last executing test programs: 7.383798916s ago: executing program 1 (id=328): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(r3, 0x3, 0x1) r5 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@sb={'sb', 0x3d, 0x5d9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0xbcf, &(0x7f00000014c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) io_uring_setup(0xefe, 0x0) 7.382943626s ago: executing program 4 (id=337): epoll_create1(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x485, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}]}, 0x60}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x891b, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x8e}}}) 6.822077804s ago: executing program 1 (id=329): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x20000000, 0x0, 0x3, 0xffffffffffbf0000, 0x8000000005, 0x6, 0x20000001000, 0xf62, 0xfffffffd}) socket(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./bus\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {}, {@hide}, {@unhide}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@mode={'mode', 0x3d, 0x7}}, {}, {@check_strict}]}, 0x1, 0x571, &(0x7f0000000e40)="$eJzs3V1v29Ydx/EfHbvVVCAo1iEIgiQ9TTbAAVKFkhoFQq846khmK5ECSRXOVRE0cmFEboekAxbfdLnJNmB7Ed3lsNewV7C3UgzY/bCBpOT4QQ9JrMiZ+/0YCY/IQ57/oQX+cSzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQI7fct2qo24QDrbNbH4rjnovXo73PrFCt955yXYlJ/unUkmXi1WXf/Fi86Xsvxu6Wry6qlK2KGn/vUvvf/rB+tpk/zkBv5K/vuaRnjzdf/RgNBo+XlYgb6Fr787e1rFhkERBz+tYEySRaTYa7p2tdmLaQdcm95PU9owfWy+NYrPp3zLVZrNubOV+NAg7La9rJyvvfVxz3Yb5rNK3XpxE4Z3PKom/FXS7QdjJftWZRlbnXvZG/DxITWq9njE7u6NhfVEHskrVl6lUW1Sp5tZq1WqtVm3cbd6957rrJ1a4x+hEjeW9afH/aSnXbWAZ1sb5X10FCjXQtszUH18txYrUm7F97NZ48as7dm67h/P/JMtffrH5ivL8f714dX1W/p8Ry+p+nuip9vVIDzTSSEM9XmHbGzr7/ndkFSpQokiBevLyNWa8xqiphhpy9aW21FYio7YCdWWV6L4SpbL5O8pXLCtPqSLFMtqUr1syqqqppuoysqroviINFKqjlrz8KDvazc97XcaZFeNBperMbpQn77uhanN6S/7H6S31+g2cxn8n+R8AAAAAAJxbTv7X92z8v6FreakddK171mEBAAAAAIAlyj/5v5otNrLSNTmM/wEAAAAAOG+c/B47R1JZHxalHTn57VL8EQAAAAAAgHMi//z/erbI50D5UM7BdCmM/wEAAAAAOCf+uHCO/aT/rvOPfymON5xn/e1fOnv53Lze3oVivwvHj5i2rzgXxwfJF41isb7u26tOqah0MAnmj+PFzqI4nBcBeAcB/P5VAvhgXX/WR5Lek/SwqPtwsqVopdwOurbiR91Pq/K8i2up3U5/+83u75R3/09h76JT0u5oWPnq29HDPJZn2VGe7Y0nUDwxj+KcWL7L51vI77mY2uON/EaMcbtlRzu7o6F7uP9rxe5rR1v8/uKcNp/rRlHrxnjG2/LR/peyNquVWb0fR1E9Zc+f62ZR5+bmzWIxJYraoihqh6OYfi5OH0V9URT1U0Xx938erwoAq7KzIAs5OpF3X+Na+3rZXa+Y3Z9rs6izeSW7iGv9yskr+gUtuqK7p8xufzt4BsKk8qwcm7X7l2NZ9Ydshx9mtpt0a052Ci98t/cbXXrydP/j3b0HXw+/Hn5Tq9Ub7ieue7emjbwb48WcSAEAP12Hn7HjTM3/C5/C43ySj6olfTR9VP3zg68UVPSVvtVID3U7v9sg/8bB1KOWD30N4faCUWs5T5PFE15uzxnVvZPf5TA5bm1u3aMx1FfwmwAAYHVuLMjDL5P/by8Ydx/N5VNGx5pWt7riMwEAwE+HjX90yukfnDgO+l9Wm82ql25ZE0f+5yYOWh1rgjC1sb/lhR1r+nGURn7UzQpfBC2bmGTQ70dxatpRbPpREmzn0wea8aPfE9vzwjTwk37Xeok1fhSmnp+aVpD4pj/4dTdItmyc75z0rR+0A99Lgyg0STSIfVsxJrH2UMWgZcM0aAdZMTT9OOh5ccl8EXUHPWtaNvHjoJ9GxQEnbQVhO4rflxSFlbM+2QAAvCWePN1/9GA0Gj5+g4WpDZdW3lUAADC2IEsv8u+lBwQAAAAAAAAAAAAAAAAAAAAAAE5Yxf1/FM55YTIV9BmH8Z+342wstfAzSWfT+sJLx/dv/OIE4I36XwAAAP//udhNWg==") ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x7, 0x5, 0x5d34}}}}}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920b5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0c1}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="8c9d716591fdd369590dc4f61d2e12e8d6342962806a27a1a2622d78775ed46464e97f64305989e41ce56863263107fb1594f1b5ba59820474e22f27ea262d0fb902ba3a84142b2808a3c522ba", 0x4d, 0x40004, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 6.821786024s ago: executing program 4 (id=330): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x16c}}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) getrlimit(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x210) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b", 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x65010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x20000, 0x1000280000000, 0x95, 0xffffffffffff281a, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x10000}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private1, 0xfffffffc, 0x33}, 0xa, @in=@multicast1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x9, 0x8}}, 0xe8) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 5.9864194s ago: executing program 0 (id=334): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, 0x0, 0x0, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket(0x2, 0x80805, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffeec}, 0x80, 0x0}, 0x4) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x9, 0x20002f7}) ptrace$pokeuser(0x6, r0, 0x7fff, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x2000) 4.601108694s ago: executing program 0 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x154) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000680)='./bus\x00', 0x301010e, &(0x7f00000006c0)={[{@errors_remount}, {@nodelalloc}, {@dax_always}, {@oldalloc}, {@delalloc}, {@quota}, {@jqfmt_vfsold}]}, 0x3, 0x452, &(0x7f0000000140)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x840020, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000300)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xd5, 0x4, 0x40, 0x1ff}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)={0x7, 'xfrm0\x00', {0x7}, 0x7ff}) 4.510365917s ago: executing program 4 (id=340): epoll_create1(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x485, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}]}, 0x60}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x891b, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x8e}}}) 4.466524788s ago: executing program 3 (id=341): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4004) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x8, @local}}, 0x0, 0x0, 0x2c, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09340005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @multicast1}, {0x1, @random="31ae35a6c8af"}, 0x6, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge0\x00'}) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0x7) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x4) 3.707298852s ago: executing program 2 (id=342): r0 = socket$packet(0x11, 0x3, 0x300) rt_sigsuspend(&(0x7f0000000440)={[0x1]}, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xdff2}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) bind$packet(r0, 0x0, 0x0) 3.696246383s ago: executing program 0 (id=353): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x100000000}, 0x0, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4, @empty}}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='rw\x00', 0x0, 0x4) rename(&(0x7f0000001c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) 3.621598375s ago: executing program 0 (id=343): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e23, 0xa7d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x964b}}, 0x6, 0x6}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "3fdc85cbdde9c309", "071c4ae76dd1a98109fec20e1e360b23dc33aa5fc79cf2b1364b197483cba3c8", "5d901a4f", "f45541ee159a3f39"}, 0x38) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x18, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x2}, @generic={0x2, 0x2}]}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') sendmsg$kcm(r2, 0x0, 0x8084) 3.306906695s ago: executing program 1 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x4080000) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.600963538s ago: executing program 0 (id=345): r0 = timerfd_create(0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x80, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x34, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x40) read(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) tkill(r3, 0x7) r5 = socket$inet(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x228, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x4, "8047794a81eae173639d4135d6bd22cb3f0158ee53e6baaceb0b94523bec"}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00', {}, {}, 0x89, 0x0, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x2f8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001b, 0x4008032, 0xffffffffffffffff, 0xd069000) mmap(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f00000000c0), 0xb9) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000280), 0x0) read(r0, &(0x7f00000001c0)=""/85, 0x55) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1600000014000000030000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.600667348s ago: executing program 3 (id=346): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, 0x0, 0x0, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x42, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f00000001c0)={0x2a, 0x1, 0x8000}, 0xc) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x44063100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.559760009s ago: executing program 3 (id=349): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc5}, 0x40010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x14) socket$inet6(0xa, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) mkdir(0x0, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000000000)="$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") 2.397428154s ago: executing program 2 (id=350): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, 0x0, 0x0, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc5}, 0x40010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x14) socket$inet6(0xa, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) mkdir(0x0, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000000000)="$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") 1.159975633s ago: executing program 3 (id=365): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, 0x0, 0x0, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8048, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0xd0e, 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 571.538242ms ago: executing program 0 (id=367): socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80c4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$sock(r2, &(0x7f0000002080), 0x8000379, 0x4000801) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 340.44363ms ago: executing program 2 (id=356): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001040), 0x2401, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) setxattr$incfs_size(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048994) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xd47}]}}]}, 0x38}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x651, 0x12c8000000000000, 0x8000009655, 0x80000001, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) openat(0xffffffffffffff9c, 0x0, 0xeb, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0x3c, 0x67) 0s ago: executing program 3 (id=357): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, 0x0, 0x0, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 47.884763][ T3645] __dump_stack+0x1d/0x30 [ 47.884791][ T3645] dump_stack_lvl+0x95/0xd0 [ 47.884811][ T3645] dump_stack+0x15/0x1b [ 47.884906][ T3645] dump_header+0x80/0x240 [ 47.884928][ T3645] oom_kill_process+0x295/0x350 [ 47.884974][ T3645] out_of_memory+0x981/0xbc0 [ 47.885011][ T3645] try_charge_memcg+0x621/0xa00 [ 47.885059][ T3645] charge_memcg+0x6d/0x120 [ 47.885101][ T3645] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 47.885250][ T3645] swap_cache_alloc_folio+0x47b/0x5e0 [ 47.885301][ T3645] swap_cluster_readahead+0x3d2/0x460 [ 47.885405][ T3645] swapin_readahead+0xd8/0x8a0 [ 47.885433][ T3645] ? perf_trace_run_bpf_submit+0xac/0x110 [ 47.885461][ T3645] ? perf_trace_sched_wakeup_template+0xda/0x120 [ 47.885543][ T3645] ? __rcu_read_unlock+0x4e/0x70 [ 47.885568][ T3645] ? swap_cache_get_folio+0x1f7/0x200 [ 47.885681][ T3645] do_swap_page+0x2a2/0x1ec0 [ 47.885717][ T3645] ? __rcu_read_unlock+0x4e/0x70 [ 47.885753][ T3645] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 47.885836][ T3645] ? perf_cgroup_switch+0x10c/0x480 [ 47.885880][ T3645] ? __rcu_read_lock+0x36/0x50 [ 47.885907][ T3645] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 47.886022][ T3645] handle_mm_fault+0xb3c/0x2da0 [ 47.886147][ T3645] do_user_addr_fault+0x634/0x1060 [ 47.886177][ T3645] ? trace_page_fault_user+0x1f/0xa0 [ 47.886210][ T3645] exc_page_fault+0x62/0xa0 [ 47.886269][ T3645] asm_exc_page_fault+0x26/0x30 [ 47.886291][ T3645] RIP: 0033:0x7f5bb48bce61 [ 47.886308][ T3645] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 47.886365][ T3645] RSP: 002b:00007ffcede15948 EFLAGS: 00010207 [ 47.886382][ T3645] RAX: 0000000000000001 RBX: 00000000000002d0 RCX: 00007f5bb48bce59 [ 47.886477][ T3645] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5bb4b36278 [ 47.886528][ T3645] RBP: 0000000000000f8f R08: 00007ffcede157e7 R09: 0000000000000000 [ 47.886542][ T3645] R10: 00007f5bb4b35fa0 R11: 0000000000000246 R12: 0000000000000003 [ 47.886558][ T3645] R13: 00007f5bb4b3627c R14: 00007f5bb4b36278 R15: 00007f5bb4b36270 [ 47.886583][ T3645] [ 47.886698][ T3645] memory: usage 307196kB, limit 307200kB, failcnt 441 [ 48.130632][ T3645] memory+swap: usage 319132kB, limit 9007199254740988kB, failcnt 0 [ 48.175562][ T3645] kmem: usage 242176kB, limit 9007199254740988kB, failcnt 0 [ 48.204390][ T3645] Memory cgroup stats for /syz2: [ 48.204666][ T3645] cache 270336 [ 48.227292][ T3645] rss 20480 [ 48.246384][ T3645] shmem 0 [ 48.251543][ T3645] mapped_file 65536 [ 48.288771][ T3645] dirty 0 [ 48.298372][ T3645] writeback 0 [ 48.316118][ T3645] workingset_refault_anon 75 [ 48.335495][ T3645] workingset_refault_file 576 [ 48.359732][ T3645] swap 12197888 [ 48.374738][ T3682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.382579][ T3682] IPv6: NLM_F_CREATE should be set when creating new route [ 48.391474][ T3645] swapcached 12529664 [ 48.396234][ T3645] pgpgin 14282 [ 48.399691][ T3645] pgpgout 14210 [ 48.435326][ T3645] pgfault 16546 [ 48.450506][ T3645] pgmajfault 59 [ 48.522616][ T3645] inactive_anon 0 [ 48.534965][ T3645] active_anon 20480 [ 48.821842][ T3645] inactive_file 0 [ 48.880090][ T3645] active_file 253952 [ 48.906876][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.942495][ T3645] unevictable 0 [ 48.992295][ T3645] hierarchical_memory_limit 314572800 [ 49.089761][ T3645] hierarchical_memsw_limit 9223372036854771712 [ 49.344146][ T3691] loop3: detected capacity change from 0 to 512 [ 49.352247][ T3694] netlink: 'syz.4.51': attribute type 21 has an invalid length. [ 49.360085][ T3645] total_cache 270336 [ 49.378754][ T3691] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.394072][ T3645] total_rss 20480 [ 49.412514][ T3645] total_shmem 0 [ 49.416194][ T3694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51'. [ 49.451673][ T3645] total_mapped_file 65536 [ 49.476511][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.488341][ T3645] total_dirty 0 [ 49.521271][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.532589][ T3645] total_writeback 0 [ 49.556503][ T3645] total_workingset_refault_anon 75 [ 49.573998][ T3645] total_workingset_refault_file 576 [ 49.580901][ T3645] total_swap 12197888 [ 49.585044][ T3645] total_swapcached 12529664 [ 49.589590][ T3645] total_pgpgin 14282 [ 49.593607][ T3645] total_pgpgout 14210 [ 49.597652][ T3645] total_pgfault 16546 [ 49.601702][ T3645] total_pgmajfault 59 [ 49.605865][ T3645] total_inactive_anon 0 [ 49.610170][ T3645] total_active_anon 20480 [ 49.614725][ T3645] total_inactive_file 0 [ 49.618968][ T3645] total_active_file 253952 [ 49.645422][ T3645] total_unevictable 0 [ 49.689945][ T3645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.38,pid=3645,uid=0 [ 49.724189][ T3702] ªªªªªª: renamed from vlan0 (while UP) [ 49.744893][ T3645] Memory cgroup out of memory: Killed process 3645 (syz.2.38) total-vm:100584kB, anon-rss:1280kB, file-rss:26460kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 49.843771][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.908118][ T3702] loop3: detected capacity change from 0 to 4096 [ 49.929140][ T3702] EXT4-fs: inline encryption not supported [ 49.936996][ T3702] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 50.112047][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 50.122459][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 50.848084][ T3721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.61'. [ 50.940404][ T3711] loop2: detected capacity change from 0 to 512 [ 51.153178][ T3728] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 51.215750][ T3727] syz.4.63 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.244091][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 51.244105][ T28] audit: type=1400 audit(1781907520.737:306): avc: denied { create } for pid=3726 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.396817][ T28] audit: type=1400 audit(1781907520.887:307): avc: denied { connect } for pid=3732 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.421624][ T28] audit: type=1400 audit(1781907520.887:308): avc: denied { read } for pid=3732 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.486370][ T28] audit: type=1400 audit(1781907520.937:309): avc: denied { shutdown } for pid=3732 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.506873][ T28] audit: type=1400 audit(1781907520.937:310): avc: denied { write } for pid=3732 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.493788][ T28] audit: type=1400 audit(1781907521.227:311): avc: denied { wake_alarm } for pid=3739 comm="syz.1.67" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.494245][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.514987][ T28] audit: type=1400 audit(1781907521.927:312): avc: denied { module_request } for pid=3739 comm="syz.1.67" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.569059][ T3750] netlink: 128 bytes leftover after parsing attributes in process `syz.3.70'. [ 52.652257][ T28] audit: type=1400 audit(1781907522.137:313): avc: denied { write } for pid=3749 comm="syz.3.70" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.709433][ T3750] netlink: 'syz.3.70': attribute type 25 has an invalid length. [ 52.727734][ T3750] netlink: 'syz.3.70': attribute type 3 has an invalid length. [ 52.781410][ T3750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.70'. [ 52.934858][ T3756] loop0: detected capacity change from 0 to 1024 [ 52.985172][ T3756] EXT4-fs: Ignoring removed bh option [ 53.000215][ T3756] EXT4-fs: Ignoring removed bh option [ 53.028643][ T3756] EXT4-fs: dax option not supported [ 53.251596][ T3756] loop0: detected capacity change from 0 to 512 [ 53.524752][ T28] audit: type=1400 audit(1781907522.970:314): avc: denied { cpu } for pid=3761 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.521640][ T28] audit: type=1400 audit(1781907523.060:315): avc: granted { setsecparam } for pid=3766 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 55.822197][ T3767] loop0: detected capacity change from 0 to 1024 [ 55.913147][ T3767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.053466][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 56.057437][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.087505][ T3767] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.089115][ T3758] loop1: detected capacity change from 0 to 2048 [ 56.167220][ T3790] futex_wake_op: syz.4.80 tries to shift op by 144; fix this program [ 56.686020][ T3794] loop3: detected capacity change from 0 to 512 [ 56.705079][ T3794] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.714647][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.724252][ T3794] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 56.842943][ T3803] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 56.852885][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 56.852902][ T28] audit: type=1400 audit(1781907526.330:318): avc: denied { mac_admin } for pid=3795 comm="syz.1.81" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.910942][ T28] audit: type=1400 audit(1781907526.390:319): avc: denied { relabelto } for pid=3795 comm="syz.1.81" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 56.938297][ T28] audit: type=1400 audit(1781907526.390:320): avc: denied { associate } for pid=3795 comm="syz.1.81" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 56.963321][ T3794] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -ENXIO [ 57.010739][ T3796] ipt_ECN: cannot use operation on non-tcp rule [ 57.018372][ T28] audit: type=1400 audit(1781907526.470:321): avc: denied { write } for pid=3805 comm="syz.4.85" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 57.068566][ T28] audit: type=1400 audit(1781907526.470:322): avc: denied { open } for pid=3805 comm="syz.4.85" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 57.111074][ T28] audit: type=1400 audit(1781907526.590:323): avc: denied { create } for pid=3798 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.175032][ T28] audit: type=1400 audit(1781907526.590:324): avc: denied { ioctl } for pid=3798 comm="syz.0.83" path="socket:[5761]" dev="sockfs" ino=5761 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 57.428849][ T28] audit: type=1400 audit(1781907526.900:325): avc: denied { connect } for pid=3808 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.379971][ T28] audit: type=1400 audit(1781907526.910:326): avc: denied { bind } for pid=3808 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.171756][ T3816] loop4: detected capacity change from 0 to 512 [ 59.406822][ T28] audit: type=1400 audit(1781907528.800:327): avc: denied { mounton } for pid=3814 comm="syz.4.87" path="/16/bus" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.438429][ T3816] EXT4-fs: dax option not supported [ 59.793006][ T3833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 59.824708][ T3832] loop3: detected capacity change from 0 to 128 [ 59.865497][ T3832] vfat: Unknown parameter '' [ 60.081048][ T3836] bridge_slave_0: left allmulticast mode [ 60.087158][ T3836] bridge_slave_0: left promiscuous mode [ 60.093987][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.117313][ T3836] bridge_slave_1: left allmulticast mode [ 60.134147][ T3836] bridge_slave_1: left promiscuous mode [ 60.146145][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.575702][ T3848] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 60.687140][ T3836] bond0: (slave bond_slave_0): Releasing backup interface [ 60.702546][ T3836] bond0: (slave bond_slave_1): Releasing backup interface [ 60.727903][ T3836] team0: Port device team_slave_0 removed [ 60.739385][ T3836] team0: Port device team_slave_1 removed [ 60.747674][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.755652][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.767113][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.775237][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.788250][ T3836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.807692][ T3842] team0: Mode changed to "loadbalance" [ 60.909350][ T3855] loop3: detected capacity change from 0 to 512 [ 60.919874][ T3855] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.941026][ T3855] FAT-fs (loop3): error, invalid access to FAT (entry 0x09fffff8) [ 61.016536][ T3860] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 61.032661][ T3865] loop3: detected capacity change from 0 to 512 [ 61.043024][ T3860] bond1 (unregistering): Released all slaves [ 61.066998][ T3863] bridge0: port 3(bond0) entered blocking state [ 61.073507][ T3863] bridge0: port 3(bond0) entered disabled state [ 61.079932][ T3863] bond0: entered allmulticast mode [ 61.085962][ T3863] bond_slave_0: entered allmulticast mode [ 61.091978][ T3863] bond_slave_1: entered allmulticast mode [ 61.100506][ T3863] bond0: entered promiscuous mode [ 61.105734][ T3863] bond_slave_0: entered promiscuous mode [ 61.111576][ T3863] bond_slave_1: entered promiscuous mode [ 61.117975][ T3863] bridge0: port 3(bond0) entered blocking state [ 61.124357][ T3863] bridge0: port 3(bond0) entered forwarding state [ 61.142989][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.183535][ T3874] loop0: detected capacity change from 0 to 512 [ 61.190981][ T3865] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.207771][ T3874] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 61.227804][ T3874] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 61.246058][ T3874] EXT4-fs (loop0): 1 truncate cleaned up [ 61.267518][ T3874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.277857][ T3877] loop4: detected capacity change from 0 to 1024 [ 61.299208][ T3877] EXT4-fs: Mount option(s) incompatible with ext3 [ 61.393966][ T3872] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 61.442459][ T3879] loop1: detected capacity change from 0 to 256 [ 61.461698][ T3874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.537489][ T3877] loop4: detected capacity change from 0 to 512 [ 61.569211][ T3877] EXT4-fs: test_dummy_encryption option not supported [ 61.934060][ T3860] loop2: detected capacity change from 0 to 512 [ 61.979640][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.004185][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.022293][ T3860] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.114355][ T3900] loop4: detected capacity change from 0 to 1024 [ 62.132550][ T3902] IPv6: addrconf: prefix option has invalid lifetime [ 62.139497][ T3902] IPv6: addrconf: prefix option has invalid lifetime [ 62.166902][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.181951][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.186190][ T3900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.213794][ T3900] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.277751][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 62.277847][ T28] audit: type=1400 audit(1781907531.760:343): avc: denied { map } for pid=3899 comm="syz.4.108" path="/23/file1/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.340015][ T3908] loop2: detected capacity change from 0 to 1024 [ 62.354116][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.380193][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.449720][ T3908] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.683275][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.139872][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.467430][ T3908] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.110: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.484018][ T28] audit: type=1400 audit(1781907532.950:344): avc: denied { write } for pid=3907 comm="syz.2.110" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.656196][ T3908] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.683953][ T3908] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.683953][ T3908] [ 63.697221][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.775310][ T3908] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.110: Freeing blocks not in datazone - block = 3, count = 1 [ 64.456055][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.464726][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.473321][ T28] audit: type=1400 audit(1781907533.260:345): avc: denied { create } for pid=3923 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.493485][ T28] audit: type=1400 audit(1781907533.300:346): avc: denied { watch watch_reads } for pid=3907 comm="syz.2.110" path="/14/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.495964][ T3295] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 64.552115][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.743929][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.818502][ T28] audit: type=1400 audit(1781907534.280:347): avc: denied { ioctl } for pid=3935 comm="syz.4.117" path="socket:[6049]" dev="sockfs" ino=6049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.891867][ T28] audit: type=1400 audit(1781907534.350:348): avc: denied { create } for pid=3940 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.953960][ T28] audit: type=1400 audit(1781907534.350:349): avc: denied { write } for pid=3940 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.957716][ T3936] loop4: detected capacity change from 0 to 512 [ 65.038057][ T3943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.107045][ T28] audit: type=1400 audit(1781907534.590:350): avc: denied { write } for pid=3942 comm="syz.3.120" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.130965][ T3936] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.117: Bad quota inum: 1, type: 2 [ 65.136031][ T28] audit: type=1400 audit(1781907534.610:351): avc: denied { read open } for pid=3942 comm="syz.3.120" path="/33/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.156650][ T3936] loop4: lost filesystem error report for type 5 error -117 [ 65.172212][ T28] audit: type=1400 audit(1781907534.610:352): avc: denied { write } for pid=3942 comm="syz.3.120" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.179702][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 65.179723][ C0] EXT4-fs (loop4): initial error at time 1781907534: ext4_quota_enable:7228 [ 65.179751][ C0] EXT4-fs (loop4): last error at time 1781907534: ext4_quota_enable:7228 [ 65.231194][ T3936] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 65.259472][ T3936] EXT4-fs (loop4): mount failed [ 65.383202][ T3936] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.449481][ T3936] bridge0: port 3(bond0) entered disabled state [ 65.463324][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.473173][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.778813][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.025518][ T3960] set_capacity_and_notify: 1 callbacks suppressed [ 66.025545][ T3960] loop1: detected capacity change from 0 to 512 [ 66.371479][ T310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.407405][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.439112][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.480201][ T3960] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.121: corrupted inode contents [ 66.493841][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.512425][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 66.528066][ C1] EXT4-fs (loop1): initial error at time 1781907535: ext4_do_update_inode:5742: inode 16 [ 66.537950][ C1] EXT4-fs (loop1): last error at time 1781907535: ext4_do_update_inode:5742: inode 16 [ 66.830356][ T3960] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.121: mark_inode_dirty error [ 66.842686][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.179560][ T3960] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.121: corrupted inode contents [ 67.201765][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.203843][ T3960] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.121: mark_inode_dirty error [ 67.225698][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.228511][ T3960] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.121: corrupted inode contents [ 67.250856][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.252988][ T3960] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 67.271383][ T3960] loop1: lost filesystem error report for type 5 error -117 [ 67.274212][ T3960] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.121: corrupted inode contents [ 67.294770][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.300126][ T3960] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.121: mark_inode_dirty error [ 67.322012][ T3960] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.324403][ T3960] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 67.343482][ T3960] loop1: lost filesystem error report for type 5 error -117 [ 68.252598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.428022][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.500646][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.462658][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.508357][ T3960] EXT4-fs (loop1): 1 truncate cleaned up [ 69.521977][ T3960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.539498][ T3960] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.553379][ T3970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3970 comm=syz.0.124 [ 69.658894][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.822628][ T36] __quota_error: 1 callbacks suppressed [ 69.822647][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.839086][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 69.861802][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.874673][ T3980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.886111][ T3980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.907966][ T3980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.930273][ T3981] netlink: 6 bytes leftover after parsing attributes in process `syz.4.129'. [ 69.930598][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 69.931809][ T3981] netlink: 'syz.4.129': attribute type 10 has an invalid length. [ 69.966734][ T28] audit: type=1400 audit(1781907539.440:354): avc: denied { mount } for pid=3983 comm="syz.1.128" name="/" dev="ramfs" ino=6395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.976221][ T28] audit: type=1400 audit(1781907539.460:355): avc: denied { mount } for pid=3986 comm="syz.0.131" name="/" dev="hugetlbfs" ino=6126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 69.980410][ T3987] netlink: 68 bytes leftover after parsing attributes in process `syz.0.131'. [ 69.980434][ T3987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.131'. [ 69.994618][ T3981] team0: Device wg2 is of different type [ 70.012682][ T3989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 70.053034][ T3987] bridge0: port 3(macvlan2) entered blocking state [ 70.068825][ T3989] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.114741][ T3989] vhci_hcd vhci_hcd.0: Device attached [ 70.123460][ T3987] bridge0: port 3(macvlan2) entered disabled state [ 70.145917][ T3987] macvlan2: entered allmulticast mode [ 70.163230][ T3987] ip6gretap0: entered allmulticast mode [ 70.171450][ T3995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.132'. [ 70.201107][ T3987] macvlan2: entered promiscuous mode [ 70.217533][ T3987] bridge0: port 3(macvlan2) entered blocking state [ 70.220938][ T3997] loop4: detected capacity change from 0 to 512 [ 70.224149][ T3987] bridge0: port 3(macvlan2) entered forwarding state [ 70.263112][ T3997] EXT4-fs: Ignoring removed i_version option [ 70.286423][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.313011][ T3991] vhci_hcd: connection closed [ 70.316147][ T12] vhci_hcd vhci_hcd.2: stop threads [ 70.350974][ T3997] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.370061][ T12] vhci_hcd vhci_hcd.2: release socket [ 70.389912][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 70.403267][ T3410] usb 6-1: SetAddress Request (2) to port 0 [ 70.413785][ T3410] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.439057][ T28] audit: type=1400 audit(1781907539.920:356): avc: denied { setopt } for pid=3996 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.458529][ T3410] usb 6-1: enqueue for inactive port 0 [ 70.474064][ T3410] usb 6-1: enqueue for inactive port 0 [ 70.483119][ T3410] usb 6-1: enqueue for inactive port 0 [ 70.490225][ T28] audit: type=1400 audit(1781907539.970:357): avc: denied { name_bind } for pid=4001 comm="syz.1.135" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.540537][ T4010] loop0: detected capacity change from 0 to 128 [ 70.542538][ T28] audit: type=1400 audit(1781907539.970:358): avc: denied { write } for pid=3996 comm="syz.4.133" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.547319][ T4006] loop3: detected capacity change from 0 to 512 [ 70.592123][ T28] audit: type=1400 audit(1781907539.970:359): avc: denied { add_name } for pid=3996 comm="syz.4.133" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.614641][ T28] audit: type=1400 audit(1781907539.970:360): avc: denied { create } for pid=3996 comm="syz.4.133" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 70.636718][ T3410] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.646965][ T4012] bio_check_eod: 102 callbacks suppressed [ 70.646987][ T4012] syz.0.136: attempt to access beyond end of device [ 70.646987][ T4012] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 70.672522][ T3410] usb 6-1: enqueue for inactive port 0 [ 70.677957][ T4012] syz.0.136: attempt to access beyond end of device [ 70.677957][ T4012] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 70.678166][ T28] audit: type=1400 audit(1781907540.000:361): avc: denied { bind } for pid=3996 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.678192][ T28] audit: type=1400 audit(1781907540.020:362): avc: denied { setopt } for pid=4009 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.733007][ T3410] usb 6-1: enqueue for inactive port 0 [ 70.739950][ T3410] usb 6-1: enqueue for inactive port 0 [ 70.764243][ T4006] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.134: lblock 0 mapped to illegal pblock 3 (length 1) [ 70.769257][ T4012] syz.0.136: attempt to access beyond end of device [ 70.769257][ T4012] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 70.778313][ T4006] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 70.792517][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 70.797058][ T4006] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.134: error -EUCLEAN reading directory block [ 70.801606][ C1] EXT4-fs (loop3): initial error at time 1781907540: ext4_map_blocks:791: inode 2: block 3 [ 70.830953][ C1] EXT4-fs (loop3): last error at time 1781907540: ext4_map_blocks:791: inode 2: block 3 [ 70.847038][ T4012] syz.0.136: attempt to access beyond end of device [ 70.847038][ T4012] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 70.860476][ T4012] syz.0.136: attempt to access beyond end of device [ 70.860476][ T4012] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 70.863783][ T4006] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 70.874509][ T4012] syz.0.136: attempt to access beyond end of device [ 70.874509][ T4012] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 70.895961][ T4012] syz.0.136: attempt to access beyond end of device [ 70.895961][ T4012] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 70.909497][ T4012] syz.0.136: attempt to access beyond end of device [ 70.909497][ T4012] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 70.922944][ T4012] syz.0.136: attempt to access beyond end of device [ 70.922944][ T4012] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 70.936472][ T4012] syz.0.136: attempt to access beyond end of device [ 70.936472][ T4012] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 70.954368][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.020343][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.387478][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.767304][ T35] net_ratelimit: 3 callbacks suppressed [ 71.767333][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.788727][ T4030] syz.2.137 uses obsolete (PF_INET,SOCK_PACKET) [ 71.937668][ T3410] usb usb6-port1: attempt power cycle [ 71.992003][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.007629][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.022036][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.032221][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.066183][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.074608][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.084055][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.092389][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.100770][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.819670][ T4045] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 72.826272][ T4045] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 73.015955][ T4045] vhci_hcd vhci_hcd.0: Device attached [ 73.035886][ T4048] vhci_hcd vhci_hcd.0: port 0 already used [ 73.116782][ T4045] loop4: detected capacity change from 0 to 512 [ 73.139025][ T4045] EXT4-fs: Ignoring removed nobh option [ 73.171475][ T4045] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.191282][ T4045] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.143: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 73.237559][ T4045] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.237793][ T4045] EXT4-fs (loop4): Remounting filesystem read-only [ 73.246985][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 73.247000][ C0] EXT4-fs (loop4): initial error at time 1781907542: ext4_xattr_inode_update_ref:1037: inode 11 [ 73.247027][ C0] EXT4-fs (loop4): last error at time 1781907542: ext4_xattr_inode_update_ref:1037: inode 11 [ 73.287796][ T3376] usb 10-1: SetAddress Request (2) to port 0 [ 73.305936][ T3376] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 73.327489][ T4043] loop0: detected capacity change from 0 to 128 [ 73.368910][ T4045] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.143: ea_inode dec ref err=-117 [ 73.395679][ T4045] EXT4-fs (loop4): 1 orphan inode deleted [ 73.413561][ T4045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.427615][ T4043] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.444416][ T4045] sctp: [Deprecated]: syz.4.143 (pid 4045) Use of int in max_burst socket option deprecated. [ 73.444416][ T4045] Use struct sctp_assoc_value instead [ 73.462458][ T4043] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.497128][ T4046] vhci_hcd: connection reset by peer [ 73.503257][ T36] vhci_hcd vhci_hcd.4: stop threads [ 73.508584][ T36] vhci_hcd vhci_hcd.4: release socket [ 73.514230][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 74.048084][ T4059] loop3: detected capacity change from 0 to 512 [ 74.065402][ T4059] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 74.090598][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.101813][ T4059] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.103900][ T4062] process 'syz.1.146' launched '/dev/fd/6' with NULL argv: empty string added [ 74.123522][ T4059] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.140088][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.152858][ T4059] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 74.161200][ T4059] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.145: corrupted xattr block 31: invalid header [ 74.175712][ T4059] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.177117][ T4059] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 74.186474][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 74.186523][ C1] EXT4-fs (loop3): initial error at time 1781907543: ext4_xattr_delete_inode:2972: inode 16 [ 74.186605][ C1] EXT4-fs (loop3): last error at time 1781907543: ext4_xattr_delete_inode:2972: inode 16 [ 74.224353][ T4059] EXT4-fs (loop3): 1 orphan inode deleted [ 74.231956][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.290650][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.299909][ T4069] loop0: detected capacity change from 0 to 2048 [ 74.328871][ T4069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.887878][ T4080] loop2: detected capacity change from 0 to 512 [ 74.915387][ T4080] EXT4-fs: Ignoring removed bh option [ 75.003170][ T4080] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.150: corrupted xattr block 95: invalid header [ 75.263385][ T4080] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.263720][ T4080] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 75.273016][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.273038][ C0] EXT4-fs (loop2): initial error at time 1781907544: ext4_expand_extra_isize_ea:2810: inode 11 [ 75.273076][ C0] EXT4-fs (loop2): last error at time 1781907544: ext4_expand_extra_isize_ea:2810: inode 11 [ 75.368302][ T4080] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.150: bg 0: block 7: invalid block bitmap [ 75.380615][ T4080] loop2: lost filesystem error report for type 5 error -117 [ 75.556765][ T4080] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 76.315438][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 76.315458][ T28] audit: type=1400 audit(1781907545.760:373): avc: denied { bind } for pid=4085 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.348599][ T4084] netlink: 10 bytes leftover after parsing attributes in process `syz.1.151'. [ 76.360704][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.716534][ T4080] loop2: lost filesystem error report for type 5 error -117 [ 76.718402][ T4080] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.150: corrupted xattr block 95: invalid header [ 76.739535][ T3410] usb usb6-port1: unable to enumerate USB device [ 76.751956][ T28] audit: type=1400 audit(1781907545.760:374): avc: denied { write } for pid=4085 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.028297][ T4080] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.028591][ T4080] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 77.073173][ T4094] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 77.113001][ T4080] EXT4-fs (loop2): 1 orphan inode deleted [ 77.139125][ T4080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.320047][ T4094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.757063][ T28] audit: type=1400 audit(1781907545.760:375): avc: denied { read } for pid=4085 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.483715][ T3376] usb 10-1: device descriptor read/8, error -110 [ 78.509833][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 78.567676][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 78.603433][ T3376] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 78.619654][ T4080] netlink: 1 bytes leftover after parsing attributes in process `syz.2.150'. [ 78.629239][ T3376] usb 10-1: enqueue for inactive port 0 [ 78.641417][ T3376] usb 10-1: enqueue for inactive port 0 [ 78.656550][ T3376] usb 10-1: enqueue for inactive port 0 [ 78.691357][ T4099] bond1: (slave geneve2): making interface the new active one [ 78.712504][ T4099] net_ratelimit: 126 callbacks suppressed [ 78.712522][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.726624][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.735008][ T28] audit: type=1400 audit(1781907545.760:376): avc: denied { name_connect } for pid=4087 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 78.739606][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.755190][ T28] audit: type=1400 audit(1781907546.830:377): avc: denied { write } for pid=4077 comm="syz.2.150" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.767349][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.794814][ T28] audit: type=1400 audit(1781907546.830:378): avc: denied { map } for pid=4077 comm="syz.2.150" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.821701][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.830347][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.838845][ T4099] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 78.874934][ T310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.903210][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.913356][ T4099] syz.3.154 (4099) used greatest stack depth: 8816 bytes left [ 79.352726][ T310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.621783][ T4114] ALSA: seq fatal error: cannot create timer (-22) [ 79.722742][ T3376] usb usb10-port1: attempt power cycle [ 79.734001][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.755380][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.775309][ T4117] loop4: detected capacity change from 0 to 8192 [ 79.831357][ T4122] loop2: detected capacity change from 0 to 512 [ 80.817201][ T4122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.838260][ T4130] loop1: detected capacity change from 0 to 512 [ 80.846456][ T4122] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.132604][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.197199][ T4130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.116701][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.126665][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.204680][ T4139] loop4: detected capacity change from 0 to 512 [ 83.378282][ T4146] futex_wake_op: syz.3.169 tries to shift op by 144; fix this program [ 84.159354][ T4139] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 84.167540][ T4139] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 84.176301][ T4139] EXT4-fs (loop4): 1 truncate cleaned up [ 84.572729][ T3376] usb usb10-port1: unable to enumerate USB device [ 84.809391][ T4153] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 85.531832][ T4139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.562174][ T4153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.586174][ T4074] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 86.089680][ T4153] bond1: (slave geneve2): making interface the new active one [ 86.990821][ T4153] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 87.235611][ T4139] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.673324][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.811966][ T9] net_ratelimit: 9 callbacks suppressed [ 87.812024][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.904075][ T28] audit: type=1400 audit(1781907557.390:379): avc: denied { listen } for pid=4176 comm="syz.1.176" lport=43605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.933463][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.971667][ T28] audit: type=1400 audit(1781907557.450:380): avc: denied { accept } for pid=4176 comm="syz.1.176" lport=43605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.020229][ T28] audit: type=1400 audit(1781907557.490:381): avc: denied { read } for pid=4176 comm="syz.1.176" lport=43605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.067092][ T28] audit: type=1400 audit(1781907557.540:382): avc: denied { setopt } for pid=4176 comm="syz.1.176" lport=43605 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.093811][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.101954][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.175117][ T310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.187396][ T310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.396564][ T28] audit: type=1400 audit(1781907557.880:383): avc: granted { setsecparam } for pid=4188 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 88.495822][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.722088][ T4189] loop3: detected capacity change from 0 to 1024 [ 88.741294][ T4189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.821415][ T4189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.841504][ T4189] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.903041][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.135885][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.146963][ T4208] loop1: detected capacity change from 0 to 512 [ 89.158952][ T4208] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 89.168377][ T4208] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 89.177342][ T4208] EXT4-fs (loop1): 1 truncate cleaned up [ 89.185607][ T4208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.224238][ T4208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.238300][ T4208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.334817][ T4208] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.165801][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.330897][ T4220] loop3: detected capacity change from 0 to 512 [ 91.338673][ T4225] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 91.447686][ T4225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.496306][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.526844][ T4237] bond1: (slave geneve2): making interface the new active one [ 91.577042][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.596822][ T4237] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 91.675306][ T4240] loop1: detected capacity change from 0 to 1024 [ 91.785220][ T4240] EXT4-fs: Mount option(s) incompatible with ext3 [ 91.937426][ T4240] loop1: detected capacity change from 0 to 512 [ 91.979138][ T4240] EXT4-fs: test_dummy_encryption option not supported [ 92.532520][ T4257] loop3: detected capacity change from 0 to 512 [ 92.548658][ T4257] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 92.570296][ T4257] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 92.582484][ T4257] EXT4-fs (loop3): 1 truncate cleaned up [ 92.589252][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.752509][ T4257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.374245][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.414842][ T4269] loop2: detected capacity change from 0 to 512 [ 93.441432][ T4269] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 93.449711][ T4269] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 93.465722][ T4270] loop4: detected capacity change from 0 to 512 [ 93.495453][ T4269] EXT4-fs (loop2): 1 truncate cleaned up [ 93.523098][ T4269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.544442][ T4270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.571373][ T4270] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.605409][ T28] audit: type=1400 audit(1781907563.090:384): avc: denied { write } for pid=4266 comm="syz.4.218" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.652804][ T4282] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.745910][ T4281] bridge_slave_0: left allmulticast mode [ 93.755165][ T4281] bridge_slave_0: left promiscuous mode [ 93.764555][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.822021][ T4281] bridge_slave_1: left allmulticast mode [ 93.828284][ T4281] bridge_slave_1: left promiscuous mode [ 93.834637][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.858518][ T4281] bond0: (slave bond_slave_0): Releasing backup interface [ 93.903345][ T4281] bond0: (slave bond_slave_1): Releasing backup interface [ 95.198644][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.513592][ T4281] team0: Port device team_slave_0 removed [ 95.672949][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.688344][ T4281] team0: Port device team_slave_1 removed [ 95.709698][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.717833][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.728370][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.735888][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.754725][ T4281] net_ratelimit: 3 callbacks suppressed [ 95.754839][ T4281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.961043][ T4283] team0: Mode changed to "loadbalance" [ 97.970697][ T4307] loop0: detected capacity change from 0 to 1024 [ 98.003337][ T4307] EXT4-fs: Mount option(s) incompatible with ext3 [ 98.987205][ T4306] loop0: detected capacity change from 0 to 512 [ 99.023870][ T4306] EXT4-fs: test_dummy_encryption option not supported [ 99.111290][ T4304] netlink: 10 bytes leftover after parsing attributes in process `syz.4.213'. [ 99.300406][ T4332] loop4: detected capacity change from 0 to 512 [ 99.317431][ T4332] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 99.346926][ T4332] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 99.368697][ T4332] EXT4-fs (loop4): 1 truncate cleaned up [ 99.381029][ T4332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.482538][ T4335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.683754][ T4334] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 99.770942][ T4339] netlink: 277 bytes leftover after parsing attributes in process `syz.3.229'. [ 99.878890][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 100.154866][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.753281][ T4363] futex_wake_op: syz.1.237 tries to shift op by 144; fix this program [ 100.850106][ T4364] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2570 sclass=netlink_xfrm_socket pid=4364 comm=syz.4.238 [ 101.381614][ T4361] vlan3: entered allmulticast mode [ 101.423524][ T4361] veth0_to_bond: entered allmulticast mode [ 101.592084][ T4377] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 101.594099][ T4380] netlink: 128 bytes leftover after parsing attributes in process `syz.4.242'. [ 101.767757][ T4377] bond2 (unregistering): Released all slaves [ 101.975521][ T4385] netlink: 'syz.4.242': attribute type 25 has an invalid length. [ 102.089378][ T4385] netlink: 'syz.4.242': attribute type 3 has an invalid length. [ 102.162365][ T4385] netlink: 132 bytes leftover after parsing attributes in process `syz.4.242'. [ 103.487382][ T4393] loop2: detected capacity change from 0 to 1024 [ 103.703956][ T4391] loop4: detected capacity change from 0 to 512 [ 103.764117][ T4393] EXT4-fs: Mount option(s) incompatible with ext3 [ 103.914274][ T4391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.988169][ T4393] loop2: detected capacity change from 0 to 512 [ 104.034662][ T4393] EXT4-fs: test_dummy_encryption option not supported [ 104.168679][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.228572][ T4410] loop4: detected capacity change from 0 to 512 [ 104.254765][ T4410] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 104.272983][ T4410] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 104.298250][ T4377] loop1: detected capacity change from 0 to 512 [ 104.306015][ T4410] EXT4-fs (loop4): 1 truncate cleaned up [ 104.318592][ T4410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.364524][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.388874][ T4377] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.457380][ T4414] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.483770][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.553520][ T4416] loop1: detected capacity change from 0 to 1024 [ 104.590813][ T4416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.603690][ T4416] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.618787][ T28] audit: type=1400 audit(1781907574.100:385): avc: denied { write } for pid=4415 comm="syz.1.249" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.641969][ T4416] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.249: lblock 3 mapped to illegal pblock 3 (length 1) [ 104.657308][ T4416] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 104.670111][ T4416] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.670111][ T4416] [ 104.684526][ T4416] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.249: Freeing blocks not in datazone - block = 3, count = 1 [ 104.702290][ T28] audit: type=1400 audit(1781907574.190:386): avc: denied { watch watch_reads } for pid=4415 comm="syz.1.249" path="/45/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.910842][ T3294] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 104.927467][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.079788][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.151593][ T4430] loop3: detected capacity change from 0 to 512 [ 105.167786][ T4430] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.292777][ T4430] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 105.539303][ T4439] futex_wake_op: syz.2.253 tries to shift op by 144; fix this program [ 105.735379][ T4430] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -ENXIO [ 105.792179][ T4445] loop1: detected capacity change from 0 to 512 [ 105.821110][ T4445] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.859612][ T4445] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 105.985604][ T4445] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -ENXIO [ 106.175330][ T4457] IPv6: addrconf: prefix option has invalid lifetime [ 106.182119][ T4457] IPv6: addrconf: prefix option has invalid lifetime [ 106.427363][ T4459] loop3: detected capacity change from 0 to 1024 [ 106.466874][ T4459] EXT4-fs: Mount option(s) incompatible with ext3 [ 106.573031][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.942616][ T4459] loop3: detected capacity change from 0 to 512 [ 107.029180][ T4459] EXT4-fs: test_dummy_encryption option not supported [ 107.258894][ T4478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.271524][ T4478] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.288033][ T28] audit: type=1400 audit(1781907576.770:387): avc: denied { write } for pid=4476 comm="syz.0.266" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.311599][ T4478] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.266: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.328209][ T4478] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 107.361181][ T4485] bridge0: port 3(bond0) entered blocking state [ 107.367569][ T4485] bridge0: port 3(bond0) entered forwarding state [ 107.374187][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.381292][ T4485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.388848][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.395951][ T4485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.405535][ T4478] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.405535][ T4478] [ 107.462852][ T4492] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 108.622211][ T4483] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 109.666641][ T4511] set_capacity_and_notify: 1 callbacks suppressed [ 109.666664][ T4511] loop1: detected capacity change from 0 to 512 [ 109.710537][ T4511] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 109.719970][ T36] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 109.761690][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 109.773628][ T4511] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 109.819473][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.842632][ T4511] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -ENXIO [ 109.972789][ T4515] loop4: detected capacity change from 0 to 512 [ 110.044008][ T4515] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 110.054038][ T4515] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 110.221807][ T4515] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -ENXIO [ 110.592949][ T4531] loop1: detected capacity change from 0 to 1024 [ 110.644227][ T4531] EXT4-fs: Mount option(s) incompatible with ext3 [ 111.710009][ T4538] loop2: detected capacity change from 0 to 512 [ 111.783968][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.801031][ T4538] EXT4-fs: dax option not supported [ 111.832675][ T4531] loop1: detected capacity change from 0 to 512 [ 111.865949][ T4531] EXT4-fs: test_dummy_encryption option not supported [ 112.391226][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.450767][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.452491][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 113.663797][ T4552] loop1: detected capacity change from 0 to 128 [ 114.117414][ T4552] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.146323][ T4564] loop4: detected capacity change from 0 to 2048 [ 114.167994][ T4552] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.223843][ T4564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.258372][ T4564] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.291738][ T28] audit: type=1400 audit(1781907583.770:388): avc: denied { write } for pid=4562 comm="syz.4.286" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.394170][ T28] audit: type=1400 audit(1781907583.830:389): avc: denied { write } for pid=4549 comm="syz.1.295" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.434909][ T28] audit: type=1400 audit(1781907583.850:390): avc: denied { ioctl } for pid=4562 comm="syz.4.286" path="socket:[8492]" dev="sockfs" ino=8492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.616591][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.644859][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.582354][ T4581] loop3: detected capacity change from 0 to 1024 [ 116.681222][ T4581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.708147][ T4581] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.725311][ T28] audit: type=1400 audit(1781907586.210:391): avc: denied { write } for pid=4580 comm="syz.3.287" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.748618][ T4581] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.287: lblock 3 mapped to illegal pblock 3 (length 1) [ 117.518425][ T4581] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 117.782560][ T4581] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.782560][ T4581] [ 117.828187][ T4598] loop4: detected capacity change from 0 to 512 [ 117.859644][ T4598] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.978509][ T3301] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 118.018424][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.046576][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 119.617104][ T4616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.299'. [ 119.914857][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.075203][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.095007][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 121.372507][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 122.680223][ T4648] loop2: detected capacity change from 0 to 512 [ 122.835519][ T4648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.043762][ T4653] ALSA: seq fatal error: cannot create timer (-22) [ 124.035867][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.669436][ T4672] loop3: detected capacity change from 0 to 1024 [ 124.721286][ T4672] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 124.763516][ T4672] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 124.774811][ T4679] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 124.781442][ T4679] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.812936][ T4672] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.315: Failed to acquire dquot type 0 [ 124.830084][ T4679] vhci_hcd vhci_hcd.0: Device attached [ 124.835753][ T4672] loop3: lost filesystem error report for type 5 error -5 [ 124.842955][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 124.857412][ C1] EXT4-fs (loop3): initial error at time 1781907594: ext4_acquire_dquot:7041 [ 124.860760][ T4683] loop1: detected capacity change from 0 to 512 [ 124.866509][ C1] EXT4-fs (loop3): last error at time 1781907594: ext4_acquire_dquot:7041 [ 124.884512][ T4670] bridge_slave_0: left allmulticast mode [ 124.888707][ T4672] EXT4-fs (loop3): 1 truncate cleaned up [ 124.900121][ T4670] bridge_slave_0: left promiscuous mode [ 124.909011][ T4683] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.314: lblock 0 mapped to illegal pblock 3 (length 1) [ 124.911837][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.932238][ T4672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.946305][ T4683] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 124.947969][ T4683] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.314: error -EUCLEAN reading directory block [ 124.957092][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 124.957107][ C1] EXT4-fs (loop1): initial error at time 1781907594: ext4_map_blocks:791: inode 2: block 3 [ 124.957153][ C1] EXT4-fs (loop1): last error at time 1781907594: ext4_map_blocks:791: inode 2: block 3 [ 125.007675][ T4683] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 125.016716][ T4683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.040914][ T4670] bridge_slave_1: left allmulticast mode [ 125.055822][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.065153][ T4670] bridge_slave_1: left promiscuous mode [ 125.078973][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.108629][ T4670] bond0: (slave bond_slave_0): Releasing backup interface [ 125.132475][ T35] usb 2-1: SetAddress Request (2) to port 0 [ 125.138578][ T35] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 125.152361][ T4670] bond0: (slave bond_slave_1): Releasing backup interface [ 125.196834][ T4670] team0: Port device team_slave_0 removed [ 125.227713][ T4670] team0: Port device team_slave_1 removed [ 125.255017][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.272501][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.298331][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.309444][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.325601][ T4670] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.343425][ T4673] team0: Mode changed to "loadbalance" [ 125.355424][ T4691] loop4: detected capacity change from 0 to 1024 [ 125.356467][ T4681] vhci_hcd: connection reset by peer [ 125.370893][ T12] vhci_hcd vhci_hcd.0: stop threads [ 125.376947][ T12] vhci_hcd vhci_hcd.0: release socket [ 125.386169][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 125.399009][ T4691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.412817][ T4691] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.439408][ T28] audit: type=1400 audit(1781907594.920:392): avc: denied { write } for pid=4690 comm="syz.4.317" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.462900][ T4691] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.317: lblock 3 mapped to illegal pblock 3 (length 1) [ 125.478731][ T4691] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 125.491418][ T4691] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.491418][ T4691] [ 125.506634][ T4691] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.317: Freeing blocks not in datazone - block = 3, count = 1 [ 125.585459][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.597070][ T3298] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 125.609621][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.854127][ T310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.863551][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.872582][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.020407][ T4702] loop0: detected capacity change from 0 to 2048 [ 126.046887][ T4702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.062057][ T4702] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.095941][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.113286][ T28] audit: type=1400 audit(1781907595.600:393): avc: denied { write } for pid=4701 comm="syz.0.321" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.145426][ T4707] loop4: detected capacity change from 0 to 128 [ 126.280007][ T4707] bio_check_eod: 26 callbacks suppressed [ 126.280058][ T4707] syz.4.324: attempt to access beyond end of device [ 126.280058][ T4707] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 126.301990][ T4707] syz.4.324: attempt to access beyond end of device [ 126.301990][ T4707] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 126.317420][ T4707] syz.4.324: attempt to access beyond end of device [ 126.317420][ T4707] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 126.338253][ T4707] syz.4.324: attempt to access beyond end of device [ 126.338253][ T4707] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 126.352068][ T4707] syz.4.324: attempt to access beyond end of device [ 126.352068][ T4707] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 126.358278][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.366570][ T4707] syz.4.324: attempt to access beyond end of device [ 126.366570][ T4707] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 126.412992][ T4715] loop0: detected capacity change from 0 to 512 [ 126.421172][ T4707] syz.4.324: attempt to access beyond end of device [ 126.421172][ T4707] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 126.434686][ T4715] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 126.444621][ T4715] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 126.457428][ T4707] syz.4.324: attempt to access beyond end of device [ 126.457428][ T4707] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 126.497458][ T4707] syz.4.324: attempt to access beyond end of device [ 126.497458][ T4707] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 126.513580][ T4707] syz.4.324: attempt to access beyond end of device [ 126.513580][ T4707] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 126.536512][ T4715] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -ENXIO [ 126.804000][ T4721] loop1: detected capacity change from 0 to 512 [ 126.818914][ T4721] EXT4-fs: dax option not supported [ 126.915645][ T4726] ªªªªªª: renamed from vlan0 (while UP) [ 126.970805][ T4729] loop4: detected capacity change from 0 to 512 [ 126.990823][ T4729] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 127.009235][ T4729] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 127.052617][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.083593][ T3410] usb usb6-port1: attempt power cycle [ 127.113910][ T4729] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -ENXIO [ 127.135166][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.254829][ T4734] loop1: detected capacity change from 0 to 4096 [ 127.276726][ T4734] EXT4-fs: inline encryption not supported [ 127.320664][ T4734] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 127.518379][ T4728] ALSA: seq fatal error: cannot create timer (-22) [ 127.804728][ T4737] loop1: detected capacity change from 0 to 512 [ 127.900532][ T4737] EXT4-fs: Ignoring removed i_version option [ 128.138974][ T4744] loop0: detected capacity change from 0 to 1024 [ 128.141633][ T4737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.175618][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.185253][ T4737] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.200124][ T4744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.215609][ T4744] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.232364][ T28] audit: type=1400 audit(1781907597.720:394): avc: denied { write } for pid=4743 comm="syz.0.331" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.255152][ T4744] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.331: lblock 3 mapped to illegal pblock 3 (length 1) [ 128.272113][ T4744] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 128.289607][ T4744] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.289607][ T4744] [ 128.312145][ T4737] xt_hashlimit: size too large, truncated to 1048576 [ 128.335607][ T28] audit: type=1400 audit(1781907597.820:395): avc: denied { write } for pid=4736 comm="syz.1.329" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.404414][ T3300] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.435853][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.448347][ T4753] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.476122][ T4761] loop2: detected capacity change from 0 to 4096 [ 128.509642][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.541872][ T28] audit: type=1400 audit(1781907598.020:396): avc: denied { write } for pid=4760 comm="syz.2.335" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.813871][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.953572][ T3410] usb usb6-port1: unable to enumerate USB device [ 129.044826][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.215455][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.577991][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 130.085199][ T4781] loop4: detected capacity change from 0 to 512 [ 130.096390][ T4782] loop0: detected capacity change from 0 to 512 [ 130.128368][ T4781] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 130.139105][ T4782] EXT4-fs: dax option not supported [ 130.175814][ T4781] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 130.204718][ T11] net_ratelimit: 2 callbacks suppressed [ 130.204734][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.242548][ T4781] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -ENXIO [ 130.252530][ T35] usb 2-1: device descriptor read/8, error -110 [ 130.261889][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.382437][ T35] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 130.422652][ T35] usb 2-1: enqueue for inactive port 0 [ 130.439960][ T35] usb 2-1: enqueue for inactive port 0 [ 130.461174][ T35] usb 2-1: enqueue for inactive port 0 [ 130.611346][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.667133][ T4787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.675013][ T4787] IPv6: NLM_F_CREATE should be set when creating new route [ 131.311572][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.542825][ T35] usb usb2-port1: attempt power cycle [ 131.840119][ T4804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.933958][ T4809] loop3: detected capacity change from 0 to 128 [ 131.944141][ T4809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.157803][ T4809] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.326545][ T28] audit: type=1400 audit(1781907601.810:397): avc: denied { write } for pid=4805 comm="syz.3.349" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.908781][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.095381][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.271432][ T4828] loop1: detected capacity change from 0 to 4096 [ 133.342523][ T4828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.476394][ T28] audit: type=1400 audit(1781907602.960:398): avc: denied { write } for pid=4825 comm="syz.1.354" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.503219][ T4829] loop2: detected capacity change from 0 to 128 [ 133.611324][ T4829] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.661594][ T4829] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.734666][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.792594][ T28] audit: type=1400 audit(1781907603.240:399): avc: denied { write } for pid=4826 comm="syz.2.364" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.946150][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.017579][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.502841][ T4835] ================================================================== [ 134.511015][ T4835] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 134.518359][ T4835] [ 134.520714][ T4835] read to 0xffff8881005e4580 of 4 bytes by task 4834 on cpu 0: [ 134.528290][ T4835] atime_needs_update+0x25f/0x3e0 [ 134.533363][ T4835] touch_atime+0x4a/0x300 [ 134.537747][ T4835] filemap_splice_read+0x6fd/0x790 [ 134.542910][ T4835] ext4_file_splice_read+0x8f/0xb0 [ 134.548061][ T4835] splice_direct_to_actor+0x261/0x680 [ 134.553470][ T4835] do_splice_direct+0x119/0x1a0 [ 134.558367][ T4835] do_sendfile+0x37d/0x640 [ 134.562829][ T4835] __x64_sys_sendfile64+0x105/0x150 [ 134.568074][ T4835] x64_sys_call+0x2dc4/0x3020 [ 134.572796][ T4835] do_syscall_64+0x136/0x3c0 [ 134.577423][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.583400][ T4835] [ 134.585753][ T4835] write to 0xffff8881005e4580 of 4 bytes by task 4835 on cpu 1: [ 134.593413][ T4835] touch_atime+0x1cb/0x300 [ 134.597887][ T4835] filemap_splice_read+0x6fd/0x790 [ 134.603050][ T4835] ext4_file_splice_read+0x8f/0xb0 [ 134.608211][ T4835] splice_direct_to_actor+0x261/0x680 [ 134.613625][ T4835] do_splice_direct+0x119/0x1a0 [ 134.618508][ T4835] do_sendfile+0x37d/0x640 [ 134.622963][ T4835] __x64_sys_sendfile64+0x105/0x150 [ 134.628192][ T4835] x64_sys_call+0x2dc4/0x3020 [ 134.632913][ T4835] do_syscall_64+0x136/0x3c0 [ 134.637540][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.643463][ T4835] [ 134.645809][ T4835] value changed: 0x3a72c3a3 -> 0x3b0b5a23 [ 134.651551][ T4835] [ 134.653890][ T4835] Reported by Kernel Concurrency Sanitizer on: [ 134.660135][ T4835] CPU: 1 UID: 0 PID: 4835 Comm: syz.1.354 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.669513][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.679615][ T4835] ================================================================== [ 134.735444][ T4848] loop2: detected capacity change from 0 to 512 [ 134.774490][ T4848] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 134.779940][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.975857][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.372719][ T35] usb usb2-port1: unable to enumerate USB device [ 135.453656][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.012696][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.092512][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 136.823091][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.055410][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.094972][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.134972][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.862567][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.174932][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.225936][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.255062][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.902597][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.295247][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.335400][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog