T3156] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 83.432935][ T3156] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 83.440678][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 83.449672][ T3156] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 83.459410][ T3156] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 83.563172][ T6457] loop1: detected capacity change from 0 to 512 [ 83.653738][ T6457] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 83.912476][ T6476] loop3: detected capacity change from 0 to 512 [ 83.925936][ T6476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.942134][ T6476] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.956995][ T6483] veth0_to_hsr: entered promiscuous mode [ 83.963937][ T6483] batadv_slave_0: entered promiscuous mode [ 83.977690][ T6483] veth0_to_hsr: left promiscuous mode [ 83.989421][ T6483] batadv_slave_0: left promiscuous mode [ 83.996272][ T3980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.016424][ T6484] loop4: detected capacity change from 0 to 512 [ 84.036549][ T6484] EXT4-fs: Ignoring removed oldalloc option [ 84.044683][ T6484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.088140][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 84.213213][ T6483] loop4: detected capacity change from 0 to 764 [ 84.220607][ T6483] iso9660: Unknown parameter 'ext3' [ 84.280351][ T6492] loop3: detected capacity change from 0 to 128 [ 84.329585][ T6484] xt_TPROXY: Can be used only with -p tcp or -p udp [ 84.577690][ T6503] SELinux: policydb version -258872103 does not match my version range 15-33 [ 84.587701][ T6503] SELinux: failed to load policy [ 84.652639][ T6517] loop4: detected capacity change from 0 to 512 [ 84.665230][ T6514] loop2: detected capacity change from 0 to 128 [ 84.676002][ T6517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.689334][ T6517] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.690373][ T6520] veth0_to_hsr: entered promiscuous mode [ 84.711858][ T6520] batadv_slave_0: entered promiscuous mode [ 84.719664][ T6520] veth0_to_hsr: left promiscuous mode [ 84.728316][ T6520] batadv_slave_0: left promiscuous mode [ 84.737762][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.743008][ T6523] loop1: detected capacity change from 0 to 512 [ 84.758467][ T6523] EXT4-fs: Ignoring removed oldalloc option [ 84.765559][ T6523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.807517][ T6523] loop1: detected capacity change from 0 to 764 [ 84.813971][ T6523] iso9660: Unknown parameter 'ext3' [ 84.821150][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'. [ 84.849202][ T6528] loop4: detected capacity change from 0 to 128 [ 84.859186][ T6528] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.871593][ T6528] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.910758][ T29] audit: type=1400 audit(1720177472.966:21688): avc: denied { create } for pid=6527 comm="syz.4.1084" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 84.942885][ T6528] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1084'. [ 84.952517][ T29] audit: type=1400 audit(1720177472.996:21689): avc: denied { read write } for pid=6527 comm="syz.4.1084" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 84.975415][ T29] audit: type=1400 audit(1720177472.996:21690): avc: denied { open } for pid=6527 comm="syz.4.1084" path="/220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 85.020193][ T29] audit: type=1400 audit(1720177472.996:21691): avc: denied { mounton } for pid=6527 comm="syz.4.1084" path="/220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 85.065201][ T29] audit: type=1400 audit(1720177472.996:21692): avc: denied { write } for pid=3158 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17021 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.098263][ T6536] veth0_to_hsr: entered promiscuous mode [ 85.104779][ T6536] batadv_slave_0: entered promiscuous mode [ 85.111754][ T6536] veth0_to_hsr: left promiscuous mode [ 85.117447][ T6536] batadv_slave_0: left promiscuous mode [ 85.131498][ T6538] tipc: Enabling of bearer rejected, failed to enable media [ 85.152148][ T6541] loop1: detected capacity change from 0 to 512 [ 85.159890][ T6541] EXT4-fs: Ignoring removed oldalloc option [ 85.166710][ T6541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.167238][ T6544] loop0: detected capacity change from 0 to 128 [ 85.183033][ T6544] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.197528][ T6544] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.246498][ T6536] loop1: detected capacity change from 0 to 764 [ 85.254223][ T6536] iso9660: Unknown parameter 'ext3' [ 85.261718][ T6544] FAULT_INJECTION: forcing a failure. [ 85.261718][ T6544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.274815][ T6544] CPU: 0 PID: 6544 Comm: syz.0.1090 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 85.284883][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.294932][ T6544] Call Trace: [ 85.298197][ T6544] [ 85.301107][ T6544] dump_stack_lvl+0xf2/0x150 [ 85.305677][ T6544] dump_stack+0x15/0x20 [ 85.309811][ T6544] should_fail_ex+0x229/0x230 [ 85.314612][ T6544] should_fail+0xb/0x10 [ 85.318773][ T6544] should_fail_usercopy+0x1a/0x20 [ 85.323781][ T6544] _copy_from_user+0x1e/0xd0 [ 85.328420][ T6544] memdup_user+0x64/0xc0 [ 85.332717][ T6544] strndup_user+0x68/0xa0 [ 85.337033][ T6544] perf_uprobe_init+0x49/0x140 [ 85.341914][ T6544] perf_uprobe_event_init+0xe2/0x140 [ 85.347236][ T6544] perf_try_init_event+0xc3/0x2b0 [ 85.352244][ T6544] perf_event_alloc+0xa45/0x16d0 [ 85.357219][ T6544] __se_sys_perf_event_open+0x837/0x2170 [ 85.362840][ T6544] ? xfd_validate_state+0x46/0xf0 [ 85.367859][ T6544] __x64_sys_perf_event_open+0x67/0x80 [ 85.373378][ T6544] x64_sys_call+0x1909/0x2d70 [ 85.378064][ T6544] do_syscall_64+0xc9/0x1c0 [ 85.382546][ T6544] ? clear_bhb_loop+0x55/0xb0 [ 85.387207][ T6544] ? clear_bhb_loop+0x55/0xb0 [ 85.391910][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.397822][ T6544] RIP: 0033:0x7f2b70303bd9 [ 85.402249][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.421898][ T6544] RSP: 002b:00007f2b6f585048 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 85.430329][ T6544] RAX: ffffffffffffffda RBX: 00007f2b70491f60 RCX: 00007f2b70303bd9 [ 85.438277][ T6544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 85.446431][ T6544] RBP: 00007f2b6f5850a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.454435][ T6544] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 85.462383][ T6544] R13: 000000000000000b R14: 00007f2b70491f60 R15: 00007fff49fb7938 [ 85.470336][ T6544] [ 85.499131][ T5107] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.521003][ T6536] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.547516][ T6558] veth0_to_hsr: entered promiscuous mode [ 85.554559][ T6558] batadv_slave_0: entered promiscuous mode [ 85.561612][ T6558] veth0_to_hsr: left promiscuous mode [ 85.567182][ T6558] batadv_slave_0: left promiscuous mode [ 85.602936][ T6562] loop0: detected capacity change from 0 to 512 [ 85.607537][ T6563] loop3: detected capacity change from 0 to 512 [ 85.611417][ T6562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.620070][ T6563] EXT4-fs: Ignoring removed oldalloc option [ 85.630899][ T6562] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 85.640219][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 85.652505][ T6563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.706387][ T3082] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.720072][ T6568] validate_nla: 2 callbacks suppressed [ 85.720083][ T6568] netlink: 'syz.1.1096': attribute type 12 has an invalid length. [ 85.772167][ T6560] xt_CT: No such helper "snmp" [ 85.805227][ T6558] loop3: detected capacity change from 0 to 764 [ 85.824522][ T6558] iso9660: Unknown parameter 'ext3' [ 85.841056][ T6572] loop2: detected capacity change from 0 to 128 [ 85.898068][ T6558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.932927][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 86.023302][ T6579] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1102'. [ 86.114050][ T6585] loop0: detected capacity change from 0 to 512 [ 86.125163][ T6585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.137830][ T6585] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.169573][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.185910][ T6591] loop3: detected capacity change from 0 to 512 [ 86.192622][ T6591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.201045][ T6591] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 86.209822][ T6591] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 86.218487][ T6591] EXT4-fs (loop3): 1 truncate cleaned up [ 86.225800][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.241482][ T6591] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 4: comm syz.3.1107: lblock 0 mapped to illegal pblock 4 (length 1) [ 86.255684][ T6591] EXT4-fs (loop3): Remounting filesystem read-only [ 86.268342][ T3980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.347738][ T6596] loop4: detected capacity change from 0 to 512 [ 86.386780][ T6596] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 86.428129][ T3156] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 86.435832][ T3156] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 86.543181][ T3156] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x3 [ 86.579529][ T6605] veth0_to_hsr: entered promiscuous mode [ 86.592055][ T3156] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 86.606304][ T6605] batadv_slave_0: entered promiscuous mode [ 86.635105][ T6608] loop2: detected capacity change from 0 to 512 [ 86.645184][ T6608] EXT4-fs: Ignoring removed oldalloc option [ 86.646216][ T6609] loop0: detected capacity change from 0 to 512 [ 86.659523][ T6608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.670266][ T6605] veth0_to_hsr: left promiscuous mode [ 86.677953][ T6609] EXT4-fs: Ignoring removed oldalloc option [ 86.680060][ T6605] batadv_slave_0: left promiscuous mode [ 86.689497][ T6609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.705574][ T6607] veth0_to_hsr: entered promiscuous mode [ 86.712490][ T6607] batadv_slave_0: entered promiscuous mode [ 86.720499][ T29] audit: type=1400 audit(1720177474.776:21693): avc: denied { write } for pid=6614 comm="syz.3.1114" name="event2" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.743842][ T29] audit: type=1400 audit(1720177474.776:21694): avc: denied { open } for pid=6614 comm="syz.3.1114" path="/dev/input/event2" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.758028][ T6608] loop2: detected capacity change from 0 to 764 [ 86.780947][ T6608] iso9660: Unknown parameter 'ext3' [ 86.790702][ T6605] loop0: detected capacity change from 0 to 764 [ 86.796996][ T6607] veth0_to_hsr: left promiscuous mode [ 86.797912][ T6605] iso9660: Unknown parameter 'ext3' [ 86.807684][ T6607] batadv_slave_0: left promiscuous mode [ 86.834003][ T6623] loop1: detected capacity change from 0 to 512 [ 86.844002][ T6623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.857372][ T6628] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1118'. [ 86.862847][ T6623] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 86.879705][ T6605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.925029][ T6623] xt_CT: No such helper "snmp" [ 87.002408][ T6637] can0: slcan on pts0. [ 87.014521][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 87.081742][ T6646] loop2: detected capacity change from 0 to 128 [ 87.183617][ T6631] can0 (unregistered): slcan off pts0. [ 87.377488][ T6664] veth0_to_hsr: entered promiscuous mode [ 87.385847][ T6664] batadv_slave_0: entered promiscuous mode [ 87.396083][ T6664] veth0_to_hsr: left promiscuous mode [ 87.402530][ T6671] SELinux: policydb version -258872103 does not match my version range 15-33 [ 87.411519][ T6664] batadv_slave_0: left promiscuous mode [ 87.411528][ T6671] SELinux: failed to load policy [ 87.429640][ T6672] veth0_to_hsr: entered promiscuous mode [ 87.429677][ T6675] loop4: detected capacity change from 0 to 512 [ 87.442383][ T6672] batadv_slave_0: entered promiscuous mode [ 87.442637][ T6675] EXT4-fs: Ignoring removed oldalloc option [ 87.455566][ T6675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.464050][ T6672] veth0_to_hsr: left promiscuous mode [ 87.469715][ T6672] batadv_slave_0: left promiscuous mode [ 87.474810][ T6674] loop1: detected capacity change from 0 to 512 [ 87.483851][ T6674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.494574][ T6674] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 87.509588][ T6664] loop4: detected capacity change from 0 to 764 [ 87.516610][ T6664] iso9660: Unknown parameter 'ext3' [ 87.552206][ T35] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 87.552973][ T6674] xt_CT: No such helper "snmp" [ 87.559876][ T35] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 87.572457][ T35] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x3 [ 87.581086][ T35] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 87.606741][ T6664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 87.642317][ T6690] __nla_validate_parse: 2 callbacks suppressed [ 87.642340][ T6690] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1141'. [ 87.681275][ T29] audit: type=1400 audit(1720177475.736:21695): avc: denied { create } for pid=6696 comm="syz.4.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.729612][ T29] audit: type=1400 audit(1720177475.736:21696): avc: denied { ioctl } for pid=6696 comm="syz.4.1144" path="socket:[18207]" dev="sockfs" ino=18207 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.757688][ T6692] can0: slcan on pts0. [ 87.774134][ T6697] loop4: detected capacity change from 0 to 512 [ 87.780813][ T6697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.793143][ T6697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 87.801340][ T6697] System zones: 1-12 [ 87.806183][ T6697] EXT4-fs (loop4): 1 truncate cleaned up [ 87.812455][ T6697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.853713][ T6691] can0 (unregistered): slcan off pts0. [ 87.863124][ T6710] veth0_to_hsr: entered promiscuous mode [ 87.874499][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.885283][ T6710] batadv_slave_0: entered promiscuous mode [ 87.894066][ T6710] veth0_to_hsr: left promiscuous mode [ 87.899829][ T6710] batadv_slave_0: left promiscuous mode [ 87.902318][ T6712] loop1: detected capacity change from 0 to 512 [ 87.916018][ T6712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.928590][ T6712] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.942371][ T6714] veth0_to_hsr: entered promiscuous mode [ 87.949119][ T6714] batadv_slave_0: entered promiscuous mode [ 87.968406][ T6719] loop0: detected capacity change from 0 to 512 [ 87.978522][ T6721] loop2: detected capacity change from 0 to 512 [ 87.979861][ T6714] veth0_to_hsr: left promiscuous mode [ 87.991022][ T6719] EXT4-fs: Ignoring removed oldalloc option [ 87.997056][ T6714] batadv_slave_0: left promiscuous mode [ 88.012190][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.029460][ T6719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.032001][ T6728] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1154'. [ 88.038029][ T6721] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.072843][ T3856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.085925][ T29] audit: type=1400 audit(1720177476.146:21697): avc: denied { create } for pid=6731 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.117533][ T6732] devtmpfs: Unknown parameter 'rt' [ 88.141769][ T5423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.156934][ T6714] loop0: detected capacity change from 0 to 764 [ 88.163291][ T6714] iso9660: Unknown parameter 'ext3' [ 88.227189][ T6741] can0: slcan on pts0. [ 88.233379][ T6751] veth0_to_hsr: entered promiscuous mode [ 88.240062][ T6751] batadv_slave_0: entered promiscuous mode [ 88.247551][ T6751] veth0_to_hsr: left promiscuous mode [ 88.254612][ T6751] batadv_slave_0: left promiscuous mode [ 88.287149][ T6714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.307651][ T6754] loop3: detected capacity change from 0 to 128 [ 88.363888][ T6738] can0 (unregistered): slcan off pts0. [ 88.430031][ T6756] loop1: detected capacity change from 0 to 512 [ 88.543644][ T6756] EXT4-fs: Ignoring removed oldalloc option [ 88.564350][ T6756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.580602][ T6768] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1169'. [ 88.603780][ T6772] loop0: detected capacity change from 0 to 512 [ 88.611374][ T6776] FAULT_INJECTION: forcing a failure. [ 88.611374][ T6776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.624480][ T6776] CPU: 0 PID: 6776 Comm: syz.4.1173 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 88.634558][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 88.644596][ T6776] Call Trace: [ 88.647860][ T6776] [ 88.650830][ T6776] dump_stack_lvl+0xf2/0x150 [ 88.655510][ T6776] dump_stack+0x15/0x20 [ 88.659688][ T6776] should_fail_ex+0x229/0x230 [ 88.664438][ T6776] should_fail+0xb/0x10 [ 88.668624][ T6776] should_fail_usercopy+0x1a/0x20 [ 88.673671][ T6776] _copy_from_user+0x1e/0xd0 [ 88.678247][ T6776] sctp_getsockopt_rtoinfo+0x6f/0x3c0 [ 88.683603][ T6776] ? lock_sock_nested+0x10f/0x140 [ 88.688620][ T6776] ? selinux_socket_getsockopt+0x182/0x1b0 [ 88.694459][ T6776] sctp_getsockopt+0x85c/0xab0 [ 88.699251][ T6776] sock_common_getsockopt+0x5b/0x70 [ 88.704429][ T6776] do_sock_getsockopt+0x121/0x1a0 [ 88.709432][ T6776] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 88.715344][ T6776] __sys_getsockopt+0x19a/0x210 [ 88.720172][ T6776] __x64_sys_getsockopt+0x66/0x80 [ 88.725182][ T6776] x64_sys_call+0x2d21/0x2d70 [ 88.729836][ T6776] do_syscall_64+0xc9/0x1c0 [ 88.734375][ T6776] ? clear_bhb_loop+0x55/0xb0 [ 88.739046][ T6776] ? clear_bhb_loop+0x55/0xb0 [ 88.743769][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.749641][ T6776] RIP: 0033:0x7f6d6f225bd9 [ 88.754045][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.773654][ T6776] RSP: 002b:00007f6d6e4a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 88.782130][ T6776] RAX: ffffffffffffffda RBX: 00007f6d6f3b3f60 RCX: 00007f6d6f225bd9 [ 88.784954][ T6772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.790147][ T6776] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 88.790163][ T6776] RBP: 00007f6d6e4a70a0 R08: 00000000200001c0 R09: 0000000000000000 [ 88.803551][ T6772] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.810506][ T6776] R10: 0000000020001f00 R11: 0000000000000246 R12: 0000000000000001 [ 88.810521][ T6776] R13: 000000000000000b R14: 00007f6d6f3b3f60 R15: 00007fff2814c368 [ 88.844828][ T6776] [ 88.853380][ T6751] loop1: detected capacity change from 0 to 764 [ 88.860038][ T6751] iso9660: Unknown parameter 'ext3' [ 88.870109][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.948165][ T6782] veth0_to_hsr: entered promiscuous mode [ 88.995391][ T6782] batadv_slave_0: entered promiscuous mode [ 89.004746][ T6782] veth0_to_hsr: left promiscuous mode [ 89.044536][ T6782] batadv_slave_0: left promiscuous mode [ 89.076029][ T6789] loop4: detected capacity change from 0 to 512 [ 89.147334][ T6784] loop1: detected capacity change from 0 to 512 [ 89.228000][ T6788] can0: slcan on pts0. [ 89.239584][ T6784] EXT4-fs: Ignoring removed oldalloc option [ 89.286592][ T29] audit: type=1400 audit(1720177477.316:21698): avc: denied { setopt } for pid=6799 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.307224][ T6784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.310563][ T6789] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 89.374027][ T6787] can0 (unregistered): slcan off pts0. [ 89.381288][ T6813] loop0: detected capacity change from 0 to 512 [ 89.388542][ T6782] loop1: detected capacity change from 0 to 764 [ 89.395194][ T6782] iso9660: Unknown parameter 'ext3' [ 89.402191][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.415356][ T6813] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.439696][ T5107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.475970][ T6782] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.548354][ T6825] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 89.563969][ T6823] loop3: detected capacity change from 0 to 512 [ 89.570918][ T6823] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.581001][ T6823] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 89.664701][ T6834] loop1: detected capacity change from 0 to 128 [ 89.817242][ T6823] xt_CT: No such helper "snmp" [ 89.842872][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 89.904939][ T29] audit: type=1400 audit(1720177477.946:21699): avc: denied { name_bind } for pid=6838 comm="syz.4.1193" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 89.927865][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 89.981514][ T6849] veth0_to_hsr: entered promiscuous mode [ 89.999061][ T6849] batadv_slave_0: entered promiscuous mode [ 90.006691][ T6849] veth0_to_hsr: left promiscuous mode [ 90.012696][ T6849] batadv_slave_0: left promiscuous mode [ 90.032279][ T6853] loop4: detected capacity change from 0 to 512 [ 90.038852][ T6853] EXT4-fs: Ignoring removed oldalloc option [ 90.040315][ T6846] can0: slcan on pts0. [ 90.050046][ T6853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.102452][ T6849] loop4: detected capacity change from 0 to 764 [ 90.109026][ T6849] iso9660: Unknown parameter 'ext3' [ 90.123877][ T6845] can0 (unregistered): slcan off pts0. [ 90.216066][ T6849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.225891][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'. [ 90.240164][ T29] audit: type=1400 audit(1720177478.296:21700): avc: denied { create } for pid=6867 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.260940][ T29] audit: type=1400 audit(1720177478.306:21701): avc: denied { write } for pid=6867 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.648695][ T6866] loop3: detected capacity change from 0 to 512 [ 90.658810][ T6876] loop2: detected capacity change from 0 to 512 [ 90.786595][ T6880] loop4: detected capacity change from 0 to 512 [ 90.876060][ T6880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.889769][ T6876] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 90.917495][ T6866] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 90.938367][ T6880] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 90.975212][ T6903] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 91.003225][ T6903] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 91.020168][ T6880] xt_CT: No such helper "snmp" [ 91.124943][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 91.147440][ T910] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 91.155129][ T910] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 91.157926][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 91.171662][ T910] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 91.181141][ T910] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.294510][ T6927] can0: slcan on pts1. [ 91.297075][ T6933] loop3: detected capacity change from 0 to 512 [ 91.307684][ T6933] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 91.334092][ T6933] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.356224][ T6933] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.379683][ T6935] loop0: detected capacity change from 0 to 128 [ 91.398340][ T6926] can0 (unregistered): slcan off pts1. [ 91.409438][ T6933] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 91.418607][ T6933] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1223: bg 0: block 40: padding at end of block bitmap is not set [ 91.582185][ T6933] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 91.603212][ T6933] EXT4-fs (loop3): 1 truncate cleaned up [ 91.618533][ T6933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.633214][ T6933] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1223: corrupted xattr block 31: invalid header [ 91.648608][ T6933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 91.658848][ T6933] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1223: corrupted xattr block 31: invalid header [ 91.667376][ T6950] loop4: detected capacity change from 0 to 128 [ 91.672303][ T6933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 91.688097][ T6950] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.705000][ T6933] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1223: bad symlink. [ 91.705196][ T29] audit: type=1400 audit(1720177479.766:21702): avc: denied { read } for pid=6932 comm="syz.3.1223" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 91.715273][ T6950] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.761586][ T3980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.775815][ T6950] EXT4-fs warning (device loop4): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 91.796416][ T6950] netlink: 'syz.4.1229': attribute type 2 has an invalid length. [ 91.804417][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 91.822257][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 91.845103][ T3082] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.876460][ T6961] loop3: detected capacity change from 0 to 512 [ 91.883153][ T6961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.894448][ T6961] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 91.911168][ T6965] veth0_to_hsr: entered promiscuous mode [ 91.920118][ T6965] batadv_slave_0: entered promiscuous mode [ 91.927727][ T6965] veth0_to_hsr: left promiscuous mode [ 91.929518][ T3156] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 91.940847][ T3156] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 91.948974][ T6965] batadv_slave_0: left promiscuous mode [ 91.953194][ T6961] xt_CT: No such helper "snmp" [ 91.954663][ T3156] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 91.975549][ T3156] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.981901][ T6969] loop4: detected capacity change from 0 to 512 [ 92.053235][ T6969] EXT4-fs: Ignoring removed oldalloc option [ 92.064608][ T6969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.102789][ T6977] loop2: detected capacity change from 0 to 512 [ 92.119840][ T6977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.136874][ T6977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 92.148482][ T6977] System zones: 1-12 [ 92.159635][ T6965] loop4: detected capacity change from 0 to 764 [ 92.165449][ T6977] EXT4-fs (loop2): 1 truncate cleaned up [ 92.167791][ T6965] iso9660: Unknown parameter 'ext3' [ 92.178733][ T6993] loop1: detected capacity change from 0 to 1024 [ 92.183856][ T29] audit: type=1400 audit(1720177480.236:21703): avc: denied { ioctl } for pid=6975 comm="syz.2.1239" path="/82/file2/file1" dev="loop2" ino=15 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.210879][ T6993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.217848][ T6993] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.241016][ T29] audit: type=1400 audit(1720177480.296:21704): avc: denied { read } for pid=6975 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.289518][ T6965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.356958][ T910] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 92.364632][ T910] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 92.374133][ T910] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 92.392145][ T7014] loop0: detected capacity change from 0 to 128 [ 92.408844][ T910] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.591389][ T7020] loop2: detected capacity change from 0 to 512 [ 92.697307][ T7026] loop4: detected capacity change from 0 to 512 [ 92.716738][ T7028] FAULT_INJECTION: forcing a failure. [ 92.716738][ T7028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.730024][ T7028] CPU: 1 PID: 7028 Comm: syz.1.1251 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 92.740106][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.750224][ T7028] Call Trace: [ 92.753487][ T7028] [ 92.756402][ T7028] dump_stack_lvl+0xf2/0x150 [ 92.761008][ T7028] dump_stack+0x15/0x20 [ 92.765151][ T7028] should_fail_ex+0x229/0x230 [ 92.769850][ T7028] __should_fail_alloc_page+0xfd/0x110 [ 92.775370][ T7028] __alloc_pages_noprof+0x109/0x360 [ 92.780554][ T7028] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 92.785921][ T7028] shmem_get_folio_gfp+0x3e4/0xb70 [ 92.791103][ T7028] shmem_write_begin+0xa0/0x1c0 [ 92.796014][ T7028] generic_perform_write+0x1d5/0x410 [ 92.801351][ T7028] ? __pfx_shmem_write_end+0x10/0x10 [ 92.806651][ T7028] shmem_file_write_iter+0xc8/0xf0 [ 92.811749][ T7028] vfs_write+0x78f/0x900 [ 92.816016][ T7028] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 92.821810][ T7028] ksys_write+0xeb/0x1b0 [ 92.826201][ T7028] __x64_sys_write+0x42/0x50 [ 92.830779][ T7028] x64_sys_call+0x27ef/0x2d70 [ 92.835474][ T7028] do_syscall_64+0xc9/0x1c0 [ 92.840014][ T7028] ? clear_bhb_loop+0x55/0xb0 [ 92.844677][ T7028] ? clear_bhb_loop+0x55/0xb0 [ 92.849345][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.855223][ T7028] RIP: 0033:0x7f8b93b0775f [ 92.859738][ T7028] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 92.879376][ T7028] RSP: 002b:00007f8b92d89d50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 92.887972][ T7028] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f8b93b0775f [ 92.895928][ T7028] RDX: 0000000000100000 RSI: 00007f8b8a96a000 RDI: 0000000000000007 [ 92.903882][ T7028] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005c0 [ 92.911834][ T7028] R10: 00000000000003dc R11: 0000000000000293 R12: 0000000000000007 [ 92.919788][ T7028] R13: 00007f8b92d89dfc R14: 00007f8b92d89e00 R15: 00007f8b8a96a000 [ 92.927745][ T7028] [ 92.938094][ T7026] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.960898][ T7032] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.975225][ T7020] veth0_vlan: left promiscuous mode [ 92.980779][ T7020] veth0_vlan: entered promiscuous mode [ 93.025766][ T7032] loop1: detected capacity change from 0 to 512 [ 93.032520][ T7032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.043393][ T7032] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 93.073024][ T29] audit: type=1400 audit(1720177481.126:21705): avc: denied { listen } for pid=7033 comm="syz.2.1259" laddr=172.20.20.0 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.082394][ T7032] xt_CT: No such helper "snmp" [ 93.102134][ T7041] __nla_validate_parse: 3 callbacks suppressed [ 93.102146][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1260'. [ 93.135671][ T7038] veth0_to_hsr: entered promiscuous mode [ 93.141406][ T7049] loop4: detected capacity change from 0 to 512 [ 93.148270][ T7038] batadv_slave_0: entered promiscuous mode [ 93.152085][ T7049] EXT4-fs: Ignoring removed oldalloc option [ 93.222019][ T7038] veth0_to_hsr: left promiscuous mode [ 93.228874][ T7038] batadv_slave_0: left promiscuous mode [ 93.255102][ T7049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.272342][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 93.320411][ T7038] loop4: detected capacity change from 0 to 764 [ 93.326986][ T7038] iso9660: Unknown parameter 'ext3' [ 93.360275][ T7057] loop0: detected capacity change from 0 to 512 [ 93.438310][ T7049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.511740][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1267'. [ 93.574840][ T7057] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 93.603234][ T29] audit: type=1400 audit(1720177481.656:21706): avc: denied { ioctl } for pid=7070 comm="syz.2.1268" path="socket:[19840]" dev="sockfs" ino=19840 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.662741][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 93.710840][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'. [ 93.728300][ T7082] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1272'. [ 93.769348][ T7089] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.838449][ T7089] loop2: detected capacity change from 0 to 512 [ 93.845624][ T7089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.859058][ T7091] loop4: detected capacity change from 0 to 128 [ 93.869901][ T7089] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 94.122555][ T7100] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.153206][ T7089] xt_CT: No such helper "snmp" [ 94.198027][ T7100] loop3: detected capacity change from 0 to 512 [ 94.204914][ T7100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.214556][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 94.216120][ T7100] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 94.245793][ T7108] loop0: detected capacity change from 0 to 512 [ 94.265715][ T7108] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.302581][ T7119] veth0_to_hsr: entered promiscuous mode [ 94.303895][ T7100] xt_CT: No such helper "snmp" [ 94.313646][ T7119] batadv_slave_0: entered promiscuous mode [ 94.330031][ T7119] veth0_to_hsr: left promiscuous mode [ 94.335865][ T7119] batadv_slave_0: left promiscuous mode [ 94.349125][ T7121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1284'. [ 94.361450][ T7122] loop2: detected capacity change from 0 to 512 [ 94.371027][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 94.380707][ T7122] EXT4-fs: Ignoring removed oldalloc option [ 94.395109][ T7122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.417852][ T3161] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 94.425513][ T3161] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 94.443607][ T3161] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 94.453553][ T3161] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 94.471795][ T7119] loop2: detected capacity change from 0 to 764 [ 94.478115][ T7119] iso9660: Unknown parameter 'ext3' [ 94.576609][ T7119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.601601][ T7142] loop2: detected capacity change from 0 to 512 [ 94.625981][ T7144] loop0: detected capacity change from 0 to 512 [ 94.635702][ T7142] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.657868][ T7150] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1297'. [ 94.686568][ T7152] veth0_to_hsr: entered promiscuous mode [ 94.693058][ T7152] batadv_slave_0: entered promiscuous mode [ 94.701106][ T7152] veth0_to_hsr: left promiscuous mode [ 94.707022][ T7152] batadv_slave_0: left promiscuous mode [ 94.737952][ T7153] loop4: detected capacity change from 0 to 512 [ 94.751592][ T7153] EXT4-fs: Ignoring removed oldalloc option [ 94.770459][ T7153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.780452][ T7155] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.806444][ T7152] loop4: detected capacity change from 0 to 764 [ 94.812769][ T7152] iso9660: Unknown parameter 'ext3' [ 94.827847][ T7157] usb usb8: usbfs: process 7157 (syz.2.1299) did not claim interface 0 before use [ 94.854000][ T7161] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.865182][ T7152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.885338][ T7065] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 94.893104][ T7065] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 94.901182][ T7065] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 94.909153][ T7065] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 94.922534][ T7161] loop2: detected capacity change from 0 to 512 [ 94.929493][ T7161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.939837][ T7161] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 95.019395][ T7161] xt_CT: No such helper "snmp" [ 95.195934][ T7173] loop0: detected capacity change from 0 to 128 [ 95.378886][ T7178] veth0_to_hsr: entered promiscuous mode [ 95.432393][ T7178] batadv_slave_0: entered promiscuous mode [ 95.478146][ T7183] loop1: detected capacity change from 0 to 512 [ 95.485557][ T7183] EXT4-fs: Ignoring removed oldalloc option [ 95.491951][ T7183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.500712][ T7178] veth0_to_hsr: left promiscuous mode [ 95.506998][ T7178] batadv_slave_0: left promiscuous mode [ 95.534228][ T7189] SELinux: failed to load policy [ 95.550625][ T7183] loop1: detected capacity change from 0 to 764 [ 95.559957][ T7183] iso9660: Unknown parameter 'ext3' [ 95.587995][ T7199] loop2: detected capacity change from 0 to 512 [ 95.615734][ T7199] EXT4-fs mount: 10 callbacks suppressed [ 95.615747][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.616818][ T3162] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 95.622781][ T7178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.634280][ T3162] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 95.643685][ T7199] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.648829][ T3162] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 95.674409][ T3162] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.692121][ T5423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.702763][ T3162] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 95.710541][ T3162] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 95.719169][ T3162] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 95.728317][ T3162] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.870842][ T7224] loop4: detected capacity change from 0 to 512 [ 95.895498][ T7224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.908044][ T7224] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.048523][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.090084][ T7231] veth0_to_hsr: entered promiscuous mode [ 96.097551][ T7231] batadv_slave_0: entered promiscuous mode [ 96.119608][ T7231] veth0_to_hsr: left promiscuous mode [ 96.147652][ T7231] batadv_slave_0: left promiscuous mode [ 96.173242][ T24] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 96.180940][ T24] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 96.197402][ T7237] loop3: detected capacity change from 0 to 512 [ 96.204970][ T24] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 96.213317][ T7237] EXT4-fs: Ignoring removed oldalloc option [ 96.227791][ T7237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.228632][ T24] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.271967][ T7240] loop4: detected capacity change from 0 to 512 [ 96.279334][ T7237] loop3: detected capacity change from 0 to 764 [ 96.286412][ T7237] iso9660: Unknown parameter 'ext3' [ 96.377045][ T7231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.408480][ T7240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.423537][ T7240] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.443236][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.543459][ T29] audit: type=1400 audit(1720177484.596:21707): avc: denied { accept } for pid=7252 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.610489][ T29] audit: type=1400 audit(1720177484.666:21708): avc: denied { create } for pid=7263 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.620798][ T7270] loop0: detected capacity change from 0 to 512 [ 96.646018][ T7270] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.663063][ T7270] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.691656][ T7270] FAULT_INJECTION: forcing a failure. [ 96.691656][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 96.704346][ T7270] CPU: 0 PID: 7270 Comm: syz.0.1337 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 96.714485][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.724619][ T7270] Call Trace: [ 96.727881][ T7270] [ 96.730894][ T7270] dump_stack_lvl+0xf2/0x150 [ 96.735465][ T7270] dump_stack+0x15/0x20 [ 96.739644][ T7270] should_fail_ex+0x229/0x230 [ 96.744318][ T7270] ? ext4_alloc_inode+0x38/0x320 [ 96.749277][ T7270] __should_failslab+0x92/0xa0 [ 96.754018][ T7270] should_failslab+0x9/0x20 [ 96.758551][ T7270] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 96.764261][ T7270] ? find_inode_fast+0x1ce/0x250 [ 96.769295][ T7270] ext4_alloc_inode+0x38/0x320 [ 96.774090][ T7270] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 96.779465][ T7270] alloc_inode+0x3c/0x160 [ 96.783773][ T7270] iget_locked+0x121/0x4a0 [ 96.788169][ T7270] __ext4_iget+0x17c/0x1e80 [ 96.792734][ T7270] ? d_alloc_parallel+0xbef/0xc70 [ 96.797996][ T7270] ext4_lookup+0x15b/0x390 [ 96.802390][ T7270] __lookup_slow+0x184/0x250 [ 96.807151][ T7270] lookup_slow+0x3c/0x60 [ 96.811373][ T7270] walk_component+0x1f5/0x230 [ 96.816107][ T7270] ? path_lookupat+0xfd/0x2b0 [ 96.820820][ T7270] path_lookupat+0x10a/0x2b0 [ 96.825423][ T7270] filename_lookup+0x127/0x300 [ 96.830217][ T7270] vfs_statx+0xa2/0x320 [ 96.834383][ T7270] __x64_sys_statx+0xee/0x160 [ 96.839067][ T7270] x64_sys_call+0x29b1/0x2d70 [ 96.843746][ T7270] do_syscall_64+0xc9/0x1c0 [ 96.848324][ T7270] ? clear_bhb_loop+0x55/0xb0 [ 96.853117][ T7270] ? clear_bhb_loop+0x55/0xb0 [ 96.857792][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.863712][ T7270] RIP: 0033:0x7f2b70303bd9 [ 96.868184][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.887780][ T7270] RSP: 002b:00007f2b6f585048 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 96.896174][ T7270] RAX: ffffffffffffffda RBX: 00007f2b70491f60 RCX: 00007f2b70303bd9 [ 96.904129][ T7270] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 96.912083][ T7270] RBP: 00007f2b6f5850a0 R08: 0000000020000240 R09: 0000000000000000 [ 96.920038][ T7270] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 96.927991][ T7270] R13: 000000000000000b R14: 00007f2b70491f60 R15: 00007fff49fb7938 [ 96.935950][ T7270] [ 96.991648][ T5107] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 97.001857][ T7290] loop4: detected capacity change from 0 to 512 [ 97.024686][ T7290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.041041][ T7290] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.098262][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.107934][ T29] audit: type=1326 audit(1720177485.166:21709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.0.1342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b70303bd9 code=0x0 [ 97.142424][ T7305] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.155793][ T7305] loop2: detected capacity change from 0 to 512 [ 97.162536][ T7305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.172925][ T7305] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 97.248046][ T7305] xt_CT: No such helper "snmp" [ 97.373195][ T7324] veth0_to_hsr: entered promiscuous mode [ 97.380788][ T7324] batadv_slave_0: entered promiscuous mode [ 97.390689][ T7324] veth0_to_hsr: left promiscuous mode [ 97.395723][ T7326] loop4: detected capacity change from 0 to 512 [ 97.402372][ T7324] batadv_slave_0: left promiscuous mode [ 97.425455][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.425789][ T7328] loop2: detected capacity change from 0 to 512 [ 97.445457][ T7328] EXT4-fs: Ignoring removed oldalloc option [ 97.451825][ T7326] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.462301][ T7328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.478424][ T7326] dummy0: entered promiscuous mode [ 97.488817][ T7332] loop3: detected capacity change from 0 to 512 [ 97.495111][ T7326] dummy0: left promiscuous mode [ 97.510416][ T7332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.522947][ T7332] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.526976][ T7324] loop2: detected capacity change from 0 to 764 [ 97.539607][ T7324] iso9660: Unknown parameter 'ext3' [ 97.549218][ T3980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.559745][ T7275] ================================================================== [ 97.567797][ T7275] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 97.575493][ T7275] [ 97.577793][ T7275] write to 0xffff888107c906d8 of 8 bytes by task 7276 on cpu 0: [ 97.585394][ T7275] fasync_remove_entry+0xd2/0x130 [ 97.590411][ T7275] fasync_helper+0x96/0xc0 [ 97.594812][ T7275] sock_fasync+0x60/0xd0 [ 97.599047][ T7275] __fput+0x68e/0x6f0 [ 97.603004][ T7275] ____fput+0x15/0x20 [ 97.606961][ T7275] task_work_run+0x13a/0x1a0 [ 97.611533][ T7275] syscall_exit_to_user_mode+0xbe/0x130 [ 97.617056][ T7275] do_syscall_64+0xd6/0x1c0 [ 97.621537][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.627406][ T7275] [ 97.629702][ T7275] read to 0xffff888107c906d8 of 8 bytes by task 7275 on cpu 1: [ 97.637219][ T7275] sock_wake_async+0x2a/0x120 [ 97.641877][ T7275] unix_write_space+0x135/0x140 [ 97.646707][ T7275] sock_wfree+0x11e/0x330 [ 97.651013][ T7275] unix_destruct_scm+0xc5/0xf0 [ 97.655754][ T7275] skb_release_head_state+0xbb/0x1a0 [ 97.661015][ T7275] __kfree_skb+0x16/0x150 [ 97.665316][ T7275] kfree_skb_reason+0xb0/0x2b0 [ 97.670052][ T7275] unix_release_sock+0x642/0x790 [ 97.674968][ T7275] unix_release+0x57/0x80 [ 97.679274][ T7275] sock_close+0x68/0x150 [ 97.683500][ T7275] __fput+0x192/0x6f0 [ 97.687471][ T7275] ____fput+0x15/0x20 [ 97.691426][ T7275] task_work_run+0x13a/0x1a0 [ 97.696001][ T7275] syscall_exit_to_user_mode+0xbe/0x130 [ 97.701523][ T7275] do_syscall_64+0xd6/0x1c0 [ 97.706002][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.711873][ T7275] [ 97.714178][ T7275] value changed: 0xffff88811347c150 -> 0x0000000000000000 [ 97.721274][ T7275] [ 97.723571][ T7275] Reported by Kernel Concurrency Sanitizer on: [ 97.729691][ T7275] CPU: 1 PID: 7275 Comm: syz.1.1338 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 97.739725][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.749755][ T7275] ================================================================== [ 97.764308][ T3082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.784718][ T7324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.930158][ T29] audit: type=1400 audit(1720177485.986:21710): avc: denied { write } for pid=7336 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1