last executing test programs: 10m29.500664191s ago: executing program 1 (id=2): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x30, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x30}}, 0x0) getpid() r1 = socket(0x2, 0x3, 0xff) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) unshare(0xc060900) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f00000011c0)={0x0}, 0x1) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) io_setup(0x16d4a196, &(0x7f0000000200)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 10m26.2871053s ago: executing program 1 (id=6): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r1, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x2, &(0x7f0000000000)=0x0) r8 = eventfd(0x0) io_submit(r7, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r8, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x10000000000, 0x0, 0x1, r8}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="18020000010000000000000007000000180100002020732500000000002090d689446db55420207b10f8ff00000000bfa100000000000007010000f8ffe95bbb30f104aa8932df1e3b54058957ffffb702000008000000b703000008000000570461fa26bb2ff04ae5b987e1b78a364a00d0cc8abb6fbfffe85e629d4aceb9a5f5690c1e04a0a3d822df70b5c8d9f65b85dfc1a400fa38c96c545336e4703138fa1a3347700500000000000000c610cae990aca95d64ba3805db7e23215fcbc5332c03550b3a5f976b15a166"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000900000000000000000300000008e0ff0100000018620000090000000000000001000000182600001b47523c01158329f2ab4a477fa1a1047c2849a380", @ANYRES32=r4, @ANYBLOB="000000000b0000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f00000006c0)=""/166, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x28d99, r9, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 10m10.88377309s ago: executing program 32 (id=6): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r1, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x2, &(0x7f0000000000)=0x0) r8 = eventfd(0x0) io_submit(r7, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r8, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x10000000000, 0x0, 0x1, r8}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="18020000010000000000000007000000180100002020732500000000002090d689446db55420207b10f8ff00000000bfa100000000000007010000f8ffe95bbb30f104aa8932df1e3b54058957ffffb702000008000000b703000008000000570461fa26bb2ff04ae5b987e1b78a364a00d0cc8abb6fbfffe85e629d4aceb9a5f5690c1e04a0a3d822df70b5c8d9f65b85dfc1a400fa38c96c545336e4703138fa1a3347700500000000000000c610cae990aca95d64ba3805db7e23215fcbc5332c03550b3a5f976b15a166"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000900000000000000000300000008e0ff0100000018620000090000000000000001000000182600001b47523c01158329f2ab4a477fa1a1047c2849a380", @ANYRES32=r4, @ANYBLOB="000000000b0000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f00000006c0)=""/166, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x28d99, r9, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 7m2.263533435s ago: executing program 0 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB='\b\x00\v\x00\x00\x00\x00\x00'], 0x54}}, 0x4000000) 7m1.228694129s ago: executing program 0 (id=647): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x10}], 0x1}, 0x0) (fail_nth: 1) 7m0.579933997s ago: executing program 0 (id=648): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7516, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) socket$kcm(0x21, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xfffffffd}]}}}]}, 0x3c}}, 0x20008000) ioprio_set$pid(0x2, 0x0, 0x4000) io_setup(0x800, &(0x7f0000000440)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x4f}]) (async) io_submit(r4, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x4f}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_setup(0x8, &(0x7f0000002740)) (async) io_setup(0x8, &(0x7f0000002740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3f, 0x0, {0x5, 0x4}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x41}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3f, 0x0, {0x5, 0x4}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x41}]}}]}, 0x3c}}, 0x0) connect$packet(r1, &(0x7f0000000280)={0x11, 0xf8, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) shutdown(r9, 0x0) (async) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) 6m59.871899746s ago: executing program 0 (id=655): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x434, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_getres(0x6, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0xf2, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m59.482244891s ago: executing program 0 (id=660): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="756e0600000020896f6e6500d0e99ea279885d57e2e516a435029c58aef7eb999dcbe6259e0eee3c8a3a99f14ea24f42dcf6f84b4c6daa104cd7f0e8aa6cb8d95d3a7877f474d64a99dc2c94ec4e19f85187b1f565db337d57494154bd50f513db69d3828580b60c7aee837433ad3a903e54807a0104e03d03b5cac12163b194ebd7a88c8a1d576d6303bbca18132b84c9e7a2b856f10c11bb9c212ffd2fcf0f52f535e39ade3fa84fbcd3f183d488a0bfb3fbdc6d27476566024da8c609f53036c9eea01c5f6d6b084844f5901c5e1cbd38816fe4532b731bbf42d3a61d1725fec6cea6249684e58088d95c61901fcafaee"], 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc, 0x1}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000000), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff83"], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r6, r2, 0x0, 0x7) syslog(0x0, &(0x7f0000000140)=""/61, 0x3d) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$LOOP_SET_FD(r5, 0x4c00, r9) 6m59.052604544s ago: executing program 0 (id=661): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x1}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6m59.021882278s ago: executing program 33 (id=661): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x1}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 15.237272612s ago: executing program 5 (id=2572): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffff, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r6 = socket(0x10, 0x803, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000005c0)={0x4, 0x3, 0x8000, 0x0, 0x1, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x80000000, 0x0, 0x3, 0x2, 0x1, 0x2, 0x400000}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x8, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x9, 0x10ffff, 0xfffffffd}) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a"], 0xc4}}, 0x20050890) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaa}]}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, @NFT_MSG_NEWRULE={0x244, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xe0, 0x7, 0x1, 0x0, "535cd6c904e6a22c7871872a43abe2a5b7872de38b83b0d65e2a7760a8b2b6d8c09888249278943807dd97b60322df7bb05484ffb95b7786154bd2b31e61ebf8437579297b648e602399ffb7334af316382c600ef1d7fb5c5148f92559d478efb0d458089c86b8ef134b1450c00915e79ebe4d5d0e404d7a3890ae9ea2ce84d9d928241645bccf90e5657eeb8a3b5c2a78e38e52c3eecdac3705d592339da1a35feb1a5b739c876ba6659f77ce1a246cab7b8cba0c368f68a753512d572156c15e7fe0ac884dde8c224d5268d364432cea0f8110ddcb0a12ca1b18cb"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xcd, 0x7, 0x1, 0x0, "db51d029ec53cce19b87192dd1343ed098ea3488d55b5e69f1cc5ed7f03529dc3817a07d605e797f9e5242180b5c6bd465a64cf83c103deaf4a5c078e922dad4414c7ec3f78db7e4c17ae052c13f55234890d8cb85f6751359b39fb995c242e7a7c630d49abfb600d604f2f6bd6d7d461ff1feef1717d051fe41d5c12def2b88eed16ff464bc7047f78de6ecd34b2adb1774f575c8d61e2348a3b7ba8bc6a3d1aaf6759c8a2f1290c12fd62a3d84a1978d55cb3375e12835b107ccf4ab5d2e004900b2e1b4dee03140"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "631d212406494674d4f87fc9b70ec5e344"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ee}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "3c0dbaa52cf4e9baaded893740a8165d8f1ad337807c53b2d31725e0c9efb3514e80c72547295877a2fda52effb446348fff8a268605951aaa9f8cac6b7c74895fc62626807ffc927a500335034dff059b87da832d26b61e3129a15bb6fdf916d0352bbcb739f74787831e36c0d9e178794ba492bec9172239db227b92b61a5bcb8388198821b6096df8cc8ad019c3adfa42184f1e27cbf5bb81f293dd150b3cbb4c254ab822c6a4226c1c83ef616a5efe3dec8ded2a8852f6bf"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc2f8f6a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74e7505f}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3456f715}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c0, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xfc, 0xc, "f09a72605e0533810f3f924c82275f743302adaecbbfd1186a8eca4bcdd4c14daa2577b9ebf812fa53b42a29f48b9f5ca168fcfba29f00af275b202efe27d7ffdf7efadbe57ff634241b39356d2599d1ae75a2a56a98a3d5fec060d3c3a7300499d22edcb00065b4237aee990530643e02c05b94b9fbdf650e5d4e5362fdecb7c73a6eeb30a6aec139aa38baa231d6ecf10d03cf31ed12da0d55dbe0dfacec46e5a641b5322145df097bb51db4f552ff53707eb07add8fc647aa6df8c609ebfe0ace6ff8a24e22b20946e203d80acd90eb6f52311233366854bf9a782caa2d58a9e9586e4277bda7c882b54f2772d48112e3e6cd7d6685d7"}, @NFTA_CHAIN_USERDATA={0x93, 0xc, "3f49bd2e9c08fa6256db7d8107cbcf1982f5809afd86e50ac89bbadf1ff8eea4d3fe93c8d3d44b3eceaae4decd80d021c05245ad513c191fc91985ddcc84ab889873729d27b85ad8f7f7afde3f65be00b87859c99f6ea4480d575df75bb100dbb42c79f82bbef3b959de6cb82c5d94c1f3b29315462ccf2830a9dffce12de346707bbd0c81df721da50a30c96bd752"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3af2df8f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60fadf3}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a470d0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x140000}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELFLOWTABLE={0x130, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWFLOWTABLE={0x104, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_USERDATA={0x26, 0x8, "b25a76a07209fad819f5df6ac4869366ca979eb01001237caa524aa817d841ab7ff2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xaec}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040080) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10}, 0x14) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 14.940207002s ago: executing program 5 (id=2574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @remote, 0x7}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 14.080163737s ago: executing program 5 (id=2579): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x801) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000080), 0x0}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2, &(0x7f0000000480)=[{&(0x7f0000000440)=""/34, 0x22}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800642d784e500010000fa000008000340000000011400000011000100000000000000000001c8000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 13.529488759s ago: executing program 4 (id=2582): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 12.395786189s ago: executing program 4 (id=2585): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffff, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r6 = socket(0x10, 0x803, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000005c0)={0x4, 0x3, 0x8000, 0x0, 0x1, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x80000000, 0x0, 0x3, 0x2, 0x1, 0x2, 0x400000}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x8, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x9, 0x10ffff, 0xfffffffd}) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a"], 0xc4}}, 0x20050890) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaa}]}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, @NFT_MSG_NEWRULE={0x244, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xe0, 0x7, 0x1, 0x0, "535cd6c904e6a22c7871872a43abe2a5b7872de38b83b0d65e2a7760a8b2b6d8c09888249278943807dd97b60322df7bb05484ffb95b7786154bd2b31e61ebf8437579297b648e602399ffb7334af316382c600ef1d7fb5c5148f92559d478efb0d458089c86b8ef134b1450c00915e79ebe4d5d0e404d7a3890ae9ea2ce84d9d928241645bccf90e5657eeb8a3b5c2a78e38e52c3eecdac3705d592339da1a35feb1a5b739c876ba6659f77ce1a246cab7b8cba0c368f68a753512d572156c15e7fe0ac884dde8c224d5268d364432cea0f8110ddcb0a12ca1b18cb"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xcd, 0x7, 0x1, 0x0, "db51d029ec53cce19b87192dd1343ed098ea3488d55b5e69f1cc5ed7f03529dc3817a07d605e797f9e5242180b5c6bd465a64cf83c103deaf4a5c078e922dad4414c7ec3f78db7e4c17ae052c13f55234890d8cb85f6751359b39fb995c242e7a7c630d49abfb600d604f2f6bd6d7d461ff1feef1717d051fe41d5c12def2b88eed16ff464bc7047f78de6ecd34b2adb1774f575c8d61e2348a3b7ba8bc6a3d1aaf6759c8a2f1290c12fd62a3d84a1978d55cb3375e12835b107ccf4ab5d2e004900b2e1b4dee03140"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "631d212406494674d4f87fc9b70ec5e344"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ee}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "3c0dbaa52cf4e9baaded893740a8165d8f1ad337807c53b2d31725e0c9efb3514e80c72547295877a2fda52effb446348fff8a268605951aaa9f8cac6b7c74895fc62626807ffc927a500335034dff059b87da832d26b61e3129a15bb6fdf916d0352bbcb739f74787831e36c0d9e178794ba492bec9172239db227b92b61a5bcb8388198821b6096df8cc8ad019c3adfa42184f1e27cbf5bb81f293dd150b3cbb4c254ab822c6a4226c1c83ef616a5efe3dec8ded2a8852f6bf"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc2f8f6a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74e7505f}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3456f715}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c0, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xfc, 0xc, "f09a72605e0533810f3f924c82275f743302adaecbbfd1186a8eca4bcdd4c14daa2577b9ebf812fa53b42a29f48b9f5ca168fcfba29f00af275b202efe27d7ffdf7efadbe57ff634241b39356d2599d1ae75a2a56a98a3d5fec060d3c3a7300499d22edcb00065b4237aee990530643e02c05b94b9fbdf650e5d4e5362fdecb7c73a6eeb30a6aec139aa38baa231d6ecf10d03cf31ed12da0d55dbe0dfacec46e5a641b5322145df097bb51db4f552ff53707eb07add8fc647aa6df8c609ebfe0ace6ff8a24e22b20946e203d80acd90eb6f52311233366854bf9a782caa2d58a9e9586e4277bda7c882b54f2772d48112e3e6cd7d6685d7"}, @NFTA_CHAIN_USERDATA={0x93, 0xc, "3f49bd2e9c08fa6256db7d8107cbcf1982f5809afd86e50ac89bbadf1ff8eea4d3fe93c8d3d44b3eceaae4decd80d021c05245ad513c191fc91985ddcc84ab889873729d27b85ad8f7f7afde3f65be00b87859c99f6ea4480d575df75bb100dbb42c79f82bbef3b959de6cb82c5d94c1f3b29315462ccf2830a9dffce12de346707bbd0c81df721da50a30c96bd752"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3af2df8f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60fadf3}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a470d0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x140000}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELFLOWTABLE={0x130, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWFLOWTABLE={0x104, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_USERDATA={0x26, 0x8, "b25a76a07209fad819f5df6ac4869366ca979eb01001237caa524aa817d841ab7ff2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xaec}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040080) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) 12.036234249s ago: executing program 5 (id=2586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) preadv(r1, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x2, &(0x7f0000000000)=0x0) r8 = eventfd(0x0) io_submit(r7, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r8, 0x0, 0x0, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x10000000000, 0x0, 0x1, r8}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="18020000010000000000000007000000180100002020732500000000002090d689446db55420207b10f8ff00000000bfa100000000000007010000f8ffe95bbb30f104aa8932df1e3b54058957ffffb702000008000000b703000008000000570461fa26bb2ff04ae5b987e1b78a364a00d0cc8abb6fbfffe85e629d4aceb9a5f5690c1e04a0a3d822df70b5c8d9f65b85dfc1a400fa38c96c545336e4703138fa1a3347700500000000000000c610cae990aca95d64ba3805db7e23215fcbc5332c03550b3a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000900000000000000000300000008e0ff0100000018620000090000000000000001000000182600001b47523c01158329f2ab4a477fa1a1047c2849a380", @ANYRES32=r4, @ANYBLOB="000000000b0000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xa6, &(0x7f00000006c0)=""/166, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x28d99, r9, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 11.815601327s ago: executing program 4 (id=2588): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)="17001315cf717229eacf26953adec274628909b28aef7c39f9ba4b22676f55d26c3402ccecec759c81c017e01155d01b089e9fc3e96454b81b44178b3f60ca54d4a9980989b9") unshare(0x22020400) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x0, 0x3, 0x29, 0x1, 0x4}}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x719, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 8.537463677s ago: executing program 6 (id=2593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000020603000000000000000000000000060900020073797a3000000000050001000700000005000400010000000d000300686173683a6e6574000000008537d08742b828e2f77e0f5e3cd1dd2308db9144a43199b7e343ea7429a40a4c58f4fc219cca84487b493dcb64824ae467e9b031b42310250b01e4c113d25b0a39a1864845b670b09940a84213a310178978fa4d230bcc08ead8a9f3c1062680b293734c82cf53df52f4a033ed36fdbb272b1af3ae313cc1fd6506e0284b2592506bb1070abec1f6f18921d8dafa8ccce023adee014d93c07a20448e3fc34b941dfdeba646e20f6db4f9d35b30edf99043264dc91c943231e86f6f48310ca2e69c155e05dfdeea916da8b1ff8ac6d6d426f18f9c00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) 8.332801052s ago: executing program 3 (id=2594): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9934}, &(0x7f0000000200)=0x8) (fail_nth: 4) 8.301281597s ago: executing program 6 (id=2595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @remote, 0x7}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 8.037674521s ago: executing program 3 (id=2596): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000d80)={0x0, 0x0, 0x1, [0x100, 0x62, 0x0, 0x9, 0x4], [0x0, 0x6, 0x0, 0x6, 0x6, 0x9, 0x5, 0x8, 0x1, 0x300000000000000, 0x0, 0x1, 0x7, 0x4, 0x7, 0x400, 0x45b, 0x6e1, 0x9, 0x1f, 0x9, 0x8, 0x10001, 0x9, 0x6, 0x8, 0x7, 0x4, 0x2, 0x7, 0x0, 0x5, 0x7, 0x3, 0x4000000000000, 0x52377728, 0x1, 0x6, 0x3, 0x2, 0x7f, 0x7, 0x7fff, 0xe78f, 0x3d7e, 0x6, 0x6, 0x18a8000, 0x28, 0x6, 0x9, 0x2, 0x7, 0x9, 0x9, 0x2, 0x3212, 0x8000000000000000, 0x101, 0x100000000, 0x6a, 0x1200000, 0x5, 0x10001, 0x1ff, 0x7, 0x1b, 0x100, 0x81, 0x7, 0x9, 0x7, 0x3, 0x4, 0x9, 0xdae0, 0x24e, 0x9, 0x5, 0xffffffffffffff3d, 0x9, 0x7fffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffe, 0xb0, 0x3, 0x4, 0x9, 0x100000001, 0xd96, 0x7, 0x81, 0x7ff, 0x7, 0x7, 0x10, 0x4, 0x5, 0x5, 0x80000000, 0x1, 0x7, 0x8, 0x7d3, 0x4, 0x5, 0xc2, 0x7, 0xfffffffffffffffb, 0x80000001, 0x8f, 0xe1, 0x80000001, 0x6, 0x6, 0x3ff, 0x3, 0x358e, 0x10000, 0x4, 0x4]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb1018060000000000000000850000b900bc000000850000007d00000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 7.881774757s ago: executing program 4 (id=2598): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x801) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000080), 0x0}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2, &(0x7f0000000480)=[{&(0x7f0000000440)=""/34, 0x22}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800642d784e500010000fa000008000340000000011400000011000100000000000000000001c8000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) 7.432939172s ago: executing program 5 (id=2599): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r1, &(0x7f0000003700)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x50, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x2, &(0x7f0000000000)=0x0) r7 = eventfd(0x0) io_submit(r6, 0x2, &(0x7f0000000040)=[0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x10000000000, 0x0, 0x1, r7}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="18020000010000000000000007000000180100002020732500000000002090d689446db55420207b10f8ff00000000bfa100000000000007010000f8ffe95bbb30f104aa8932df1e3b54058957ffffb702000008000000b703000008000000570461fa26bb2ff04ae5b987e1b78a364a00d0cc8abb6fbfffe85e629d4aceb9a5f5690c1e04a0a3d822df70b5c8d9f65b85dfc1a400fa38c96c545336e4703138fa1a3347700500000000000000c610cae990ac"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 7.384179141s ago: executing program 6 (id=2600): mprotect(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x1, 0x43a13d76, 0x7, 0x9, 0x6, 0x21, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) add_key(&(0x7f00000001c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) clock_nanosleep(0x7, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0xffffffff80000001}, 0x4002, 0x1, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44050) munlock(&(0x7f00007e6000/0x3000)=nil, 0x3000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000030) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003fffe00000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x1fc}}, 0x0) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 7.14713441s ago: executing program 3 (id=2601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20040000, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @remote, 0x7}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 7.122275904s ago: executing program 2 (id=2602): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3={0x3000000, [{0x6, 0x1}, {0x100, 0xfffff60c}], 0xffffffffffffffff}, 0x18, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x202000, 0x0) 5.223474113s ago: executing program 2 (id=2603): getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x9934}, &(0x7f0000000200)=0x8) 5.163811663s ago: executing program 2 (id=2604): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffff, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r6 = socket(0x10, 0x803, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000005c0)={0x4, 0x3, 0x8000, 0x0, 0x1, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x80000000, 0x0, 0x3, 0x2, 0x1, 0x2, 0x400000}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x8, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x9, 0x10ffff, 0xfffffffd}) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a"], 0xc4}}, 0x20050890) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaa}]}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, @NFT_MSG_NEWRULE={0x244, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xe0, 0x7, 0x1, 0x0, "535cd6c904e6a22c7871872a43abe2a5b7872de38b83b0d65e2a7760a8b2b6d8c09888249278943807dd97b60322df7bb05484ffb95b7786154bd2b31e61ebf8437579297b648e602399ffb7334af316382c600ef1d7fb5c5148f92559d478efb0d458089c86b8ef134b1450c00915e79ebe4d5d0e404d7a3890ae9ea2ce84d9d928241645bccf90e5657eeb8a3b5c2a78e38e52c3eecdac3705d592339da1a35feb1a5b739c876ba6659f77ce1a246cab7b8cba0c368f68a753512d572156c15e7fe0ac884dde8c224d5268d364432cea0f8110ddcb0a12ca1b18cb"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xcd, 0x7, 0x1, 0x0, "db51d029ec53cce19b87192dd1343ed098ea3488d55b5e69f1cc5ed7f03529dc3817a07d605e797f9e5242180b5c6bd465a64cf83c103deaf4a5c078e922dad4414c7ec3f78db7e4c17ae052c13f55234890d8cb85f6751359b39fb995c242e7a7c630d49abfb600d604f2f6bd6d7d461ff1feef1717d051fe41d5c12def2b88eed16ff464bc7047f78de6ecd34b2adb1774f575c8d61e2348a3b7ba8bc6a3d1aaf6759c8a2f1290c12fd62a3d84a1978d55cb3375e12835b107ccf4ab5d2e004900b2e1b4dee03140"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "631d212406494674d4f87fc9b70ec5e344"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ee}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "3c0dbaa52cf4e9baaded893740a8165d8f1ad337807c53b2d31725e0c9efb3514e80c72547295877a2fda52effb446348fff8a268605951aaa9f8cac6b7c74895fc62626807ffc927a500335034dff059b87da832d26b61e3129a15bb6fdf916d0352bbcb739f74787831e36c0d9e178794ba492bec9172239db227b92b61a5bcb8388198821b6096df8cc8ad019c3adfa42184f1e27cbf5bb81f293dd150b3cbb4c254ab822c6a4226c1c83ef616a5efe3dec8ded2a8852f6bf"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc2f8f6a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74e7505f}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3456f715}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c0, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xfc, 0xc, "f09a72605e0533810f3f924c82275f743302adaecbbfd1186a8eca4bcdd4c14daa2577b9ebf812fa53b42a29f48b9f5ca168fcfba29f00af275b202efe27d7ffdf7efadbe57ff634241b39356d2599d1ae75a2a56a98a3d5fec060d3c3a7300499d22edcb00065b4237aee990530643e02c05b94b9fbdf650e5d4e5362fdecb7c73a6eeb30a6aec139aa38baa231d6ecf10d03cf31ed12da0d55dbe0dfacec46e5a641b5322145df097bb51db4f552ff53707eb07add8fc647aa6df8c609ebfe0ace6ff8a24e22b20946e203d80acd90eb6f52311233366854bf9a782caa2d58a9e9586e4277bda7c882b54f2772d48112e3e6cd7d6685d7"}, @NFTA_CHAIN_USERDATA={0x93, 0xc, "3f49bd2e9c08fa6256db7d8107cbcf1982f5809afd86e50ac89bbadf1ff8eea4d3fe93c8d3d44b3eceaae4decd80d021c05245ad513c191fc91985ddcc84ab889873729d27b85ad8f7f7afde3f65be00b87859c99f6ea4480d575df75bb100dbb42c79f82bbef3b959de6cb82c5d94c1f3b29315462ccf2830a9dffce12de346707bbd0c81df721da50a30c96bd752"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3af2df8f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60fadf3}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a470d0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x140000}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELFLOWTABLE={0x130, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWFLOWTABLE={0x104, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_USERDATA={0x26, 0x8, "b25a76a07209fad819f5df6ac4869366ca979eb01001237caa524aa817d841ab7ff2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xaec}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040080) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10}, 0x14) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 5.054688311s ago: executing program 6 (id=2605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) timer_create(0x7, 0x0, &(0x7f0000000300)) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 4.996131891s ago: executing program 3 (id=2606): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 4.793179955s ago: executing program 6 (id=2607): fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000001c0)) 4.701661311s ago: executing program 3 (id=2608): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='L', 0x1}], 0x1}}], 0x1, 0x24044849) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x7177}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x3, 0x1, 0x15, 0x3, 0x7}, &(0x7f00000042c0)=0x14) r3 = socket(0x40000000015, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0x6, 0x623, &(0x7f00000007c0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x90}, 0x1c) 4.672199316s ago: executing program 6 (id=2609): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0xfffff800, 0x47, 0xfffffffc, 0x40008}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x2, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x6, 0x6, 0x4, 0x0, 0x0, 0x0, 0x4}, r1, 0x4000000002, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) unshare(0x6c040000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 4.671018386s ago: executing program 2 (id=2610): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xffff, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r6 = socket(0x10, 0x803, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000005c0)={0x4, 0x3, 0x8000, 0x0, 0x1, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x80000000, 0x0, 0x3, 0x2, 0x1, 0x2, 0x400000}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x8, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x9, 0x10ffff, 0xfffffffd}) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a"], 0xc4}}, 0x20050890) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaa}]}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x6c, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, @NFT_MSG_NEWRULE={0x244, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xe0, 0x7, 0x1, 0x0, "535cd6c904e6a22c7871872a43abe2a5b7872de38b83b0d65e2a7760a8b2b6d8c09888249278943807dd97b60322df7bb05484ffb95b7786154bd2b31e61ebf8437579297b648e602399ffb7334af316382c600ef1d7fb5c5148f92559d478efb0d458089c86b8ef134b1450c00915e79ebe4d5d0e404d7a3890ae9ea2ce84d9d928241645bccf90e5657eeb8a3b5c2a78e38e52c3eecdac3705d592339da1a35feb1a5b739c876ba6659f77ce1a246cab7b8cba0c368f68a753512d572156c15e7fe0ac884dde8c224d5268d364432cea0f8110ddcb0a12ca1b18cb"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xcd, 0x7, 0x1, 0x0, "db51d029ec53cce19b87192dd1343ed098ea3488d55b5e69f1cc5ed7f03529dc3817a07d605e797f9e5242180b5c6bd465a64cf83c103deaf4a5c078e922dad4414c7ec3f78db7e4c17ae052c13f55234890d8cb85f6751359b39fb995c242e7a7c630d49abfb600d604f2f6bd6d7d461ff1feef1717d051fe41d5c12def2b88eed16ff464bc7047f78de6ecd34b2adb1774f575c8d61e2348a3b7ba8bc6a3d1aaf6759c8a2f1290c12fd62a3d84a1978d55cb3375e12835b107ccf4ab5d2e004900b2e1b4dee03140"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "631d212406494674d4f87fc9b70ec5e344"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ee}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_USERDATA={0xbe, 0x7, 0x1, 0x0, "3c0dbaa52cf4e9baaded893740a8165d8f1ad337807c53b2d31725e0c9efb3514e80c72547295877a2fda52effb446348fff8a268605951aaa9f8cac6b7c74895fc62626807ffc927a500335034dff059b87da832d26b61e3129a15bb6fdf916d0352bbcb739f74787831e36c0d9e178794ba492bec9172239db227b92b61a5bcb8388198821b6096df8cc8ad019c3adfa42184f1e27cbf5bb81f293dd150b3cbb4c254ab822c6a4226c1c83ef616a5efe3dec8ded2a8852f6bf"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc2f8f6a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x74e7505f}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3456f715}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c0, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xfc, 0xc, "f09a72605e0533810f3f924c82275f743302adaecbbfd1186a8eca4bcdd4c14daa2577b9ebf812fa53b42a29f48b9f5ca168fcfba29f00af275b202efe27d7ffdf7efadbe57ff634241b39356d2599d1ae75a2a56a98a3d5fec060d3c3a7300499d22edcb00065b4237aee990530643e02c05b94b9fbdf650e5d4e5362fdecb7c73a6eeb30a6aec139aa38baa231d6ecf10d03cf31ed12da0d55dbe0dfacec46e5a641b5322145df097bb51db4f552ff53707eb07add8fc647aa6df8c609ebfe0ace6ff8a24e22b20946e203d80acd90eb6f52311233366854bf9a782caa2d58a9e9586e4277bda7c882b54f2772d48112e3e6cd7d6685d7"}, @NFTA_CHAIN_USERDATA={0x93, 0xc, "3f49bd2e9c08fa6256db7d8107cbcf1982f5809afd86e50ac89bbadf1ff8eea4d3fe93c8d3d44b3eceaae4decd80d021c05245ad513c191fc91985ddcc84ab889873729d27b85ad8f7f7afde3f65be00b87859c99f6ea4480d575df75bb100dbb42c79f82bbef3b959de6cb82c5d94c1f3b29315462ccf2830a9dffce12de346707bbd0c81df721da50a30c96bd752"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3af2df8f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60fadf3}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a470d0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x140000}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELFLOWTABLE={0x130, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWFLOWTABLE={0x104, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_USERDATA={0x26, 0x8, "b25a76a07209fad819f5df6ac4869366ca979eb01001237caa524aa817d841ab7ff2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xaec}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040080) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 4.548659537s ago: executing program 2 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTeiUcT/wJPejHqycSr3g0JMVxAvTzzdt8ru8vuupStC+znkyydefOWme/Om+2bmd0GMLAmsn+SiK0R8VtEjNWyjSdM1H5cu3Ju/q8r5+aTSNM3/0yq5129cm6+OLV43pYiU2k8Xm/5zNkTc+Xy4uk8P71y8v3p5TNnnz1+cu7Y4rHFU7MHDx7YP/PC87PP9STOrE1Xd328tHvnq29feH3+yIV3fvomKeJviOPD7v/TjR1LJ1ocGyoST3Zfyx1hW106Ge5jQ7gp70ZE1l0j1fE/FkNxvfPG4pXP+to4YF2laZpuaF9cSYG7WBL9bgHQH/nv+SSikk395+vn84Pg8uHaBCiL+1r+qJUMR6mWGL/YNL/tpWy2daTy98XsEU3rKQAA6+G7w7Wf2X1H8agdKTWs4h/K94bGI+LeiNgeEfdFxI6IuD8iHoiIByPiobrntNr3ada8SXLj/U/p0poC61J2//divrfVeP9XKk4ZH8pz26rxjyRHj5cX90XEPRExGSMbsvxMhzq+f/nXL9qVTdTd/2WPrP7iXjBvx6XhpgW6hbmVuVuJud7lTyN2DbeKP1ndCcj6cWdE7NqztjqOP/317nZl/x1/Bz3YZ0q/iniq1v+VaIq/kHTen5zeGOXFfdPFVXGjn385/0a7+m8p/h7I+n9zy+t/Nf7xpH6/dvnm6zj/++dt5zRdXv+j9c/Jrv/R5K1quij4aG5l5fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+uvxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLN9X/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/Eg3738dW3r6Vq5mAAAAuPOUImJrJKWp1XSpNDVV+7z8jthcKi8trzxzdOmDUwu17wiMx0ipWOkaW10PjcpMPq0v1kdnm/L783XjL4c2VfNT80vlhX4HDwNuS5vxn/ljqN+tA9ZXh0//A3e/te6jp2n6SY+bAvzPfF8bBpfxD4Orxfjf1JS3SgB3qVa//03sYTC4/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf91S2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjjU+f7NMr9k/+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+DcAAP//dZ3gaQ==") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.805022971s ago: executing program 5 (id=2612): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTeiUcT/wJPejHqycSr3g0JMVxAvTzzdt8ru8vuupStC+znkyydefOWme/Om+2bmd0GMLAmsn+SiK0R8VtEjNWyjSdM1H5cu3Ju/q8r5+aTSNM3/0yq5129cm6+OLV43pYiU2k8Xm/5zNkTc+Xy4uk8P71y8v3p5TNnnz1+cu7Y4rHFU7MHDx7YP/PC87PP9STOrE1Xd328tHvnq29feH3+yIV3fvomKeJviOPD7v/TjR1LJ1ocGyoST3Zfyx1hW106Ge5jQ7gp70ZE1l0j1fE/FkNxvfPG4pXP+to4YF2laZpuaF9cSYG7WBL9bgHQH/nv+SSikk395+vn84Pg8uHaBCiL+1r+qJUMR6mWGL/YNL/tpWy2daTy98XsEU3rKQAA6+G7w7Wf2X1H8agdKTWs4h/K94bGI+LeiNgeEfdFxI6IuD8iHoiIByPiobrntNr3ada8SXLj/U/p0poC61J2//divrfVeP9XKk4ZH8pz26rxjyRHj5cX90XEPRExGSMbsvxMhzq+f/nXL9qVTdTd/2WPrP7iXjBvx6XhpgW6hbmVuVuJud7lTyN2DbeKP1ndCcj6cWdE7NqztjqOP/317nZl/x1/Bz3YZ0q/iniq1v+VaIq/kHTen5zeGOXFfdPFVXGjn385/0a7+m8p/h7I+n9zy+t/Nf7xpH6/dvnm6zj/++dt5zRdXv+j9c/Jrv/R5K1quij4aG5l5fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+uvxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLN9X/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/Eg3738dW3r6Vq5mAAAAuPOUImJrJKWp1XSpNDVV+7z8jthcKi8trzxzdOmDUwu17wiMx0ipWOkaW10PjcpMPq0v1kdnm/L783XjL4c2VfNT80vlhX4HDwNuS5vxn/ljqN+tA9ZXh0//A3e/te6jp2n6SY+bAvzPfF8bBpfxD4Orxfjf1JS3SgB3qVa//03sYTC4/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf91S2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjjU+f7NMr9k/+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+DcAAP//dZ3gaQ==") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.104248799s ago: executing program 3 (id=2613): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3={0x3000000, [{0x6, 0x1}, {0x100, 0xfffff60c}], 0xffffffffffffffff}, 0x18, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) 1.732062989s ago: executing program 4 (id=2614): getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x9934}, &(0x7f0000000200)=0x8) 1.083657698s ago: executing program 2 (id=2615): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0xfffff800, 0x47, 0xfffffffc, 0x40008}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x2, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x6, 0x6, 0x4, 0x0, 0x0, 0x0, 0x4}, r1, 0x4000000002, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) unshare(0x6c040000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$binfmt_script(r6, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 0s ago: executing program 4 (id=2616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20040000, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @remote, 0x7}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) kernel console output (not intermixed with test programs): 16), stripe is disabled [ 495.510066][T10640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.698527][T10649] loop4: detected capacity change from 0 to 512 [ 495.880707][T10652] FAULT_INJECTION: forcing a failure. [ 495.880707][T10652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.962540][T10649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.287668][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.2.2048 Not tainted syzkaller #0 PREEMPT(full) [ 496.287795][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.287810][T10652] Call Trace: [ 496.287817][T10652] [ 496.287826][T10652] __dump_stack+0x1d/0x30 [ 496.287854][T10652] dump_stack_lvl+0x95/0xd0 [ 496.287876][T10652] dump_stack+0x15/0x1b [ 496.287956][T10652] should_fail_ex+0x263/0x280 [ 496.287991][T10652] should_fail_alloc_page+0xf2/0x100 [ 496.288020][T10652] __alloc_frozen_pages_noprof+0x108/0x360 [ 496.288057][T10652] alloc_pages_mpol+0xb3/0x260 [ 496.288113][T10652] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 496.288203][T10652] handle_mm_fault+0x1129/0x3020 [ 496.288248][T10652] ? rcu_read_unlock_special+0x9f/0x200 [ 496.288375][T10652] do_user_addr_fault+0x62f/0x1050 [ 496.288438][T10652] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 496.288540][T10652] ? trace_page_fault_user+0x1f/0xe0 [ 496.288577][T10652] exc_page_fault+0x62/0xa0 [ 496.288601][T10652] asm_exc_page_fault+0x26/0x30 [ 496.288620][T10652] RIP: 0033:0x7fd2a21fdfcb [ 496.288679][T10652] Code: 00 00 00 48 8d 3d bd a6 1a 00 48 89 c1 31 c0 e8 5b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 a6 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 496.288700][T10652] RSP: 002b:00007fd2a0d95fa0 EFLAGS: 00010206 [ 496.288742][T10652] RAX: 0000000000000000 RBX: 00007fd2a25b5fa0 RCX: 0000000000000000 [ 496.288758][T10652] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000040 [ 496.288773][T10652] RBP: 00007fd2a0d97090 R08: 0000000000000000 R09: 0000000000000000 [ 496.288787][T10652] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001 [ 496.288800][T10652] R13: 00007fd2a25b6038 R14: 00007fd2a25b5fa0 R15: 00007ffd6d4fccb8 [ 496.288817][T10652] [ 496.293593][T10652] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 496.600052][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.747595][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.760535][T10659] loop2: detected capacity change from 0 to 1024 [ 496.811231][T10659] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 496.860183][T10659] System zones: 0-1, 3-36 [ 496.868148][T10659] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2050: bad orphan inode 134217728 [ 496.883771][T10659] loop2: lost filesystem error report for type 5 error -117 [ 496.884303][T10659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.218334][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.379631][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.544422][T10670] loop5: detected capacity change from 0 to 1024 [ 497.608876][T10681] loop4: detected capacity change from 0 to 512 [ 497.626557][T10681] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 497.627676][T10688] SELinux: failed to load policy [ 497.695712][T10681] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2059: bg 0: block 104: invalid block bitmap [ 497.710102][T10681] loop4: lost filesystem error report for type 5 error -117 [ 497.713072][T10681] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 497.720916][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 497.720966][ C0] EXT4-fs (loop4): initial error at time 1775951518: ext4_validate_block_bitmap:432 [ 497.721236][ C0] EXT4-fs (loop4): last error at time 1775951518: ext4_validate_block_bitmap:432 [ 497.764633][T10681] loop4: lost filesystem error report for type 5 error -117 [ 497.769997][T10681] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2059: invalid indirect mapped block 1 (level 1) [ 497.794979][T10681] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.795979][T10681] EXT4-fs (loop4): 1 truncate cleaned up [ 497.820990][T10681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.862725][T10694] loop3: detected capacity change from 0 to 2048 [ 497.892607][ T28] audit: type=1400 audit(1775951518.477:1486): avc: denied { ioctl } for pid=10696 comm="syz.2.2063" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 497.929055][T10694] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 497.940783][T10697] loop2: detected capacity change from 0 to 2048 [ 497.983331][T10697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.983795][T10694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.007889][ T28] audit: type=1400 audit(1775951518.587:1487): avc: denied { map } for pid=10696 comm="syz.2.2063" path="/412/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 498.018300][T10670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 498.037511][T10696] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 498.043675][T10670] System zones: 0-1, 3-36 [ 498.073662][T10670] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2054: bad orphan inode 134217728 [ 498.090246][T10670] loop5: lost filesystem error report for type 5 error -117 [ 498.103352][T10670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.126793][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.163241][T10708] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2064'. [ 498.175398][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2062'. [ 498.242148][T10714] SELinux: Context system_u:object_r:locale_t:s0 is not valid (left unmapped). [ 498.243123][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.251279][ T28] audit: type=1400 audit(1775951518.827:1488): avc: denied { mac_admin } for pid=10713 comm="syz.6.2067" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.253275][ T28] audit: type=1400 audit(1775951518.847:1489): avc: denied { relabelto } for pid=10713 comm="syz.6.2067" name="299" dev="tmpfs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:locale_t:s0" [ 498.329639][ T28] audit: type=1400 audit(1775951518.857:1490): avc: denied { associate } for pid=10713 comm="syz.6.2067" name="299" dev="tmpfs" ino=1584 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:locale_t:s0" [ 498.774016][T10724] loop2: detected capacity change from 0 to 512 [ 498.875688][T10724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.263859][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.322200][T10722] loop3: detected capacity change from 0 to 1024 [ 499.523322][T10722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 499.549800][T10722] System zones: 0-1, 3-36 [ 499.562087][T10722] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2068: bad orphan inode 134217728 [ 499.574322][T10722] loop3: lost filesystem error report for type 5 error -117 [ 499.575045][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 499.588840][ C0] EXT4-fs (loop3): initial error at time 1775951520: ext4_orphan_get:1423 [ 499.597374][ C0] EXT4-fs (loop3): last error at time 1775951520: ext4_orphan_get:1423 [ 499.621663][T10722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.685784][T10740] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2076'. [ 499.778458][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.040585][T10745] loop5: detected capacity change from 0 to 2048 [ 500.050670][T10745] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 500.063464][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.083961][T10745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.176039][T10745] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2079'. [ 500.215709][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.258258][T10759] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 500.281819][T10759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.363980][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.400262][T10765] set_capacity_and_notify: 1 callbacks suppressed [ 500.400276][T10765] loop5: detected capacity change from 0 to 512 [ 500.427697][T10765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 500.456519][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.457791][T10765] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2085: bad orphan inode 131083 [ 500.476795][T10765] loop5: lost filesystem error report for type 5 error -117 [ 500.488775][T10765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.514857][T10765] ªªªªªª: renamed from dummy0 (while UP) [ 500.587789][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.616705][T10774] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2088'. [ 500.630017][T10768] loop4: detected capacity change from 0 to 1024 [ 500.668434][T10768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 500.682050][T10768] System zones: 0-1, 3-36 [ 500.708163][T10768] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2086: bad orphan inode 134217728 [ 500.720840][T10768] loop4: lost filesystem error report for type 5 error -117 [ 500.742787][T10768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.786078][T10776] loop5: detected capacity change from 0 to 1024 [ 500.827950][T10776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 500.837685][T10776] System zones: 0-1, 3-36 [ 500.843646][T10776] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2089: bad orphan inode 134217728 [ 500.855032][T10776] loop5: lost filesystem error report for type 5 error -117 [ 500.858958][T10776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.923769][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.005749][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.085193][T10791] loop3: detected capacity change from 0 to 2048 [ 501.103934][T10791] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 501.239286][T10791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.246640][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.345479][T10820] loop2: detected capacity change from 0 to 1024 [ 505.626870][T10821] loop3: detected capacity change from 0 to 512 [ 505.647589][T10819] loop5: detected capacity change from 0 to 1024 [ 505.930501][T10820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 505.944528][T10819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 505.953978][T10821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.017350][T10820] System zones: 0-1, 3-36 [ 506.024037][T10819] System zones: 0-1, 3-36 [ 506.030219][T10820] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2100: bad orphan inode 134217728 [ 506.046225][T10819] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2102: bad orphan inode 134217728 [ 506.057638][T10820] loop2: lost filesystem error report for type 5 error -117 [ 506.058761][T10820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.080291][T10819] loop5: lost filesystem error report for type 5 error -117 [ 506.082584][T10819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.594238][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.236171][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.399556][T10840] loop5: detected capacity change from 0 to 1024 [ 507.442139][T10840] EXT4-fs: test_dummy_encryption option not supported [ 507.494537][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.644153][T10850] loop5: detected capacity change from 0 to 512 [ 508.716071][T10850] EXT4-fs (loop5): 1 orphan inode deleted [ 508.733778][T10850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.750183][T10850] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.791070][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 508.841854][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 509.260848][T10861] loop3: detected capacity change from 0 to 164 [ 509.359473][T10864] loop2: detected capacity change from 0 to 1024 [ 509.400457][T10863] tmpfs: Bad value for 'mpol' [ 509.403123][T10864] EXT4-fs: test_dummy_encryption option not supported [ 510.135203][T10868] loop2: detected capacity change from 0 to 512 [ 510.385656][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.401561][T10868] EXT4-fs (loop2): 1 orphan inode deleted [ 510.425271][T10868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.443113][T10868] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.497442][ T4497] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 510.547188][ T4497] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1 [ 511.257540][ T4497] Bluetooth: hci0: Frame reassembly failed (-84) [ 511.284506][T10881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10881 comm=syz.6.2121 [ 511.297901][T10874] loop3: detected capacity change from 0 to 512 [ 511.314696][T10881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10881 comm=syz.6.2121 [ 511.375637][T10881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10881 comm=syz.6.2121 [ 511.670664][T10890] loop4: detected capacity change from 0 to 1024 [ 511.686154][T10890] EXT4-fs: test_dummy_encryption option not supported [ 511.829494][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.056193][T10894] loop4: detected capacity change from 0 to 512 [ 512.193271][T10894] EXT4-fs (loop4): 1 orphan inode deleted [ 512.210185][T10894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.224957][ T2026] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 512.246453][T10894] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.312269][ T2026] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 513.374467][ T3695] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 513.880773][T10912] loop2: detected capacity change from 0 to 512 [ 513.907685][T10912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.045642][T10912] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2130: bad orphan inode 131083 [ 514.084003][T10912] loop2: lost filesystem error report for type 5 error -117 [ 514.086380][T10912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.241323][T10914] ªªªªªª: renamed from dummy0 (while UP) [ 514.432943][T10922] loop3: detected capacity change from 0 to 1024 [ 514.485233][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.499390][T10922] EXT4-fs: test_dummy_encryption option not supported [ 514.565123][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.779051][ T28] audit: type=1400 audit(1775951535.367:1491): avc: denied { write } for pid=10925 comm="syz.2.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 515.312169][T10936] loop3: detected capacity change from 0 to 512 [ 515.436380][T10936] EXT4-fs (loop3): 1 orphan inode deleted [ 515.451592][T10936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.473063][T10936] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.505865][ T2026] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 515.897830][T10943] loop5: detected capacity change from 0 to 1024 [ 516.007104][T10943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 516.038740][T10943] System zones: 0-1, 3-36 [ 516.140998][T10943] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2137: bad orphan inode 134217728 [ 516.193290][T10943] loop5: lost filesystem error report for type 5 error -117 [ 516.194175][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 516.207918][ C1] EXT4-fs (loop5): initial error at time 1775951536: ext4_orphan_get:1423 [ 516.216453][ C1] EXT4-fs (loop5): last error at time 1775951536: ext4_orphan_get:1423 [ 516.285433][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 516.307560][T10943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.444491][ T2026] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 516.684077][T10963] loop5: detected capacity change from 0 to 1024 [ 516.689424][T10961] loop4: detected capacity change from 0 to 512 [ 516.704616][T10963] EXT4-fs: test_dummy_encryption option not supported [ 517.024607][T10968] loop5: detected capacity change from 0 to 512 [ 517.126449][T10968] EXT4-fs (loop5): 1 orphan inode deleted [ 517.144520][T10968] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.169889][ T4497] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 517.213521][ T4497] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1 [ 517.846673][T10982] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 518.546203][T10982] SELinux: failed to load policy [ 518.767544][T10989] loop2: detected capacity change from 0 to 2048 [ 518.784978][T10989] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 518.914775][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2150'. [ 519.698922][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 519.924490][T11000] FAULT_INJECTION: forcing a failure. [ 519.924490][T11000] name failslab, interval 1, probability 0, space 0, times 0 [ 520.888038][T11000] CPU: 1 UID: 0 PID: 11000 Comm: syz.3.2155 Not tainted syzkaller #0 PREEMPT(full) [ 520.888173][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 520.888186][T11000] Call Trace: [ 520.888192][T11000] [ 520.888200][T11000] __dump_stack+0x1d/0x30 [ 520.888278][T11000] dump_stack_lvl+0x95/0xd0 [ 520.888351][T11000] dump_stack+0x15/0x1b [ 520.888377][T11000] should_fail_ex+0x263/0x280 [ 520.888438][T11000] ? alloc_fs_context+0x46/0x580 [ 520.888467][T11000] should_failslab+0x8c/0xb0 [ 520.888491][T11000] __kmalloc_cache_noprof+0x5f/0x410 [ 520.888523][T11000] alloc_fs_context+0x46/0x580 [ 520.888551][T11000] fs_context_for_mount+0x22/0x30 [ 520.888635][T11000] do_new_mount+0xe7/0x8d0 [ 520.888715][T11000] ? security_capable+0x7b/0x90 [ 520.888786][T11000] path_mount+0x4d0/0xbc0 [ 520.888813][T11000] __se_sys_mount+0x28c/0x2e0 [ 520.888842][T11000] __x64_sys_mount+0x67/0x80 [ 520.888873][T11000] x64_sys_call+0x2d61/0x3020 [ 520.888904][T11000] do_syscall_64+0x12c/0x370 [ 520.888935][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.889012][T11000] RIP: 0033:0x7fed38e9c819 [ 520.889031][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.889051][T11000] RSP: 002b:00007fed378ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 520.889075][T11000] RAX: ffffffffffffffda RBX: 00007fed39115fa0 RCX: 00007fed38e9c819 [ 520.889092][T11000] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 520.889172][T11000] RBP: 00007fed378ef090 R08: 0000200000000280 R09: 0000000000000000 [ 520.889187][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.889201][T11000] R13: 00007fed39116038 R14: 00007fed39115fa0 R15: 00007ffd1c459468 [ 520.889222][T11000] [ 521.261211][T11015] loop4: detected capacity change from 0 to 512 [ 521.271021][T11015] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 522.716424][T11049] FAULT_INJECTION: forcing a failure. [ 522.716424][T11049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.773038][T11049] CPU: 1 UID: 0 PID: 11049 Comm: syz.5.2170 Not tainted syzkaller #0 PREEMPT(full) [ 522.773070][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 522.773083][T11049] Call Trace: [ 522.773090][T11049] [ 522.773099][T11049] __dump_stack+0x1d/0x30 [ 522.773127][T11049] dump_stack_lvl+0x95/0xd0 [ 522.773181][T11049] dump_stack+0x15/0x1b [ 522.773201][T11049] should_fail_ex+0x263/0x280 [ 522.773227][T11049] should_fail+0xb/0x20 [ 522.773315][T11049] should_fail_usercopy+0x1a/0x20 [ 522.773368][T11049] strncpy_from_user+0x27/0x250 [ 522.773395][T11049] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 522.773435][T11049] do_getname+0x59/0x1c0 [ 522.773465][T11049] user_path_at+0x28/0x100 [ 522.773529][T11049] __se_sys_mount+0x25b/0x2e0 [ 522.773553][T11049] __x64_sys_mount+0x67/0x80 [ 522.773575][T11049] x64_sys_call+0x2d61/0x3020 [ 522.773641][T11049] do_syscall_64+0x12c/0x370 [ 522.773669][T11049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.773824][T11049] RIP: 0033:0x7f91d952c819 [ 522.773844][T11049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.773864][T11049] RSP: 002b:00007f91d7f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 522.773947][T11049] RAX: ffffffffffffffda RBX: 00007f91d97a5fa0 RCX: 00007f91d952c819 [ 522.774042][T11049] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 0000000000000000 [ 522.774057][T11049] RBP: 00007f91d7f7f090 R08: 0000200000000040 R09: 0000000000000000 [ 522.774070][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.774082][T11049] R13: 00007f91d97a6038 R14: 00007f91d97a5fa0 R15: 00007fff57e55eb8 [ 522.774100][T11049] [ 524.330981][T11068] loop4: detected capacity change from 0 to 1024 [ 524.353245][T11068] EXT4-fs: test_dummy_encryption option not supported [ 524.500346][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2166'. [ 524.511460][ T28] audit: type=1400 audit(1775951545.098:1492): avc: denied { name_bind } for pid=11069 comm="syz.3.2178" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 524.818654][T11075] loop4: detected capacity change from 0 to 512 [ 524.898348][T11075] EXT4-fs (loop4): 1 orphan inode deleted [ 524.914599][T11075] EXT4-fs mount: 6 callbacks suppressed [ 524.914726][T11075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.937486][T11075] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.018829][T11080] loop2: detected capacity change from 0 to 1024 [ 525.026780][T11080] EXT4-fs: test_dummy_encryption option not supported [ 525.186828][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 525.203876][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 1 [ 526.656412][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.927107][T11101] loop2: detected capacity change from 0 to 2048 [ 527.998095][T11101] loop2: p3 < > p4 < > [ 528.002476][T11101] loop2: partition table partially beyond EOD, truncated [ 528.011695][T11101] loop2: p3 start 4284289 is beyond EOD, truncated [ 528.202253][T11117] loop5: detected capacity change from 0 to 1024 [ 528.209098][T11117] EXT4-fs: test_dummy_encryption option not supported [ 529.252831][T11122] loop3: detected capacity change from 0 to 2048 [ 530.210908][ T28] audit: type=1400 audit(1775951550.798:1493): avc: denied { bind } for pid=11123 comm="syz.4.2193" lport=40207 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 530.235509][ T28] audit: type=1400 audit(1775951550.798:1494): avc: denied { name_bind } for pid=11123 comm="syz.4.2193" src=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 531.234137][T11122] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 531.247810][ T28] audit: type=1400 audit(1775951550.798:1495): avc: denied { node_bind } for pid=11123 comm="syz.4.2193" saddr=224.0.0.1 src=20003 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 531.645323][ T28] audit: type=1400 audit(1775951550.798:1496): avc: denied { write } for pid=11123 comm="syz.4.2193" lport=40207 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 531.760059][T11134] loop2: detected capacity change from 0 to 1024 [ 531.767085][T11134] EXT4-fs: test_dummy_encryption option not supported [ 531.767620][T11132] batadv_slave_0: Caught tx_queue_len zero misconfig [ 531.899631][T11132] Set syz1 is full, maxelem 65536 reached [ 531.919549][T11122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.935601][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 534.072789][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.152790][T11161] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 534.162912][T11161] SELinux: failed to load policy [ 534.503845][T11167] loop3: detected capacity change from 0 to 2048 [ 534.566459][ T3527] loop3: p3 < > p4 < > [ 534.573071][ T3527] loop3: partition table partially beyond EOD, truncated [ 534.601538][ T3527] loop3: p3 start 4284289 is beyond EOD, truncated [ 534.739511][ T28] audit: type=1400 audit(1775951555.328:1497): avc: denied { create } for pid=11166 comm="syz.3.2205" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 534.919810][T11167] loop3: p3 < > p4 < > [ 534.925643][T11167] loop3: partition table partially beyond EOD, truncated [ 535.051374][T11167] loop3: p3 start 4284289 is beyond EOD, truncated [ 535.090705][ T28] audit: type=1400 audit(1775951555.678:1498): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.196347][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 536.037347][T11183] loop3: detected capacity change from 0 to 512 [ 536.091587][T11183] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 536.130970][T11183] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2213: bg 0: block 104: invalid block bitmap [ 536.144917][T11183] loop3: lost filesystem error report for type 5 error -117 [ 536.147107][T11183] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 536.155385][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 536.155668][ C0] EXT4-fs (loop3): initial error at time 1775951556: ext4_validate_block_bitmap:432 [ 536.155746][ C0] EXT4-fs (loop3): last error at time 1775951556: ext4_validate_block_bitmap:432 [ 536.195141][T11183] loop3: lost filesystem error report for type 5 error -117 [ 536.201588][T11183] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2213: invalid indirect mapped block 1 (level 1) [ 536.224695][T11183] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 536.229192][T11183] EXT4-fs (loop3): 1 truncate cleaned up [ 536.258061][T11183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.727540][T11191] FAULT_INJECTION: forcing a failure. [ 536.727540][T11191] name failslab, interval 1, probability 0, space 0, times 0 [ 536.740554][T11191] CPU: 0 UID: 0 PID: 11191 Comm: syz.6.2214 Not tainted syzkaller #0 PREEMPT(full) [ 536.740585][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.740598][T11191] Call Trace: [ 536.740606][T11191] [ 536.740615][T11191] __dump_stack+0x1d/0x30 [ 536.740642][T11191] dump_stack_lvl+0x95/0xd0 [ 536.740671][T11191] dump_stack+0x15/0x1b [ 536.740694][T11191] should_fail_ex+0x263/0x280 [ 536.740723][T11191] should_failslab+0x8c/0xb0 [ 536.740748][T11191] kmem_cache_alloc_noprof+0x66/0x400 [ 536.740771][T11191] ? alloc_empty_file+0x76/0x200 [ 536.740799][T11191] alloc_empty_file+0x76/0x200 [ 536.740826][T11191] alloc_file_pseudo+0xf6/0x190 [ 536.740858][T11191] __shmem_file_setup+0x1dd/0x210 [ 536.740889][T11191] shmem_zero_setup+0x66/0xe0 [ 536.740917][T11191] mmap_region+0x1914/0x20c0 [ 536.740960][T11191] do_mmap+0x9b2/0xbd0 [ 536.740990][T11191] ? vm_mmap_pgoff+0xd8/0x2d0 [ 536.741010][T11191] vm_mmap_pgoff+0x183/0x2d0 [ 536.741033][T11191] ksys_mmap_pgoff+0xc1/0x310 [ 536.741059][T11191] ? __x64_sys_mmap+0x49/0x70 [ 536.741082][T11191] x64_sys_call+0x14df/0x3020 [ 536.741111][T11191] do_syscall_64+0x12c/0x370 [ 536.741142][T11191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.741167][T11191] RIP: 0033:0x7f39fca5c819 [ 536.741185][T11191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.741203][T11191] RSP: 002b:00007f39fb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 536.741224][T11191] RAX: ffffffffffffffda RBX: 00007f39fccd5fa0 RCX: 00007f39fca5c819 [ 536.741237][T11191] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 536.741250][T11191] RBP: 00007f39fb4af090 R08: ffffffffffffffff R09: 0000000000000000 [ 536.741262][T11191] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 536.741276][T11191] R13: 00007f39fccd6038 R14: 00007f39fccd5fa0 R15: 00007ffd0b297798 [ 536.741295][T11191] [ 537.821540][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2216'. [ 538.051975][T11193] loop2: detected capacity change from 0 to 2048 [ 538.295208][T11193] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 538.329691][T11193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.419129][T11214] FAULT_INJECTION: forcing a failure. [ 538.419129][T11214] name failslab, interval 1, probability 0, space 0, times 0 [ 538.432983][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.5.2218 Not tainted syzkaller #0 PREEMPT(full) [ 538.433094][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.433107][T11214] Call Trace: [ 538.433114][T11214] [ 538.433123][T11214] __dump_stack+0x1d/0x30 [ 538.433154][T11214] dump_stack_lvl+0x95/0xd0 [ 538.433182][T11214] dump_stack+0x15/0x1b [ 538.433241][T11214] should_fail_ex+0x263/0x280 [ 538.433349][T11214] should_failslab+0x8c/0xb0 [ 538.433375][T11214] kmem_cache_alloc_noprof+0x66/0x400 [ 538.433484][T11214] ? skb_clone+0x151/0x1f0 [ 538.433508][T11214] skb_clone+0x151/0x1f0 [ 538.433529][T11214] __netlink_deliver_tap+0x2c9/0x500 [ 538.433554][T11214] netlink_unicast+0x66b/0x690 [ 538.433584][T11214] netlink_sendmsg+0x5c8/0x6f0 [ 538.433645][T11214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.433664][T11214] ____sys_sendmsg+0x563/0x5b0 [ 538.433694][T11214] ___sys_sendmsg+0x195/0x1e0 [ 538.433725][T11214] __x64_sys_sendmsg+0xd4/0x160 [ 538.433751][T11214] x64_sys_call+0x194c/0x3020 [ 538.433886][T11214] do_syscall_64+0x12c/0x370 [ 538.433919][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.433945][T11214] RIP: 0033:0x7f91d952c819 [ 538.433964][T11214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.433981][T11214] RSP: 002b:00007f91d7f3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.434081][T11214] RAX: ffffffffffffffda RBX: 00007f91d97a6180 RCX: 00007f91d952c819 [ 538.434094][T11214] RDX: 00000000200048c4 RSI: 00002000000006c0 RDI: 0000000000000007 [ 538.434107][T11214] RBP: 00007f91d7f3d090 R08: 0000000000000000 R09: 0000000000000000 [ 538.434120][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.434134][T11214] R13: 00007f91d97a6218 R14: 00007f91d97a6180 R15: 00007fff57e55eb8 [ 538.434216][T11214] [ 539.141057][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.175770][T11225] netlink: 'syz.5.2226': attribute type 1 has an invalid length. [ 541.197442][T11225] netlink: 'syz.5.2226': attribute type 2 has an invalid length. [ 541.215913][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.449581][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2226'. [ 546.133243][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 546.373120][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 546.382383][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 546.391754][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 546.400816][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 548.028699][T11268] loop5: detected capacity change from 0 to 1024 [ 548.593063][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 548.622728][T11268] EXT4-fs: test_dummy_encryption option not supported [ 548.769033][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 548.778352][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 548.787614][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 548.796629][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 549.037944][T11277] netlink: 'syz.4.2240': attribute type 28 has an invalid length. [ 549.140987][T11277] netlink: 'syz.4.2240': attribute type 3 has an invalid length. [ 549.154342][T11277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2240'. [ 549.164438][T11279] loop3: detected capacity change from 0 to 512 [ 549.175506][T11279] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 549.674484][ T28] audit: type=1400 audit(1775951570.269:1499): avc: denied { read } for pid=11278 comm="syz.2.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 550.226234][ T28] audit: type=1400 audit(1775951570.809:1500): avc: denied { ioctl } for pid=11297 comm="syz.2.2244" path="/447/file2" dev="tmpfs" ino=2464 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 550.320964][T11298] loop2: detected capacity change from 0 to 128 [ 550.479657][T11298] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.516961][T11298] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.857598][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2246'. [ 550.936722][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.000759][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 551.012316][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 551.022076][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 551.695268][T11326] loop3: detected capacity change from 0 to 512 [ 551.711788][T11326] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 551.748736][T11326] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2252: bad orphan inode 131083 [ 551.769505][T11326] loop3: lost filesystem error report for type 5 error -117 [ 551.772915][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 551.786719][ C1] EXT4-fs (loop3): initial error at time 1775951572: ext4_orphan_get:1423 [ 551.793380][T11326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.795281][ C1] EXT4-fs (loop3): last error at time 1775951572: ext4_orphan_get:1423 [ 552.223858][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.207809][T11350] loop3: detected capacity change from 0 to 1024 [ 553.243541][ T28] audit: type=1400 audit(1775951573.829:1501): avc: denied { listen } for pid=11351 comm="syz.4.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 553.256293][T11350] EXT4-fs: test_dummy_encryption option not supported [ 553.325915][ T28] audit: type=1400 audit(1775951573.839:1502): avc: denied { getopt } for pid=11351 comm="syz.4.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.391984][ T28] audit: type=1400 audit(1775951573.869:1503): avc: denied { accept } for pid=11351 comm="syz.4.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 555.095298][T11399] loop2: detected capacity change from 0 to 512 [ 555.134002][T11399] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 555.153267][T11399] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2263: bg 0: block 104: invalid block bitmap [ 555.165870][T11399] loop2: lost filesystem error report for type 5 error -117 [ 555.169832][T11399] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 555.177199][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 555.177229][ C1] EXT4-fs (loop2): initial error at time 1775951575: ext4_validate_block_bitmap:432 [ 555.177267][ C1] EXT4-fs (loop2): last error at time 1775951575: ext4_validate_block_bitmap:432 [ 555.211131][T11399] loop2: lost filesystem error report for type 5 error -117 [ 555.217435][T11399] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2263: invalid indirect mapped block 1 (level 1) [ 555.238149][T11399] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 555.242318][T11399] EXT4-fs (loop2): 1 truncate cleaned up [ 555.257809][T11399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.466138][T11403] loop3: detected capacity change from 0 to 1024 [ 555.490823][T11389] __nla_validate_parse: 7 callbacks suppressed [ 555.490860][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2262'. [ 555.520736][T11403] EXT4-fs: test_dummy_encryption option not supported [ 557.270039][T11409] loop3: detected capacity change from 0 to 512 [ 558.214563][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.271136][ T3398] IPVS: starting estimator thread 0... [ 558.284817][T11416] loop5: detected capacity change from 0 to 1024 [ 558.291524][T11416] EXT4-fs: test_dummy_encryption option not supported [ 558.328890][T11409] EXT4-fs (loop3): 1 orphan inode deleted [ 558.348582][T11409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.370128][T11409] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.415453][T11418] IPVS: using max 2496 ests per chain, 124800 per kthread [ 558.427481][T11378] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 558.645572][T11378] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:29: Failed to release dquot type 1 [ 559.359454][T11421] loop5: detected capacity change from 0 to 512 [ 559.507843][T11421] EXT4-fs (loop5): 1 orphan inode deleted [ 559.525503][T11421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.541917][T11421] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.682595][T11378] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 559.942942][T11378] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:29: Failed to release dquot type 1 [ 559.973904][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.710396][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 560.719558][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 560.770705][T11442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.779575][T11442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.799576][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.808840][ T28] audit: type=1400 audit(1775951581.379:1504): avc: denied { bind } for pid=11430 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 561.092091][T11449] loop5: detected capacity change from 0 to 1024 [ 561.151107][T11449] EXT4-fs: test_dummy_encryption option not supported [ 562.180105][T11455] FAULT_INJECTION: forcing a failure. [ 562.180105][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 562.642789][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.6.2278 Not tainted syzkaller #0 PREEMPT(full) [ 562.642820][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 562.642833][T11455] Call Trace: [ 562.642840][T11455] [ 562.642848][T11455] __dump_stack+0x1d/0x30 [ 562.642876][T11455] dump_stack_lvl+0x95/0xd0 [ 562.642925][T11455] dump_stack+0x15/0x1b [ 562.643034][T11455] should_fail_ex+0x263/0x280 [ 562.643076][T11455] should_failslab+0x8c/0xb0 [ 562.643101][T11455] __kvmalloc_node_noprof+0x155/0x650 [ 562.643128][T11455] ? bpf_test_run_xdp_live+0x137/0x1360 [ 562.643165][T11455] ? mutex_unlock+0x4e/0x90 [ 562.643205][T11455] bpf_test_run_xdp_live+0x137/0x1360 [ 562.643241][T11455] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 562.643279][T11455] ? __static_call_update+0x343/0x380 [ 562.643332][T11455] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 562.643372][T11455] ? mutex_unlock+0x4e/0x90 [ 562.643396][T11455] ? 0xffffffffa0208180 [ 562.643414][T11455] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 562.643518][T11455] ? 0xffffffffa0208180 [ 562.643539][T11455] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 562.643563][T11455] bpf_prog_test_run_xdp+0x57b/0xa10 [ 562.643724][T11455] ? __rcu_read_unlock+0x4e/0x70 [ 562.643753][T11455] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 562.643798][T11455] bpf_prog_test_run+0x204/0x340 [ 562.643826][T11455] __sys_bpf+0x52e/0x7e0 [ 562.643857][T11455] __x64_sys_bpf+0x41/0x50 [ 562.643928][T11455] x64_sys_call+0x10cb/0x3020 [ 562.643955][T11455] do_syscall_64+0x12c/0x370 [ 562.643980][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.644060][T11455] RIP: 0033:0x7f39fca5c819 [ 562.644079][T11455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.644102][T11455] RSP: 002b:00007f39fb48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.644127][T11455] RAX: ffffffffffffffda RBX: 00007f39fccd6090 RCX: 00007f39fca5c819 [ 562.644142][T11455] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 562.644155][T11455] RBP: 00007f39fb48e090 R08: 0000000000000000 R09: 0000000000000000 [ 562.644231][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.644245][T11455] R13: 00007f39fccd6128 R14: 00007f39fccd6090 R15: 00007ffd0b297798 [ 562.644263][T11455] [ 565.231750][T11481] loop5: detected capacity change from 0 to 1024 [ 565.263007][T11480] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 565.283675][T11481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 565.305879][T11480] SELinux: failed to load policy [ 565.312459][T11481] System zones: 0-1, 3-36 [ 565.329190][T11481] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2283: bad orphan inode 134217728 [ 565.362445][T11481] loop5: lost filesystem error report for type 5 error -117 [ 565.362570][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 565.376464][ C1] EXT4-fs (loop5): initial error at time 1775951585: ext4_orphan_get:1423 [ 565.384988][ C1] EXT4-fs (loop5): last error at time 1775951585: ext4_orphan_get:1423 [ 565.423062][T11481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.072188][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 566.268870][T11496] loop4: detected capacity change from 0 to 1024 [ 566.276411][T11496] EXT4-fs: test_dummy_encryption option not supported [ 566.734996][T11498] loop4: detected capacity change from 0 to 512 [ 566.843851][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.223525][T11498] EXT4-fs (loop4): 1 orphan inode deleted [ 567.239123][T11498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.260437][T11378] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 567.270381][T11378] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:29: Failed to release dquot type 1 [ 567.285366][T11378] loop4: lost filesystem error report for type 5 error -117 [ 567.288610][T11498] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.843554][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.306712][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2296'. [ 570.416609][T11529] loop5: detected capacity change from 0 to 512 [ 570.617026][T11541] erspan1: entered allmulticast mode [ 570.655863][T11549] loop4: detected capacity change from 0 to 1024 [ 570.685442][T11549] EXT4-fs: test_dummy_encryption option not supported [ 570.785196][T11547] loop2: detected capacity change from 0 to 512 [ 571.099856][T11558] loop4: detected capacity change from 0 to 512 [ 571.841361][T11562] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2311'. [ 574.656236][T11558] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 574.713520][T11580] FAULT_INJECTION: forcing a failure. [ 574.713520][T11580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.726919][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.3.2315 Not tainted syzkaller #0 PREEMPT(full) [ 574.726945][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 574.726956][T11580] Call Trace: [ 574.726962][T11580] [ 574.726970][T11580] __dump_stack+0x1d/0x30 [ 574.726998][T11580] dump_stack_lvl+0x95/0xd0 [ 574.727079][T11580] dump_stack+0x15/0x1b [ 574.727106][T11580] should_fail_ex+0x263/0x280 [ 574.727133][T11580] should_fail+0xb/0x20 [ 574.727198][T11580] should_fail_usercopy+0x1a/0x20 [ 574.727350][T11580] _copy_from_user+0x1c/0xb0 [ 574.727386][T11580] copy_clone_args_from_user+0x151/0x500 [ 574.727454][T11580] ? kstrtouint+0x76/0xc0 [ 574.727486][T11580] __se_sys_clone3+0x79/0x230 [ 574.727523][T11580] __x64_sys_clone3+0x31/0x40 [ 574.727594][T11580] x64_sys_call+0x580/0x3020 [ 574.727640][T11580] do_syscall_64+0x12c/0x370 [ 574.727747][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.727768][T11580] RIP: 0033:0x7fed38e9c819 [ 574.727785][T11580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.727803][T11580] RSP: 002b:00007fed378eeef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 574.727870][T11580] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fed38e9c819 [ 574.727887][T11580] RDX: 00007fed378eef10 RSI: 0000000000000058 RDI: 00007fed378eef10 [ 574.727901][T11580] RBP: 00007fed378ef090 R08: 0000000000000000 R09: 0000000000000058 [ 574.727915][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.727927][T11580] R13: 00007fed39116038 R14: 00007fed39115fa0 R15: 00007ffd1c459468 [ 574.727945][T11580] [ 574.804833][T11560] loop2: detected capacity change from 0 to 512 [ 574.898807][T11586] loop5: detected capacity change from 0 to 1024 [ 574.912720][T11586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 574.975567][T11586] System zones: 0-1, 3-36 [ 574.991078][T11586] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2313: bad orphan inode 134217728 [ 575.009243][T11593] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2318'. [ 575.017330][T11586] loop5: lost filesystem error report for type 5 error -117 [ 575.018955][T11586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.154271][T11599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2320'. [ 575.282898][T11607] loop3: detected capacity change from 0 to 2048 [ 575.296450][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.307376][T11607] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 575.326270][T11597] loop4: detected capacity change from 0 to 512 [ 575.355324][T11607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.400477][T11607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2323'. [ 575.457317][T11612] SELinux: failed to load policy [ 575.505072][T11625] loop5: detected capacity change from 0 to 1024 [ 575.518626][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.521963][T11625] EXT4-fs: test_dummy_encryption option not supported [ 575.860277][T11646] loop5: detected capacity change from 0 to 512 [ 575.989645][T11646] EXT4-fs (loop5): 1 orphan inode deleted [ 576.007672][T11646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.024881][T11646] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.060580][T11376] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 576.097095][T11376] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:27: Failed to release dquot type 1 [ 576.503634][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2339'. [ 576.542426][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2339'. [ 576.701432][T11657] loop3: detected capacity change from 0 to 512 [ 576.811777][ T28] audit: type=1326 audit(1775951597.399:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.3.2341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed38e9c819 code=0x0 [ 576.940782][ T28] audit: type=1400 audit(1775951597.469:1506): avc: denied { read } for pid=11671 comm="syz.3.2341" dev="sockfs" ino=31540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 576.976473][T11676] FAULT_INJECTION: forcing a failure. [ 576.976473][T11676] name failslab, interval 1, probability 0, space 0, times 0 [ 577.038524][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.4.2343 Not tainted syzkaller #0 PREEMPT(full) [ 577.038553][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 577.038567][T11676] Call Trace: [ 577.038574][T11676] [ 577.038582][T11676] __dump_stack+0x1d/0x30 [ 577.038617][T11676] dump_stack_lvl+0x95/0xd0 [ 577.038726][T11676] dump_stack+0x15/0x1b [ 577.038750][T11676] should_fail_ex+0x263/0x280 [ 577.038850][T11676] should_failslab+0x8c/0xb0 [ 577.038875][T11676] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 577.038898][T11676] ? __alloc_skb+0x2d6/0x690 [ 577.038940][T11676] __alloc_skb+0x2d6/0x690 [ 577.038971][T11676] ? __alloc_skb+0x200/0x690 [ 577.039080][T11676] netlink_alloc_large_skb+0xbf/0xf0 [ 577.039116][T11676] netlink_sendmsg+0x40c/0x6f0 [ 577.039195][T11676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.039219][T11676] ____sys_sendmsg+0x563/0x5b0 [ 577.039241][T11676] ___sys_sendmsg+0x195/0x1e0 [ 577.039267][T11676] __x64_sys_sendmsg+0xd4/0x160 [ 577.039288][T11676] x64_sys_call+0x194c/0x3020 [ 577.039329][T11676] do_syscall_64+0x12c/0x370 [ 577.039355][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.039409][T11676] RIP: 0033:0x7fba87bbc819 [ 577.039424][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.039441][T11676] RSP: 002b:00007fba86617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.039462][T11676] RAX: ffffffffffffffda RBX: 00007fba87e35fa0 RCX: 00007fba87bbc819 [ 577.039499][T11676] RDX: 0000000000040004 RSI: 0000200000000500 RDI: 0000000000000003 [ 577.039512][T11676] RBP: 00007fba86617090 R08: 0000000000000000 R09: 0000000000000000 [ 577.039525][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.039600][T11676] R13: 00007fba87e36038 R14: 00007fba87e35fa0 R15: 00007ffefe0e20b8 [ 577.039622][T11676] [ 577.231834][ T28] audit: type=1400 audit(1775951597.469:1507): avc: denied { getopt } for pid=11671 comm="syz.3.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 577.354823][T11652] loop2: detected capacity change from 0 to 1024 [ 577.457157][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.479920][T11652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 577.514894][T11652] System zones: 0-1, 3-36 [ 577.586042][T11652] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2334: bad orphan inode 134217728 [ 577.603780][T11652] loop2: lost filesystem error report for type 5 error -117 [ 577.614481][T11652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.806464][T11701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.816921][T11701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 577.844004][T11702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11702 comm=syz.5.2352 [ 577.896646][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.910688][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.019450][T11704] loop3: detected capacity change from 0 to 512 [ 578.053012][T11704] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 578.120547][T11704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2351: bg 0: block 104: invalid block bitmap [ 578.134591][T11704] loop3: lost filesystem error report for type 5 error -117 [ 578.137072][T11704] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 578.145145][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 578.145186][ C1] EXT4-fs (loop3): initial error at time 1775951598: ext4_validate_block_bitmap:432 [ 578.145457][ C1] EXT4-fs (loop3): last error at time 1775951598: ext4_validate_block_bitmap:432 [ 578.183588][T11704] loop3: lost filesystem error report for type 5 error -117 [ 578.192432][T11704] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2351: invalid indirect mapped block 1 (level 1) [ 578.215511][T11704] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 578.219762][T11704] EXT4-fs (loop3): 1 truncate cleaned up [ 578.247940][T11704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.358847][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.430079][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.464306][T11712] loop4: detected capacity change from 0 to 1024 [ 578.507579][T11701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.545151][T11712] EXT4-fs: test_dummy_encryption option not supported [ 578.580002][T11701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 579.599576][T11701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.616287][T11701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.631544][T11701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.643769][T11701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 581.021733][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.804595][T11383] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.815056][T11383] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 581.823732][T11383] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.836241][T11383] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.638327][T11383] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 582.647146][T11383] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.607940][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.625258][T11383] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 583.634284][T11383] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 584.567321][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 584.615255][T11734] loop4: detected capacity change from 0 to 1024 [ 584.623767][ T28] audit: type=1400 audit(1775951605.219:1508): avc: denied { lock } for pid=11731 comm="syz.5.2357" path="socket:[32801]" dev="sockfs" ino=32801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 584.763084][T11734] EXT4-fs: test_dummy_encryption option not supported [ 584.770086][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2357'. [ 584.815969][T11741] FAULT_INJECTION: forcing a failure. [ 584.815969][T11741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.829366][T11741] CPU: 1 UID: 0 PID: 11741 Comm: syz.2.2360 Not tainted syzkaller #0 PREEMPT(full) [ 584.829467][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 584.829480][T11741] Call Trace: [ 584.829488][T11741] [ 584.829496][T11741] __dump_stack+0x1d/0x30 [ 584.829526][T11741] dump_stack_lvl+0x95/0xd0 [ 584.829558][T11741] dump_stack+0x15/0x1b [ 584.829592][T11741] should_fail_ex+0x263/0x280 [ 584.829624][T11741] should_fail+0xb/0x20 [ 584.829782][T11741] should_fail_usercopy+0x1a/0x20 [ 584.829811][T11741] _copy_from_iter+0xcf/0xea0 [ 584.829843][T11741] ? __alloc_skb+0x4f6/0x690 [ 584.829877][T11741] ? __alloc_skb+0x200/0x690 [ 584.829941][T11741] netlink_sendmsg+0x4ae/0x6f0 [ 584.829969][T11741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.829992][T11741] ____sys_sendmsg+0x563/0x5b0 [ 584.830077][T11741] ___sys_sendmsg+0x195/0x1e0 [ 584.830108][T11741] __x64_sys_sendmsg+0xd4/0x160 [ 584.830135][T11741] x64_sys_call+0x194c/0x3020 [ 584.830269][T11741] do_syscall_64+0x12c/0x370 [ 584.830301][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.830326][T11741] RIP: 0033:0x7fd2a233c819 [ 584.830350][T11741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.830439][T11741] RSP: 002b:00007fd2a0d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.830463][T11741] RAX: ffffffffffffffda RBX: 00007fd2a25b5fa0 RCX: 00007fd2a233c819 [ 584.830478][T11741] RDX: 0000000004004800 RSI: 0000200000000680 RDI: 0000000000000003 [ 584.830542][T11741] RBP: 00007fd2a0d97090 R08: 0000000000000000 R09: 0000000000000000 [ 584.830557][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.830649][T11741] R13: 00007fd2a25b6038 R14: 00007fd2a25b5fa0 R15: 00007ffd6d4fccb8 [ 584.830668][T11741] [ 585.379085][T11752] loop4: detected capacity change from 0 to 512 [ 586.175290][T11757] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 586.185676][T11757] SELinux: failed to load policy [ 588.091065][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 588.134018][T11752] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 588.477758][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2364'. [ 588.509132][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2364'. [ 589.312273][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2365'. [ 589.445438][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 590.619396][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 590.793336][T11798] SELinux: failed to load policy [ 590.931575][ T28] audit: type=1400 audit(1775951611.520:1509): avc: denied { bind } for pid=11805 comm="syz.5.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 590.999669][T11808] loop3: detected capacity change from 0 to 1024 [ 591.028888][T11808] EXT4-fs: test_dummy_encryption option not supported [ 591.199292][T11784] Set syz1 is full, maxelem 65536 reached [ 591.389932][T11813] loop3: detected capacity change from 0 to 512 [ 591.748584][T11813] EXT4-fs (loop3): 1 orphan inode deleted [ 591.768367][T11813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.788137][T11813] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.302177][T11359] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 592.320393][T11359] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:11: Failed to release dquot type 1 [ 592.560465][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2382'. [ 593.043766][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2384'. [ 593.057278][T11835] loop2: detected capacity change from 0 to 1024 [ 593.088466][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.122752][T11835] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 593.178634][T11835] System zones: 0-1, 3-36 [ 593.222444][T11835] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2383: bad orphan inode 134217728 [ 593.234000][T11835] loop2: lost filesystem error report for type 5 error -117 [ 593.234595][T11835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.516958][T11856] loop4: detected capacity change from 0 to 1024 [ 593.526018][T11856] EXT4-fs: test_dummy_encryption option not supported [ 593.825368][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.185519][T11869] loop2: detected capacity change from 0 to 512 [ 595.205791][T11869] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 595.420591][T11869] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2392: bg 0: block 104: invalid block bitmap [ 595.434022][T11869] loop2: lost filesystem error report for type 5 error -117 [ 595.452033][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 595.465994][ C1] EXT4-fs (loop2): initial error at time 1775951616: ext4_validate_block_bitmap:432 [ 595.475424][ C1] EXT4-fs (loop2): last error at time 1775951616: ext4_validate_block_bitmap:432 [ 595.533052][T11869] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 595.543512][T11869] loop2: lost filesystem error report for type 5 error -117 [ 595.843697][T11869] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2392: invalid indirect mapped block 1 (level 1) [ 595.962664][T11869] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 595.966783][T11869] EXT4-fs (loop2): 1 truncate cleaned up [ 595.993945][T11869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.797170][ T3695] Bluetooth: hci0: command 0x1003 tx timeout [ 596.822043][T10882] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 598.277867][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'. [ 598.742051][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2397'. [ 598.760685][T11880] loop4: detected capacity change from 0 to 1024 [ 598.780977][T11880] EXT4-fs: test_dummy_encryption option not supported [ 598.869353][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2398'. [ 598.902188][T11886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.926824][T11892] netlink: 'syz.6.2399': attribute type 4 has an invalid length. [ 598.949520][T11891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11891 comm=syz.3.2395 [ 599.002489][T11886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.152236][T11896] loop4: detected capacity change from 0 to 512 [ 599.184804][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.249609][T11896] EXT4-fs (loop4): 1 orphan inode deleted [ 599.269427][T11896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.291338][T11896] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.475747][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.565968][T11886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.632538][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.671115][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.704808][T11886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.727220][ T28] audit: type=1400 audit(1775951620.320:1510): avc: denied { setattr } for pid=11905 comm="syz.6.2403" name="AF_VSOCK" dev="sockfs" ino=32764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.780557][ T28] audit: type=1400 audit(1775951620.340:1511): avc: denied { ioctl } for pid=11905 comm="syz.6.2403" path="socket:[32764]" dev="sockfs" ino=32764 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.833540][ T28] audit: type=1400 audit(1775951620.340:1512): avc: denied { getopt } for pid=11905 comm="syz.6.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.865286][T11375] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.882257][T11375] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.961644][T11383] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 599.982200][T11375] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.990562][T11375] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.111264][T11383] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:34: Failed to release dquot type 1 [ 600.576424][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.000924][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.180443][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 601.522299][T11927] loop5: detected capacity change from 0 to 512 [ 601.974059][T11927] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 602.368713][T11927] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2407: bg 0: block 104: invalid block bitmap [ 602.382662][T11927] loop5: lost filesystem error report for type 5 error -117 [ 602.384557][T11927] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 602.394221][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 602.394351][ C1] EXT4-fs (loop5): initial error at time 1775951622: ext4_validate_block_bitmap:432 [ 602.394459][ C1] EXT4-fs (loop5): last error at time 1775951622: ext4_validate_block_bitmap:432 [ 602.433442][T11927] loop5: lost filesystem error report for type 5 error -117 [ 602.964959][T11927] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2407: invalid indirect mapped block 1 (level 1) [ 602.988942][T11927] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 602.993612][T11927] EXT4-fs (loop5): 1 truncate cleaned up [ 603.023502][T11927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.086362][T11929] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2408'. [ 603.604304][T11952] loop2: detected capacity change from 0 to 1024 [ 603.635098][T11952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 603.643692][T11952] System zones: 0-1, 3-36 [ 603.653699][T11952] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2412: bad orphan inode 134217728 [ 603.668961][T11952] loop2: lost filesystem error report for type 5 error -117 [ 603.672282][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 603.687973][ C0] EXT4-fs (loop2): initial error at time 1775951624: ext4_orphan_get:1423 [ 603.697892][ C0] EXT4-fs (loop2): last error at time 1775951624: ext4_orphan_get:1423 [ 603.702427][T11955] loop4: detected capacity change from 0 to 1024 [ 603.714733][T11952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.806032][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 604.245348][T11955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 604.425135][T11959] netlink: 280 bytes leftover after parsing attributes in process `syz.6.2418'. [ 604.437505][T11955] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.454635][T11955] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2416: bg 0: block 112: padding at end of block bitmap is not set [ 604.727703][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 604.740245][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 604.750508][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 604.759944][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 604.798277][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.400691][T11970] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 605.419166][T11955] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 3: comm syz.4.2416: lblock 3 mapped to illegal pblock 3 (length 1) [ 605.615945][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 605.877759][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 606.397110][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2416'. [ 606.436160][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.448224][T11955] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.2416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 606.701168][T11991] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2426'. [ 606.769053][T11996] FAULT_INJECTION: forcing a failure. [ 606.769053][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 606.793255][ T28] audit: type=1400 audit(1775951627.390:1513): avc: denied { create } for pid=11992 comm="syz.6.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 606.837387][T11996] CPU: 1 UID: 0 PID: 11996 Comm: syz.5.2428 Not tainted syzkaller #0 PREEMPT(full) [ 606.837420][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 606.837431][T11996] Call Trace: [ 606.837437][T11996] [ 606.837444][T11996] __dump_stack+0x1d/0x30 [ 606.837476][T11996] dump_stack_lvl+0x95/0xd0 [ 606.837529][T11996] dump_stack+0x15/0x1b [ 606.837618][T11996] should_fail_ex+0x263/0x280 [ 606.837643][T11996] should_failslab+0x8c/0xb0 [ 606.837668][T11996] kmem_cache_alloc_noprof+0x66/0x400 [ 606.837747][T11996] ? skb_clone+0x151/0x1f0 [ 606.837768][T11996] skb_clone+0x151/0x1f0 [ 606.837786][T11996] __netlink_deliver_tap+0x2c9/0x500 [ 606.837808][T11996] netlink_unicast+0x66b/0x690 [ 606.837917][T11996] netlink_sendmsg+0x5c8/0x6f0 [ 606.837938][T11996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.837957][T11996] ____sys_sendmsg+0x563/0x5b0 [ 606.837984][T11996] ___sys_sendmsg+0x195/0x1e0 [ 606.838005][T11996] ? path_openat+0x1b01/0x2050 [ 606.838106][T11996] __sys_sendmmsg+0x185/0x320 [ 606.838137][T11996] __x64_sys_sendmmsg+0x57/0x70 [ 606.838156][T11996] x64_sys_call+0x27aa/0x3020 [ 606.838228][T11996] do_syscall_64+0x12c/0x370 [ 606.838262][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.838285][T11996] RIP: 0033:0x7f91d952c819 [ 606.838382][T11996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.838404][T11996] RSP: 002b:00007f91d7f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 606.838429][T11996] RAX: ffffffffffffffda RBX: 00007f91d97a5fa0 RCX: 00007f91d952c819 [ 606.838444][T11996] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 606.838520][T11996] RBP: 00007f91d7f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 606.838534][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.838559][T11996] R13: 00007f91d97a6038 R14: 00007f91d97a5fa0 R15: 00007fff57e55eb8 [ 606.838580][T11996] [ 607.037251][ T28] audit: type=1400 audit(1775951627.410:1514): avc: denied { read } for pid=11992 comm="syz.6.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 607.104052][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 607.402582][T12009] loop4: detected capacity change from 0 to 1024 [ 607.486305][T12009] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 607.498633][T12009] System zones: 0-1, 3-36 [ 608.367251][T12009] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2432: bad orphan inode 134217728 [ 608.392217][T12009] loop4: lost filesystem error report for type 5 error -117 [ 608.401893][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 608.415684][ C1] EXT4-fs (loop4): initial error at time 1775951628: ext4_orphan_get:1423 [ 608.424232][ C1] EXT4-fs (loop4): last error at time 1775951628: ext4_orphan_get:1423 [ 609.758516][T12009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.920773][T12017] loop3: detected capacity change from 0 to 1024 [ 609.956891][T12017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 609.965824][T12017] System zones: 0-1, 3-36 [ 610.005694][T12017] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2424: bad orphan inode 134217728 [ 610.034605][T12035] netlink: 'syz.6.2439': attribute type 11 has an invalid length. [ 610.037123][T12017] loop3: lost filesystem error report for type 5 error -117 [ 610.042936][T12035] __nla_validate_parse: 2 callbacks suppressed [ 610.042981][T12035] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2439'. [ 610.071870][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 610.078360][ C0] EXT4-fs (loop3): initial error at time 1775951630: ext4_orphan_get:1423 [ 610.087153][ C0] EXT4-fs (loop3): last error at time 1775951630: ext4_orphan_get:1423 [ 610.101052][T12017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.138187][T12009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.162320][T12040] loop2: detected capacity change from 0 to 1024 [ 610.174958][T12040] EXT4-fs: test_dummy_encryption option not supported [ 610.346304][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2442'. [ 612.937526][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2444'. [ 612.957728][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.069812][T12066] loop2: detected capacity change from 0 to 512 [ 613.087384][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 613.104961][T12068] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 613.115264][T12068] SELinux: failed to load policy [ 613.128524][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 613.158063][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 613.192300][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 613.235487][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 613.275732][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'. [ 613.422582][T12088] loop5: detected capacity change from 0 to 128 [ 613.583241][T12096] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 613.622415][T12096] SELinux: failed to load policy [ 613.687250][T12101] loop4: detected capacity change from 0 to 1024 [ 613.707273][T12101] EXT4-fs: test_dummy_encryption option not supported [ 613.718529][T12084] loop3: detected capacity change from 0 to 1024 [ 613.767223][T12094] loop2: detected capacity change from 0 to 1024 [ 613.867196][T12094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 613.894509][T12084] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 614.139787][T12094] System zones: 0-1, 3-36 [ 614.154403][T12106] loop4: detected capacity change from 0 to 512 [ 614.269631][T12106] EXT4-fs (loop4): 1 orphan inode deleted [ 614.289229][T12106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.307129][T12106] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.512563][T11379] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 614.642058][T11379] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:30: Failed to release dquot type 1 [ 614.672259][T12094] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2457: bad orphan inode 134217728 [ 614.856013][T12084] System zones: 0-1, 3-36 [ 614.875301][T12094] loop2: lost filesystem error report for type 5 error -117 [ 614.877269][T12084] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2453: bad orphan inode 134217728 [ 614.881821][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 614.889246][T12084] loop3: lost filesystem error report for type 5 error -117 [ 614.895818][ C0] EXT4-fs (loop2): initial error at time 1775951635: ext4_orphan_get:1423 [ 614.895857][ C0] EXT4-fs (loop2): last error at time 1775951635: ext4_orphan_get:1423 [ 614.900380][T12117] loop5: detected capacity change from 0 to 512 [ 615.340860][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2461'. [ 615.612177][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.630478][T12094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.727286][T12084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.285252][T12136] loop5: detected capacity change from 0 to 512 [ 616.296389][T12136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 616.347866][T12136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 616.358333][T12136] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 616.401146][T12136] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 616.419770][T12136] EXT4-fs (loop5): Remounting filesystem read-only [ 616.426335][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 616.426353][ C1] EXT4-fs (loop5): initial error at time 1775951637: mb_free_blocks:2049: inode 12: block 14 [ 616.426384][ C1] EXT4-fs (loop5): last error at time 1775951637: mb_free_blocks:2049: inode 12: block 14 [ 616.455005][T12136] EXT4-fs (loop5): 1 truncate cleaned up [ 616.461693][T12136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.479197][T11379] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 616.509291][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.518517][T11377] Quota error (device loop5): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 616.560530][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.846520][T12151] loop5: detected capacity change from 0 to 512 [ 617.872591][T12151] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 618.799822][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.686420][T12158] loop4: detected capacity change from 0 to 512 [ 619.822038][T12151] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2471: bg 0: block 104: invalid block bitmap [ 619.835888][T12151] loop5: lost filesystem error report for type 5 error -117 [ 619.841751][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 619.855522][ C1] EXT4-fs (loop5): initial error at time 1775951640: ext4_validate_block_bitmap:432 [ 619.864932][ C1] EXT4-fs (loop5): last error at time 1775951640: ext4_validate_block_bitmap:432 [ 620.472240][T12151] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 620.493674][T12151] loop5: lost filesystem error report for type 5 error -117 [ 620.507751][T12151] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2471: invalid indirect mapped block 1 (level 1) [ 620.531926][T12151] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 620.537613][T12151] EXT4-fs (loop5): 1 truncate cleaned up [ 620.569407][T12151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.734519][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.633010][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2475'. [ 622.359450][T12165] loop5: detected capacity change from 0 to 2048 [ 622.365990][ T28] audit: type=1400 audit(1775951642.930:1515): avc: denied { write } for pid=12163 comm="syz.5.2477" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 622.446551][T12165] Alternate GPT is invalid, using primary GPT. [ 622.472905][T12165] loop5: p2 p3 p7 [ 622.490306][T12177] loop2: detected capacity change from 0 to 1024 [ 622.541151][ T3000] Alternate GPT is invalid, using primary GPT. [ 622.558671][ T3000] loop5: p2 p3 p7 [ 622.587034][T12177] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 622.622518][T12177] System zones: 0-1, 3-36 [ 622.708061][T12177] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2482: bad orphan inode 134217728 [ 622.734895][T12179] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 622.759377][T12177] loop2: lost filesystem error report for type 5 error -117 [ 622.916697][T12177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.988444][T12190] loop3: detected capacity change from 0 to 1024 [ 623.012693][T12190] EXT4-fs: test_dummy_encryption option not supported [ 623.149835][T12187] loop4: detected capacity change from 0 to 1024 [ 623.213698][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2488'. [ 623.405942][T12196] loop3: detected capacity change from 0 to 512 [ 623.519183][T12187] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 623.561636][T12196] EXT4-fs (loop3): 1 orphan inode deleted [ 623.580140][T12196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.597482][T12196] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.650594][T12187] System zones: 0-1, 3-36 [ 623.734736][T12187] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2485: bad orphan inode 134217728 [ 623.760180][T12187] loop4: lost filesystem error report for type 5 error -117 [ 623.761724][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 623.776496][ C1] EXT4-fs (loop4): initial error at time 1775951644: ext4_orphan_get:1423 [ 623.785620][ C1] EXT4-fs (loop4): last error at time 1775951644: ext4_orphan_get:1423 [ 624.015091][T12187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.172125][T11377] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 624.210827][T11377] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:28: Failed to release dquot type 1 [ 624.347100][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.758515][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2490'. [ 624.956867][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.008678][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 625.103425][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.343448][T12229] batadv_slave_0: Caught tx_queue_len zero misconfig [ 626.208545][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 627.083067][T12249] FAULT_INJECTION: forcing a failure. [ 627.083067][T12249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.144309][T12249] CPU: 1 UID: 0 PID: 12249 Comm: syz.5.2507 Not tainted syzkaller #0 PREEMPT(full) [ 627.144383][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 627.144395][T12249] Call Trace: [ 627.144401][T12249] [ 627.144408][T12249] __dump_stack+0x1d/0x30 [ 627.144489][T12249] dump_stack_lvl+0x95/0xd0 [ 627.144584][T12249] dump_stack+0x15/0x1b [ 627.144606][T12249] should_fail_ex+0x263/0x280 [ 627.144638][T12249] should_fail+0xb/0x20 [ 627.144662][T12249] should_fail_usercopy+0x1a/0x20 [ 627.144757][T12249] _copy_to_user+0x20/0xa0 [ 627.144838][T12249] simple_read_from_buffer+0xb5/0x130 [ 627.144861][T12249] proc_fail_nth_read+0x10e/0x150 [ 627.144892][T12249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.144958][T12249] vfs_read+0x1ab/0x7f0 [ 627.144976][T12249] ? __rcu_read_unlock+0x4e/0x70 [ 627.144996][T12249] ? __fget_files+0x184/0x1c0 [ 627.145067][T12249] ? mutex_lock+0x57/0x90 [ 627.145087][T12249] ksys_read+0xdc/0x1a0 [ 627.145108][T12249] __x64_sys_read+0x40/0x50 [ 627.145131][T12249] x64_sys_call+0x2886/0x3020 [ 627.145216][T12249] do_syscall_64+0x12c/0x370 [ 627.145243][T12249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.145264][T12249] RIP: 0033:0x7f91d94ed04e [ 627.145279][T12249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.145357][T12249] RSP: 002b:00007f91d7f7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.145378][T12249] RAX: ffffffffffffffda RBX: 00007f91d7f7f6c0 RCX: 00007f91d94ed04e [ 627.145392][T12249] RDX: 000000000000000f RSI: 00007f91d7f7f0a0 RDI: 0000000000000003 [ 627.145405][T12249] RBP: 00007f91d7f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 627.145453][T12249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.145469][T12249] R13: 00007f91d97a6038 R14: 00007f91d97a5fa0 R15: 00007fff57e55eb8 [ 627.145490][T12249] [ 627.614468][T12245] loop4: detected capacity change from 0 to 1024 [ 627.636466][T12258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 627.661877][T12258] batman_adv: batadv0: Adding interface: ip6gretap1 [ 627.668619][T12258] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.694888][T12258] batman_adv: batadv0: Interface activated: ip6gretap1 [ 627.792829][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2504'. [ 628.188014][T12245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 628.282274][T12226] Set syz1 is full, maxelem 65536 reached [ 628.471447][T12245] System zones: 0-1, 3-36 [ 628.498116][T12245] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2505: bad orphan inode 134217728 [ 628.659855][T12274] loop3: detected capacity change from 0 to 512 [ 628.667398][T12245] loop4: lost filesystem error report for type 5 error -117 [ 628.690856][T12274] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 628.690961][T12277] loop2: detected capacity change from 0 to 1024 [ 628.961607][T12245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.005730][T12283] process 'syz.5.2515' launched '/dev/fd/4' with NULL argv: empty string added [ 629.034104][ T28] audit: type=1400 audit(1775951649.630:1516): avc: denied { execute_no_trans } for pid=12280 comm="syz.5.2515" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=34820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 629.180507][T12274] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2512: bg 0: block 104: invalid block bitmap [ 629.197612][T12274] loop3: lost filesystem error report for type 5 error -117 [ 629.201567][T12274] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 629.219955][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 629.220008][ C1] EXT4-fs (loop3): initial error at time 1775951649: ext4_validate_block_bitmap:432 [ 629.220106][ C1] EXT4-fs (loop3): last error at time 1775951649: ext4_validate_block_bitmap:432 [ 629.248862][T12274] loop3: lost filesystem error report for type 5 error -117 [ 629.255305][T12274] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2512: invalid indirect mapped block 1 (level 1) [ 629.278555][T12274] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 629.281937][T12274] EXT4-fs (loop3): 1 truncate cleaned up [ 629.311215][T12274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.373622][T12277] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 629.405939][T12277] System zones: 0-1, 3-36 [ 629.429019][T12277] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2513: bad orphan inode 134217728 [ 629.441268][T12277] loop2: lost filesystem error report for type 5 error -117 [ 629.442369][T12277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.546747][T12292] loop5: detected capacity change from 0 to 512 [ 630.558575][T12277] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.879488][T12300] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 630.890259][T12300] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 630.927102][T12301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12301 comm=syz.5.2521 [ 631.018315][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.036650][T12300] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 631.075891][T12300] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.777243][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 632.186541][T12300] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 632.257383][T12312] FAULT_INJECTION: forcing a failure. [ 632.257383][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 632.275392][T12300] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 632.401539][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.2.2525 Not tainted syzkaller #0 PREEMPT(full) [ 632.401572][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.401590][T12312] Call Trace: [ 632.401596][T12312] [ 632.401604][T12312] __dump_stack+0x1d/0x30 [ 632.401642][T12312] dump_stack_lvl+0x95/0xd0 [ 632.401669][T12312] dump_stack+0x15/0x1b [ 632.401695][T12312] should_fail_ex+0x263/0x280 [ 632.401764][T12312] should_failslab+0x8c/0xb0 [ 632.401791][T12312] kmem_cache_alloc_noprof+0x66/0x400 [ 632.401819][T12312] ? skb_clone+0x151/0x1f0 [ 632.401842][T12312] skb_clone+0x151/0x1f0 [ 632.401860][T12312] __netlink_deliver_tap+0x2c9/0x500 [ 632.401929][T12312] ? netlink_attachskb+0x2e2/0x660 [ 632.401972][T12312] netlink_sendskb+0x126/0x150 [ 632.402044][T12312] netlink_unicast+0x2a2/0x690 [ 632.402073][T12312] netlink_ack+0x4c8/0x500 [ 632.402136][T12312] netlink_rcv_skb+0x192/0x220 [ 632.402175][T12312] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 632.402215][T12312] nfnetlink_rcv+0x167/0x1720 [ 632.402301][T12312] ? __kfree_skb+0x109/0x150 [ 632.402336][T12312] ? nlmon_xmit+0x4f/0x60 [ 632.402363][T12312] ? consume_skb+0x4b/0x160 [ 632.402391][T12312] ? nlmon_xmit+0x4f/0x60 [ 632.402456][T12312] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 632.402488][T12312] ? __dev_queue_xmit+0x136c/0x1f20 [ 632.402550][T12312] ? __dev_queue_xmit+0x148/0x1f20 [ 632.402589][T12312] ? ref_tracker_free+0x37d/0x3e0 [ 632.402659][T12312] ? __netlink_deliver_tap+0x4dc/0x500 [ 632.402686][T12312] netlink_unicast+0x5c0/0x690 [ 632.402728][T12312] netlink_sendmsg+0x5c8/0x6f0 [ 632.402749][T12312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.402768][T12312] ____sys_sendmsg+0x563/0x5b0 [ 632.402793][T12312] ___sys_sendmsg+0x195/0x1e0 [ 632.402870][T12312] __x64_sys_sendmsg+0xd4/0x160 [ 632.402890][T12312] x64_sys_call+0x194c/0x3020 [ 632.402988][T12312] do_syscall_64+0x12c/0x370 [ 632.403098][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.403120][T12312] RIP: 0033:0x7fd2a233c819 [ 632.403135][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.403156][T12312] RSP: 002b:00007fd2a0d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.403246][T12312] RAX: ffffffffffffffda RBX: 00007fd2a25b5fa0 RCX: 00007fd2a233c819 [ 632.403259][T12312] RDX: 0000000004004010 RSI: 0000200000000500 RDI: 0000000000000003 [ 632.403272][T12312] RBP: 00007fd2a0d97090 R08: 0000000000000000 R09: 0000000000000000 [ 632.403284][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.403339][T12312] R13: 00007fd2a25b6038 R14: 00007fd2a25b5fa0 R15: 00007ffd6d4fccb8 [ 632.403361][T12312] [ 632.670665][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2523'. [ 633.161768][T12323] loop2: detected capacity change from 0 to 1024 [ 633.462272][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.504172][T12323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.523760][T12300] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 633.559921][T12300] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 633.633543][ T142] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 633.650465][ T142] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.678687][ T142] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 633.701736][ T142] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.723874][ T142] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 633.740299][ T142] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.822917][T11377] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 633.831231][T11377] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.843557][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.929581][T12348] syzkaller0: entered promiscuous mode [ 633.935324][T12348] syzkaller0: entered allmulticast mode [ 633.979840][T12342] loop5: detected capacity change from 0 to 1024 [ 634.039578][T12342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 634.050381][T12342] System zones: 0-1, 3-36 [ 634.072859][T12342] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2534: bad orphan inode 134217728 [ 634.085618][T12342] loop5: lost filesystem error report for type 5 error -117 [ 634.099290][T12342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.448505][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.889487][T12365] loop2: detected capacity change from 0 to 1024 [ 634.913613][T12365] EXT4-fs: test_dummy_encryption option not supported [ 635.969742][T12374] loop2: detected capacity change from 0 to 512 [ 636.051487][T12374] EXT4-fs (loop2): 1 orphan inode deleted [ 636.070376][T12374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.087541][T12374] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.278328][T11377] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 636.534990][T11377] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:28: Failed to release dquot type 1 [ 636.556877][T12381] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.603194][T12383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12383 comm=syz.6.2544 [ 636.619828][T12378] loop5: detected capacity change from 0 to 512 [ 636.640414][T12381] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.864660][T12381] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.892369][T12382] loop3: detected capacity change from 0 to 512 [ 637.313202][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2546'. [ 637.536792][T12381] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.717733][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.732492][T11375] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.753193][T11375] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.788197][T11375] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.835556][T12398] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2550'. [ 637.858216][T11375] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.885788][T12402] loop4: detected capacity change from 0 to 512 [ 637.894901][T12395] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 637.926235][T12391] netlink: 'syz.3.2548': attribute type 10 has an invalid length. [ 637.950763][T12391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.978027][T12391] batadv0: entered allmulticast mode [ 637.985589][T12391] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 638.225533][T12405] loop2: detected capacity change from 0 to 1024 [ 639.226878][T12420] loop3: detected capacity change from 0 to 512 [ 639.308058][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 639.405513][T12420] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 641.322226][T12405] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 641.443801][T12420] EXT4-fs: error -4 creating inode table initialization thread [ 641.454526][T12420] EXT4-fs (loop3): mount failed [ 641.473476][T12405] System zones: 0-1, 3-36 [ 641.490798][T12405] EXT4-fs: error -4 creating inode table initialization thread [ 641.515058][T12405] EXT4-fs (loop2): mount failed [ 641.601057][T12430] loop5: detected capacity change from 0 to 512 [ 641.690551][T12434] FAULT_INJECTION: forcing a failure. [ 641.690551][T12434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.727603][T12434] CPU: 1 UID: 0 PID: 12434 Comm: syz.5.2559 Not tainted syzkaller #0 PREEMPT(full) [ 641.727698][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 641.727709][T12434] Call Trace: [ 641.727717][T12434] [ 641.727726][T12434] __dump_stack+0x1d/0x30 [ 641.727758][T12434] dump_stack_lvl+0x95/0xd0 [ 641.727824][T12434] dump_stack+0x15/0x1b [ 641.727844][T12434] should_fail_ex+0x263/0x280 [ 641.727883][T12434] should_fail+0xb/0x20 [ 641.727951][T12434] should_fail_usercopy+0x1a/0x20 [ 641.727981][T12434] _copy_from_user+0x1c/0xb0 [ 641.728011][T12434] ___sys_sendmsg+0xc1/0x1e0 [ 641.728046][T12434] __x64_sys_sendmsg+0xd4/0x160 [ 641.728175][T12434] x64_sys_call+0x194c/0x3020 [ 641.728207][T12434] do_syscall_64+0x12c/0x370 [ 641.728287][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.728353][T12434] RIP: 0033:0x7f91d952c819 [ 641.728369][T12434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.728387][T12434] RSP: 002b:00007f91d7f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.728408][T12434] RAX: ffffffffffffffda RBX: 00007f91d97a5fa0 RCX: 00007f91d952c819 [ 641.728424][T12434] RDX: 0000000004000050 RSI: 0000200000000180 RDI: 0000000000000003 [ 641.728480][T12434] RBP: 00007f91d7f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 641.728495][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.728510][T12434] R13: 00007f91d97a6038 R14: 00007f91d97a5fa0 R15: 00007fff57e55eb8 [ 641.728528][T12434] [ 641.922546][T12438] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.952207][T12441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12441 comm=syz.6.2561 [ 641.983336][T12438] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.043022][T12438] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.103170][T12438] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.388431][T12443] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2563'. [ 642.423971][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 642.457772][T12449] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2566'. [ 642.585701][T12453] loop4: detected capacity change from 0 to 1024 [ 642.592814][T12453] EXT4-fs: test_dummy_encryption option not supported [ 645.440505][T12478] loop5: detected capacity change from 0 to 512 [ 645.448972][ T28] audit: type=1326 audit(1775951665.980:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.3.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed38e9c819 code=0x7fc00000 [ 645.687006][T12475] loop2: detected capacity change from 0 to 512 [ 645.734132][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 646.337899][T12493] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2577'. [ 646.510726][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 646.576006][T12490] Set syz1 is full, maxelem 65536 reached [ 646.717314][T12500] loop4: detected capacity change from 0 to 1024 [ 646.771490][T12500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 646.781435][T12500] System zones: 0-1, 3-36 [ 646.795145][T12498] loop5: detected capacity change from 0 to 1024 [ 646.815621][T12500] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2580: bad orphan inode 134217728 [ 646.829218][T12500] loop4: lost filesystem error report for type 5 error -117 [ 646.845420][T12500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.892612][T12498] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 646.901438][T12498] System zones: 0-1, 3-36 [ 646.940010][T12498] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2579: bad orphan inode 134217728 [ 646.952259][T12498] loop5: lost filesystem error report for type 5 error -117 [ 646.964696][T12498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.070930][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.511969][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.524130][T12520] loop4: detected capacity change from 0 to 512 [ 648.600177][T12522] loop2: detected capacity change from 0 to 1024 [ 648.621993][T12522] EXT4-fs: test_dummy_encryption option not supported [ 648.644019][T12524] loop5: detected capacity change from 0 to 1024 [ 648.660996][T12524] EXT4-fs: test_dummy_encryption option not supported [ 650.681277][T12530] loop5: detected capacity change from 0 to 512 [ 650.767949][T12534] loop4: detected capacity change from 0 to 1024 [ 650.790908][T11375] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.933250][T11375] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.969163][T12534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 650.985702][T11375] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.722531][T12530] EXT4-fs (loop5): 1 orphan inode deleted [ 651.739351][T12530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.755954][T12530] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.827108][T12541] Set syz1 is full, maxelem 65536 reached [ 651.944608][ T142] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 651.947291][T12534] System zones: 0-1, 3-36 [ 651.957845][T11359] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.959741][T12534] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2588: bad orphan inode 134217728 [ 651.967793][ T142] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 651.990070][T12534] loop4: lost filesystem error report for type 5 error -117 [ 651.990656][T12534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.074400][T12547] x_tables: duplicate underflow at hook 2 [ 652.182436][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 652.191973][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 652.201122][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 652.210311][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 652.275235][T12549] FAULT_INJECTION: forcing a failure. [ 652.275235][T12549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.312885][T12549] CPU: 1 UID: 0 PID: 12549 Comm: syz.3.2594 Not tainted syzkaller #0 PREEMPT(full) [ 652.312919][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.312934][T12549] Call Trace: [ 652.313015][T12549] [ 652.313022][T12549] __dump_stack+0x1d/0x30 [ 652.313050][T12549] dump_stack_lvl+0x95/0xd0 [ 652.313078][T12549] dump_stack+0x15/0x1b [ 652.313102][T12549] should_fail_ex+0x263/0x280 [ 652.313152][T12549] should_fail+0xb/0x20 [ 652.313176][T12549] should_fail_usercopy+0x1a/0x20 [ 652.313210][T12549] _copy_to_user+0x20/0xa0 [ 652.313247][T12549] simple_read_from_buffer+0xb5/0x130 [ 652.313308][T12549] proc_fail_nth_read+0x10e/0x150 [ 652.313345][T12549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.313382][T12549] vfs_read+0x1ab/0x7f0 [ 652.313404][T12549] ? __rcu_read_unlock+0x4e/0x70 [ 652.313429][T12549] ? __fget_files+0x184/0x1c0 [ 652.313456][T12549] ? mutex_lock+0x57/0x90 [ 652.313532][T12549] ksys_read+0xdc/0x1a0 [ 652.313554][T12549] __x64_sys_read+0x40/0x50 [ 652.313571][T12549] x64_sys_call+0x2886/0x3020 [ 652.313676][T12549] do_syscall_64+0x12c/0x370 [ 652.313705][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.313726][T12549] RIP: 0033:0x7fed38e5d04e [ 652.313741][T12549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 652.313767][T12549] RSP: 002b:00007fed378eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 652.313816][T12549] RAX: ffffffffffffffda RBX: 00007fed378ef6c0 RCX: 00007fed38e5d04e [ 652.313831][T12549] RDX: 000000000000000f RSI: 00007fed378ef0a0 RDI: 0000000000000004 [ 652.313846][T12549] RBP: 00007fed378ef090 R08: 0000000000000000 R09: 0000000000000000 [ 652.313859][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.313871][T12549] R13: 00007fed39116038 R14: 00007fed39115fa0 R15: 00007ffd1c459468 [ 652.313888][T12549] [ 652.717600][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.833058][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 653.201649][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.253388][T12567] loop5: detected capacity change from 0 to 1024 [ 653.268050][T12560] loop4: detected capacity change from 0 to 1024 [ 653.280749][T12567] EXT4-fs: test_dummy_encryption option not supported [ 653.398910][T12560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 653.460170][T12560] System zones: 0-1, 3-36 [ 653.868778][T12575] loop5: detected capacity change from 0 to 512 [ 654.461368][T12560] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2598: bad orphan inode 134217728 [ 654.690113][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'. [ 655.453978][T12560] loop4: lost filesystem error report for type 5 error -117 [ 655.461495][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 655.475473][ C0] EXT4-fs (loop4): initial error at time 1775951676: ext4_orphan_get:1423 [ 655.484026][ C0] EXT4-fs (loop4): last error at time 1775951676: ext4_orphan_get:1423 [ 655.567689][T12585] loop2: detected capacity change from 0 to 512 [ 655.571455][T12575] EXT4-fs (loop5): 1 orphan inode deleted [ 655.588831][T12575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.617884][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 655.733162][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2605'. [ 655.742693][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2605'. [ 655.752179][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2605'. [ 655.817571][T12575] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.877076][T11375] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 655.901861][T11375] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:26: Failed to release dquot type 1 [ 655.963110][T12598] loop2: detected capacity change from 0 to 512 [ 656.053240][T12560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.218614][T12602] loop3: detected capacity change from 0 to 1024 [ 656.742783][T12605] loop2: detected capacity change from 0 to 512 [ 656.765019][T12605] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 656.807172][T12605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2611: bg 0: block 104: invalid block bitmap [ 656.820593][T12605] loop2: lost filesystem error report for type 5 error -117 [ 656.821784][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 656.836602][ C0] EXT4-fs (loop2): initial error at time 1775951677: ext4_validate_block_bitmap:432 [ 656.846531][ C0] EXT4-fs (loop2): last error at time 1775951677: ext4_validate_block_bitmap:432 [ 656.859315][T12605] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 656.869112][T12605] loop2: lost filesystem error report for type 5 error -117 [ 656.871992][T12605] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2611: invalid indirect mapped block 1 (level 1) [ 656.893933][T12605] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 656.898197][T12605] EXT4-fs (loop2): 1 truncate cleaned up [ 656.926555][T12605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.038794][T12602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 657.083121][T12602] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 657.096281][T12602] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 2: comm syz.3.2608: lblock 2 mapped to illegal pblock 2 (length 1) [ 657.110940][T12602] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.111120][T12602] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 657.120195][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 657.120225][ C0] EXT4-fs (loop3): initial error at time 1775951677: ext4_map_blocks:786: inode 3: block 2 [ 657.120269][ C0] EXT4-fs (loop3): last error at time 1775951677: ext4_map_blocks:786: inode 3: block 2 [ 657.157579][T12602] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 48: comm syz.3.2608: lblock 0 mapped to illegal pblock 48 (length 1) [ 657.172220][T12602] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.172352][T12602] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 657.190920][T12602] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.2608: Failed to acquire dquot type 0 [ 657.202611][T12602] loop3: lost filesystem error report for type 5 error -117 [ 657.203036][T12602] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 657.220572][T12602] loop3: lost filesystem error report for type 5 error -117 [ 657.220972][T12602] EXT4-fs error (device loop3): ext4_evict_inode:265: inode #11: comm syz.3.2608: mark_inode_dirty error [ 657.244591][T12602] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 657.244825][T12602] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 657.266962][T12602] EXT4-fs (loop3): 1 orphan inode deleted [ 657.274760][T12602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.299392][T11375] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 657.314288][T11375] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.314483][T11375] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 657.350404][T12602] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 657.361153][T11375] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:26: Failed to release dquot type 0 [ 658.343123][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.369279][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.388127][T11373] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 658.451958][T11373] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 658.490870][T11373] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 658.508859][T11373] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:24: Failed to release dquot type 0 [ 658.522571][T11373] loop3: lost filesystem error report for type 5 error -117 [ 658.522991][ T3313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 658.543430][ T3313] loop3: lost filesystem error report for type 5 error -117 [ 658.543529][ T3313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 658.560586][ T3313] loop3: lost filesystem error report for type 5 error -117 [ 658.560942][ T3313] EXT4-fs error (device loop3): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 658.579892][ T3313] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 658.762155][T12611] loop5: detected capacity change from 0 to 512 [ 658.795016][T12611] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 658.824145][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.850445][T12611] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2612: bg 0: block 104: invalid block bitmap [ 658.871075][T12611] loop5: lost filesystem error report for type 5 error -117 [ 658.873101][T12611] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 658.881721][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 658.881740][ C0] EXT4-fs (loop5): initial error at time 1775951679: ext4_validate_block_bitmap:432 [ 658.881767][ C0] EXT4-fs (loop5): last error at time 1775951679: ext4_validate_block_bitmap:432 [ 658.917620][T12611] loop5: lost filesystem error report for type 5 error -117 [ 658.922357][T12611] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2612: invalid indirect mapped block 1 (level 1) [ 658.945691][T12611] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 658.949313][T12611] EXT4-fs (loop5): 1 truncate cleaned up [ 658.978097][T12611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.519511][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.583092][T12619] loop2: detected capacity change from 0 to 1024 [ 660.604305][T12619] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 660.622427][T12622] __nla_validate_parse: 1 callbacks suppressed [ 660.622528][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 660.800176][ T3313] ================================================================== [ 660.808320][ T3313] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 660.815854][ T3313] [ 660.818200][ T3313] read-write to 0xffff88810dca8108 of 8 bytes by task 12624 on cpu 0: [ 660.826370][ T3313] inode_add_bytes+0x47/0xe0 [ 660.831063][ T3313] __dquot_alloc_space+0x180/0x8a0 [ 660.836718][ T3313] shmem_inode_acct_blocks+0x125/0x230 [ 660.842200][ T3313] shmem_get_folio_gfp+0x5b2/0xd60 [ 660.847337][ T3313] shmem_write_begin+0xfc/0x1f0 [ 660.852221][ T3313] generic_perform_write+0x183/0x490 [ 660.857549][ T3313] shmem_file_write_iter+0xc5/0xf0 [ 660.862706][ T3313] __kernel_write_iter+0x319/0x590 [ 660.868183][ T3313] dump_user_range+0xa7d/0xdb0 [ 660.873023][ T3313] elf_core_dump+0x21a2/0x2330 [ 660.877903][ T3313] coredump_write+0xacc/0xdd0 [ 660.882611][ T3313] vfs_coredump+0x26c7/0x3130 [ 660.887319][ T3313] get_signal+0xd80/0xf60 [ 660.891678][ T3313] arch_do_signal_or_restart+0x96/0x450 [ 660.897245][ T3313] irqentry_exit+0xf7/0x520 [ 660.901754][ T3313] asm_exc_page_fault+0x26/0x30 [ 660.906614][ T3313] [ 660.908949][ T3313] read to 0xffff88810dca8108 of 8 bytes by task 3313 on cpu 1: [ 660.916501][ T3313] generic_fillattr+0x27d/0x340 [ 660.921540][ T3313] shmem_getattr+0x181/0x200 [ 660.926145][ T3313] vfs_getattr_nosec+0x146/0x1e0 [ 660.931089][ T3313] vfs_getattr+0x48/0x60 [ 660.935335][ T3313] vfs_statx_path+0x28/0x140 [ 660.939938][ T3313] vfs_statx+0xc4/0x170 [ 660.944110][ T3313] vfs_fstatat+0x118/0x170 [ 660.948540][ T3313] __se_sys_newfstatat+0x55/0x3e0 [ 660.953587][ T3313] __x64_sys_newfstatat+0x55/0x70 [ 660.958632][ T3313] x64_sys_call+0x2c64/0x3020 [ 660.963330][ T3313] do_syscall_64+0x12c/0x370 [ 660.967950][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.973858][ T3313] [ 660.976188][ T3313] value changed: 0x00000000000085a8 -> 0x00000000000085b0 [ 660.983297][ T3313] [ 660.985633][ T3313] Reported by Kernel Concurrency Sanitizer on: [ 660.991875][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 661.001347][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 661.011419][ T3313] ================================================================== [ 661.027951][T12619] JBD2: no valid journal superblock found [ 661.035433][T12619] EXT4-fs (loop2): Could not load journal inode [ 661.368014][T12619] loop2: detected capacity change from 0 to 128 [ 661.945150][ T3615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.