last executing test programs: 8.606467291s ago: executing program 2 (id=730): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) 8.25477337s ago: executing program 3 (id=732): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000580)=""/145, 0x91, 0x142, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000400)='./file2\x00', 0x3000000, &(0x7f0000000900)={[{@gid}, {@nocompress}, {@overriderock}, {@block={'block', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0xb05f}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@unhide}], [{@uid_eq}]}, 0x2, 0x3ec, &(0x7f0000000440)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x800718, &(0x7f0000001180), 0x0, 0x48d, &(0x7f0000000a00)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x18, r4, 0x1ffd1684a4a9b69f, 0x70bd22, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x40010) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x64, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x44) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x1, 0x0, '\x00', 0x0, 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 8.196192401s ago: executing program 2 (id=733): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) msync(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1) socket(0x8, 0x5, 0x5) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.018131s ago: executing program 4 (id=736): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x27, 0x80000, 0x7e1) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880000000102010400000000000000000a000007040001803800038006000340000400002c00018014000300fe80000000000800000000000000002914000400ff020000000000000000000000000001380002802c0001800b000300fe8000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 6.58521232s ago: executing program 1 (id=737): r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x3, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') pread64(r1, &(0x7f0000000100)=""/31, 0x1f, 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000080101010100ef0000000000000200ffb20c001980080002008307008033385b178dc8beb8e16dfe48ff65fa185600be7eb0c0b6b980dfd021b8e51eccfadef350feef625b087d03281866fa03d32aa375c799eba25aa54aca5fcc85ec72d9b1786062e668ba1fc95450e387b32c508118b06facfd767130af4b2e18b2513efd225f492077206e83762f3890fc3204911b37ce533bd12994f440f49b3304f38672f53b4f9a6c67ab1a25a0590434b963014e8ed4"], 0x20}}, 0x4880) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000003c00000042000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000200001800d0001406064703a73797a30000000000c00028008"], 0x34}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)}], 0x1}, 0x8eec3816282631eb) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0x7, [0xde, 0x9, 0x10000, 0x726, 0x5, 0x89]}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xe, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa8, 0x2, 0x6, 0xb5, 0x9b9b, 0x8000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x22a43000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8d24, 0x1}, 0x4b86, 0xfc, 0x4, 0x8, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/cgroup\x00') 6.397458585s ago: executing program 3 (id=738): socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000280)={[{@nogrpid}, {@nolazytime}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000d06032c000000000000000000020000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x48c0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0x2}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "4466d441b2b796cde8a4757f0c24959cb5d5f28bbe01e0258079103cda77e15d", "8a2c7a9fc41b542f693bd1a7b1ee50f0bdcb7f677354e878f1acea00", "7cb0f2bb654e70495db4e641b3d4ec2c98a77864421f6dd790cd22daada20b83", "966e034aeeb4e762826db7cc03cccf37e96d5d9ccd000000e7ffffff00", "f7c044aa279471161c63233d91f948d8b08c59675162b658b1266281090212a7", "ff9eab8f76cd6816c61031d5", 0x2, 0x800, 0x8, 0x9, 0x8001}}) unshare(0x28000600) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x8000000a) 6.277805328s ago: executing program 4 (id=739): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048884}, 0x4000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040004b90400040024801400"], 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 6.242311369s ago: executing program 1 (id=740): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000280)={[{@nogrpid}, {@nolazytime}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000d06032c000000000000000000020000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x48c0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0x2}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "4466d441b2b796cde8a4757f0c24959cb5d5f28bbe01e0258079103cda77e15d", "8a2c7a9fc41b542f693bd1a7b1ee50f0bdcb7f677354e878f1acea00", "7cb0f2bb654e70495db4e641b3d4ec2c98a77864421f6dd790cd22daada20b83", "966e034aeeb4e762826db7cc03cccf37e96d5d9ccd000000e7ffffff00", "f7c044aa279471161c63233d91f948d8b08c59675162b658b1266281090212a7", "ff9eab8f76cd6816c61031d5", 0x2, 0x800, 0x8, 0x9, 0x8001}}) unshare(0x28000600) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x8000000a) 6.19412682s ago: executing program 2 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000200)='attr/sockcreate\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x6000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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") 5.606249374s ago: executing program 4 (id=742): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x8104, 0x8, 0x72e000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r2, 0x0, 0x0) fstat(r4, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)=@acquire={0x1c4, 0x17, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x3c}, @in=@local, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e20, 0x8, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0xff, 0x0, 0xee00}, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e21, 0x5, 0x4e22, 0x7, 0x2, 0x0, 0xa0, 0x89, 0x0, r6}, {0x9, 0x5, 0x8001, 0x148, 0x3, 0x9, 0x9}, {0x5, 0x80, 0x0, 0xe18}, 0xf90, 0x0, 0x2, 0x0, 0x1, 0x3}, 0xf, 0x9, 0x2, 0x70bd29}, [@migrate={0x9c, 0x11, [{@in6=@local, @in=@multicast1, @in=@loopback, @in=@private=0xa010100, 0x32, 0x3, 0x0, 0x3502, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, 0x4, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24048000}, 0x8014) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000220000fd2000940000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 5.437322628s ago: executing program 0 (id=743): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x40500f0) 5.191944794s ago: executing program 0 (id=744): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2880, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x4, 0x0, &(0x7f0000000240), &(0x7f0000000080)={0x0, 0x989680}, 0x0) syslog(0x3, &(0x7f00000005c0)=""/143, 0x8f) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.658301757s ago: executing program 1 (id=745): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x20000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3) sched_setscheduler(0x0, 0x2, 0x0) getpid() mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xff7f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1, {0x3, 0x2}}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0) 4.566363379s ago: executing program 3 (id=746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x8104, 0x8, 0x72e000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r2, 0x0, 0x0) fstat(r4, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)=@acquire={0x1c4, 0x17, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x3c}, @in=@local, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e20, 0x8, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0xff, 0x0, 0xee00}, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e21, 0x5, 0x4e22, 0x7, 0x2, 0x0, 0xa0, 0x89, 0x0, r6}, {0x9, 0x5, 0x8001, 0x148, 0x3, 0x9, 0x9}, {0x5, 0x80, 0x0, 0xe18}, 0xf90, 0x0, 0x2, 0x0, 0x1, 0x3}, 0xf, 0x9, 0x2, 0x70bd29}, [@migrate={0x9c, 0x11, [{@in6=@local, @in=@multicast1, @in=@loopback, @in=@private=0xa010100, 0x32, 0x3, 0x0, 0x3502, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, 0x4, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24048000}, 0x8014) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000220000fd2000940000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.51270134s ago: executing program 0 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x48043) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xb9, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x1c, 0xffff}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 3.595529182s ago: executing program 2 (id=748): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x8104, 0x8, 0x72e000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r2, 0x0, 0x0) fstat(r4, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)=@acquire={0x1c4, 0x17, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x3c}, @in=@local, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e20, 0x8, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0xff, 0x0, 0xee00}, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e21, 0x5, 0x4e22, 0x7, 0x2, 0x0, 0xa0, 0x89, 0x0, r6}, {0x9, 0x5, 0x8001, 0x148, 0x3, 0x9, 0x9}, {0x5, 0x80, 0x0, 0xe18}, 0xf90, 0x0, 0x2, 0x0, 0x1, 0x3}, 0xf, 0x9, 0x2, 0x70bd29}, [@migrate={0x9c, 0x11, [{@in6=@local, @in=@multicast1, @in=@loopback, @in=@private=0xa010100, 0x32, 0x3, 0x0, 0x3502, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, 0x4, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24048000}, 0x8014) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000220000fd2000940000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 3.594279003s ago: executing program 4 (id=749): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000580)=""/145, 0x91, 0x142, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000400)='./file2\x00', 0x3000000, &(0x7f0000000900)={[{@gid}, {@nocompress}, {@overriderock}, {@block={'block', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0xb05f}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@unhide}], [{@uid_eq}]}, 0x2, 0x3ec, &(0x7f0000000440)="$eJzs3E1vG0UYwPHZ1EYhSBVSRZOmOUwph3Cou7shjqyelvXYmXa9u5pZV8kJVSSpIpKCaJFoLiiXAhJ8iF75EHyjCr5B0L645MWJQ17qUP1/UjVj7zMzz2ytGdnRrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMIJ267rOSLScX9FHi9sm6R3wvVBf58eKE4YVwgn/ycmJ8VM+dbMjX8vf1J2Ml2+mhaTeTEpdj66+fGDG7WJQfsTEnonnr/c+ebJ1tb696eKrsva33uFS0/sHemqWNtE94KuktomstVsuveXO1Z2dKTsqs1UT4ZGBVli5Hz4ufRarQWpGqtJP+62g0gN3ly657tuUz5spCowNonvP2zYcFlHkY67RUx+OY9Zyj+Ij3QmMxX0pNzY3FpfGJVkHuSNDso/YiOCfNf3Pc/3veZia3HJdWu+68sDb7iHiCNNxv+hxXhd8AoOnN1etf8DAAAAAID3l1P8xp5//68Xv8M7oqMj5Y47LQAAAAAAcIGKv/xP50U9r80Ih+//AAAAAAC8b37Zf8buw2Fn7Gy6If78SxhTd3bTlc+c7SAPD7ZFrWh37XCPWWfWuV51UhTNWvUqVHPOrTLo1iD6TVVsjDrr5xxJoBr5cALlCbu9n4YkIH4Ts2XQ7FpZrg2ulKNMdXSkGmESPfBEEFyfyNRK9sOzzR9FMf1f4951R2xsbq03vv52a63IZTfvZXe7OkBx5BzF8TdDvHh77nH4jOvFDzHVuFPluO7++U+UzSf+w5ivxO0y5vZUWU4dnP9kPqbXOG72VRbeOWf+SsyVMXPzd/Pi7vyQLPxRWfj7szjTvThFFgujslg4ZxYAMC4bI3Yh5+jGf4ZV7uJ295NX9DtlzJ3ZYmGtzQ5Z0d1RK7p7zt3tjyPPQDhuj83H/f3Qrvo6b/D62HFt5Dv5Lbz2Yvs7cfP5y517m9tPnq4/XX/m+wtN9wvXXfRFvZhGVbD3AACGUOaNM5X97Bij06+8VssLsmUlTRI+kka3u0rqOFMmXA7irpKpSbIkTKK88li3lZW2n6aJyWQnMTJNrF4pnvwiq0e/WNUL4kyHNo1UYJUMkzgLwky2tQ1l2v8y0nZZmaKxTVWoOzoMMp3E0iZ9E6qGlFapfYG6reJMd3RejWVqdC8wq/JxEvV7SraVDY1Os6TscDCWjjuJ6RXdNsZ9swEAuCLePsHu9JV61fTUrcY8RQAAcAi7NAAAAAAAAAAAAAAAAAAAAAAAV98Zzv+NueIIIa5AGv/zCvfwClY+OOt/yt4l5DPulQnAZfsnAAD//0VpqI0=") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x800718, &(0x7f0000001180), 0x0, 0x48d, &(0x7f0000000a00)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x18, r4, 0x1ffd1684a4a9b69f, 0x70bd22, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x40010) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x64, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x44) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 2.329306244s ago: executing program 0 (id=750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000001840)=[{&(0x7f0000002880)="d64a4084c3fb97b2527b91a366375d46eab01f92ba26e2a671dfc2413f0e6c8353e4ef36eb31b31d8c0a239785a53d74a25693d00b327086f8ba1348a4191fd4b30a021e0db8834c02d249abdfd78c95868a743da457e221583cbeba12d62dce7193265c4bc594e735b88b4dbec02e6b9f50fa0d62d2a20a34548b2a14f2fd44e60ae1e62ef9f2a08f38dac5633814", 0x8f}, {&(0x7f00000013c0)="5a0c91718a617b6e53a446aa924e113f0fd7c035cf4da8f849fe3553f73430d287391147cd47808b621d3565dcb90362a1513ba5b2a5", 0x36}, {0x0}, {&(0x7f0000001640)="ada423fc0243ff6f15676b6d0d3c37e7ae107cebaa619306e42deb89b6a885f690a0cbe72c1208decc75ebefa7742e0b97c969684f067d437047f0bda760594963ee9667261d4d5479df8e18ce92e8f9647c1f1f4b5162ea09ebb0a21db2a0112aa1a8588398882a13d08feaabc2f02a7ee8f44703a6033b22716057731c8ffc7c9f6dffd7afa6af736fcab707cf871d9ce65a24408792e3870c622a2af15529724235ea1ee614e71d26cbf59e19a7302bc7dc96de3269842549ea2aaac7b1a4378630c2114de5edcd0cba32137d", 0xce}, {&(0x7f0000002740)="48a4812b4230d2043261634b002c0ff987d4515e1f1eb6af3b18851484101aa47880db6c305205f74a207ba01f68b45672bacf4ba817e3e92f127dd9c1980dd32c", 0x41}], 0x5, 0x5, 0x401) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) 2.139908728s ago: executing program 3 (id=751): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) msync(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1) socket(0x8, 0x5, 0x5) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.812528576s ago: executing program 1 (id=752): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048884}, 0x4000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040004b90400040024801400"], 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 1.812181186s ago: executing program 0 (id=753): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) syslog(0x3, &(0x7f00000005c0)=""/143, 0x8f) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.717421259s ago: executing program 4 (id=754): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x20000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3) sched_setscheduler(0x0, 0x2, 0x0) getpid() mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xff7f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001740)={&(0x7f0000000740)=""/4096, 0x1000, 0x3, 0x4}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ptrace$peeksig(0x4209, r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1, {0x3, 0x2}}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0) 1.340070758s ago: executing program 1 (id=755): getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/233, 0x0) uname(0x0) socket$kcm(0x2, 0xa, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x458002, 0x55) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) 1.190859461s ago: executing program 1 (id=756): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x8104, 0x8, 0x72e000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r2, 0x0, 0x0) fstat(r4, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)=@acquire={0x1c4, 0x17, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x3c}, @in=@local, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e20, 0x8, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0xff, 0x0, 0xee00}, {{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e21, 0x5, 0x4e22, 0x7, 0x2, 0x0, 0xa0, 0x89, 0x0, r6}, {0x9, 0x5, 0x8001, 0x148, 0x3, 0x9, 0x9}, {0x5, 0x80, 0x0, 0xe18}, 0xf90, 0x0, 0x2, 0x0, 0x1, 0x3}, 0xf, 0x9, 0x2, 0x70bd29}, [@migrate={0x9c, 0x11, [{@in6=@local, @in=@multicast1, @in=@loopback, @in=@private=0xa010100, 0x32, 0x3, 0x0, 0x3502, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, 0x4, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24048000}, 0x8014) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000220000fd2000940000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000001000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 985.882756ms ago: executing program 4 (id=757): socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000280)={[{@nogrpid}, {@nolazytime}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000d06032c000000000000000000020000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x48c0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0x2}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "4466d441b2b796cde8a4757f0c24959cb5d5f28bbe01e0258079103cda77e15d", "8a2c7a9fc41b542f693bd1a7b1ee50f0bdcb7f677354e878f1acea00", "7cb0f2bb654e70495db4e641b3d4ec2c98a77864421f6dd790cd22daada20b83", "966e034aeeb4e762826db7cc03cccf37e96d5d9ccd000000e7ffffff00", "f7c044aa279471161c63233d91f948d8b08c59675162b658b1266281090212a7", "ff9eab8f76cd6816c61031d5", 0x2, 0x800, 0x8, 0x9, 0x8001}}) unshare(0x28000600) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x8000000a) 597.139175ms ago: executing program 0 (id=758): socket(0xb, 0x80000, 0x10000) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x0, &(0x7f0000000140), 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r5 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) msync(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1) socket(0x8, 0x5, 0x5) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 596.136806ms ago: executing program 2 (id=759): r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x3, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') pread64(r1, &(0x7f0000000100)=""/31, 0x1f, 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000080101010100ef0000000000000200ffb20c001980080002008307008033385b178dc8beb8e16dfe48ff65fa185600be7eb0c0b6b980dfd021b8e51eccfadef350feef625b087d03281866fa03d32aa375c799eba25aa54aca5fcc85ec72d9b1786062e668ba1fc95450e387b32c508118b06facfd767130af4b2e18b2513efd225f492077206e83762f3890fc3204911b37ce533bd12994f440f49b3304f38672f53b4f9a6c67ab1a25a0590434b963014e8ed4"], 0x20}}, 0x4880) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000003c00000042000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000200001800d0001406064703a73797a30000000000c00028008"], 0x34}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}], 0x1}, 0x8eec3816282631eb) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xe, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa8, 0x2, 0x6, 0xb5, 0x9b9b, 0x8000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000ffdbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x22a43000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8d24, 0x1}, 0x4b86, 0xfc, 0x4, 0x8, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/cgroup\x00') 550.488437ms ago: executing program 3 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x48043) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000000c0)=""/185, 0xb9, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x1c, 0xffff}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 58.613539ms ago: executing program 2 (id=761): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x27, 0x80000, 0x7e1) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880000000102010400000000000000000a000007040001803800038006000340000400002c00018014000300fe80000000000800000000000000002914000400ff020000000000000000000000000001380002802c0001800b000300fe80000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 0s ago: executing program 3 (id=762): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x20000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3) sched_setscheduler(0x0, 0x2, 0x0) getpid() mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xff7f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a0000000000fd000000"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1, {0x3, 0x2}}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0) kernel console output (not intermixed with test programs): city change from 0 to 512 [ 74.939887][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.988163][ T4377] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.294: Directory hole found for htree index block 0 [ 75.026201][ T4377] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 75.026365][ T4377] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 75.035503][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 75.035523][ C0] EXT4-fs (loop1): initial error at time 1785095565: dx_probe:791: inode 2 [ 75.035560][ C0] EXT4-fs (loop1): last error at time 1785095565: dx_probe:791: inode 2 [ 75.156828][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 75.165974][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.356910][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.408917][ T4400] loop1: detected capacity change from 0 to 1764 [ 77.074566][ T4404] loop1: detected capacity change from 0 to 764 [ 77.185284][ T4404] rock: directory entry would overflow storage [ 77.191619][ T4404] rock: sig=0x5245, size=8, remaining=5 [ 77.608131][ T4412] loop4: detected capacity change from 0 to 512 [ 77.620237][ T4412] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.643103][ T28] audit: type=1400 audit(1785095568.536:252): avc: denied { mount } for pid=4413 comm="syz.1.306" name="/" dev="ramfs" ino=7561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.695820][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 77.710407][ T4412] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.305: bad orphan inode 15 [ 77.715175][ T28] audit: type=1400 audit(1785095568.546:253): avc: denied { read write } for pid=4413 comm="syz.1.306" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.740304][ T4416] loop0: detected capacity change from 0 to 512 [ 77.743962][ T28] audit: type=1400 audit(1785095568.546:254): avc: denied { open } for pid=4413 comm="syz.1.306" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.773075][ T4412] loop4: lost filesystem error report for type 5 error -117 [ 77.776736][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 77.792137][ C1] EXT4-fs (loop4): initial error at time 1785095568: ext4_orphan_get:1425 [ 77.802379][ C1] EXT4-fs (loop4): last error at time 1785095568: ext4_orphan_get:1425 [ 77.812104][ T4422] loop3: detected capacity change from 0 to 512 [ 77.817156][ T4412] ext4_test_bit(bit=14, block=18) = 1 [ 77.831886][ T4416] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 77.840973][ T4412] is_bad_inode(inode)=0 [ 77.841086][ T4412] NEXT_ORPHAN(inode)=1023 [ 77.841120][ T4412] max_ino=32 [ 77.860896][ T28] audit: type=1400 audit(1785095568.766:255): avc: denied { mount } for pid=4415 comm="syz.0.307" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 77.876958][ T4412] i_nlink=0 [ 77.900871][ T4412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.305: bg 0: block 161: padding at end of block bitmap is not set [ 77.915247][ T28] audit: type=1400 audit(1785095568.796:256): avc: denied { create } for pid=4415 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.936311][ T4422] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.309: Directory hole found for htree index block 0 [ 77.950850][ T4412] loop4: lost filesystem error report for type 5 error -117 [ 77.956729][ T4422] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 77.964777][ T4412] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 77.969372][ T28] audit: type=1400 audit(1785095568.866:257): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 77.973970][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 77.983223][ T4414] loop1: detected capacity change from 0 to 1024 [ 78.002713][ C1] EXT4-fs (loop3): initial error at time 1785095568: dx_probe:791: inode 2 [ 78.002809][ C1] EXT4-fs (loop3): last error at time 1785095568: dx_probe:791: inode 2 [ 78.008521][ T4422] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 78.044705][ T28] audit: type=1400 audit(1785095568.916:258): avc: denied { perfmon } for pid=4424 comm="syz.2.310" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.068457][ T4412] loop4: lost filesystem error report for type 5 error -117 [ 78.069252][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.094467][ T28] audit: type=1400 audit(1785095568.956:259): avc: denied { bpf } for pid=4424 comm="syz.2.310" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.122929][ T28] audit: type=1400 audit(1785095568.976:260): avc: denied { module_request } for pid=4426 comm="syz.0.311" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.122979][ T4412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.158994][ T4412] ext2 filesystem being mounted at /55/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 78.259868][ T4412] random: crng reseeded on system resumption [ 78.333625][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.746907][ T4446] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 78.776181][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.995857][ T4448] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 79.012533][ T4446] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.030665][ T4446] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.073178][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 79.124043][ T4448] team0: entered promiscuous mode [ 79.129226][ T4448] team_slave_0: entered promiscuous mode [ 79.135106][ T4448] team_slave_1: entered promiscuous mode [ 79.140989][ T4448] team0: entered allmulticast mode [ 79.146227][ T4448] team_slave_0: entered allmulticast mode [ 79.152041][ T4448] team_slave_1: entered allmulticast mode [ 79.167445][ T4448] bond0: (slave team0): Releasing backup interface [ 79.201159][ T4448] bridge0: port 3(team0) entered blocking state [ 79.336338][ T4448] bridge0: port 3(team0) entered disabled state [ 80.639192][ T4474] loop2: detected capacity change from 0 to 512 [ 80.677754][ T4474] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.324: Directory hole found for htree index block 0 [ 80.702091][ T4474] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 80.703465][ T4474] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 80.712673][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 80.712697][ C1] EXT4-fs (loop2): initial error at time 1785095571: dx_probe:791: inode 2 [ 80.712750][ C1] EXT4-fs (loop2): last error at time 1785095571: dx_probe:791: inode 2 [ 80.747183][ T4474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.875104][ T4474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.324'. [ 80.931607][ T4480] loop0: detected capacity change from 0 to 512 [ 80.955277][ T4480] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 80.965976][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.993912][ T4480] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.326: bad orphan inode 15 [ 81.026809][ T4480] loop0: lost filesystem error report for type 5 error -117 [ 81.028765][ T4480] ext4_test_bit(bit=14, block=18) = 1 [ 81.041867][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 81.041950][ C0] EXT4-fs (loop0): initial error at time 1785095571: ext4_orphan_get:1425 [ 81.042031][ C0] EXT4-fs (loop0): last error at time 1785095571: ext4_orphan_get:1425 [ 81.130822][ T4480] is_bad_inode(inode)=0 [ 81.149957][ T4480] NEXT_ORPHAN(inode)=1023 [ 81.164859][ T4480] max_ino=32 [ 81.178080][ T4480] i_nlink=0 [ 81.184761][ T4480] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.326: bg 0: block 161: padding at end of block bitmap is not set [ 81.209791][ T4480] loop0: lost filesystem error report for type 5 error -117 [ 81.211224][ T4480] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 81.248115][ T4480] loop0: lost filesystem error report for type 5 error -117 [ 81.252401][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.288313][ T4480] ext2 filesystem being mounted at /66/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 81.331786][ T4480] random: crng reseeded on system resumption [ 81.435409][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.005023][ T4513] loop2: detected capacity change from 0 to 512 [ 84.033866][ T4513] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.337: Directory hole found for htree index block 0 [ 84.059677][ T4510] ipt_REJECT: TCP_RESET invalid for non-tcp [ 84.085157][ T4513] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 84.085356][ T4513] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 84.094498][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 84.094519][ C1] EXT4-fs (loop2): initial error at time 1785095574: dx_probe:791: inode 2 [ 84.094554][ C1] EXT4-fs (loop2): last error at time 1785095574: dx_probe:791: inode 2 [ 84.151226][ T4513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.163832][ T28] audit: type=1400 audit(1785095575.046:261): avc: denied { setopt } for pid=4509 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.184367][ T28] audit: type=1400 audit(1785095575.046:262): avc: denied { listen } for pid=4509 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.233454][ T4513] netlink: 56 bytes leftover after parsing attributes in process `syz.2.337'. [ 84.251570][ T4516] loop4: detected capacity change from 0 to 512 [ 84.260670][ T4516] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.279931][ T28] audit: type=1400 audit(1785095575.146:263): avc: denied { getopt } for pid=4515 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.312363][ T4516] lo speed is unknown, defaulting to 1000 [ 84.320192][ T4516] lo speed is unknown, defaulting to 1000 [ 84.327253][ T28] audit: type=1400 audit(1785095575.216:264): avc: denied { write } for pid=4515 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.362990][ T4516] lo speed is unknown, defaulting to 1000 [ 84.368362][ T4519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.379227][ T28] audit: type=1400 audit(1785095575.266:265): avc: denied { ioctl } for pid=4515 comm="syz.4.338" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.405594][ T4519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.432857][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.509626][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.528058][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.565367][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.565825][ T4516] infiniband sz1: set active [ 84.578556][ T4516] infiniband sz1: added lo [ 84.584152][ T3378] lo speed is unknown, defaulting to 1000 [ 84.591124][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.620268][ T4516] RDS/IB: sz1: added [ 84.624417][ T4516] smc: adding ib device sz1 with port count 1 [ 84.630681][ T4516] smc: ib device sz1 port 1 has no pnetid [ 84.638328][ T4516] lo speed is unknown, defaulting to 1000 [ 84.688286][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.698946][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.700110][ T3378] lo speed is unknown, defaulting to 1000 [ 84.714261][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.715592][ T28] audit: type=1400 audit(1785095575.616:266): avc: denied { read } for pid=4524 comm="syz.2.340" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.750598][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.783708][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.842964][ T28] audit: type=1400 audit(1785095575.616:267): avc: denied { open } for pid=4524 comm="syz.2.340" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.843991][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.944868][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 84.984747][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 85.013198][ T4519] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 85.017244][ T4516] lo speed is unknown, defaulting to 1000 [ 85.034258][ T4519] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 85.175016][ T28] audit: type=1400 audit(1785095576.076:268): avc: denied { bind } for pid=4533 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.195891][ T28] audit: type=1400 audit(1785095576.076:269): avc: denied { name_bind } for pid=4533 comm="syz.2.343" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.218746][ T28] audit: type=1400 audit(1785095576.076:270): avc: denied { node_bind } for pid=4533 comm="syz.2.343" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 85.278204][ T4516] lo speed is unknown, defaulting to 1000 [ 85.367147][ T4536] loop0: detected capacity change from 0 to 512 [ 85.379193][ T4536] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.400582][ T4536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 85.403136][ T4516] lo speed is unknown, defaulting to 1000 [ 85.410548][ T4536] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.451961][ T4536] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.344: Allocating blocks 41-42 which overlap fs metadata [ 85.484987][ T4536] loop0: lost filesystem error report for type 5 error -117 [ 85.486593][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 85.500559][ C1] EXT4-fs (loop0): initial error at time 1785095576: ext4_mb_mark_diskspace_used:4222 [ 85.510167][ C1] EXT4-fs (loop0): last error at time 1785095576: ext4_mb_mark_diskspace_used:4222 [ 85.520872][ T4536] EXT4-fs (loop0): Remounting filesystem read-only [ 85.529208][ T4536] EXT4-fs (loop0): 1 truncate cleaned up [ 85.535417][ T4543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24865 sclass=netlink_route_socket pid=4543 comm=syz.3.346 [ 85.550616][ T4536] EXT4-fs (loop0): pa ffff8881004a73f0: logic 1, phys. 41, len 23 [ 85.580610][ T4516] lo speed is unknown, defaulting to 1000 [ 85.685972][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.354743][ T4551] loop1: detected capacity change from 0 to 512 [ 86.473450][ T4551] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.541544][ T4551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 86.568558][ T4551] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.636725][ T4551] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.348: Allocating blocks 41-42 which overlap fs metadata [ 86.653349][ T4551] loop1: lost filesystem error report for type 5 error -117 [ 86.657226][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 86.676475][ C0] EXT4-fs (loop1): initial error at time 1785095577: ext4_mb_mark_diskspace_used:4222 [ 86.692714][ C0] EXT4-fs (loop1): last error at time 1785095577: ext4_mb_mark_diskspace_used:4222 [ 86.721323][ T4551] EXT4-fs (loop1): Remounting filesystem read-only [ 86.742891][ T4551] EXT4-fs (loop1): 1 truncate cleaned up [ 86.765548][ T4551] EXT4-fs (loop1): pa ffff8881004a73f0: logic 1, phys. 41, len 23 [ 86.862687][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.287190][ T4551] syz.1.348 (4551) used greatest stack depth: 9024 bytes left [ 87.308764][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.318342][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.380648][ T4556] loop4: detected capacity change from 0 to 512 [ 87.423127][ T4556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.454527][ T4556] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.479134][ T4571] vhci_hcd vhci_hcd.2: invalid port number 255 [ 87.496415][ T4571] vhci_hcd vhci_hcd.2: invalid port number 255 [ 87.622713][ T4578] loop1: detected capacity change from 0 to 128 [ 87.657222][ T4578] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.678476][ T4578] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.688845][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a681c00: rx timeout, send abort [ 87.987404][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.188035][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811ab06000: rx timeout, send abort [ 88.196432][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a681c00: abort rx timeout. Force session deactivation [ 88.543554][ T4595] loop3: detected capacity change from 0 to 512 [ 88.588088][ T4595] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.627011][ T4595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 88.679003][ T4595] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.696463][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811ab06000: abort rx timeout. Force session deactivation [ 88.725511][ T4595] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.363: Allocating blocks 41-42 which overlap fs metadata [ 88.782888][ T4595] loop3: lost filesystem error report for type 5 error -117 [ 88.784375][ T4595] EXT4-fs (loop3): Remounting filesystem read-only [ 88.791772][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 88.791797][ C1] EXT4-fs (loop3): initial error at time 1785095579: ext4_mb_mark_diskspace_used:4222 [ 88.791828][ C1] EXT4-fs (loop3): last error at time 1785095579: ext4_mb_mark_diskspace_used:4222 [ 88.951406][ T4595] EXT4-fs (loop3): 1 truncate cleaned up [ 89.027007][ T4611] loop2: detected capacity change from 0 to 512 [ 89.057226][ T4611] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.368: Directory hole found for htree index block 0 [ 89.090495][ T4611] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 89.092225][ T4611] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 89.101365][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 89.101390][ C1] EXT4-fs (loop2): initial error at time 1785095579: dx_probe:791: inode 2 [ 89.101432][ C1] EXT4-fs (loop2): last error at time 1785095579: dx_probe:791: inode 2 [ 89.140888][ T4611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.178852][ T4611] netlink: 56 bytes leftover after parsing attributes in process `syz.2.368'. [ 89.257140][ T4614] vhci_hcd vhci_hcd.2: invalid port number 255 [ 89.263675][ T4614] vhci_hcd vhci_hcd.2: invalid port number 255 [ 89.310138][ T4614] loop0: detected capacity change from 0 to 128 [ 89.348724][ T4614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.377258][ T4614] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.476159][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.479916][ T4595] EXT4-fs (loop3): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 89.487916][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.495172][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.512052][ T4595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.587910][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.880979][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a71aa00: rx timeout, send abort [ 89.882805][ T4624] loop2: detected capacity change from 0 to 512 [ 89.948159][ T4624] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.976366][ T4624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 89.988094][ T4624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.005614][ T4624] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.369: Allocating blocks 41-42 which overlap fs metadata [ 90.025376][ T4624] loop2: lost filesystem error report for type 5 error -117 [ 90.034335][ T4624] EXT4-fs (loop2): Remounting filesystem read-only [ 90.041180][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 90.074193][ C1] EXT4-fs (loop2): initial error at time 1785095580: ext4_mb_mark_diskspace_used:4222 [ 90.085614][ C1] EXT4-fs (loop2): last error at time 1785095580: ext4_mb_mark_diskspace_used:4222 [ 90.105999][ T4624] __quota_error: 35 callbacks suppressed [ 90.106164][ T4624] Quota error (device loop2): write_blk: dquota write failed [ 90.122845][ T4624] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 90.136073][ T4624] EXT4-fs (loop2): 1 truncate cleaned up [ 90.148972][ T4624] EXT4-fs (loop2): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 90.202866][ T4624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.242601][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.283056][ T4653] loop2: detected capacity change from 0 to 512 [ 90.305720][ T4653] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.383: Directory hole found for htree index block 0 [ 90.328159][ T4653] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 90.330365][ T4653] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 90.339642][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 90.339689][ C0] EXT4-fs (loop2): initial error at time 1785095581: dx_probe:791: inode 2 [ 90.339735][ C0] EXT4-fs (loop2): last error at time 1785095581: dx_probe:791: inode 2 [ 90.368870][ T4656] vhci_hcd vhci_hcd.2: invalid port number 255 [ 90.378241][ T4656] vhci_hcd vhci_hcd.2: invalid port number 255 [ 90.381071][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a71a800: rx timeout, send abort [ 90.392852][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a71aa00: abort rx timeout. Force session deactivation [ 90.406997][ T4656] loop3: detected capacity change from 0 to 128 [ 90.417696][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.468211][ T4656] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.484374][ T4656] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.537118][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 90.556346][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.618934][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.892765][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a71a800: abort rx timeout. Force session deactivation [ 91.093943][ T4666] loop3: detected capacity change from 0 to 512 [ 91.158800][ T4666] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.190226][ T4666] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 91.200805][ T4666] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.217548][ T4666] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.388: Allocating blocks 41-42 which overlap fs metadata [ 91.232322][ T4666] loop3: lost filesystem error report for type 5 error -117 [ 91.235008][ T4666] EXT4-fs (loop3): Remounting filesystem read-only [ 91.243636][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 91.243688][ C1] EXT4-fs (loop3): initial error at time 1785095582: ext4_mb_mark_diskspace_used:4222 [ 91.243755][ C1] EXT4-fs (loop3): last error at time 1785095582: ext4_mb_mark_diskspace_used:4222 [ 91.286555][ T4700] vhci_hcd vhci_hcd.2: invalid port number 255 [ 91.293636][ T4700] vhci_hcd vhci_hcd.2: invalid port number 255 [ 91.307686][ T4666] Quota error (device loop3): write_blk: dquota write failed [ 91.325048][ T4700] loop2: detected capacity change from 0 to 128 [ 91.325909][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a681c00: rx timeout, send abort [ 91.364351][ T4666] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 91.379448][ T4666] EXT4-fs (loop3): 1 truncate cleaned up [ 91.387524][ T4700] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.388269][ T4700] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.419088][ T4666] EXT4-fs (loop3): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 91.431222][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.434730][ T4666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.522275][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.667399][ T4718] loop1: detected capacity change from 0 to 512 [ 91.689374][ T4718] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.407: Directory hole found for htree index block 0 [ 91.702248][ T4718] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 91.702440][ T4718] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 91.711570][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 91.711596][ C0] EXT4-fs (loop1): initial error at time 1785095582: dx_probe:791: inode 2 [ 91.711643][ C0] EXT4-fs (loop1): last error at time 1785095582: dx_probe:791: inode 2 [ 91.801990][ T4718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.825958][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811ac73a00: rx timeout, send abort [ 91.834361][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a681c00: abort rx timeout. Force session deactivation [ 91.937502][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 91.953931][ T4730] vhci_hcd vhci_hcd.2: invalid port number 255 [ 91.972764][ T4730] vhci_hcd vhci_hcd.2: invalid port number 255 [ 91.981810][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.002865][ T4730] loop0: detected capacity change from 0 to 128 [ 92.047903][ T4730] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.083285][ T4730] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.110132][ T4733] loop3: detected capacity change from 0 to 512 [ 92.131400][ T4733] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 92.164350][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.182533][ T4733] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.413: bad orphan inode 15 [ 92.200963][ T4733] loop3: lost filesystem error report for type 5 error -117 [ 92.206465][ T4733] ext4_test_bit(bit=14, block=18) = 1 [ 92.213937][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 92.213985][ C1] EXT4-fs (loop3): initial error at time 1785095583: ext4_orphan_get:1425 [ 92.214083][ C1] EXT4-fs (loop3): last error at time 1785095583: ext4_orphan_get:1425 [ 92.243842][ T4733] is_bad_inode(inode)=0 [ 92.248160][ T4733] NEXT_ORPHAN(inode)=1023 [ 92.252783][ T4733] max_ino=32 [ 92.256162][ T4733] i_nlink=0 [ 92.263327][ T4733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.413: bg 0: block 161: padding at end of block bitmap is not set [ 92.278004][ T4733] loop3: lost filesystem error report for type 5 error -117 [ 92.279383][ T4733] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 92.298112][ T4733] loop3: lost filesystem error report for type 5 error -117 [ 92.303086][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.323164][ T4733] ext2 filesystem being mounted at /72/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 92.334407][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811ac73a00: abort rx timeout. Force session deactivation [ 92.425829][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.607164][ T4746] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.639398][ T4746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 92.658168][ T4746] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.740281][ T4746] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.416: Allocating blocks 41-42 which overlap fs metadata [ 92.775224][ T4746] loop0: lost filesystem error report for type 5 error -117 [ 92.776584][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 92.790414][ C0] EXT4-fs (loop0): initial error at time 1785095583: ext4_mb_mark_diskspace_used:4222 [ 92.800232][ C0] EXT4-fs (loop0): last error at time 1785095583: ext4_mb_mark_diskspace_used:4222 [ 92.825338][ T4746] EXT4-fs (loop0): Remounting filesystem read-only [ 92.837956][ T4746] Quota error (device loop0): write_blk: dquota write failed [ 92.852122][ T4746] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 92.869044][ T4746] EXT4-fs (loop0): 1 truncate cleaned up [ 92.893512][ T4746] EXT4-fs (loop0): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 92.961625][ T4746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.997861][ T4769] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.424: Directory hole found for htree index block 0 [ 93.044809][ T4769] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 93.046163][ T4769] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 93.055303][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 93.055319][ C1] EXT4-fs (loop2): initial error at time 1785095583: dx_probe:791: inode 2 [ 93.055355][ C1] EXT4-fs (loop2): last error at time 1785095583: dx_probe:791: inode 2 [ 93.090197][ T4769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.126727][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.162900][ T4776] vhci_hcd vhci_hcd.2: invalid port number 255 [ 93.181564][ T4776] vhci_hcd vhci_hcd.2: invalid port number 255 [ 93.230328][ T4776] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.245808][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 93.258838][ T4775] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 93.274032][ T4776] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.286764][ T4775] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.428: bad orphan inode 15 [ 93.302328][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.330916][ T4775] loop1: lost filesystem error report for type 5 error -117 [ 93.336586][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 93.350412][ C0] EXT4-fs (loop1): initial error at time 1785095584: ext4_orphan_get:1425 [ 93.358986][ C0] EXT4-fs (loop1): last error at time 1785095584: ext4_orphan_get:1425 [ 93.376943][ T4775] ext4_test_bit(bit=14, block=18) = 1 [ 93.389345][ T4775] is_bad_inode(inode)=0 [ 93.398283][ T4775] NEXT_ORPHAN(inode)=1023 [ 93.409812][ T4775] max_ino=32 [ 93.414652][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.417012][ T4775] i_nlink=0 [ 93.443192][ T4775] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.428: bg 0: block 161: padding at end of block bitmap is not set [ 93.478477][ T4775] loop1: lost filesystem error report for type 5 error -117 [ 93.479084][ T4775] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.501733][ T4775] loop1: lost filesystem error report for type 5 error -117 [ 93.503728][ T4775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.524000][ T4775] ext2 filesystem being mounted at /91/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 93.943260][ T4812] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.133384][ T4812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 94.149707][ T4812] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.176003][ T4816] set_capacity_and_notify: 5 callbacks suppressed [ 94.176019][ T4816] loop0: detected capacity change from 0 to 512 [ 94.218561][ T4812] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.438: Allocating blocks 41-42 which overlap fs metadata [ 94.255816][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.269721][ T4816] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.439: Directory hole found for htree index block 0 [ 94.293658][ T4812] loop2: lost filesystem error report for type 5 error -117 [ 94.295401][ T4812] EXT4-fs (loop2): Remounting filesystem read-only [ 94.303481][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 94.303519][ C1] EXT4-fs (loop2): initial error at time 1785095585: ext4_mb_mark_diskspace_used:4222 [ 94.303729][ C1] EXT4-fs (loop2): last error at time 1785095585: ext4_mb_mark_diskspace_used:4222 [ 94.366132][ T4816] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 94.366589][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 94.382181][ C1] EXT4-fs (loop0): initial error at time 1785095585: dx_probe:791: inode 2 [ 94.390835][ C1] EXT4-fs (loop0): last error at time 1785095585: dx_probe:791: inode 2 [ 94.400579][ T4816] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 94.457135][ T4816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.519581][ T4812] Quota error (device loop2): write_blk: dquota write failed [ 94.636531][ T4812] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.651982][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 94.678355][ T4812] EXT4-fs (loop2): 1 truncate cleaned up [ 94.885760][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.897835][ T4812] EXT4-fs (loop2): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 94.992286][ T4822] vhci_hcd vhci_hcd.2: invalid port number 255 [ 95.016689][ T4822] vhci_hcd vhci_hcd.2: invalid port number 255 [ 95.017286][ T4812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.048244][ T4822] loop1: detected capacity change from 0 to 128 [ 95.153714][ T4812] syz.2.438 (4812) used greatest stack depth: 8896 bytes left [ 95.180621][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.202691][ T4822] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.849415][ T4842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4842 comm=syz.1.445 [ 96.125443][ T4857] loop1: detected capacity change from 0 to 512 [ 96.159324][ T4857] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 96.183485][ T4857] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.452: bad orphan inode 15 [ 96.193937][ T4857] loop1: lost filesystem error report for type 5 error -117 [ 96.195589][ T4860] loop3: detected capacity change from 0 to 512 [ 96.203040][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.203063][ C1] EXT4-fs (loop1): initial error at time 1785095587: ext4_orphan_get:1425 [ 96.203092][ C1] EXT4-fs (loop1): last error at time 1785095587: ext4_orphan_get:1425 [ 96.217693][ T4857] ext4_test_bit(bit=14, block=18) = 1 [ 96.251601][ T4860] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.453: Directory hole found for htree index block 0 [ 96.255729][ T4857] is_bad_inode(inode)=0 [ 96.268718][ T4860] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 96.268842][ T4860] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 96.278021][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 96.278046][ C1] EXT4-fs (loop3): initial error at time 1785095587: dx_probe:791: inode 2 [ 96.278082][ C1] EXT4-fs (loop3): last error at time 1785095587: dx_probe:791: inode 2 [ 96.310667][ T4857] NEXT_ORPHAN(inode)=1023 [ 96.315503][ T4857] max_ino=32 [ 96.321072][ T4857] i_nlink=0 [ 96.325216][ T4857] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.452: bg 0: block 161: padding at end of block bitmap is not set [ 96.340223][ T4857] loop1: lost filesystem error report for type 5 error -117 [ 96.344100][ T4857] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 96.367442][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 96.370317][ T4857] loop1: lost filesystem error report for type 5 error -117 [ 96.389178][ T4857] ext2 filesystem being mounted at /94/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 96.483811][ T4869] vhci_hcd vhci_hcd.2: invalid port number 255 [ 96.490497][ T4869] vhci_hcd vhci_hcd.2: invalid port number 255 [ 96.538939][ T4869] loop2: detected capacity change from 0 to 128 [ 96.570272][ T4869] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.586529][ T4866] loop3: detected capacity change from 0 to 512 [ 96.640282][ T4866] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.670597][ T4866] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 96.682419][ T4866] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.709421][ T4866] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.455: Allocating blocks 41-42 which overlap fs metadata [ 96.724199][ T4866] loop3: lost filesystem error report for type 5 error -117 [ 96.725991][ T4866] EXT4-fs (loop3): Remounting filesystem read-only [ 96.726678][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 96.726707][ C1] EXT4-fs (loop3): initial error at time 1785095587: ext4_mb_mark_diskspace_used:4222 [ 96.726931][ C1] EXT4-fs (loop3): last error at time 1785095587: ext4_mb_mark_diskspace_used:4222 [ 96.775230][ T4866] Quota error (device loop3): write_blk: dquota write failed [ 96.783690][ T4866] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 96.795190][ T4866] EXT4-fs (loop3): 1 truncate cleaned up [ 96.813972][ T4866] EXT4-fs (loop3): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 98.179846][ T28] audit: type=1400 audit(1785095589.086:300): avc: denied { name_bind } for pid=4896 comm="syz.0.466" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.278029][ T4889] loop2: detected capacity change from 0 to 256 [ 98.284657][ T4889] vfat: Unknown parameter 'syzkaller' [ 99.018349][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 99.170790][ T28] audit: type=1400 audit(1785095590.076:301): avc: denied { getopt } for pid=4900 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.263810][ T4903] loop1: detected capacity change from 0 to 4096 [ 99.277577][ T28] audit: type=1400 audit(1785095590.096:302): avc: denied { getopt } for pid=4900 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.529247][ T28] audit: type=1400 audit(1785095590.436:303): avc: denied { write } for pid=4902 comm="syz.1.465" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.566993][ T4915] netlink: 'syz.4.469': attribute type 23 has an invalid length. [ 99.613628][ T4915] netlink: 'syz.4.469': attribute type 21 has an invalid length. [ 99.661457][ T4915] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.673733][ T28] audit: type=1400 audit(1785095590.506:304): avc: denied { setattr } for pid=4902 comm="syz.1.465" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.706226][ T4917] FAULT_INJECTION: forcing a failure. [ 99.706226][ T4917] name failslab, interval 1, probability 0, space 0, times 1 [ 99.734598][ T4918] loop4: detected capacity change from 0 to 512 [ 99.748404][ T4917] CPU: 0 UID: 0 PID: 4917 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.748431][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.748444][ T4917] Call Trace: [ 99.748450][ T4917] [ 99.748460][ T4917] __dump_stack+0x1d/0x30 [ 99.748491][ T4917] dump_stack_lvl+0x95/0xd0 [ 99.748512][ T4917] dump_stack+0x15/0x1b [ 99.748553][ T4917] should_fail_ex+0x25e/0x270 [ 99.748591][ T4917] should_failslab+0x8c/0xb0 [ 99.748621][ T4917] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 99.748705][ T4917] ? __alloc_skb+0x2db/0x6f0 [ 99.748739][ T4917] ? __alloc_skb+0x2db/0x6f0 [ 99.748785][ T4917] __alloc_skb+0x2db/0x6f0 [ 99.748819][ T4917] ? __alloc_skb+0x205/0x6f0 [ 99.748887][ T4917] nexthop_notify+0x1b7/0x2d0 [ 99.748936][ T4917] rtm_new_nexthop+0x365e/0x4d30 [ 99.748980][ T4917] ? ns_capable+0x80/0xb0 [ 99.749040][ T4917] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 99.749060][ T4917] rtnetlink_rcv_msg+0x64b/0x720 [ 99.749087][ T4917] netlink_rcv_skb+0x11e/0x220 [ 99.749118][ T4917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.749255][ T4917] rtnetlink_rcv+0x1c/0x30 [ 99.749280][ T4917] netlink_unicast+0x5a7/0x680 [ 99.749303][ T4917] netlink_sendmsg+0x5be/0x6f0 [ 99.749343][ T4917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.749380][ T4917] ____sys_sendmsg+0x532/0x580 [ 99.749485][ T4917] ___sys_sendmsg+0x195/0x1e0 [ 99.749536][ T4917] __x64_sys_sendmsg+0xd4/0x160 [ 99.749644][ T4917] x64_sys_call+0x194c/0x3020 [ 99.749676][ T4917] do_syscall_64+0x136/0x3c0 [ 99.749709][ T4917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.749731][ T4917] RIP: 0033:0x7fb8a5c9de99 [ 99.749756][ T4917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.749780][ T4917] RSP: 002b:00007fb8a46f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.749807][ T4917] RAX: ffffffffffffffda RBX: 00007fb8a5f25fa0 RCX: 00007fb8a5c9de99 [ 99.749825][ T4917] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 99.749870][ T4917] RBP: 00007fb8a46f7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.749884][ T4917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.749901][ T4917] R13: 00007fb8a5f26038 R14: 00007fb8a5f25fa0 R15: 00007ffdd5fb0a68 [ 99.749921][ T4917] [ 99.999918][ T28] audit: type=1400 audit(1785095590.636:305): avc: denied { create } for pid=4914 comm="syz.4.469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.076510][ T28] audit: type=1400 audit(1785095590.636:306): avc: denied { write } for pid=4914 comm="syz.4.469" name="file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.121030][ T28] audit: type=1400 audit(1785095590.636:307): avc: denied { open } for pid=4914 comm="syz.4.469" path="/72/file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.442442][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 100.516853][ T4921] loop0: detected capacity change from 0 to 512 [ 100.559591][ T4921] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.613846][ T4921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 100.630936][ T4921] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.663373][ T4937] vhci_hcd vhci_hcd.2: invalid port number 255 [ 100.671503][ T4937] vhci_hcd vhci_hcd.2: invalid port number 255 [ 100.684340][ T4939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4939 comm=syz.1.478 [ 100.685218][ T4921] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.473: Allocating blocks 41-42 which overlap fs metadata [ 100.717133][ T4921] loop0: lost filesystem error report for type 5 error -117 [ 100.721157][ T4937] loop3: detected capacity change from 0 to 128 [ 100.728611][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 100.728674][ C1] EXT4-fs (loop0): initial error at time 1785095591: ext4_mb_mark_diskspace_used:4222 [ 100.728709][ C1] EXT4-fs (loop0): last error at time 1785095591: ext4_mb_mark_diskspace_used:4222 [ 100.757181][ T4921] EXT4-fs (loop0): Remounting filesystem read-only [ 100.790255][ T4937] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.819432][ T4921] EXT4-fs (loop0): 1 truncate cleaned up [ 100.842000][ T4921] EXT4-fs (loop0): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 100.983845][ T4954] netlink: 860 bytes leftover after parsing attributes in process `syz.0.482'. [ 101.344349][ T4961] loop0: detected capacity change from 0 to 256 [ 101.352346][ T4961] vfat: Unknown parameter 'syzkaller' [ 103.703415][ T4982] vhci_hcd vhci_hcd.2: invalid port number 255 [ 103.734799][ T4982] vhci_hcd vhci_hcd.2: invalid port number 255 [ 103.761011][ T4983] loop0: detected capacity change from 0 to 128 [ 103.785733][ T4983] EXT4-fs mount: 16 callbacks suppressed [ 103.785749][ T4983] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.865111][ T4983] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.959317][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.050669][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4987 comm=syz.0.491 [ 104.494466][ T4992] loop1: detected capacity change from 0 to 512 [ 104.507707][ T4992] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.493: Directory hole found for htree index block 0 [ 104.596390][ T4992] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 104.596634][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 104.612190][ C1] EXT4-fs (loop1): initial error at time 1785095595: dx_probe:791: inode 2 [ 104.620887][ C1] EXT4-fs (loop1): last error at time 1785095595: dx_probe:791: inode 2 [ 104.710529][ T4998] netlink: 860 bytes leftover after parsing attributes in process `syz.0.495'. [ 104.726724][ T4992] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 104.750782][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.949436][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.974846][ T4990] loop3: detected capacity change from 0 to 512 [ 105.013137][ T5003] loop1: detected capacity change from 0 to 512 [ 105.026536][ T4990] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.057189][ T5003] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.087578][ T4990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 105.097072][ T5003] EXT4-fs (loop1): 1 truncate cleaned up [ 105.110161][ T5003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.121107][ T4990] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.156113][ T4990] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.492: Allocating blocks 41-42 which overlap fs metadata [ 105.183174][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 105.183273][ T28] audit: type=1400 audit(1785095596.086:320): avc: denied { write } for pid=5002 comm="syz.1.497" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.239742][ T4990] loop3: lost filesystem error report for type 5 error -117 [ 105.240965][ T4990] EXT4-fs (loop3): Remounting filesystem read-only [ 105.248989][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 105.249034][ C1] EXT4-fs (loop3): initial error at time 1785095596: ext4_mb_mark_diskspace_used:4222 [ 105.249186][ C1] EXT4-fs (loop3): last error at time 1785095596: ext4_mb_mark_diskspace_used:4222 [ 105.292518][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.302966][ T4990] Quota error (device loop3): write_blk: dquota write failed [ 105.315406][ T4990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 105.360266][ T4990] EXT4-fs (loop3): 1 truncate cleaned up [ 105.387600][ T4990] EXT4-fs (loop3): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 105.427240][ T4990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.488682][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.884019][ T5016] loop3: detected capacity change from 0 to 256 [ 105.891314][ T5016] vfat: Unknown parameter 'syzkaller' [ 106.032755][ T5012] loop0: detected capacity change from 0 to 512 [ 106.364197][ T5012] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.433694][ T5019] vhci_hcd vhci_hcd.2: invalid port number 255 [ 106.503598][ T5019] vhci_hcd vhci_hcd.2: invalid port number 255 [ 106.526853][ T5020] loop1: detected capacity change from 0 to 128 [ 106.570230][ T5012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 106.579851][ T5020] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.615184][ T5012] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.630751][ T5020] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.663909][ T5012] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.509: Allocating blocks 41-42 which overlap fs metadata [ 106.726185][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.744772][ T5012] loop0: lost filesystem error report for type 5 error -117 [ 106.745827][ T5012] EXT4-fs (loop0): Remounting filesystem read-only [ 106.753627][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 106.753737][ C0] EXT4-fs (loop0): initial error at time 1785095597: ext4_mb_mark_diskspace_used:4222 [ 106.754007][ C0] EXT4-fs (loop0): last error at time 1785095597: ext4_mb_mark_diskspace_used:4222 [ 106.927059][ T5012] Quota error (device loop0): write_blk: dquota write failed [ 106.961520][ T5012] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 107.012452][ T5012] EXT4-fs (loop0): 1 truncate cleaned up [ 107.047187][ T5012] EXT4-fs (loop0): pa ffff8881004a7310: logic 1, phys. 41, len 23 [ 107.128702][ T5012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.253317][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.507696][ T5027] loop0: detected capacity change from 0 to 136 [ 107.660905][ T5032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5032 comm=syz.3.504 [ 108.018876][ T5037] netlink: 860 bytes leftover after parsing attributes in process `syz.3.506'. [ 108.100896][ T5039] loop3: detected capacity change from 0 to 512 [ 108.138111][ T5039] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.507: Directory hole found for htree index block 0 [ 108.156152][ T5039] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 108.156310][ T5039] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 108.165467][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 108.165501][ C0] EXT4-fs (loop3): initial error at time 1785095599: dx_probe:791: inode 2 [ 108.165532][ C0] EXT4-fs (loop3): last error at time 1785095599: dx_probe:791: inode 2 [ 108.197999][ T5039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.397660][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.413101][ T5045] loop1: detected capacity change from 0 to 512 [ 108.450035][ T5045] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 108.477692][ T5049] loop3: detected capacity change from 0 to 512 [ 108.492356][ T5045] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.508: bad orphan inode 15 [ 108.508784][ T5049] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.556632][ T5049] EXT4-fs (loop3): 1 truncate cleaned up [ 108.562699][ T5045] loop1: lost filesystem error report for type 5 error -117 [ 108.564594][ T5045] ext4_test_bit(bit=14, block=18) = 1 [ 108.572051][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 108.572080][ C1] EXT4-fs (loop1): initial error at time 1785095599: ext4_orphan_get:1425 [ 108.572164][ C1] EXT4-fs (loop1): last error at time 1785095599: ext4_orphan_get:1425 [ 108.608187][ T5045] is_bad_inode(inode)=0 [ 108.613085][ T5049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.625288][ T5045] NEXT_ORPHAN(inode)=1023 [ 108.632027][ T5045] max_ino=32 [ 108.639346][ T5045] i_nlink=0 [ 108.646894][ T5045] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.508: bg 0: block 161: padding at end of block bitmap is not set [ 108.667424][ T5045] loop1: lost filesystem error report for type 5 error -117 [ 108.667932][ T5045] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.684822][ T28] audit: type=1400 audit(1785095599.586:321): avc: denied { write } for pid=5048 comm="syz.3.510" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.724762][ T5045] loop1: lost filesystem error report for type 5 error -117 [ 108.729712][ T5045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.758998][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.768945][ T5045] ext2 filesystem being mounted at /106/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 108.815028][ T5059] vhci_hcd vhci_hcd.2: invalid port number 255 [ 108.822083][ T5059] vhci_hcd vhci_hcd.2: invalid port number 255 [ 108.844093][ T5059] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.863428][ T5059] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.901268][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.990687][ T5067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5067 comm=syz.3.517 [ 109.214426][ T5072] netlink: 860 bytes leftover after parsing attributes in process `syz.3.518'. [ 109.323938][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.363772][ T5074] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.521: Directory hole found for htree index block 0 [ 109.411413][ T5078] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.522: Directory hole found for htree index block 0 [ 109.436678][ T5074] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 109.438212][ T5078] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 109.447454][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 109.447480][ C1] EXT4-fs (loop3): initial error at time 1785095600: dx_probe:791: inode 2 [ 109.447514][ C1] EXT4-fs (loop3): last error at time 1785095600: dx_probe:791: inode 2 [ 109.491489][ T5074] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 109.507433][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.538165][ T5078] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 109.546642][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.553114][ C1] EXT4-fs (loop1): initial error at time 1785095600: dx_probe:791: inode 2 [ 109.561778][ C1] EXT4-fs (loop1): last error at time 1785095600: dx_probe:791: inode 2 [ 109.570955][ T5078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.605412][ T5076] set_capacity_and_notify: 4 callbacks suppressed [ 109.614616][ T5076] loop2: detected capacity change from 0 to 136 [ 109.667563][ T5088] loop0: detected capacity change from 0 to 512 [ 109.684587][ T5088] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.740043][ T5088] EXT4-fs (loop0): 1 truncate cleaned up [ 109.953450][ T5088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.118615][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.132955][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.142754][ T28] audit: type=1400 audit(1785095601.046:322): avc: denied { write } for pid=5087 comm="syz.0.525" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.248209][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.530902][ T5092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5092 comm=syz.2.529 [ 110.821426][ T5095] vhci_hcd vhci_hcd.2: invalid port number 255 [ 111.076835][ T5095] vhci_hcd vhci_hcd.2: invalid port number 255 [ 111.123066][ T5100] loop3: detected capacity change from 0 to 128 [ 111.474319][ T5100] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.553606][ T5105] netlink: 860 bytes leftover after parsing attributes in process `syz.4.531'. [ 111.618542][ T5100] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.665839][ T5109] loop2: detected capacity change from 0 to 512 [ 111.727000][ T5109] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 111.753712][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.779283][ T5109] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.530: bad orphan inode 15 [ 111.816763][ T5109] loop2: lost filesystem error report for type 5 error -117 [ 111.817219][ T5109] ext4_test_bit(bit=14, block=18) = 1 [ 111.830136][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.830171][ C0] EXT4-fs (loop2): initial error at time 1785095602: ext4_orphan_get:1425 [ 111.830267][ C0] EXT4-fs (loop2): last error at time 1785095602: ext4_orphan_get:1425 [ 111.928489][ T5109] is_bad_inode(inode)=0 [ 111.943281][ T5109] NEXT_ORPHAN(inode)=1023 [ 111.956659][ T5109] max_ino=32 [ 111.965991][ T5109] i_nlink=0 [ 111.979346][ T5109] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.530: bg 0: block 161: padding at end of block bitmap is not set [ 112.025260][ T5109] loop2: lost filesystem error report for type 5 error -117 [ 112.025625][ T5109] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 112.076254][ T5109] loop2: lost filesystem error report for type 5 error -117 [ 112.078270][ T5109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.157046][ T5109] ext2 filesystem being mounted at /121/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 112.553095][ T5126] loop4: detected capacity change from 0 to 512 [ 112.602291][ T5126] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.535: Directory hole found for htree index block 0 [ 112.636768][ T5126] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 112.636990][ T5126] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 112.654352][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 112.654390][ C0] EXT4-fs (loop4): initial error at time 1785095603: dx_probe:791: inode 2 [ 112.654432][ C0] EXT4-fs (loop4): last error at time 1785095603: dx_probe:791: inode 2 [ 112.743468][ T5129] warn_alloc: 6 callbacks suppressed [ 112.743508][ T5129] syz.0.536: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 112.761498][ T5126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.800835][ T5129] ,cpuset=/,mems_allowed=0 [ 112.810384][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.820103][ T5129] CPU: 0 UID: 0 PID: 5129 Comm: syz.0.536 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.820142][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.820162][ T5129] Call Trace: [ 112.820172][ T5129] [ 112.820183][ T5129] __dump_stack+0x1d/0x30 [ 112.820238][ T5129] dump_stack_lvl+0x95/0xd0 [ 112.820261][ T5129] dump_stack+0x15/0x1b [ 112.820283][ T5129] warn_alloc+0x145/0x1c0 [ 112.820321][ T5129] ? ktime_get+0x212/0x240 [ 112.820353][ T5129] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 112.820403][ T5129] ? _raw_spin_unlock+0x9/0x30 [ 112.820440][ T5129] ? __hrtimer_rearm_deferred+0x571/0x650 [ 112.820520][ T5129] ? should_fail_ex+0x30/0x270 [ 112.820602][ T5129] ? xskq_create+0x36/0xe0 [ 112.820697][ T5129] ? should_failslab+0x8c/0xb0 [ 112.820729][ T5129] vmalloc_user_noprof+0x7d/0xb0 [ 112.820794][ T5129] ? xskq_create+0x80/0xe0 [ 112.820821][ T5129] xskq_create+0x80/0xe0 [ 112.820853][ T5129] xsk_init_queue+0x70/0xb0 [ 112.820944][ T5129] xsk_setsockopt+0x471/0x640 [ 112.820980][ T5129] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.821030][ T5129] __sys_setsockopt+0x184/0x200 [ 112.821072][ T5129] __x64_sys_setsockopt+0x64/0x80 [ 112.821108][ T5129] x64_sys_call+0x2327/0x3020 [ 112.821194][ T5129] do_syscall_64+0x136/0x3c0 [ 112.821221][ T5129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.821254][ T5129] RIP: 0033:0x7fb8a5c9de99 [ 112.821352][ T5129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.821373][ T5129] RSP: 002b:00007fb8a46f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.821404][ T5129] RAX: ffffffffffffffda RBX: 00007fb8a5f25fa0 RCX: 00007fb8a5c9de99 [ 112.821426][ T5129] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 112.821445][ T5129] RBP: 00007fb8a5d33eaf R08: 0000000000000004 R09: 0000000000000000 [ 112.821465][ T5129] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 112.821518][ T5129] R13: 00007fb8a5f26038 R14: 00007fb8a5f25fa0 R15: 00007ffdd5fb0a68 [ 112.821548][ T5129] [ 113.038638][ T5129] Mem-Info: [ 113.042095][ T5129] active_anon:14352 inactive_anon:0 isolated_anon:0 [ 113.042095][ T5129] active_file:0 inactive_file:11059 isolated_file:0 [ 113.042095][ T5129] unevictable:0 dirty:241 writeback:0 [ 113.042095][ T5129] slab_reclaimable:3146 slab_unreclaimable:16545 [ 113.042095][ T5129] mapped:37057 shmem:6050 pagetables:3243 [ 113.042095][ T5129] sec_pagetables:0 bounce:0 [ 113.042095][ T5129] kernel_misc_reclaimable:0 [ 113.042095][ T5129] free:1888478 free_pcp:5819 free_cma:0 [ 113.087511][ T5129] Node 0 active_anon:52652kB inactive_anon:0kB active_file:0kB inactive_file:44236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136860kB dirty:964kB writeback:0kB shmem:24200kB kernel_stack:3536kB pagetables:12972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 113.118446][ T5129] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.150375][ T5129] lowmem_reserve[]: 0 2878 7857 7857 [ 113.156311][ T5129] Node 0 DMA32 free:2944040kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947668kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 113.188381][ T5129] lowmem_reserve[]: 0 0 4978 4978 [ 113.193866][ T5129] Node 0 Normal free:4599268kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45460kB inactive_anon:0kB active_file:0kB inactive_file:44236kB unevictable:0kB writepending:964kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:26680kB local_pcp:17484kB free_cma:0kB [ 113.232062][ T5129] lowmem_reserve[]: 0 0 0 0 [ 113.237077][ T5129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.261110][ T5132] loop2: detected capacity change from 0 to 512 [ 113.275195][ T5134] loop1: detected capacity change from 0 to 512 [ 113.281192][ T5129] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944040kB [ 113.298912][ T5129] Node 0 Normal: 309*4kB (UME) 284*8kB (UME) 394*16kB (UME) 37*32kB (UME) 169*64kB (UME) 90*128kB (UM) 29*256kB (UM) 2*512kB (UM) 3*1024kB (ME) 3*2048kB (UME) 1112*4096kB (M) = 4605748kB [ 113.315052][ T5132] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.537: Directory hole found for htree index block 0 [ 113.319297][ T5129] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 113.339896][ T5129] 14266 total pagecache pages [ 113.344650][ T5129] 0 pages in swap cache [ 113.349012][ T5129] Free swap = 124996kB [ 113.353277][ T5129] Total swap = 124996kB [ 113.357551][ T5129] 2097051 pages RAM [ 113.361465][ T5129] 0 pages HighMem/MovableOnly [ 113.367184][ T5129] 81735 pages reserved [ 113.373536][ T5132] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 113.374120][ T5134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.383304][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 113.383326][ C0] EXT4-fs (loop2): initial error at time 1785095604: dx_probe:791: inode 2 [ 113.383368][ C0] EXT4-fs (loop2): last error at time 1785095604: dx_probe:791: inode 2 [ 113.395080][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.434176][ T5132] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 113.444261][ T5134] EXT4-fs (loop1): 1 truncate cleaned up [ 113.463044][ T5132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.476678][ T5134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.493641][ T28] audit: type=1400 audit(1785095604.396:323): avc: denied { write } for pid=5133 comm="syz.1.538" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.521917][ T5138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5138 comm=syz.3.541 [ 113.539275][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.684106][ T28] audit: type=1400 audit(1785095604.576:324): avc: denied { create } for pid=5143 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.712685][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.789068][ T5152] netlink: 860 bytes leftover after parsing attributes in process `syz.2.544'. [ 113.994920][ T5150] loop0: detected capacity change from 0 to 128 [ 114.198624][ T5150] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.241789][ T5150] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.373037][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.569868][ T5162] loop0: detected capacity change from 0 to 136 [ 115.758288][ T5166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5166 comm=syz.0.559 [ 115.860384][ T5172] loop3: detected capacity change from 0 to 512 [ 116.071140][ T5172] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 117.003939][ T5176] loop1: detected capacity change from 0 to 256 [ 117.010697][ T5176] vfat: Unknown parameter 'syzkaller' [ 117.087983][ T5172] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.549: bad orphan inode 15 [ 117.119732][ T5172] loop3: lost filesystem error report for type 5 error -117 [ 117.120116][ T5172] ext4_test_bit(bit=14, block=18) = 1 [ 117.127665][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 117.127712][ C1] EXT4-fs (loop3): initial error at time 1785095608: ext4_orphan_get:1425 [ 117.127778][ C1] EXT4-fs (loop3): last error at time 1785095608: ext4_orphan_get:1425 [ 117.254616][ T5172] is_bad_inode(inode)=0 [ 117.284274][ T5172] NEXT_ORPHAN(inode)=1023 [ 117.326257][ T5172] max_ino=32 [ 117.344273][ T5172] i_nlink=0 [ 117.366781][ T5172] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.549: bg 0: block 161: padding at end of block bitmap is not set [ 117.383852][ T5186] loop0: detected capacity change from 0 to 512 [ 117.414541][ T5186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.445887][ T5172] loop3: lost filesystem error report for type 5 error -117 [ 117.452243][ T5172] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 117.492395][ T5172] loop3: lost filesystem error report for type 5 error -117 [ 117.496773][ T5172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.545838][ T5172] ext2 filesystem being mounted at /104/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 117.558976][ T5186] EXT4-fs (loop0): 1 truncate cleaned up [ 117.565224][ T5186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.596811][ T28] audit: type=1400 audit(1785095608.496:325): avc: denied { write } for pid=5185 comm="syz.0.553" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.642829][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.203120][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.353905][ T5200] netlink: 860 bytes leftover after parsing attributes in process `syz.4.556'. [ 118.408327][ T5204] vhci_hcd vhci_hcd.2: invalid port number 255 [ 118.414897][ T5204] vhci_hcd vhci_hcd.2: invalid port number 255 [ 118.770384][ T5204] loop2: detected capacity change from 0 to 128 [ 119.012713][ T5204] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.032581][ T5211] loop4: detected capacity change from 0 to 136 [ 119.113518][ T5208] loop1: detected capacity change from 0 to 512 [ 119.124547][ T5204] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.169245][ T5208] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 119.218284][ T5208] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.570: bad orphan inode 15 [ 119.256805][ T5208] loop1: lost filesystem error report for type 5 error -117 [ 119.257198][ T5208] ext4_test_bit(bit=14, block=18) = 1 [ 119.270330][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 119.270395][ C0] EXT4-fs (loop1): initial error at time 1785095610: ext4_orphan_get:1425 [ 119.270427][ C0] EXT4-fs (loop1): last error at time 1785095610: ext4_orphan_get:1425 [ 119.345949][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.396276][ T5208] is_bad_inode(inode)=0 [ 119.418805][ T5208] NEXT_ORPHAN(inode)=1023 [ 119.542956][ T5208] max_ino=32 [ 119.553783][ T5208] i_nlink=0 [ 119.558339][ T5208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.570: bg 0: block 161: padding at end of block bitmap is not set [ 119.574329][ T5208] loop1: lost filesystem error report for type 5 error -117 [ 119.574721][ T5208] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 120.455030][ T5208] loop1: lost filesystem error report for type 5 error -117 [ 120.460604][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.496397][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5229 comm=syz.4.564 [ 120.550338][ T5208] ext2 filesystem being mounted at /112/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 120.692627][ T5236] loop3: detected capacity change from 0 to 512 [ 120.732957][ T5236] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.784445][ T5236] EXT4-fs (loop3): 1 truncate cleaned up [ 120.798687][ T5236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.828378][ T28] audit: type=1400 audit(1785095611.736:326): avc: denied { write } for pid=5235 comm="syz.3.566" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.868537][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.935644][ T5239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5239 comm=syz.0.578 [ 121.013015][ T5242] loop4: detected capacity change from 0 to 512 [ 121.067238][ T5242] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 121.105650][ T5242] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.567: bad orphan inode 15 [ 121.148459][ T5242] loop4: lost filesystem error report for type 5 error -117 [ 121.148887][ T5242] ext4_test_bit(bit=14, block=18) = 1 [ 121.162018][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 121.162096][ C0] EXT4-fs (loop4): initial error at time 1785095612: ext4_orphan_get:1425 [ 121.162131][ C0] EXT4-fs (loop4): last error at time 1785095612: ext4_orphan_get:1425 [ 121.234050][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.333777][ T5242] is_bad_inode(inode)=0 [ 121.351087][ T5242] NEXT_ORPHAN(inode)=1023 [ 121.371084][ T5242] max_ino=32 [ 121.387825][ T5242] i_nlink=0 [ 121.403402][ T5242] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.567: bg 0: block 161: padding at end of block bitmap is not set [ 121.464321][ T5242] loop4: lost filesystem error report for type 5 error -117 [ 121.464722][ T5242] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 121.560805][ T5242] loop4: lost filesystem error report for type 5 error -117 [ 121.567878][ T5242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.599300][ T5253] vhci_hcd vhci_hcd.2: invalid port number 255 [ 121.621883][ T5253] vhci_hcd vhci_hcd.2: invalid port number 255 [ 121.653528][ T5242] ext2 filesystem being mounted at /89/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 121.680802][ T5253] loop0: detected capacity change from 0 to 128 [ 121.740971][ T5253] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.767300][ T5253] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.800686][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.840012][ T5264] loop1: detected capacity change from 0 to 136 [ 121.862705][ T28] audit: type=1326 audit(1785095612.766:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.0.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a5c9de99 code=0x0 [ 122.744722][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.002331][ T5287] lo speed is unknown, defaulting to 1000 [ 123.136291][ T5289] loop4: detected capacity change from 0 to 512 [ 123.158303][ T5289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.207170][ T5289] EXT4-fs (loop4): 1 truncate cleaned up [ 123.230605][ T5289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.246769][ T5285] loop2: detected capacity change from 0 to 512 [ 123.316311][ T5292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5292 comm=syz.3.584 [ 123.399538][ T5285] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.418618][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.474339][ T5285] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 123.507941][ T5285] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.555154][ T5285] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.582: Allocating blocks 41-42 which overlap fs metadata [ 123.601528][ T5285] loop2: lost filesystem error report for type 5 error -117 [ 123.605474][ T5285] EXT4-fs (loop2): Remounting filesystem read-only [ 123.613353][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 123.613584][ C1] EXT4-fs (loop2): initial error at time 1785095614: ext4_mb_mark_diskspace_used:4222 [ 123.613774][ C1] EXT4-fs (loop2): last error at time 1785095614: ext4_mb_mark_diskspace_used:4222 [ 123.741920][ T5285] Quota error (device loop2): write_blk: dquota write failed [ 123.774181][ T5285] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 123.808154][ T5285] EXT4-fs (loop2): 1 truncate cleaned up [ 123.917052][ T5285] EXT4-fs (loop2): pa ffff8881004a7310: logic 1, phys. 41, len 23 [ 123.957211][ T5301] vhci_hcd vhci_hcd.2: invalid port number 255 [ 123.959712][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.977511][ T5301] vhci_hcd vhci_hcd.2: invalid port number 255 [ 123.995884][ T5301] loop1: detected capacity change from 0 to 128 [ 124.058407][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.081105][ T5301] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.094420][ T5301] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.194263][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.316980][ T28] audit: type=1326 audit(1785095616.216:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c32bdde99 code=0x0 [ 125.452143][ T5336] loop4: detected capacity change from 0 to 512 [ 125.459397][ T5336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.494958][ T5336] EXT4-fs (loop4): 1 truncate cleaned up [ 125.511486][ T5336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.555348][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.171222][ T5344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5344 comm=syz.3.598 [ 126.588453][ T5346] lo speed is unknown, defaulting to 1000 [ 126.641769][ T5355] vhci_hcd vhci_hcd.2: invalid port number 255 [ 126.669616][ T5355] vhci_hcd vhci_hcd.2: invalid port number 255 [ 126.704092][ T5356] loop0: detected capacity change from 0 to 128 [ 126.867510][ T5356] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.940241][ T5356] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.089493][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.473130][ T5371] warn_alloc: 1 callbacks suppressed [ 127.473173][ T5371] syz.2.606: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 127.528392][ T5371] CPU: 0 UID: 0 PID: 5371 Comm: syz.2.606 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.528615][ T5371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.528642][ T5371] Call Trace: [ 127.528651][ T5371] [ 127.528662][ T5371] __dump_stack+0x1d/0x30 [ 127.528686][ T5371] dump_stack_lvl+0x95/0xd0 [ 127.528707][ T5371] dump_stack+0x15/0x1b [ 127.528726][ T5371] warn_alloc+0x145/0x1c0 [ 127.528796][ T5371] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 127.528829][ T5371] ? ktime_get+0x212/0x240 [ 127.528890][ T5371] ? lapic_next_event+0x11/0x20 [ 127.528921][ T5371] ? tick_program_event+0x79/0xc0 [ 127.529083][ T5371] ? _raw_spin_unlock+0x9/0x30 [ 127.529109][ T5371] ? __hrtimer_rearm_deferred+0x571/0x650 [ 127.529208][ T5371] ? should_fail_ex+0x30/0x270 [ 127.529240][ T5371] ? xskq_create+0x36/0xe0 [ 127.529265][ T5371] ? should_failslab+0x8c/0xb0 [ 127.529324][ T5371] vmalloc_user_noprof+0x7d/0xb0 [ 127.529420][ T5371] ? xskq_create+0x80/0xe0 [ 127.529461][ T5371] xskq_create+0x80/0xe0 [ 127.529492][ T5371] xsk_init_queue+0x70/0xb0 [ 127.529523][ T5371] xsk_setsockopt+0x471/0x640 [ 127.529554][ T5371] ? __sys_setsockopt+0x157/0x200 [ 127.529626][ T5371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.529656][ T5371] __sys_setsockopt+0x184/0x200 [ 127.529743][ T5371] __x64_sys_setsockopt+0x64/0x80 [ 127.529776][ T5371] x64_sys_call+0x2327/0x3020 [ 127.529803][ T5371] do_syscall_64+0x136/0x3c0 [ 127.529835][ T5371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.529904][ T5371] RIP: 0033:0x7f54e81fde99 [ 127.529920][ T5371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.529939][ T5371] RSP: 002b:00007f54e6c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.529962][ T5371] RAX: ffffffffffffffda RBX: 00007f54e8485fa0 RCX: 00007f54e81fde99 [ 127.530060][ T5371] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 127.530078][ T5371] RBP: 00007f54e8293eaf R08: 0000000000000004 R09: 0000000000000000 [ 127.530143][ T5371] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 127.530161][ T5371] R13: 00007f54e8486038 R14: 00007f54e8485fa0 R15: 00007ffeabe34218 [ 127.530212][ T5371] [ 127.533642][ T5371] Mem-Info: [ 127.724839][ T5359] loop3: detected capacity change from 0 to 512 [ 127.773948][ T5371] active_anon:8368 inactive_anon:0 isolated_anon:0 [ 127.773948][ T5371] active_file:0 inactive_file:11056 isolated_file:0 [ 127.773948][ T5371] unevictable:0 dirty:207 writeback:0 [ 127.773948][ T5371] slab_reclaimable:3150 slab_unreclaimable:16636 [ 127.773948][ T5371] mapped:31119 shmem:1049 pagetables:5361 [ 127.773948][ T5371] sec_pagetables:0 bounce:0 [ 127.773948][ T5371] kernel_misc_reclaimable:0 [ 127.773948][ T5371] free:1888940 free_pcp:9103 free_cma:0 [ 127.838841][ T5374] loop4: detected capacity change from 0 to 512 [ 127.847756][ T5371] Node 0 active_anon:36720kB inactive_anon:0kB active_file:0kB inactive_file:44224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127492kB dirty:828kB writeback:0kB shmem:7444kB kernel_stack:3584kB pagetables:21444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.877936][ T5371] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.880561][ T5374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.909356][ T5371] lowmem_reserve[]: 0 2878 7857 7857 [ 127.923482][ T5371] Node 0 DMA32 free:2944040kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947668kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 127.949644][ T5359] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.970173][ T5371] lowmem_reserve[]: 0 0 4978 4978 [ 127.976840][ T5374] EXT4-fs (loop4): 1 truncate cleaned up [ 127.982325][ T5371] Node 0 Normal free:4596360kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39156kB inactive_anon:0kB active_file:0kB inactive_file:44224kB unevictable:0kB writepending:828kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:26956kB local_pcp:22344kB free_cma:0kB [ 127.984931][ T5374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.029273][ T5371] lowmem_reserve[]: 0 0 0 0 [ 128.047940][ T5371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 128.067606][ T5359] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 128.083613][ T5371] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944040kB [ 128.106653][ T5359] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.116685][ T5371] Node 0 Normal: 770*4kB (UME) 466*8kB (UME) 433*16kB (UME) 196*32kB (UME) 94*64kB (UME) 46*128kB (UME) 28*256kB (UME) 1*512kB (M) 4*1024kB (UME) 3*2048kB (UME) 1110*4096kB (M) = 4596392kB [ 128.145247][ T5371] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 128.155059][ T5371] 14305 total pagecache pages [ 128.160014][ T5371] 0 pages in swap cache [ 128.163195][ T5359] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.603: Allocating blocks 41-42 which overlap fs metadata [ 128.164258][ T5371] Free swap = 124996kB [ 128.164284][ T5371] Total swap = 124996kB [ 128.164328][ T5371] 2097051 pages RAM [ 128.164352][ T5371] 0 pages HighMem/MovableOnly [ 128.164376][ T5371] 81735 pages reserved [ 128.234030][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.247222][ T5359] loop3: lost filesystem error report for type 5 error -117 [ 128.248775][ T5359] EXT4-fs (loop3): Remounting filesystem read-only [ 128.256903][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 128.257103][ C1] EXT4-fs (loop3): initial error at time 1785095619: ext4_mb_mark_diskspace_used:4222 [ 128.257424][ C1] EXT4-fs (loop3): last error at time 1785095619: ext4_mb_mark_diskspace_used:4222 [ 128.298032][ T5359] Quota error (device loop3): write_blk: dquota write failed [ 128.311064][ T5359] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 128.340192][ T5359] EXT4-fs (loop3): 1 truncate cleaned up [ 128.351387][ T5359] EXT4-fs (loop3): pa ffff8881004a72a0: logic 1, phys. 41, len 23 [ 128.513266][ T5392] loop2: detected capacity change from 0 to 512 [ 128.524105][ T5390] vhci_hcd vhci_hcd.2: invalid port number 255 [ 128.540390][ T5390] vhci_hcd vhci_hcd.2: invalid port number 255 [ 128.559994][ T5390] loop3: detected capacity change from 0 to 128 [ 128.574270][ T5392] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.613: Directory hole found for htree index block 0 [ 128.594880][ T5392] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 128.596576][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.612262][ C1] EXT4-fs (loop2): initial error at time 1785095619: dx_probe:791: inode 2 [ 128.614038][ T5392] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 128.620970][ C1] EXT4-fs (loop2): last error at time 1785095619: dx_probe:791: inode 2 [ 128.641178][ T5390] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.711931][ T5404] loop3: detected capacity change from 0 to 136 [ 132.378116][ T5430] loop3: detected capacity change from 0 to 512 [ 132.416167][ T5430] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.455941][ T5435] loop0: detected capacity change from 0 to 512 [ 132.484513][ T5430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 132.502004][ T5435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.524214][ T5430] EXT4-fs (loop3): orphan cleanup on readonly fs [ 132.544845][ T5430] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.623: Allocating blocks 41-42 which overlap fs metadata [ 132.567314][ T5435] EXT4-fs (loop0): 1 truncate cleaned up [ 132.578836][ T5430] loop3: lost filesystem error report for type 5 error -117 [ 132.579065][ T5430] EXT4-fs (loop3): Remounting filesystem read-only [ 132.592980][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 132.592998][ C0] EXT4-fs (loop3): initial error at time 1785095623: ext4_mb_mark_diskspace_used:4222 [ 132.593029][ C0] EXT4-fs (loop3): last error at time 1785095623: ext4_mb_mark_diskspace_used:4222 [ 132.643935][ T5440] loop4: detected capacity change from 0 to 512 [ 132.713406][ T5440] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.627: Directory hole found for htree index block 0 [ 132.745623][ T5445] vhci_hcd vhci_hcd.2: invalid port number 255 [ 132.752336][ T5430] Quota error (device loop3): write_blk: dquota write failed [ 132.766423][ T5440] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 132.766568][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 132.777462][ T5445] vhci_hcd vhci_hcd.2: invalid port number 255 [ 132.782186][ C0] EXT4-fs (loop4): initial error at time 1785095623: dx_probe:791: inode 2 [ 132.789191][ T5430] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 132.797078][ C0] EXT4-fs (loop4): last error at time 1785095623: dx_probe:791: inode 2 [ 132.824926][ T5440] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 132.840140][ T5430] EXT4-fs (loop3): 1 truncate cleaned up [ 132.846243][ T5430] EXT4-fs (loop3): pa ffff8881004a7380: logic 1, phys. 41, len 23 [ 132.881010][ T5445] loop0: detected capacity change from 0 to 128 [ 132.941662][ T5445] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.744248][ T5457] loop3: detected capacity change from 0 to 512 [ 133.785742][ T5457] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.825937][ T5457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 133.838946][ T5457] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.890998][ T5457] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.642: Allocating blocks 41-42 which overlap fs metadata [ 133.913693][ T5457] loop3: lost filesystem error report for type 5 error -117 [ 133.916193][ T5457] EXT4-fs (loop3): Remounting filesystem read-only [ 133.916716][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 133.916866][ C1] EXT4-fs (loop3): initial error at time 1785095624: ext4_mb_mark_diskspace_used:4222 [ 133.917353][ C1] EXT4-fs (loop3): last error at time 1785095624: ext4_mb_mark_diskspace_used:4222 [ 133.961972][ T5457] Quota error (device loop3): write_blk: dquota write failed [ 133.971059][ T5457] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 133.993296][ T5457] EXT4-fs (loop3): 1 truncate cleaned up [ 134.000976][ T5457] EXT4-fs (loop3): pa ffff8881004a72a0: logic 1, phys. 41, len 23 [ 134.025388][ T5457] EXT4-fs mount: 14 callbacks suppressed [ 134.025909][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.084597][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.372070][ T5465] loop2: detected capacity change from 0 to 512 [ 134.422362][ T5465] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.482534][ T5465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 134.493465][ T5465] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.545322][ T5465] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.647: Allocating blocks 41-42 which overlap fs metadata [ 134.560908][ T5465] loop2: lost filesystem error report for type 5 error -117 [ 134.563181][ T5465] EXT4-fs (loop2): Remounting filesystem read-only [ 134.571391][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 134.571420][ C0] EXT4-fs (loop2): initial error at time 1785095625: ext4_mb_mark_diskspace_used:4222 [ 134.571851][ C0] EXT4-fs (loop2): last error at time 1785095625: ext4_mb_mark_diskspace_used:4222 [ 134.625371][ T5465] Quota error (device loop2): write_blk: dquota write failed [ 134.633876][ T5465] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 134.645925][ T5465] EXT4-fs (loop2): 1 truncate cleaned up [ 134.655409][ T5465] EXT4-fs (loop2): pa ffff8881004a72a0: logic 1, phys. 41, len 23 [ 134.761417][ T5465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.816228][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.836685][ T5486] netlink: 860 bytes leftover after parsing attributes in process `syz.2.641'. [ 137.295614][ T5505] loop1: detected capacity change from 0 to 256 [ 137.303689][ T5505] vfat: Unknown parameter 'syzkaller' [ 139.578526][ T5512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5512 comm=syz.0.661 [ 140.038834][ T5536] loop1: detected capacity change from 0 to 512 [ 140.059035][ T5536] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.660: Directory hole found for htree index block 0 [ 140.103135][ T5536] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 140.103325][ T5536] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 140.112466][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 140.112491][ C1] EXT4-fs (loop1): initial error at time 1785095631: dx_probe:791: inode 2 [ 140.112530][ C1] EXT4-fs (loop1): last error at time 1785095631: dx_probe:791: inode 2 [ 140.138620][ T5530] loop3: detected capacity change from 0 to 136 [ 140.145050][ T5536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.171449][ T5523] loop4: detected capacity change from 0 to 512 [ 140.253690][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.310690][ T5523] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.382717][ T5523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 140.393956][ T5523] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.491576][ T5523] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.655: Allocating blocks 41-42 which overlap fs metadata [ 140.697802][ T5523] loop4: lost filesystem error report for type 5 error -117 [ 140.706848][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 140.721749][ C1] EXT4-fs (loop4): initial error at time 1785095631: ext4_mb_mark_diskspace_used:4222 [ 140.731864][ C1] EXT4-fs (loop4): last error at time 1785095631: ext4_mb_mark_diskspace_used:4222 [ 141.013174][ T5548] loop2: detected capacity change from 0 to 512 [ 141.471113][ T5523] EXT4-fs (loop4): Remounting filesystem read-only [ 141.481974][ T5523] Quota error (device loop4): write_blk: dquota write failed [ 141.498470][ T5548] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 141.514966][ T5523] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 141.527865][ T5548] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.663: bad orphan inode 15 [ 141.544737][ T5548] loop2: lost filesystem error report for type 5 error -117 [ 141.545056][ T5548] ext4_test_bit(bit=14, block=18) = 1 [ 141.552656][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 141.552720][ C1] EXT4-fs (loop2): initial error at time 1785095632: ext4_orphan_get:1425 [ 141.552768][ C1] EXT4-fs (loop2): last error at time 1785095632: ext4_orphan_get:1425 [ 141.586308][ T5523] EXT4-fs (loop4): 1 truncate cleaned up [ 141.605139][ T5523] EXT4-fs (loop4): pa ffff8881004a7230: logic 1, phys. 41, len 23 [ 141.655017][ T5523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.686893][ T5548] is_bad_inode(inode)=0 [ 141.700530][ T5548] NEXT_ORPHAN(inode)=1023 [ 141.720641][ T5548] max_ino=32 [ 141.732544][ T5548] i_nlink=0 [ 141.747531][ T5548] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.663: bg 0: block 161: padding at end of block bitmap is not set [ 141.784450][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.812965][ T5548] loop2: lost filesystem error report for type 5 error -117 [ 141.813378][ T5548] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 141.876527][ T5548] loop2: lost filesystem error report for type 5 error -117 [ 141.879159][ T5548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.938622][ T5548] ext2 filesystem being mounted at /151/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 142.368643][ T5572] loop0: detected capacity change from 0 to 256 [ 142.376754][ T5572] vfat: Unknown parameter 'syzkaller' [ 142.886484][ T5581] loop4: detected capacity change from 0 to 512 [ 143.048406][ T5581] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.674: Directory hole found for htree index block 0 [ 143.061176][ T5581] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 143.061442][ T5581] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 143.070572][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 143.070595][ C0] EXT4-fs (loop4): initial error at time 1785095633: dx_probe:791: inode 2 [ 143.070628][ C0] EXT4-fs (loop4): last error at time 1785095633: dx_probe:791: inode 2 [ 143.941634][ T5581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.056929][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.211966][ T5590] netlink: 852 bytes leftover after parsing attributes in process `syz.2.675'. [ 145.333632][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.555746][ T5595] loop1: detected capacity change from 0 to 136 [ 146.060882][ T5599] loop4: detected capacity change from 0 to 512 [ 146.184848][ T5599] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.361542][ T5599] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 146.633485][ T5599] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.654660][ T5599] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.679: Allocating blocks 41-42 which overlap fs metadata [ 146.745626][ T5599] loop4: lost filesystem error report for type 5 error -117 [ 146.756561][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 146.770471][ C0] EXT4-fs (loop4): initial error at time 1785095637: ext4_mb_mark_diskspace_used:4222 [ 146.780097][ C0] EXT4-fs (loop4): last error at time 1785095637: ext4_mb_mark_diskspace_used:4222 [ 146.803359][ T5599] EXT4-fs (loop4): Remounting filesystem read-only [ 146.829000][ T5599] Quota error (device loop4): write_blk: dquota write failed [ 146.849050][ T5599] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 146.864032][ T5599] EXT4-fs (loop4): 1 truncate cleaned up [ 148.123497][ T5599] EXT4-fs (loop4): pa ffff8881004a7230: logic 1, phys. 41, len 23 [ 148.138180][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5626 comm=syz.3.688 [ 149.146968][ T5630] netlink: 860 bytes leftover after parsing attributes in process `syz.1.689'. [ 149.160798][ T5599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.528182][ T5632] loop2: detected capacity change from 0 to 256 [ 149.535023][ T5632] vfat: Unknown parameter 'syzkaller' [ 150.553227][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.039060][ T5639] loop3: detected capacity change from 0 to 512 [ 151.065684][ T5639] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.692: Directory hole found for htree index block 0 [ 151.085393][ T5641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5641 comm=syz.0.702 [ 151.094476][ T5639] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 151.101649][ T5639] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 151.110863][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 151.110889][ C0] EXT4-fs (loop3): initial error at time 1785095642: dx_probe:791: inode 2 [ 151.110933][ C0] EXT4-fs (loop3): last error at time 1785095642: dx_probe:791: inode 2 [ 151.143253][ T5639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.237596][ T5643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 151.456048][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.902913][ T5668] netlink: 860 bytes leftover after parsing attributes in process `syz.0.700'. [ 154.960449][ T5671] loop3: detected capacity change from 0 to 512 [ 155.605408][ T5686] loop4: detected capacity change from 0 to 256 [ 155.612122][ T5686] vfat: Unknown parameter 'syzkaller' [ 155.818316][ T5671] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.919607][ T5671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 155.963578][ T5671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 156.072876][ T5700] vhci_hcd vhci_hcd.2: invalid port number 255 [ 156.079964][ T5681] loop1: detected capacity change from 0 to 512 [ 156.086832][ T5700] vhci_hcd vhci_hcd.2: invalid port number 255 [ 156.106695][ T5700] loop2: detected capacity change from 0 to 128 [ 156.147958][ T5700] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.174628][ T5671] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.701: Allocating blocks 41-42 which overlap fs metadata [ 156.195569][ T5681] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.220173][ T5700] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.240061][ T5671] loop3: lost filesystem error report for type 5 error -117 [ 156.244455][ T5671] EXT4-fs (loop3): Remounting filesystem read-only [ 156.252475][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 156.252500][ C1] EXT4-fs (loop3): initial error at time 1785095647: ext4_mb_mark_diskspace_used:4222 [ 156.252672][ C1] EXT4-fs (loop3): last error at time 1785095647: ext4_mb_mark_diskspace_used:4222 [ 156.310727][ T5681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 156.321923][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.332613][ T5681] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.353208][ T5681] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.704: Allocating blocks 41-42 which overlap fs metadata [ 156.370947][ T5671] Quota error (device loop3): write_blk: dquota write failed [ 156.380390][ T5671] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 156.391596][ T5681] loop1: lost filesystem error report for type 5 error -117 [ 156.392738][ T5681] EXT4-fs (loop1): Remounting filesystem read-only [ 156.400519][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 156.400638][ C1] EXT4-fs (loop1): initial error at time 1785095647: ext4_mb_mark_diskspace_used:4222 [ 156.400689][ C1] EXT4-fs (loop1): last error at time 1785095647: ext4_mb_mark_diskspace_used:4222 [ 156.437964][ T5671] EXT4-fs (loop3): 1 truncate cleaned up [ 156.444970][ T5681] Quota error (device loop1): write_blk: dquota write failed [ 156.453325][ T5681] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 156.466252][ T5681] EXT4-fs (loop1): 1 truncate cleaned up [ 156.975386][ T5681] EXT4-fs (loop1): pa ffff8881004a7150: logic 1, phys. 41, len 23 [ 156.985084][ T5671] EXT4-fs (loop3): pa ffff8881004a71c0: logic 1, phys. 41, len 23 [ 157.005090][ T5708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5708 comm=syz.2.712 [ 157.106849][ T5671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.136015][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.231686][ T5681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.440734][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.526212][ T5724] loop1: detected capacity change from 0 to 512 [ 157.541078][ T5724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.561916][ T5724] EXT4-fs (loop1): 1 truncate cleaned up [ 157.571324][ T5724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.635963][ T5722] loop2: detected capacity change from 0 to 136 [ 157.655339][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.759555][ T5730] loop0: detected capacity change from 0 to 512 [ 157.776123][ T5730] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 157.790192][ T5730] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.720: bad orphan inode 15 [ 157.817595][ T5730] loop0: lost filesystem error report for type 5 error -117 [ 157.818092][ T5730] ext4_test_bit(bit=14, block=18) = 1 [ 157.831127][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 157.831185][ C0] EXT4-fs (loop0): initial error at time 1785095648: ext4_orphan_get:1425 [ 157.831274][ C0] EXT4-fs (loop0): last error at time 1785095648: ext4_orphan_get:1425 [ 157.911030][ T5730] is_bad_inode(inode)=0 [ 157.925924][ T5730] NEXT_ORPHAN(inode)=1023 [ 157.939140][ T5730] max_ino=32 [ 157.944397][ T5730] i_nlink=0 [ 157.955821][ T5730] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.720: bg 0: block 161: padding at end of block bitmap is not set [ 157.971800][ T5730] loop0: lost filesystem error report for type 5 error -117 [ 157.976662][ T5730] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 157.997040][ T5740] vhci_hcd vhci_hcd.2: invalid port number 255 [ 158.003519][ T5740] vhci_hcd vhci_hcd.2: invalid port number 255 [ 158.017973][ T5730] loop0: lost filesystem error report for type 5 error -117 [ 158.022593][ T5730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.043945][ T5740] loop2: detected capacity change from 0 to 128 [ 158.052243][ T5730] ext2 filesystem being mounted at /165/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 158.094319][ T5740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.143134][ T5740] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.176896][ T5749] loop4: detected capacity change from 0 to 512 [ 158.199157][ T5749] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.723: Directory hole found for htree index block 0 [ 158.217107][ T5749] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 158.217229][ T5749] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 158.234536][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 158.234560][ C1] EXT4-fs (loop4): initial error at time 1785095649: dx_probe:791: inode 2 [ 158.234610][ C1] EXT4-fs (loop4): last error at time 1785095649: dx_probe:791: inode 2 [ 158.258795][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.289992][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.354001][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 158.454068][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.478398][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5759 comm=syz.4.726 [ 158.718051][ T5762] loop1: detected capacity change from 0 to 512 [ 158.764040][ T5762] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.861503][ T5762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 158.892451][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.929133][ T5762] EXT4-fs (loop1): orphan cleanup on readonly fs [ 158.972069][ T5762] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.727: Allocating blocks 41-42 which overlap fs metadata [ 159.014323][ T5754] loop3: detected capacity change from 0 to 512 [ 159.065011][ T5762] loop1: lost filesystem error report for type 5 error -117 [ 159.065673][ T5762] EXT4-fs (loop1): Remounting filesystem read-only [ 159.073138][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 159.073156][ C1] EXT4-fs (loop1): initial error at time 1785095649: ext4_mb_mark_diskspace_used:4222 [ 159.073175][ C1] EXT4-fs (loop1): last error at time 1785095649: ext4_mb_mark_diskspace_used:4222 [ 159.315229][ T5754] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.354666][ T5754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 159.369760][ T5762] Quota error (device loop1): write_blk: dquota write failed [ 159.382861][ T5754] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.399524][ T5762] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 159.421469][ T5754] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.725: Allocating blocks 41-42 which overlap fs metadata [ 159.439416][ T5762] EXT4-fs (loop1): 1 truncate cleaned up [ 159.445671][ T5754] loop3: lost filesystem error report for type 5 error -117 [ 159.446693][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 159.461543][ C1] EXT4-fs (loop3): initial error at time 1785095650: ext4_mb_mark_diskspace_used:4222 [ 159.471723][ C1] EXT4-fs (loop3): last error at time 1785095650: ext4_mb_mark_diskspace_used:4222 [ 159.491852][ T5762] EXT4-fs (loop1): pa ffff8881004a71c0: logic 1, phys. 41, len 23 [ 159.511612][ T5762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.441155][ T5754] EXT4-fs (loop3): Remounting filesystem read-only [ 160.458261][ T5754] Quota error (device loop3): write_blk: dquota write failed [ 160.466362][ T5754] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 160.490917][ T5754] EXT4-fs (loop3): 1 truncate cleaned up [ 160.669214][ T5754] EXT4-fs (loop3): pa ffff8881004a7150: logic 1, phys. 41, len 23 [ 160.693320][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.695481][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.852959][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.072792][ T5780] loop3: detected capacity change from 0 to 136 [ 162.072870][ T5791] loop1: detected capacity change from 0 to 128 [ 162.155902][ T5793] loop4: detected capacity change from 0 to 512 [ 162.338943][ T5791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.359549][ T5793] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.736: Directory hole found for htree index block 0 [ 162.407657][ T5791] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.431681][ T5793] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 162.431808][ T5793] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 162.440933][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 162.440956][ C1] EXT4-fs (loop4): initial error at time 1785095653: dx_probe:791: inode 2 [ 162.440981][ C1] EXT4-fs (loop4): last error at time 1785095653: dx_probe:791: inode 2 [ 162.531455][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.578486][ T5793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.707782][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 162.829914][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.842511][ T5803] loop3: detected capacity change from 0 to 512 [ 162.890980][ T5803] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 162.912267][ T5805] loop1: detected capacity change from 0 to 512 [ 162.929029][ T5807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5807 comm=syz.4.739 [ 162.971964][ T5805] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 162.982524][ T5803] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.738: bad orphan inode 15 [ 163.017972][ T5805] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.740: bad orphan inode 15 [ 163.039823][ T5803] loop3: lost filesystem error report for type 5 error -117 [ 163.043407][ T5803] ext4_test_bit(bit=14, block=18) = 1 [ 163.050891][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 163.050919][ C1] EXT4-fs (loop3): initial error at time 1785095653: ext4_orphan_get:1425 [ 163.050991][ C1] EXT4-fs (loop3): last error at time 1785095653: ext4_orphan_get:1425 [ 163.082823][ T5805] loop1: lost filesystem error report for type 5 error -117 [ 163.090908][ T5805] ext4_test_bit(bit=14, block=18) = 1 [ 163.098373][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 163.098390][ C1] EXT4-fs (loop1): initial error at time 1785095653: ext4_orphan_get:1425 [ 163.098413][ C1] EXT4-fs (loop1): last error at time 1785095653: ext4_orphan_get:1425 [ 163.179609][ T5805] is_bad_inode(inode)=0 [ 163.192931][ T5803] is_bad_inode(inode)=0 [ 163.197426][ T5805] NEXT_ORPHAN(inode)=1023 [ 163.210672][ T5803] NEXT_ORPHAN(inode)=1023 [ 163.215268][ T5805] max_ino=32 [ 163.225971][ T5805] i_nlink=0 [ 163.230895][ T5803] max_ino=32 [ 163.240455][ T5805] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.740: bg 0: block 161: padding at end of block bitmap is not set [ 163.258406][ T5803] i_nlink=0 [ 163.270183][ T5803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.738: bg 0: block 161: padding at end of block bitmap is not set [ 163.302283][ T5805] loop1: lost filesystem error report for type 5 error -117 [ 163.302539][ T5805] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 163.325037][ T5803] loop3: lost filesystem error report for type 5 error -117 [ 163.325370][ T5803] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 163.363747][ T5805] loop1: lost filesystem error report for type 5 error -117 [ 163.364370][ T5805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.394265][ T5803] loop3: lost filesystem error report for type 5 error -117 [ 163.399404][ T5803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.449075][ T5805] ext2 filesystem being mounted at /147/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 163.483842][ T5803] ext2 filesystem being mounted at /140/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 163.506579][ T5809] loop2: detected capacity change from 0 to 512 [ 163.912915][ T5809] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.014205][ T5809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 164.078202][ T5809] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.154484][ T5809] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.741: Allocating blocks 41-42 which overlap fs metadata [ 164.201728][ T5809] loop2: lost filesystem error report for type 5 error -117 [ 164.204192][ T5809] EXT4-fs (loop2): Remounting filesystem read-only [ 164.212395][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 164.212568][ C1] EXT4-fs (loop2): initial error at time 1785095655: ext4_mb_mark_diskspace_used:4222 [ 164.212754][ C1] EXT4-fs (loop2): last error at time 1785095655: ext4_mb_mark_diskspace_used:4222 [ 164.336899][ T5809] Quota error (device loop2): write_blk: dquota write failed [ 164.401463][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.418960][ T5809] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 164.442852][ T5809] EXT4-fs (loop2): 1 truncate cleaned up [ 164.524692][ T5809] EXT4-fs (loop2): pa ffff8881004a71c0: logic 1, phys. 41, len 23 [ 164.542381][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.636371][ T5809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.498362][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.568023][ T5834] vhci_hcd vhci_hcd.2: invalid port number 255 [ 165.767717][ T5834] vhci_hcd vhci_hcd.2: invalid port number 255 [ 165.774977][ T5842] loop0: detected capacity change from 0 to 128 [ 165.793165][ T5842] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.802130][ T5841] loop4: detected capacity change from 0 to 136 [ 165.814883][ T5842] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.970156][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.322221][ T5854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5854 comm=syz.1.752 [ 168.253189][ T5873] loop4: detected capacity change from 0 to 512 [ 168.496656][ T5873] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 168.603679][ T5873] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.757: bad orphan inode 15 [ 168.646812][ T5885] vhci_hcd vhci_hcd.2: invalid port number 255 [ 168.684642][ T5873] loop4: lost filesystem error report for type 5 error -117 [ 168.685206][ T5873] ext4_test_bit(bit=14, block=18) = 1 [ 168.692600][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 168.692617][ C0] EXT4-fs (loop4): initial error at time 1785095659: ext4_orphan_get:1425 [ 168.692637][ C0] EXT4-fs (loop4): last error at time 1785095659: ext4_orphan_get:1425 [ 168.759930][ T5885] vhci_hcd vhci_hcd.2: invalid port number 255 [ 168.958514][ T5879] loop3: detected capacity change from 0 to 128 [ 168.988356][ T5879] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.006651][ T5873] is_bad_inode(inode)=0 [ 169.010904][ T5873] NEXT_ORPHAN(inode)=1023 [ 169.015858][ T5879] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.036687][ T5873] max_ino=32 [ 169.042992][ T5873] i_nlink=0 [ 169.050907][ T5873] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.757: bg 0: block 161: padding at end of block bitmap is not set [ 169.077294][ T5890] loop2: detected capacity change from 0 to 512 [ 169.090890][ T5890] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.761: Directory hole found for htree index block 0 [ 169.105254][ T5873] loop4: lost filesystem error report for type 5 error -117 [ 169.105641][ T5873] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 169.122959][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.132047][ T5890] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 169.132249][ T5890] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 169.141354][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 169.141378][ C0] EXT4-fs (loop2): initial error at time 1785095660: dx_probe:791: inode 2 [ 169.141415][ C0] EXT4-fs (loop2): last error at time 1785095660: dx_probe:791: inode 2 [ 169.174806][ T5873] loop4: lost filesystem error report for type 5 error -117 [ 169.175546][ T5873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.196952][ T5873] ext2 filesystem being mounted at /119/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 169.208645][ T5890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.298064][ T3289] ================================================================== [ 169.306233][ T3289] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 169.312793][ T3289] [ 169.315139][ T3289] write to 0xffff88811a04e6d0 of 8 bytes by task 2982 on cpu 1: [ 169.322798][ T3289] dentry_kill+0x139/0x500 [ 169.327249][ T3289] finish_dput+0x16/0x1d0 [ 169.331619][ T3289] dput+0x48/0x50 [ 169.335330][ T3289] step_into_slowpath+0x38c/0x4c0 [ 169.340402][ T3289] path_lookupat+0x2eb/0x4c0 [ 169.345031][ T3289] filename_lookup+0x329/0x390 [ 169.349837][ T3289] do_readlinkat+0x74/0x2f0 [ 169.354394][ T3289] __x64_sys_readlink+0x47/0x60 [ 169.359285][ T3289] x64_sys_call+0x2b51/0x3020 [ 169.364009][ T3289] do_syscall_64+0x136/0x3c0 [ 169.368634][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.374646][ T3289] [ 169.376994][ T3289] read to 0xffff88811a04e6d0 of 8 bytes by task 3289 on cpu 0: [ 169.384567][ T3289] fast_dput+0x64/0x2e0 [ 169.388761][ T3289] dput+0x1f/0x50 [ 169.392440][ T3289] filename_unlinkat+0x217/0x410 [ 169.397414][ T3289] __se_sys_unlink+0x2b/0xe0 [ 169.402033][ T3289] __x64_sys_unlink+0x1f/0x30 [ 169.406760][ T3289] x64_sys_call+0x2eb6/0x3020 [ 169.411559][ T3289] do_syscall_64+0x136/0x3c0 [ 169.416190][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.422133][ T3289] [ 169.424484][ T3289] value changed: 0xffff888237b616f0 -> 0x0000000000000000 [ 169.431657][ T3289] [ 169.434006][ T3289] Reported by Kernel Concurrency Sanitizer on: [ 169.440181][ T3289] CPU: 0 UID: 0 PID: 3289 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 169.449090][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.459170][ T3289] ================================================================== [ 169.470435][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 169.525825][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.906908][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.