last executing test programs:

2.51700288s ago: executing program 0 (id=882):
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000"], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000840), 0x2e3, 0x4100)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$eJzs3VFrW9cdAPD/la3MSZzZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gMMY22NOe9jLoByiUfIRSCLTvpS0tpU3ah0LbqOhKShxHip1GllLr94MjnXt0r/7nXKGje+49XAXQt05HxJmIeFitVs9FxEijPNNIsVVPtfUe3L89W0tJVKvXPkoiknpZbbXxbe95tLHZUET8/jcRf0qejlve2FyaKRYLa43lfGV5NV/e2Dy/uDyzUFgorExNTV6avjx9cXqiI+0cjogrv3rvn3/736+vvPaTm29f/2D8z0mjPOJxOzqt3vRsui+aBiNibT+C9chg2kIAAL4Jmsf5P4yIczESA+nRHAAAAHCQVH8+HF8kEVUAAADgwMqkc2CTTK4xD2A4Mplcrj6H97txJFMslSs/ni+tr8zV58qORjYzv1gsTDTmCo9GNqktT6b5x8sXdixPRcTxiPjHyOF0OTdbKs71+uQHAAAA9ImjO8b/n47Ux//bfN6zygEAAACdM9rrCgAAAAD7zvgfAAAADj7jfwAAADjQfnv1ai1Vm/9/PXdjY32pdOP8XKG8lFten83NltZWcwul0kJ6z77l3d6vWCqt/jRW1m/lK4VyJV/e2Ly+XFpfqVxffOIvsAEAAIAuOv6Du28lEbH1s8NpqjnU60oBXTH4PCu/u3/1ALpvoNcVAHrmuX7/gQMl2+sKAD2X7PJ628k7r3e+LgAAwP4Y+17r6/8Du54b2Mp0qYrAPnH+D/qX6//Qv1z/h/6VjYEwkIf+ttstQIfajRX2fP2/Wn3uSgEAAB01nKYkk4tIzwMMRyaTy0UcS8cE2WR+sViYiIhvR8SbI9lv1ZYn0y2TXecMAwAAAAAAAAAAAAAAAAAAAAAAAAB11WoSVQAAAOBAi8i8n6R3848YGzk7vPP8wKHks5H0OSJu/ufav27NVCprk7Xyjx+VV/7dKL/QizMYAAAAwE7NcXpzHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfTg/u3ZZupm3A9/GRGjreIPxlD6PBTZiDjySRKD27ZLImKgA/G37kTEiVbxk1q1YrRRi1bxD/c4/tEOxId+drfW//yi1fcvE6fT59bfv0tpD/Xi2vd/mUf930CL+LWyY3uMcfLeK/m28e9EnBxs3f804ydt+p8ze4z/xz9sbrZ7rfrfiLGWvz/JE7HyleXVfHlj8/zi8sxCYaGwMjU1eWn68vTF6Yn8/GKx0HhsGePv33/14bPaf6RN/NFd2n92j+3/8t6t+9+pZ7OPNk8exx8/0/rzP9Emfqbx+f+oka+9PtbMb9Xz2536/xunntX+uTbt3+3zH99j+8/97q/v7HFVAKALyhubSzPFYmGtrzMvtDdqh0UvRStezkxtv379zYf2tYZ/2V6SdObrUDsyfzn2/ItletotAQAA++DpMTAAAAAAAAAAAAAAAAAAAADQbd24nVh2R8yt9LETd88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOicrwIAAP///B/QPg==")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2.226207396s ago: executing program 1 (id=885):
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
socket(0x8000000010, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100037040050b24195d4000000ffffff", @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x4000010)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)

2.216519656s ago: executing program 1 (id=886):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = memfd_secret(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
futimesat(r2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b80)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb6}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x4004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000fdf5", @ANYRES16=r9, @ANYBLOB="00042abd7012fcdbdf294c00000008000300", @ANYRES32=r10, @ANYBLOB="0c00580026000000000000000c00580015000000000000000c0058003c000000000000000c0058007e000000000000000c00580072000000000000000c00580057000000000000000c0058001400000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004050)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x49000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf252500000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000104000059000000100034002e407b6d88df8c651740871c08003700010000000500080000000000110007008e6e0017fb6b24734c7a62dadac6350000000800090005ac0f000a000600ffffffffffff00000a00060050505050505000000a0006006c3a5e094d8a00007b478a1cf4cc72293ede4873bb17fba334470bfe1938a0abfb127cad57ac53"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r11}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
write$binfmt_aout(r2, &(0x7f0000000bc0)={{0x108, 0xa, 0x80, 0xe9, 0x1d6, 0x80000001, 0x3b8}, "0220e23f837f575a2a52f2e4a40ff3d5e40b167510c50f91eaf1a75c9e74edd1c90a73344c954f7e25733faa290b0ad8ad8824118ad2387cd903e30119fe415e82ead6e9ae61dddee2f1a0e2d98cd3ca5b7b16e40f3a9197edf946cbc5b83f77c8826584baa85f187488149f84e0143b1b6572a27e088444e10b3ee8ac2564cbe70db8b0caf2", ['\x00', '\x00', '\x00']}, 0x3a6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a0302000000000000000002000000090002007379"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000)
close(r0)

2.101878188s ago: executing program 2 (id=887):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0x1, 0x401, 0x90, 0x7f, 0x9, "e9a705546d958078"})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x5)
fcntl$notify(r8, 0x402, 0x8000003d)

2.04890272s ago: executing program 1 (id=888):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

1.920313292s ago: executing program 2 (id=891):
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
r3 = socket$inet6(0xa, 0x3, 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r4, 0x0, 0x2000}, 0x18)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4ea4, 0xfffffffe, @mcast1, 0x4}, 0x1c)
open_by_handle_at(r2, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x81, 0x5, 0x4, 0x1, 0x91b8, 0xfff}}, 0x600800)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0xa0000010})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97"], 0xffe)

1.795337305s ago: executing program 1 (id=892):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
creat(0x0, 0x0)
pipe2$9p(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c76657273696f6e3d39703230303058abe1fc44618134542dbc852e752c00"])
pause()
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})

1.784789415s ago: executing program 0 (id=893):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x3, 0x0, 0x0, 0x400300, [@sadb_key={0x1, 0x9}]}, 0x18}, 0x1, 0x7}, 0x0)

1.784045295s ago: executing program 4 (id=894):
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000840), 0x2e3, 0x4100)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1.739765106s ago: executing program 2 (id=895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) (fail_nth: 7)

1.690226857s ago: executing program 2 (id=896):
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
socket(0x8000000010, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100037040050b24195d4000000ffffff", @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x4000010)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)

1.590586059s ago: executing program 2 (id=897):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

1.498789261s ago: executing program 0 (id=898):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, 0x0)

1.443995361s ago: executing program 3 (id=899):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xa168f000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x86958000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="20699c56f78dea01a80000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='rxrpc_disconnect_call\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlockall()

1.228080336s ago: executing program 0 (id=900):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x8000, 0xfa, &(0x7f0000000240)=""/250, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437, 0x100000}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x5, 0x7, 0x10000e}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x5, 0x0, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x7}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kvm_unmap_hva_range\x00', r2, 0x0, 0x7ff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000070000000a000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000ef2e1fdb14000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000009252ac3bd340904088d3edff550e165b12f715855fe6a91088c2dd9eefb280b170d30d1d84b5b7bb184a6f0bb7aacf189d967c605108333e5aa7a580ddbdfe"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000300)={0x97, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14)

1.114522848s ago: executing program 0 (id=901):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)

1.058118189s ago: executing program 3 (id=902):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ee1300"/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000009fc664f112aeb2c143ab90000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000005c0), &(0x7f0000000740)=r1}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
timer_create(0x0, 0x0, &(0x7f0000000340)=<r5=>0x0)
timer_gettime(r5, &(0x7f0000000380))
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

1.01214678s ago: executing program 3 (id=903):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

969.718741ms ago: executing program 2 (id=904):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000640041e747a7d37e6a0cbfd5f768ff9a03000000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x5, &(0x7f0000000340)=""/5}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe6b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0xa000032a)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
readv(r7, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = open(&(0x7f0000000980)='./bus\x00', 0x64842, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080))
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="d3", 0x1}], 0x1, 0xfffffffa, 0x0, 0x3)
bind$rds(r6, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10)

929.799292ms ago: executing program 4 (id=905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r2, 0x47f6, 0x40000000, 0x0, 0x0, 0x0)

925.744742ms ago: executing program 1 (id=906):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
timer_create(0x3, 0x0, &(0x7f00000003c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x80000000)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,check=s,tz=UTC,nodots,nodots,nodots,quiet,nodots,nodots,nodots,nodots,dots,nodots,nodots,dots,nodots,errors=continue,dots,dots,dots,debug,\x00'/154], 0xfd, 0x1bf, &(0x7f0000000840)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000000c0))
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fchdir(r3)
umount2(&(0x7f0000000080)='./mnt\x00', 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28)
timer_delete(0x0)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './mnt', [{0x20, '\\\'\xf5\x81W\x050A\x9d\xddG-hr\x13\xa5=:\xcb:\xd2nqe\xe8L\xb5\xc5(\xe6\x87\xb1\xb3%\xd8\x84\xbcA\xd8o\xcf\xbb\xef\xfd/\xc2\xa28\x8b\xa5\x1c\xef\n\x9cW\xb2\xdc\xfe,K\xca\xb265T\xc3O\xf2\xff\x06T\x83\xdeZ\xc9\xa8\x01EZ\xc6\x011/\xff\x9d\xcex\xe1\x00\\~\xcf9\xd0\b\x9d\xd9\x01\xcc\x9c\xe4lv\xd2bd\xb5A\xa7\x0eX\xba\xb4\xb1\x82O5z\x83\r\xbck:y\xaa\xeb\xf4\xd4\xea'}, {0x20, '\x00'}, {0x20, 'sys_enter\x00'}, {0x20, 'sys_enter\x00'}], 0xa, "816887eb653f49b379b15f1e12a3b567008aaadd370c81779b26d988711cecf5a5904d7508968d80a8881ed5191ffc2db506e1255c62b8886b79caf99b39b451228733f3d1ceeac98bde5abbe1d40dbdc68bb854ecade20a4c14bb147b7c705c9bc10d4c73e55420fa4895bfc38610bc489fc1a1d38b8ffd6afd054a44a21e23d5ad2989f34e27d8a5b12a556b6fcb004c68f80e144932ea5e2c85c12f5d92d87a3bdf34d9a2404b7b167571ceb4b8798076742599ac"}, 0x159)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}}, 0x44) (fail_nth: 2)
r7 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r8 = socket$kcm(0x1e, 0x4, 0x0)
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x47, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)

805.631174ms ago: executing program 3 (id=907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'sit0\x00', <r4=>0x0, 0x20, 0x2835df725078bdd4, 0x2, 0x9, {{0x23, 0x4, 0x0, 0x5, 0x8c, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x6, [{@multicast1, 0x6c}, {@rand_addr=0x64010101, 0x8}, {@remote, 0xffff}]}, @timestamp_addr={0x44, 0x1c, 0x7c, 0x1, 0x1, [{@broadcast, 0x80}, {@loopback, 0x80}, {@multicast2, 0xf07}]}, @rr={0x7, 0xb, 0x62, [@multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x18, 0x95, 0x0, 0x3, [0x5, 0x5, 0x1ff, 0x2, 0x4]}, @lsrr={0x83, 0xf, 0xb2, [@empty, @multicast1, @empty]}, @generic={0x86, 0xd, "e4cd74253e1f16adcd0de8"}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r6=>0x0, 0x1, 0x10, 0x0, 0x40, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x66, 0x0, 0xf, 0x2f, 0x0, @broadcast, @local, {[@end]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x10040010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@dioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0)
pwrite64(r9, &(0x7f0000000880)='u', 0xf7d, 0x83)
lseek(r8, 0x5, 0x4)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x6}, 0x18)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r12, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r14, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x38}}, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

800.788614ms ago: executing program 0 (id=908):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18)
timer_create(0x3, 0x0, &(0x7f00000003c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000000)=0x80000000)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1], 0xfd, 0x1bf, &(0x7f0000000840)="$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")
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000000c0))
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
fchdir(r4)
umount2(&(0x7f0000000080)='./mnt\x00', 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000030000000200000000000008000000000000000000000000000000001306ad91c4c461793e3d57ff31cff2cf9e5b68e566ea9c8912c75c64d91828da72ce4a7cfc1feca957dc0ec6ceaf0756b2dfb590a97c364f1dfbfdc6a6f2e02d5093f781ad52bd5537f7a70e15e504b15322823efb40f435bcae2e6bcae5c4e114e00168da8f4963665dd8f73488ebd43b7deb7d9b215c80704f64ed9a728763b936a7f6ac9af8bbfe999c70f7bd6c26ba877c6300"], 0x0, 0x27}, 0x28)
timer_delete(0x0)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000cc0)={'#! ', './file1', [{0x20, '\\\'\xf5\x81W\x050A\x9d\xddG-hr\x13\xa5=:\xcb:\xd2nqe\xe8L\xb5\xc5(\xe6\x87\xb1\xb3%\xd8\x84\xbcA\xd8o\xcf\xbb\xef\xfd/\xc2\xa28\x8b\xa5\x1c\xef\n\x9cW\xb2\xdc\xfe,K\xca\xb265T\xc3O\xf2\xff\x06T\x83\xdeZ\xc9\xa8\x01EZ\xc6\x011/\xff\x9d\xcex\xe1\x00\\~\xcf9\xd0\b\x9d\xd9\x01\xcc\x9c\xe4lv\xd2bd\xb5A\xa7\x0eX\xba\xb4\xb1\x82O5z\x83\r\xbck:y\xaa\xeb\xf4\xd4\xea'}, {0x20, '\x00\x16\xa9\x91\r\x16\'\xec\bO\xcc%\xee\xc1\x8cb(D\xcaz\xab\x8e\xee\xbbb\xbd\x1f\xb7(\xecD\x8f\x03M\x1f\xe3\xdcw\xec\xb5\xb1\x81H{\xd5\x9c\x8e\xe4*a\x17>\xa35\x94b\v\r\xce\xbc\xc4\'s\f\xdc\x802\x1c[[\x87\xc3\f\xfa\xa5\xf4\xe8\xf6\xc3\xe8w\x16\xb1i\x8e\xba\xdc\xd2\xdc\x106\xa1\x91\x87O\x90\x94\xe6A\xae\xc4~\xcd\x01\xe3\xec,\xedjNAn\xf0o\xcd\xd2\x81\xc4\fn\xf5\xe8\xf2L\x05\x17\x94\xd0\xb6\x8f\xf7\x12\xe9\x0fU\x17\xf7\xca#\xb1\xa1\xc6R\xf3)\x95\xd1\xf1'}, {0x20, 'sys_enter\x00'}, {0x20, 'sys_entes\x00'}], 0xa, "816887eb653f49b379b15f1e12a3b567008aaadd370c81779b26d988711cecf5a5904d7508968d80a8881ed5191ffc2db506e1255c62b8886b79caf99b39b451228733f3d1ceeac98bde5abbe1d40dbdc68bb854ecade20a4c14bb147b7c705c9bc10d4c73e55420fa4895bfc38610bc489fc1a1d38b8ffd6afd054a44a21e23d5ad2989f34e27d8a5b12a556b6fcb004c68f80e144932ea5e2c85c12f5d92d87a3bdf34d9a2404b7b167571ceb4b8798076742599ac"}, 0x1ee)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0103dbdf25010000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x44)
r8 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/71, 0x47}], 0x1}, 0x80)
r9 = socket$kcm(0x1e, 0x4, 0x0)
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x47, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)

411.756942ms ago: executing program 4 (id=909):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = accept(r0, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80)
setresuid(0x0, 0xee01, 0x0)
setfsuid(0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$int_in(r4, 0x4b65, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xf8, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}, @NL80211_ATTR_IE={0xd2, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random_vendor={0xdd, 0xc9, "ccfe04e3f419ab8e6217adf45ee73899cd0682ef25281b9b78d2a73c5fdbed3a07c427d2a80aed235ed2641bd9f8619727856e45c84f4e2df8613d16fa2d5d7d2bca489ecd20119634219c173ba37933eb4cb149776f5346a740447557066ef061b66eaa8aad9afb91094c4d7e38810447748523b631a0e8274d4da5bf1050c30ec907e5f912a75c47f3fca1b7a61e88c0be57b2c84c1b90b1143bb42289053d7e39a151ce49ef985402356d251e2accc02446866f50ed2ea5fea128e400eac8b3c800d17417626cf7"}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x200408c0}, 0x4000010)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)

401.970132ms ago: executing program 4 (id=910):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xa168f000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x86958000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="20699c56f78dea01a80000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='rxrpc_disconnect_call\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYRES64], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)=@delchain={0x15d4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xf9}, @filter_kind_options=@f_bpf={{0x8}, {0x728, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0xffff, 0x6, 0x5, 0x3}, {0x5, 0x4d, 0x7, 0x5}, {0x9, 0x9a, 0x8, 0x10000}, {0x5, 0x7, 0x4, 0x3}, {0x1bf6, 0x24, 0x2, 0x5}, {0xb, 0x6f, 0x0, 0x200}, {0x3, 0x5, 0x8, 0xb}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x19, 0x6}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_ACT={0x6d0, 0x1, [@m_csum={0x158, 0x1b, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x3, 0xd, 0xa}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x0, 0x3, 0xff, 0x8}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x8, 0x309a, 0x4}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x4, 0x0, 0x6}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x2, 0x0, 0xfffffffa}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe3c, 0xffffff63, 0x5b82cecb9ed92703, 0x9, 0x8}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x10001, 0x20000000, 0x8, 0x2}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1ff, 0x2, 0x9, 0x3}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0x7ff, 0x1}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xffff, 0x7, 0x4, 0x81}, 0x25}}]}, {0x14, 0x6, "9ea3bb6628ef424b96af9c31bbf8dd19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1dc, 0x3, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x5, 0x10000000, 0x2, 0xffff}, @remote, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xff, 0x10000000, 0x3, 0x1}, @multicast1, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x5, 0x4, 0x8001}, @local, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1000, 0xffffffffffffffff, 0xe, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x95, 0x8, 0x7, 0x7ff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0x1}}]}, {0xea, 0x6, "779a04947460aee0a7855c11e44af5f2cd54b4799177401b101d9718f24a3bd85bc1ca50fec4361b84e2bf8e16d50f61aefe64ab26103fa300a8bcf9547f1c71c6b40a281d4bdb667f3e79a135359ca2af8f151cc3cfa337b41b5234eea7456e033c692b80e8e4df8873b5fb63cb1e2015c240398abbcc8e498a8920dec66dd05efb30f2b9aefb65b6fd384ce66c9892721417afd36253f0bf873f073855a033e328e6104a30386bb59d8ab97de732bb3ef7b0f849d4f134ca57a44f885a9c5218a93deba9f1b763d1af030513b97ef4f5464982d184af4301c3b2bd90f618023553d7752ede"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1a8, 0x1f, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x8, 0xf}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e, 0x6, 0x6, 0x7, 0x3}, 0x48fb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5d, 0x2, 0x34000, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x200, 0x3, 0x7ff, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x20000000, 0x1f0, 0x486}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x8, 0xfffffff3, 0x3}, 0x7f}}]}, {0xcd, 0x6, "5a6170e3e92cae73630f3ce2c8d0dacc5f9686abc8a9ce13ebb14ae1eb5db3e98e46951ce5694638607462ade031672c054acad947210c525b31df569551b22f84bd61fac2af82d648165ce6a924139f711526a60cdda407a4deb37dad4255c7dd8a76a4cbf0dfd4552aa02855725d6f42228f3821b4b3160a18bb38a6ecda509b77974d785b59b4b17310c79150121ddb2a0ce9d626bdb6ea847de9582eeb7af347876980a256dc65d020eb7ce5ae9f8b34da8c30cf5bfa4d4de1147951657fa87619ebe6b3689d93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xcc, 0x19, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x101, 0xea4, 0x10000000, 0x7, 0x6}, 0x7}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x0, 0xffffffffffffffff, 0xffffffa3, 0x200}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x8000, 0x3, 0x4, 0x3888e64}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x6, 0x6, 'eZ'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x124, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x1, 0xfffff3fe, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x62d, 0x9e, 0x0, 0x80000001, 0x401}, 0x1}}]}, {0xb6, 0x6, "4ad5213bfd5c8fd7d37fb9fd93efe792294118750e1c23dea0e3015903b3f10397bf2e7486775e0e7bd5eb5c1fa39f582595fd789e2d6d32d579cc398bce5a7975d5296c4415f912ddff05f9e41c5d4c749bf5b9d4795e287ecaab81a59dc3674fc8747fab7582f791fbe7314957ec8152ddfa5e53c3aabcc8df92224bfe3c894dea53fc74adb33b9f396830f1fcdabf68b3500bfbdbfa98760920bcc47c08f47832e15b133d9d1e915e38681b38864856b0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0xe0, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x90, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xbb3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff7}]}]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0xff, 0x0, 0x15ef897711f5d6f]}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xf}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3c}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0x0, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_cgroup={{0xb}, {0x510, 0x2, [@TCA_CGROUP_EMATCHES={0x2c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3309, 0x1, 0x9}, {0x7900000, 0x3, 0x7, 0x4, 0xa, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1d}, {0x0, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3ff, 0x1, 0x7}, {0x0, 0x8, 0xc45, 0x5, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x9c, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x7ff}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="928590", @TCF_META_TYPE_VAR="a6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ebd66e7773cc", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="46b92cba1a43aea5f8", @TCF_META_TYPE_VAR="9e7a", @TCF_META_TYPE_VAR="b8d9f5adc08c8a5ded"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6}, {0x9, 0xc4}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="1550b77e", @TCF_META_TYPE_VAR="c80941", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c4ed95302e0f0cecef33"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f012", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f327102aefd7ed94", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="64f29d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR=' ']}]}}]}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5eb, 0x7, 0x3}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x34, 0x2, 0x0, 0x0, {{0x1bc1, 0x4, 0xf001}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa372}, {0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f3", @TCF_META_TYPE_VAR="e9c2", @TCF_META_TYPE_VAR="82ac6ca62d9b548caeda"]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0xff}, {0x5, 0xfa, 0xc7, 0x0, 0x9, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0xfff3}, {0x8, 0x9, 0x7, 0x0, 0x3, 0x2, 0x1}}}, @TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x8805}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="a6", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d9e1", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x0, 0x1}, {0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f95bb5f076111b404757", @TCF_META_TYPE_VAR='4v/h', @TCF_META_TYPE_VAR="fa75b565e60c9b0893"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="888528b5c6026c65", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8a85ab4a8530c0c882"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x80000000, 0x14ae095, 0x2, 0x1ff}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x98, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x7f}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="af0d81c658e3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="5bf9ed421d6e", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8}, {0x10, 0xb2, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="87c87356"]}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ff", @TCF_META_TYPE_VAR="bcb80d9051392d005187", @TCF_META_TYPE_VAR="3be3346fb70d1804ec", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="7cbef4ba92", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="15fa670b826c900d6e86"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="c4d1c4343dcce6a2fb"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3aa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xab7f, 0x8, 0x1, 0x2, 0x2, {0x1e, 0x1, 0x2, 0x9, 0x101}, {0x2d, 0x0, 0x5, 0x6, 0x6, 0x96b6}, 0x5, 0x9dd6, 0x4}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_CGROUP_EMATCHES={0x118, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x81, 0x9, 0xfffb}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4f}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x1}, {0x2, 0x4b, 0x96, 0x4, 0x7, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x400, 0x8, 0x98, 0x0, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc4f3, 0x8, 0x2}, {0x4, 0x0, 0x2}}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x8000, 0x4, 0xf568}, [@TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="311ffa73531c799633", @TCF_META_TYPE_VAR="1beedfe36620"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='\rS', @TCF_META_TYPE_VAR="bedbce624a7add480c"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x40}, {0x5a4, 0x5c, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0xd}, {0x4, 0x1, 0x0, '7'}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x220f, 0x2, 0x7f}, {0x9, 0x3, 0x0, "8c9b3f"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0xd0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x6, 0x1, 0x3, {0x6, 0x2, 0x7, 0x7, 0x57d, 0x5}, {0x5, 0x1, 0x5, 0xffff, 0x7}, 0x80, 0x5, 0xf}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x40, 0x3, 0x0, {0x6, 0x0, 0x4, 0x5, 0x8, 0x9}, {0x1, 0x1, 0xd1, 0x7, 0x7fff, 0xcc}, 0xffffffff, 0x5, 0xfffff147}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x6, 0x0, 0x2, {0x4, 0x1, 0x1, 0x4, 0x6, 0x3}, {0x81, 0x0, 0x6, 0xc}, 0xeb4, 0x401, 0xfffffdde}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x6, 0xfffffffb, 0x333, 0x1, 0x7, 0x7, 0x0, 0x2, 0x6, 0xffffffff, 0x1, 0x4, 0x2, 0x44be, 0x8, 0x40, 0xcd, 0x6, 0xffffffff, 0x7f, 0x1, 0xb9ee, 0x80000001, 0x1, 0x6, 0x7f, 0x7fb5, 0x859, 0x10, 0x9, 0xffff, 0x1, 0x4, 0x4, 0x0, 0x5, 0x6, 0x4, 0x80, 0xb, 0x800, 0xd, 0x0, 0xffffffff, 0x400, 0x4, 0x6, 0x80000000, 0x2, 0x0, 0x6, 0x0, 0xffff, 0x0, 0x8, 0x6, 0x2, 0x9, 0xa92, 0x2, 0x0, 0x71, 0x1, 0xf, 0x7fffffff, 0x8, 0x5, 0x4, 0xff, 0x8, 0x400, 0xfdff, 0x10001, 0x9, 0x1, 0xe, 0x455, 0x5, 0x7, 0x5, 0x1, 0xe, 0x80000000, 0x4, 0x6, 0xc, 0x6, 0x1, 0x8, 0x9, 0x0, 0x1, 0x6, 0x7, 0x0, 0x6, 0x20400, 0x9, 0x80000000, 0x0, 0x7, 0x3, 0x5, 0x3, 0x4, 0x7, 0x91a, 0xc9d, 0xb, 0x2, 0x7fff, 0xffff, 0x3, 0x233, 0x7c5, 0x6e000000, 0x7, 0xab, 0x7, 0x4, 0x6, 0x9, 0x7, 0x2, 0x9, 0xd, 0x9, 0xc772, 0x2, 0x3, 0x4, 0xfff, 0x287, 0x0, 0x6, 0x4, 0xfffffffe, 0x9, 0xa5, 0x8, 0x728e, 0x8, 0x8, 0x7fff, 0x6, 0x34, 0xd5, 0x6, 0x0, 0x9, 0x0, 0x200, 0x0, 0x5, 0xd4a9, 0xa, 0x92d, 0x100, 0x8, 0x8, 0x401, 0x7fffffff, 0x8, 0x0, 0xf, 0x4, 0x4, 0x88e4, 0x7ff, 0x4, 0x4, 0x9, 0xb, 0x58d3, 0x1, 0x1, 0x1, 0xa, 0x80000000, 0x1, 0x5, 0x9, 0x401, 0x1, 0x3, 0x9, 0x73bb, 0x6, 0x341, 0x80, 0x101, 0x7, 0x1ad3, 0x400, 0x285, 0x100, 0x1, 0x3a4, 0x1ff, 0xca92, 0x3, 0x3, 0x8, 0x4, 0x5, 0x40, 0xecd0, 0xfffffff7, 0xfffffe00, 0x28, 0x3, 0x1, 0xc24, 0x3a8, 0x8001, 0xf, 0x0, 0x2, 0x7, 0x9, 0x6, 0x25d48c75, 0x0, 0x5, 0x4715, 0x400000, 0x458, 0x2, 0x7cc, 0xf0c, 0xd98, 0x5, 0x0, 0x0, 0x5, 0x200, 0x7d, 0xffffffff, 0x8, 0x5, 0x2, 0x5, 0x2000000, 0x8000, 0x4, 0xf, 0x0, 0x8, 0x2, 0x4, 0x0, 0x3, 0x3, 0x5, 0x4b1]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x438, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5f}, @TCA_ROUTE4_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x70000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1ff, 0xb, 0x1, 0xfffff800, 0x3, 0x952, 0xf, 0x10001, 0x0, 0x1, 0x4, 0xffff, 0xc8, 0xd7cc, 0x5, 0x5, 0x0, 0x9, 0x7, 0x90b7, 0x0, 0x4, 0x5, 0xf81, 0x5, 0x8c5b, 0xdb, 0xffffff75, 0x8, 0x6d, 0x5, 0x7, 0x8, 0x80000001, 0x6, 0x1, 0x7, 0x8, 0x6, 0xe, 0x1, 0xce, 0xa, 0x9, 0x2, 0xde, 0x80000001, 0x5, 0x9, 0x4, 0x4, 0x343b9aa2, 0x0, 0x2, 0x8, 0x7fffffff, 0x0, 0xb, 0x81, 0x5, 0x6, 0x3, 0x0, 0x0, 0x5, 0x2, 0x2, 0x8, 0x4, 0x10001, 0x1, 0x20, 0xfffffff4, 0x7, 0xff, 0x3, 0x9, 0x0, 0x0, 0x80000001, 0xf, 0x81, 0x7, 0x5, 0x10000, 0x3, 0x101, 0x4, 0xfffff800, 0x2, 0xcd1, 0x1, 0x8, 0x101, 0xc, 0xb7, 0x4, 0x9, 0x71, 0x0, 0x1, 0x2, 0xffffffd9, 0x6, 0x3, 0x6, 0x10000, 0x1, 0x5, 0x44, 0x1, 0x0, 0x4, 0x7, 0x6, 0x200, 0x3, 0xff, 0x9, 0x8af, 0x5313, 0x0, 0x6, 0x10001, 0x400, 0x10, 0x3, 0x9, 0x3, 0xffffffff, 0x81, 0x6, 0x6, 0xc, 0x80000000, 0x8a, 0x8, 0x6, 0x3, 0x8001, 0x9, 0x57, 0x307, 0x3, 0x8001, 0x4, 0x5, 0x0, 0x40, 0xa7, 0x3, 0x5, 0x2, 0x34e, 0x1ff, 0xa, 0xfffffff8, 0x80000001, 0x80000001, 0xd815, 0x7, 0x5, 0x2, 0xc3, 0x7, 0x7, 0x5, 0x5, 0x6, 0x0, 0x0, 0x30000, 0x528d, 0x3ff, 0x8, 0x1, 0x8, 0x10001, 0xc9bb, 0xfd1, 0x1, 0x3, 0x3, 0x6, 0x4, 0x6, 0xb, 0x2, 0x401, 0x6d, 0x3, 0x6, 0x2, 0x8, 0xb4d3, 0x1ff, 0x6, 0x4, 0x1, 0xdb, 0x1, 0x31c, 0x2d, 0x5, 0x2, 0x3, 0xe3de, 0x200, 0x0, 0x57, 0xfff, 0x9, 0x7, 0x8, 0x3, 0x7ff, 0x7, 0xffffe304, 0x6, 0x7fffffff, 0x2, 0x4, 0x0, 0x8, 0x6, 0x8, 0xfffffffc, 0x401, 0x9, 0xffff, 0x90a, 0x0, 0x200, 0x0, 0x7, 0x6, 0x200, 0x2ad, 0xfffff189, 0x4acbbe4e, 0x4, 0x2, 0x0, 0x8, 0x4, 0x10000, 0x7, 0x0, 0x1, 0x5, 0x7e417b15, 0x5f1a, 0x5, 0x21, 0x6]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4a}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x4a}}]}, 0x15d4}, 0x1, 0x0, 0x0, 0x81}, 0x24000090)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{&(0x7f0000000400)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/183, 0xb7}], 0x1, &(0x7f0000000580)=""/28, 0x1c}, 0x6382}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/108, 0x6c}], 0x1, &(0x7f0000002100)=""/244, 0xf4}, 0x200}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000003840)=""/237, 0xed}, {&(0x7f0000000cc0)=""/214, 0xd6}, {&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000dc0)=""/212, 0xd4}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f40)=""/245, 0xf5}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000003940)=""/163, 0xa3}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000003a00)=""/98, 0x62}, {&(0x7f0000003a80)=""/220, 0xdc}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000005040)=""/193, 0xc1}, {&(0x7f0000004c40)=""/112, 0x70}, {&(0x7f0000004cc0)=""/212, 0xd4}], 0x9, &(0x7f0000004e80)=""/144, 0x90}, 0x3}], 0x4, 0x10020, &(0x7f00000008c0)={0x0, 0x989680})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

243.072215ms ago: executing program 3 (id=911):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x8000, 0xfa, &(0x7f0000000240)=""/250, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437, 0x100000}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x5, 0x7, 0x10000e}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x5, 0x0, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x7}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kvm_unmap_hva_range\x00', r2, 0x0, 0x7ff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000070000000a000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000ef2e1fdb14000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000009252ac3bd340904088d3edff550e165b12f715855fe6a91088c2dd9eefb280b170d30d1d84b5b7bb184a6f0bb7aacf189d967c605108333e5aa7a580ddbdfe"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000300)={0x97, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14)

104.691758ms ago: executing program 3 (id=912):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xa168f000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x86958000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="20699c56f78dea01a80000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='rxrpc_disconnect_call\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlockall()

79.050579ms ago: executing program 4 (id=913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000ee1300"/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000009fc664f112aeb2c143ab90000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000005c0), &(0x7f0000000740)=r1}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18)
timer_create(0x0, 0x0, &(0x7f0000000340))
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)

31.70417ms ago: executing program 1 (id=914):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000140)={0x1, 0x401, 0x90, 0x7f, 0x9, "e9a705546d958078"})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x5)
fcntl$notify(r8, 0x402, 0x8000003d)

0s ago: executing program 4 (id=915):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xa168f000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2010, 0xffffffffffffffff, 0x86958000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="20699c56f78dea01a80000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='rxrpc_disconnect_call\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)=@delchain={0x15dc, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xf9}, @filter_kind_options=@f_bpf={{0x8}, {0x6f0, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0xffff, 0x6, 0x5, 0x3}, {0x5, 0x4d, 0x7, 0x5}, {0x9, 0x9a, 0x8, 0x10000}, {0x5, 0x7, 0x4, 0x3}, {0x1bf6, 0x24, 0x2, 0x5}, {0xb, 0x6f, 0x0, 0x200}, {0x3, 0x5, 0x8, 0xb}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x19, 0x6}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_ACT={0x698, 0x1, [@m_csum={0x158, 0x1b, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x3, 0xd, 0xa}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x0, 0x3, 0xff, 0x8}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x8, 0x309a, 0x4}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x4, 0x0, 0x6}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x2, 0x0, 0xfffffffa}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe3c, 0xffffff63, 0x5b82cecb9ed92703, 0x9, 0x8}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x10001, 0x20000000, 0x8, 0x2}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1ff, 0x2, 0x9, 0x3}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x2, 0x7ff, 0x1}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xffff, 0x7, 0x4, 0x81}, 0x25}}]}, {0x14, 0x6, "9ea3bb6628ef424b96af9c31bbf8dd19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1a4, 0x3, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x5, 0x10000000, 0x2, 0xffff}, @remote, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xff, 0x10000000, 0x3, 0x1}, @multicast1, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x5, 0x4, 0x8001}, @local, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1000, 0xffffffffffffffff, 0xe, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x95, 0x8, 0x7, 0x7ff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0x1}}]}, {0xb1, 0x6, "779a04947460aee0a7855c11e44af5f2cd54b4799177401b101d9718f24a3bd85bc1ca50fec4361b84e2bf8e16d50f61aefe64ab26103fa300a8bcf9547f1c71c6b40a281d4bdb667f3e79a135359ca2af8f151cc3cfa337b41b5234eea7456e033c692b80e8e4df8873b5fb63cb1e2015c240398abbcc8e498a8920dec66dd05efb30f2b9aefb65b6fd384ce66c9892721417afd36253f0bf873f073855a033e328e6104a30386bb59d8ab97d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1a8, 0x1f, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x8, 0xf}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e, 0x6, 0x6, 0x7, 0x3}, 0x48fb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5d, 0x2, 0x34000, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x200, 0x3, 0x7ff, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x20000000, 0x1f0, 0x486}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x8, 0xfffffff3, 0x3}, 0x7f}}]}, {0xcd, 0x6, "5a6170e3e92cae73630f3ce2c8d0dacc5f9686abc8a9ce13ebb14ae1eb5db3e98e46951ce5694638607462ade031672c054acad947210c525b31df569551b22f84bd61fac2af82d648165ce6a924139f711526a60cdda407a4deb37dad4255c7dd8a76a4cbf0dfd4552aa02855725d6f42228f3821b4b3160a18bb38a6ecda509b77974d785b59b4b17310c79150121ddb2a0ce9d626bdb6ea847de9582eeb7af347876980a256dc65d020eb7ce5ae9f8b34da8c30cf5bfa4d4de1147951657fa87619ebe6b3689d93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xcc, 0x19, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x101, 0xea4, 0x10000000, 0x7, 0x6}, 0x7}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x0, 0xffffffffffffffff, 0xffffffa3, 0x200}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x8000, 0x3, 0x4, 0x3888e64}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x6, 0x6, 'eZ'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x124, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x1, 0xfffff3fe, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x62d, 0x9e, 0x0, 0x80000001, 0x401}, 0x1}}]}, {0xb6, 0x6, "4ad5213bfd5c8fd7d37fb9fd93efe792294118750e1c23dea0e3015903b3f10397bf2e7486775e0e7bd5eb5c1fa39f582595fd789e2d6d32d579cc398bce5a7975d5296c4415f912ddff05f9e41c5d4c749bf5b9d4795e287ecaab81a59dc3674fc8747fab7582f791fbe7314957ec8152ddfa5e53c3aabcc8df92224bfe3c894dea53fc74adb33b9f396830f1fcdabf68b3500bfbdbfa98760920bcc47c08f47832e15b133d9d1e915e38681b38864856b0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xbb3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff7}]}]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0xff, 0x0, 0x15ef897711f5d6f]}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xf}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3c}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0x0, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_cgroup={{0xb}, {0x510, 0x2, [@TCA_CGROUP_EMATCHES={0x2c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3309, 0x1, 0x9}, {0x7900000, 0x3, 0x7, 0x4, 0xa, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1d}, {0x0, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3ff, 0x1, 0x7}, {0x0, 0x8, 0xc45, 0x5, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x9c, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x7ff}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="928590", @TCF_META_TYPE_VAR="a6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ebd66e7773cc", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="46b92cba1a43aea5f8", @TCF_META_TYPE_VAR="9e7a", @TCF_META_TYPE_VAR="b8d9f5adc08c8a5ded"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6}, {0x9, 0xc4}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="1550b77e", @TCF_META_TYPE_VAR="c80941", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c4ed95302e0f0cecef33"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="f012", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f327102aefd7ed94", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="64f29d", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR=' ']}]}}]}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5eb, 0x7, 0x3}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x34, 0x2, 0x0, 0x0, {{0x1bc1, 0x4, 0xf001}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa372}, {0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f3", @TCF_META_TYPE_VAR="e9c2", @TCF_META_TYPE_VAR="82ac6ca62d9b548caeda"]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0xff}, {0x5, 0xfa, 0xc7, 0x0, 0x9, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0xfff3}, {0x8, 0x9, 0x7, 0x0, 0x3, 0x2, 0x1}}}, @TCF_EM_META={0x80, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x8805}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="a6", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d9e1", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x0, 0x1}, {0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f95bb5f076111b404757", @TCF_META_TYPE_VAR='4v/h', @TCF_META_TYPE_VAR="fa75b565e60c9b0893"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="888528b5c6026c65", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8a85ab4a8530c0c882"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x80000000, 0x14ae095, 0x2, 0x1ff}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x98, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x7f}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="af0d81c658e3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="5bf9ed421d6e", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8}, {0x10, 0xb2, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="87c87356"]}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ff", @TCF_META_TYPE_VAR="bcb80d9051392d005187", @TCF_META_TYPE_VAR="3be3346fb70d1804ec", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="7cbef4ba92", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="15fa670b826c900d6e86"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="c4d1c4343dcce6a2fb"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3aa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xab7f, 0x8, 0x1, 0x2, 0x2, {0x1e, 0x1, 0x2, 0x9, 0x101}, {0x2d, 0x0, 0x5, 0x6, 0x6, 0x96b6}, 0x5, 0x9dd6, 0x4}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_CGROUP_EMATCHES={0x118, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x81, 0x9, 0xfffb}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4f}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x1}, {0x2, 0x4b, 0x96, 0x4, 0x7, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x400, 0x8, 0x98, 0x0, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc4f3, 0x8, 0x2}, {0x4, 0x0, 0x2}}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x8000, 0x4, 0xf568}, [@TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="311ffa73531c799633", @TCF_META_TYPE_VAR="1beedfe36620"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='\rS', @TCF_META_TYPE_VAR="bedbce624a7add480c"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x40}, {0x5a4, 0x5c, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0xd}, {0x4, 0x1, 0x0, '7'}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x220f, 0x2, 0x7f}, {0x9, 0x3, 0x0, "8c9b3f"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0xd0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x6, 0x1, 0x3, {0x6, 0x2, 0x7, 0x7, 0x57d, 0x5}, {0x5, 0x1, 0x5, 0xffff, 0x7}, 0x80, 0x5, 0xf}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x40, 0x3, 0x0, {0x6, 0x0, 0x4, 0x5, 0x8, 0x9}, {0x1, 0x1, 0xd1, 0x7, 0x7fff, 0xcc}, 0xffffffff, 0x5, 0xfffff147}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x6, 0x0, 0x2, {0x4, 0x1, 0x1, 0x4, 0x6, 0x3}, {0x81, 0x0, 0x6, 0xc}, 0xeb4, 0x401, 0xfffffdde}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x40c, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x6, 0xfffffffb, 0x333, 0x1, 0x7, 0x7, 0x0, 0x2, 0x6, 0xffffffff, 0x1, 0x4, 0x2, 0x44be, 0x8, 0x40, 0xcd, 0x6, 0xffffffff, 0x7f, 0x1, 0xb9ee, 0x80000001, 0x1, 0x6, 0x7f, 0x7fb5, 0x859, 0x10, 0x9, 0xffff, 0x1, 0x4, 0x4, 0x0, 0x5, 0x6, 0x4, 0x80, 0xb, 0x800, 0xd, 0x0, 0xffffffff, 0x400, 0x4, 0x6, 0x80000000, 0x2, 0x0, 0x6, 0x0, 0xffff, 0x0, 0x8, 0x6, 0x2, 0x9, 0xa92, 0x2, 0x0, 0x71, 0x1, 0xf, 0x7fffffff, 0x8, 0x5, 0x4, 0xff, 0x8, 0x400, 0xfdff, 0x10001, 0x9, 0x1, 0xe, 0x455, 0x5, 0x7, 0x5, 0x1, 0xe, 0x80000000, 0x4, 0x6, 0xc, 0x6, 0x1, 0x8, 0x9, 0x0, 0x1, 0x6, 0x7, 0x0, 0x6, 0x20400, 0x9, 0x80000000, 0x0, 0x7, 0x3, 0x5, 0x3, 0x4, 0x7, 0x91a, 0xc9d, 0xb, 0x2, 0x7fff, 0xffff, 0x3, 0x233, 0x7c5, 0x6e000000, 0x7, 0xab, 0x7, 0x4, 0x6, 0x9, 0x7, 0x2, 0x9, 0xd, 0x9, 0xc772, 0x2, 0x3, 0x4, 0xfff, 0x287, 0x0, 0x6, 0x4, 0xfffffffe, 0x9, 0xa5, 0x8, 0x728e, 0x8, 0x8, 0x7fff, 0x6, 0x34, 0xd5, 0x6, 0x0, 0x9, 0x0, 0x200, 0x0, 0x5, 0xd4a9, 0xa, 0x92d, 0x100, 0x8, 0x8, 0x401, 0x7fffffff, 0x8, 0x0, 0xf, 0x4, 0x4, 0x88e4, 0x7ff, 0x4, 0x4, 0x9, 0xb, 0x58d3, 0x1, 0x1, 0x1, 0xa, 0x80000000, 0x1, 0x5, 0x9, 0x401, 0x1, 0x3, 0x9, 0x73bb, 0x6, 0x341, 0x80, 0x101, 0x7, 0x1ad3, 0x400, 0x285, 0x100, 0x1, 0x3a4, 0x1ff, 0xca92, 0x3, 0x3, 0x8, 0x4, 0x5, 0x40, 0xecd0, 0xfffffff7, 0xfffffe00, 0x28, 0x3, 0x1, 0xc24, 0x3a8, 0x8001, 0xf, 0x0, 0x2, 0x7, 0x9, 0x6, 0x25d48c75, 0x0, 0x5, 0x4715, 0x400000, 0x458, 0x2, 0x7cc, 0xf0c, 0xd98, 0x5, 0x0, 0x0, 0x5, 0x200, 0x7d, 0xffffffff, 0x8, 0x5, 0x2, 0x5, 0x2000000, 0x8000, 0x4, 0xf, 0x0, 0x8, 0x2, 0x4, 0x0, 0x3, 0x3, 0x5, 0x4b1]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x438, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5f}, @TCA_ROUTE4_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x70000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1ff, 0xb, 0x1, 0xfffff800, 0x3, 0x952, 0xf, 0x10001, 0x0, 0x1, 0x4, 0xffff, 0xc8, 0xd7cc, 0x5, 0x5, 0x0, 0x9, 0x7, 0x90b7, 0x0, 0x4, 0x5, 0xf81, 0x5, 0x8c5b, 0xdb, 0xffffff75, 0x8, 0x6d, 0x5, 0x7, 0x8, 0x80000001, 0x6, 0x1, 0x7, 0x8, 0x6, 0xe, 0x1, 0xce, 0xa, 0x9, 0x2, 0xde, 0x80000001, 0x5, 0x9, 0x4, 0x4, 0x343b9aa2, 0x0, 0x2, 0x8, 0x7fffffff, 0x0, 0xb, 0x81, 0x5, 0x6, 0x3, 0x0, 0x0, 0x5, 0x2, 0x2, 0x8, 0x4, 0x10001, 0x1, 0x20, 0xfffffff4, 0x7, 0xff, 0x3, 0x9, 0x0, 0x0, 0x80000001, 0xf, 0x81, 0x7, 0x5, 0x10000, 0x3, 0x101, 0x4, 0xfffff800, 0x2, 0xcd1, 0x1, 0x8, 0x101, 0xc, 0xb7, 0x4, 0x9, 0x71, 0x0, 0x1, 0x2, 0xffffffd9, 0x6, 0x3, 0x6, 0x10000, 0x1, 0x5, 0x44, 0x1, 0x0, 0x4, 0x7, 0x6, 0x200, 0x3, 0xff, 0x9, 0x8af, 0x5313, 0x0, 0x6, 0x10001, 0x400, 0x10, 0x3, 0x9, 0x3, 0xffffffff, 0x81, 0x6, 0x6, 0xc, 0x80000000, 0x8a, 0x8, 0x6, 0x3, 0x8001, 0x9, 0x57, 0x307, 0x3, 0x8001, 0x4, 0x5, 0x0, 0x40, 0xa7, 0x3, 0x5, 0x2, 0x34e, 0x1ff, 0xa, 0xfffffff8, 0x80000001, 0x80000001, 0xd815, 0x7, 0x5, 0x2, 0xc3, 0x7, 0x7, 0x5, 0x5, 0x6, 0x0, 0x0, 0x30000, 0x528d, 0x3ff, 0x8, 0x1, 0x8, 0x10001, 0xc9bb, 0xfd1, 0x1, 0x3, 0x3, 0x6, 0x4, 0x6, 0xb, 0x2, 0x401, 0x6d, 0x3, 0x6, 0x2, 0x8, 0xb4d3, 0x1ff, 0x6, 0x4, 0x1, 0xdb, 0x1, 0x31c, 0x2d, 0x5, 0x2, 0x3, 0xe3de, 0x200, 0x0, 0x57, 0xfff, 0x9, 0x7, 0x8, 0x3, 0x7ff, 0x7, 0xffffe304, 0x6, 0x7fffffff, 0x2, 0x4, 0x0, 0x8, 0x6, 0x8, 0xfffffffc, 0x401, 0x9, 0xffff, 0x90a, 0x0, 0x200, 0x0, 0x7, 0x6, 0x200, 0x2ad, 0xfffff189, 0x4acbbe4e, 0x4, 0x2, 0x0, 0x8, 0x4, 0x10000, 0x7, 0x0, 0x1, 0x5, 0x7e417b15, 0x5f1a, 0x5, 0x21, 0x6]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4a}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0x4a}}]}, 0x15dc}, 0x1, 0x0, 0x0, 0x81}, 0x24000090)
recvmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f0000000400)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/183, 0xb7}], 0x1, &(0x7f0000000580)=""/28, 0x1c}, 0x6382}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/108, 0x6c}], 0x1, &(0x7f0000002100)=""/244, 0xf4}, 0x200}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000003840)=""/237, 0xed}, {&(0x7f0000000cc0)=""/214, 0xd6}, {&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000dc0)=""/212, 0xd4}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f40)=""/245, 0xf5}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000003940)=""/163, 0xa3}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000003a00)=""/98, 0x62}, {&(0x7f0000003a80)=""/220, 0xdc}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000005040)=""/193, 0xc1}, {&(0x7f0000004c40)=""/112, 0x70}, {&(0x7f0000004cc0)=""/212, 0xd4}], 0x9, &(0x7f0000004e80)=""/144, 0x90}, 0x3}], 0x4, 0x10020, &(0x7f00000008c0)={0x0, 0x989680})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ved mblk_io_submit option
[   94.944036][ T5548] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.951401][ T5541] siw: device registration error -23
[   94.965602][ T5545] vhci_hcd: connection closed
[   94.965845][   T52] vhci_hcd: stop threads
[   94.965932][ T5549] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.637: bg 0: block 345: padding at end of block bitmap is not set
[   94.970637][   T52] vhci_hcd: release socket
[   94.993532][   T52] vhci_hcd: disconnect device
[   95.000137][ T5549] EXT4-fs (loop1): Remounting filesystem read-only
[   95.000464][ T5548] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   95.015166][ T5548] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   95.015162][   T37] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   95.083042][ T5548] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.640: Allocating blocks 41-42 which overlap fs metadata
[   95.108055][ T5548] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.640: Allocating blocks 41-42 which overlap fs metadata
[   95.124216][ T5548] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.640: Failed to acquire dquot type 1
[   95.137373][ T5548] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   95.152338][ T5548] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.640: corrupted inode contents
[   95.164638][ T5548] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.640: mark_inode_dirty error
[   95.177677][ T5548] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.640: corrupted inode contents
[   95.201357][ T5548] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.640: mark_inode_dirty error
[   95.223498][ T5548] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.640: corrupted inode contents
[   95.235697][ T5548] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[   95.244535][ T5548] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.640: corrupted inode contents
[   95.264834][ T5561] loop1: detected capacity change from 0 to 4096
[   95.274811][ T5561] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.275271][ T5548] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.640: mark_inode_dirty error
[   95.305685][ T5548] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[   95.315333][ T5548] EXT4-fs (loop3): 1 truncate cleaned up
[   95.348982][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'.
[   95.411601][ T5569] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   95.418169][ T5569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   95.425764][ T5569] vhci_hcd vhci_hcd.0: Device attached
[   95.470891][ T5574] vhci_hcd: connection closed
[   95.473422][   T52] vhci_hcd: stop threads
[   95.476171][ T5573] loop2: detected capacity change from 0 to 2048
[   95.478183][   T52] vhci_hcd: release socket
[   95.493262][   T52] vhci_hcd: disconnect device
[   95.506759][ T5573] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.595074][ T5579] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.646: bg 0: block 345: padding at end of block bitmap is not set
[   95.617445][ T5581] loop4: detected capacity change from 0 to 512
[   95.630395][ T5579] EXT4-fs (loop2): Remounting filesystem read-only
[   95.637197][ T3461] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   95.665205][ T5581] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   95.673422][ T5581] EXT4-fs (loop4): orphan cleanup on readonly fs
[   95.683262][ T5581] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.647: corrupted inode contents
[   95.705777][ T5581] EXT4-fs (loop4): Remounting filesystem read-only
[   95.712538][ T5581] EXT4-fs (loop4): 1 truncate cleaned up
[   95.722632][ T3461] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   95.733231][ T3461] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   95.764799][ T3461] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   95.794191][ T5585] loop1: detected capacity change from 0 to 512
[   95.814426][ T5585] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.849905][ T5585] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.857273][ T5585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   95.865820][ T5585] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   95.883843][ T5587] syzkaller0: entered promiscuous mode
[   95.891451][ T5585] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.648: Allocating blocks 41-42 which overlap fs metadata
[   95.907773][ T5585] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.648: Allocating blocks 41-42 which overlap fs metadata
[   95.923784][ T5585] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.648: Failed to acquire dquot type 1
[   95.940812][ T5585] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   95.956492][ T5585] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.648: corrupted inode contents
[   95.968565][ T5585] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.648: mark_inode_dirty error
[   95.980136][ T5585] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.648: corrupted inode contents
[   95.992248][ T5585] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.648: mark_inode_dirty error
[   96.003956][ T5585] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.648: corrupted inode contents
[   96.015931][ T5585] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   96.024560][ T5585] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.648: corrupted inode contents
[   96.036605][ T5585] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.648: mark_inode_dirty error
[   96.048497][ T5585] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   96.075879][ T5585] EXT4-fs (loop1): 1 truncate cleaned up
[   96.098816][ T5592] netlink: 'syz.3.651': attribute type 3 has an invalid length.
[   96.114571][ T5595] loop4: detected capacity change from 0 to 1024
[   96.132439][ T5595] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.160944][ T5585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.175712][ T5601] ip6gre6: entered allmulticast mode
[   96.187563][ T5595] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.650: lblock 0 mapped to illegal pblock 0 (length 1)
[   96.225543][ T5595] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   96.238044][ T5595] EXT4-fs (loop4): This should not happen!! Data will be lost
[   96.238044][ T5595] 
[   96.260661][ T5603] loop3: detected capacity change from 0 to 4096
[   96.267413][ T5595] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.650: lblock 0 mapped to illegal pblock 0 (length 1)
[   96.267659][ T5603] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.292707][ T5595] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   96.305062][ T5595] EXT4-fs (loop4): This should not happen!! Data will be lost
[   96.305062][ T5595] 
[   96.357210][ T5608] loop1: detected capacity change from 0 to 512
[   96.370377][ T5608] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.383695][ T5608] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.412571][ T5608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.421139][ T5608] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   96.432668][   T37] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1)
[   96.449434][   T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   96.461872][   T37] EXT4-fs (loop4): This should not happen!! Data will be lost
[   96.461872][   T37] 
[   96.475308][ T5608] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.655: Allocating blocks 41-42 which overlap fs metadata
[   96.489952][ T5608] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.655: Allocating blocks 41-42 which overlap fs metadata
[   96.518826][ T5608] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.655: Failed to acquire dquot type 1
[   96.555881][ T5608] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   96.580989][ T5608] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.655: corrupted inode contents
[   96.593270][ T5608] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.655: mark_inode_dirty error
[   96.605159][ T5608] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.655: corrupted inode contents
[   96.667772][ T5608] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.655: mark_inode_dirty error
[   96.679673][ T5608] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.655: corrupted inode contents
[   96.691875][ T5608] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   96.700778][ T5608] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.655: corrupted inode contents
[   96.712919][ T5608] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.655: mark_inode_dirty error
[   96.728362][ T5608] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   96.745625][ T5608] EXT4-fs (loop1): 1 truncate cleaned up
[   96.836361][ T5626] netlink: 'syz.1.663': attribute type 3 has an invalid length.
[   96.895147][ T5633] ip6gre6: entered allmulticast mode
[   96.946523][ T5638] loop3: detected capacity change from 0 to 512
[   96.953270][ T5638] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.955415][ T5636] loop1: detected capacity change from 0 to 4096
[   96.962744][ T5638] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.973411][ T5636] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.981008][ T5638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.989495][ T5638] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   97.008134][ T5638] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.666: Allocating blocks 41-42 which overlap fs metadata
[   97.023434][ T5638] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.666: Allocating blocks 41-42 which overlap fs metadata
[   97.037891][ T5638] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.666: Failed to acquire dquot type 1
[   97.049449][ T5638] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   97.049750][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'.
[   97.064432][ T5638] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.666: corrupted inode contents
[   97.085282][ T5638] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.666: mark_inode_dirty error
[   97.096802][ T5638] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.666: corrupted inode contents
[   97.109334][ T5638] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.666: mark_inode_dirty error
[   97.122172][ T5638] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.666: corrupted inode contents
[   97.134694][ T5638] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[   97.143675][ T5638] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.666: corrupted inode contents
[   97.156328][ T5638] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.666: mark_inode_dirty error
[   97.167867][ T5638] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[   97.177259][ T5638] EXT4-fs (loop3): 1 truncate cleaned up
[   97.190334][ T5638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   97.191606][ T5645] loop1: detected capacity change from 0 to 4096
[   97.207196][ T5645] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.338605][ T5655] loop4: detected capacity change from 0 to 512
[   97.375433][ T5655] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   97.383776][ T5655] EXT4-fs (loop4): orphan cleanup on readonly fs
[   97.391863][ T5655] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.671: corrupted inode contents
[   97.404212][ T5655] EXT4-fs (loop4): Remounting filesystem read-only
[   97.411033][ T5655] EXT4-fs (loop4): 1 truncate cleaned up
[   97.417346][  T156] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   97.427972][  T156] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   97.469686][  T156] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   97.479923][  T156] __quota_error: 290 callbacks suppressed
[   97.479936][  T156] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   97.494818][  T156] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   97.507045][   T29] audit: type=1326 audit(1759598474.438:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.549000][   T29] audit: type=1326 audit(1759598474.438:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.572454][   T29] audit: type=1326 audit(1759598474.438:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.595951][   T29] audit: type=1326 audit(1759598474.438:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.619318][   T29] audit: type=1326 audit(1759598474.438:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.642716][   T29] audit: type=1326 audit(1759598474.438:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.666084][   T29] audit: type=1326 audit(1759598474.438:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.689557][   T29] audit: type=1326 audit(1759598474.438:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[   97.799601][ T5663] loop3: detected capacity change from 0 to 512
[   97.809306][ T5663] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.815883][ T5663] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.824100][ T5663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   97.832581][ T5663] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   97.847590][ T5667] netlink: 'syz.0.675': attribute type 3 has an invalid length.
[   97.916314][ T5663] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.674: Allocating blocks 41-42 which overlap fs metadata
[   97.919480][ T5673] ip6gre4: entered allmulticast mode
[   97.930665][ T5663] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.674: Allocating blocks 41-42 which overlap fs metadata
[   97.982661][ T5663] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.674: Failed to acquire dquot type 1
[   98.024814][ T5663] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   98.053301][ T5679] loop0: detected capacity change from 0 to 1024
[   98.060353][ T5663] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.674: corrupted inode contents
[   98.073079][ T5663] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.674: mark_inode_dirty error
[   98.095082][ T5663] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.674: corrupted inode contents
[   98.107847][ T5679] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.125371][ T5663] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.674: mark_inode_dirty error
[   98.137081][ T5663] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.674: corrupted inode contents
[   98.149279][ T5663] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[   98.150365][ T5679] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.679: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.159145][ T5663] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.674: corrupted inode contents
[   98.184629][ T5663] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.674: mark_inode_dirty error
[   98.185144][ T5679] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   98.195959][ T5663] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[   98.207963][ T5679] EXT4-fs (loop0): This should not happen!! Data will be lost
[   98.207963][ T5679] 
[   98.229636][ T5663] EXT4-fs (loop3): 1 truncate cleaned up
[   98.247501][ T5679] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.679: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.269618][ T5679] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   98.281983][ T5679] EXT4-fs (loop0): This should not happen!! Data will be lost
[   98.281983][ T5679] 
[   98.293181][ T5663] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.313570][  T156] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.327250][  T156] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   98.339565][  T156] EXT4-fs (loop0): This should not happen!! Data will be lost
[   98.339565][  T156] 
[   98.368142][ T5691] loop0: detected capacity change from 0 to 512
[   98.389559][ T5693] loop3: detected capacity change from 0 to 512
[   98.408554][ T5693] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   98.418108][ T5691] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.429200][ T5693] EXT4-fs (loop3): orphan cleanup on readonly fs
[   98.440265][ T5693] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.684: corrupted inode contents
[   98.452368][ T5693] EXT4-fs (loop3): Remounting filesystem read-only
[   98.459315][ T5693] EXT4-fs (loop3): 1 truncate cleaned up
[   98.465294][   T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   98.475936][   T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   98.487231][   T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   98.665827][ T5704] ip6gre7: entered allmulticast mode
[   98.934159][ T5711] loop0: detected capacity change from 0 to 512
[   98.950022][ T5711] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.996258][ T5715] 9pnet: Could not find request transport: fd0xffffffffffffffff
[   99.081741][ T5723] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   99.088403][ T5723] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   99.095937][ T5723] vhci_hcd vhci_hcd.0: Device attached
[   99.107584][ T5723] siw: device registration error -23
[   99.114838][ T5724] vhci_hcd: connection closed
[   99.115314][   T37] vhci_hcd: stop threads
[   99.124636][   T37] vhci_hcd: release socket
[   99.129210][   T37] vhci_hcd: disconnect device
[   99.266066][ T5727] loop2: detected capacity change from 0 to 512
[   99.273052][ T5727] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.280361][ T5727] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.287758][ T5727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.296241][ T5727] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.308465][ T5729] loop1: detected capacity change from 0 to 2048
[   99.321398][ T5727] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.695: Allocating blocks 41-42 which overlap fs metadata
[   99.335927][ T5727] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.695: Allocating blocks 41-42 which overlap fs metadata
[   99.346657][ T5729] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.350231][ T5727] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.695: Failed to acquire dquot type 1
[   99.371785][ T5727] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   99.386631][ T5727] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.695: corrupted inode contents
[   99.398703][ T5727] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.695: mark_inode_dirty error
[   99.410386][ T5727] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.695: corrupted inode contents
[   99.425449][ T5727] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.695: mark_inode_dirty error
[   99.429375][ T5734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.705: bg 0: block 345: padding at end of block bitmap is not set
[   99.445579][ T5727] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.695: corrupted inode contents
[   99.451116][ T5734] EXT4-fs (loop1): Remounting filesystem read-only
[   99.463178][ T5727] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   99.484360][  T156] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   99.487945][ T5727] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.695: corrupted inode contents
[   99.510040][ T5727] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.695: mark_inode_dirty error
[   99.521520][ T5727] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   99.534022][ T5727] EXT4-fs (loop2): 1 truncate cleaned up
[   99.572707][ T5738] loop3: detected capacity change from 0 to 512
[   99.583549][ T5727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.601484][ T5738] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   99.621521][ T5738] EXT4-fs (loop3): orphan cleanup on readonly fs
[   99.629418][ T5738] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.697: corrupted inode contents
[   99.642380][ T5738] EXT4-fs (loop3): Remounting filesystem read-only
[   99.649550][ T5738] EXT4-fs (loop3): 1 truncate cleaned up
[   99.655419][   T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   99.665991][   T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   99.677225][   T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   99.813330][ T5750] loop2: detected capacity change from 0 to 2048
[   99.840882][ T5750] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.912373][ T5756] loop4: detected capacity change from 0 to 512
[   99.931103][ T5759] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.699: bg 0: block 345: padding at end of block bitmap is not set
[   99.946101][ T5759] EXT4-fs (loop2): Remounting filesystem read-only
[   99.952784][   T37] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   99.975374][ T5756] EXT4-fs mount: 132 callbacks suppressed
[   99.975388][ T5756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.993775][ T5756] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.026802][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.079491][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.197376][ T5767] loop0: detected capacity change from 0 to 4096
[  100.207054][ T5770] syzkaller0: entered promiscuous mode
[  100.214364][ T5767] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.240618][ T5767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.291740][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.332964][ T5774] loop2: detected capacity change from 0 to 4096
[  100.339767][ T5774] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.367364][ T5774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.415986][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.459286][ T5783] loop1: detected capacity change from 0 to 512
[  100.486473][ T5783] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  100.494718][ T5783] EXT4-fs (loop1): orphan cleanup on readonly fs
[  100.501605][ T5780] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  100.508149][ T5780] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  100.515566][ T5780] vhci_hcd vhci_hcd.0: Device attached
[  100.525287][ T5783] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.713: corrupted inode contents
[  100.546412][ T5783] EXT4-fs (loop1): Remounting filesystem read-only
[  100.558640][ T5783] EXT4-fs (loop1): 1 truncate cleaned up
[  100.564459][  T156] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  100.575068][  T156] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  100.585751][ T5785] vhci_hcd: connection closed
[  100.585967][ T3461] vhci_hcd: stop threads
[  100.590944][  T156] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  100.595066][ T3461] vhci_hcd: release socket
[  100.606032][ T5783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.609545][ T3461] vhci_hcd: disconnect device
[  100.650047][ T5794] loop3: detected capacity change from 0 to 512
[  100.668192][ T5794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.688295][ T5794] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.712863][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.752045][ T5798] loop3: detected capacity change from 0 to 512
[  100.766740][ T5798] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  100.776373][ T5798] EXT4-fs (loop3): orphan cleanup on readonly fs
[  100.784187][ T5798] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.716: corrupted inode contents
[  100.796569][ T5798] EXT4-fs (loop3): Remounting filesystem read-only
[  100.803354][ T5798] EXT4-fs (loop3): 1 truncate cleaned up
[  100.809304][ T3461] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  100.813058][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.819843][ T3461] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  100.819894][ T3461] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  100.854010][ T5798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  101.018239][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.081877][ T5807] loop3: detected capacity change from 0 to 512
[  101.089651][ T5807] EXT4-fs: Ignoring removed mblk_io_submit option
[  101.096492][ T5807] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.103946][ T5807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  101.112478][ T5807] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  101.136665][ T5807] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.719: Allocating blocks 41-42 which overlap fs metadata
[  101.150673][ T5807] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.719: Allocating blocks 41-42 which overlap fs metadata
[  101.164682][ T5807] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.719: Failed to acquire dquot type 1
[  101.176157][ T5807] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  101.190873][ T5807] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.719: corrupted inode contents
[  101.203001][ T5807] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.719: mark_inode_dirty error
[  101.214663][ T5807] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.719: corrupted inode contents
[  101.226729][ T5807] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.719: mark_inode_dirty error
[  101.238224][ T5807] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.719: corrupted inode contents
[  101.250254][ T5807] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  101.258997][ T5807] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.719: corrupted inode contents
[  101.271054][ T5807] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.719: mark_inode_dirty error
[  101.282418][ T5807] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  101.291680][ T5807] EXT4-fs (loop3): 1 truncate cleaned up
[  101.297850][ T5807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.313361][ T5807] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  101.351193][ T5812] loop2: detected capacity change from 0 to 4096
[  101.362451][ T5812] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.380261][ T5813] loop0: detected capacity change from 0 to 2048
[  101.387642][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.404668][ T5812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.427040][ T5813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.454297][ T5813] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.494605][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.536621][ T5821] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.720: bg 0: block 345: padding at end of block bitmap is not set
[  101.553119][ T5820] loop4: detected capacity change from 0 to 4096
[  101.553259][ T5821] EXT4-fs (loop0): Remounting filesystem read-only
[  101.563916][ T5820] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.566126][ T3461] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  101.634438][ T5820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.717593][ T5829] loop1: detected capacity change from 0 to 512
[  101.726956][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'.
[  101.749913][ T5829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.763717][ T5829] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.808561][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.818622][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.877052][ T5836] loop0: detected capacity change from 0 to 512
[  101.903749][ T5838] loop4: detected capacity change from 0 to 2048
[  101.927069][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.945602][ T5836] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  101.953657][ T5836] EXT4-fs (loop0): orphan cleanup on readonly fs
[  101.969479][ T5838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.974656][ T5836] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.727: corrupted inode contents
[  101.981823][ T5838] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.993959][ T5836] EXT4-fs (loop0): Remounting filesystem read-only
[  102.017990][ T5836] EXT4-fs (loop0): 1 truncate cleaned up
[  102.024058][   T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  102.034659][   T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  102.045210][ T5847] loop1: detected capacity change from 0 to 512
[  102.053121][   T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  102.064411][ T5836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.084869][ T5848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.728: bg 0: block 345: padding at end of block bitmap is not set
[  102.099976][ T5848] EXT4-fs (loop4): Remounting filesystem read-only
[  102.119993][   T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  102.142515][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.166145][ T5847] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.177593][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.306920][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.317347][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.369579][ T5855] loop1: detected capacity change from 0 to 512
[  102.376830][ T5855] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.413760][ T5856] loop0: detected capacity change from 0 to 512
[  102.415638][ T5856] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.420480][ T5855] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.443852][ T5856] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.458988][ T5856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.459004][ T5856] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  102.468824][ T5855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.468843][ T5855] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  102.473472][ T5856] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.733: Allocating blocks 41-42 which overlap fs metadata
[  102.526829][ T5855] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.732: Allocating blocks 41-42 which overlap fs metadata
[  102.555266][ T5856] __quota_error: 367 callbacks suppressed
[  102.555297][ T5856] Quota error (device loop0): write_blk: dquota write failed
[  102.555314][ T5856] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  102.555387][ T5856] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.733: Allocating blocks 41-42 which overlap fs metadata
[  102.555614][ T5856] Quota error (device loop0): write_blk: dquota write failed
[  102.555656][ T5856] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  102.555680][ T5856] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.733: Failed to acquire dquot type 1
[  102.555882][ T5856] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  102.555987][ T5856] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.733: corrupted inode contents
[  102.556286][ T5856] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #12: comm syz.0.733: mark_inode_dirty error
[  102.556421][ T5856] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.733: corrupted inode contents
[  102.556531][ T5856] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.733: mark_inode_dirty error
[  102.556647][ T5856] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.733: corrupted inode contents
[  102.556785][ T5856] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  102.556907][ T5856] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.733: corrupted inode contents
[  102.557151][ T5856] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.733: mark_inode_dirty error
[  102.557320][ T5856] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  102.557522][ T5856] EXT4-fs (loop0): 1 truncate cleaned up
[  102.558040][ T5856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.565409][ T5855] Quota error (device loop1): write_blk: dquota write failed
[  102.565428][ T5855] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  102.565505][ T5855] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.732: Allocating blocks 41-42 which overlap fs metadata
[  102.565768][ T5855] Quota error (device loop1): write_blk: dquota write failed
[  102.565825][ T5855] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  102.565851][ T5855] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.732: Failed to acquire dquot type 1
[  102.566270][ T5855] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  102.566547][ T5855] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.732: corrupted inode contents
[  102.566711][ T5855] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.732: mark_inode_dirty error
[  102.566816][ T5855] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.732: corrupted inode contents
[  102.566933][ T5855] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.732: mark_inode_dirty error
[  102.567080][ T5855] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.732: corrupted inode contents
[  102.567237][ T5855] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  102.568466][ T5855] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.732: corrupted inode contents
[  102.568588][ T5855] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.732: mark_inode_dirty error
[  102.568784][ T5855] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  102.568945][ T5855] EXT4-fs (loop1): 1 truncate cleaned up
[  102.569353][ T5855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.586933][ T5856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.606818][ T5855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.670211][   T29] audit: type=1326 audit(1759598479.598:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[  103.010358][   T29] audit: type=1326 audit(1759598479.598:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[  103.051485][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.173032][ T5871] loop4: detected capacity change from 0 to 512
[  103.173433][ T5871] EXT4-fs: Ignoring removed mblk_io_submit option
[  103.173493][ T5871] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.186369][ T5871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.203242][ T5871] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.215816][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.233091][ T5871] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.738: Allocating blocks 41-42 which overlap fs metadata
[  103.233336][ T5871] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.738: Allocating blocks 41-42 which overlap fs metadata
[  103.233587][ T5871] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.738: Failed to acquire dquot type 1
[  103.233762][ T5871] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  103.234058][ T5871] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.738: corrupted inode contents
[  103.234226][ T5871] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.738: mark_inode_dirty error
[  103.236862][ T5871] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.738: corrupted inode contents
[  103.237002][ T5871] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.738: mark_inode_dirty error
[  103.237169][ T5871] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.738: corrupted inode contents
[  103.237318][ T5871] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  103.237450][ T5871] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.738: corrupted inode contents
[  103.237570][ T5871] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.738: mark_inode_dirty error
[  103.237705][ T5871] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  103.238063][ T5871] EXT4-fs (loop4): 1 truncate cleaned up
[  103.238536][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.243512][ T5871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.315092][ T5881] loop0: detected capacity change from 0 to 512
[  103.447323][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.458728][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.480048][ T5881] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.506220][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'.
[  103.526465][ T5887] loop4: detected capacity change from 0 to 2048
[  103.547789][ T5887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.560398][ T5887] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.571642][ T5891] netlink: 'syz.3.742': attribute type 4 has an invalid length.
[  103.579375][ T5891] netlink: 152 bytes leftover after parsing attributes in process `syz.3.742'.
[  103.620407][ T5893] loop3: detected capacity change from 0 to 512
[  103.642020][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.645874][ T5893] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  103.673436][ T5893] EXT4-fs (loop3): orphan cleanup on readonly fs
[  103.673536][ T5894] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.741: bg 0: block 345: padding at end of block bitmap is not set
[  103.694491][ T5894] EXT4-fs (loop4): Remounting filesystem read-only
[  103.710540][ T5893] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.743: corrupted inode contents
[  103.712675][   T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  103.723177][ T5893] EXT4-fs (loop3): Remounting filesystem read-only
[  103.768718][ T5893] EXT4-fs (loop3): 1 truncate cleaned up
[  103.775204][ T2189] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  103.785881][ T2189] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  103.796694][ T5899] loop2: detected capacity change from 0 to 2048
[  103.814399][ T2189] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  103.825370][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.825825][ T5893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.878416][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.895406][ T5899] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.996953][ T5906] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.745: bg 0: block 345: padding at end of block bitmap is not set
[  104.011811][ T5906] EXT4-fs (loop2): Remounting filesystem read-only
[  104.018529][ T2189] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  104.032976][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.105487][ T5910] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  104.112059][ T5910] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  104.114696][ T5912] loop1: detected capacity change from 0 to 4096
[  104.119548][ T5910] vhci_hcd vhci_hcd.0: Device attached
[  104.136063][ T5912] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.149062][ T5910] siw: device registration error -23
[  104.160670][ T5913] vhci_hcd: connection closed
[  104.160838][   T37] vhci_hcd: stop threads
[  104.169848][   T37] vhci_hcd: release socket
[  104.173089][ T5912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.174278][   T37] vhci_hcd: disconnect device
[  104.192047][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.233876][ T5912] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  104.233876][ T5912]    program syz.1.749 not setting count and/or reply_len properly
[  104.270693][ T5921] syzkaller0: entered promiscuous mode
[  104.281119][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  104.313799][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.324815][ T5924] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  104.389935][ T5931] loop4: detected capacity change from 0 to 4096
[  104.390563][ T5933] loop2: detected capacity change from 0 to 512
[  104.398351][ T5931] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.411559][ T5934] FAULT_INJECTION: forcing a failure.
[  104.411559][ T5934] name failslab, interval 1, probability 0, space 0, times 1
[  104.424411][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.1.753 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.424441][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  104.424457][ T5934] Call Trace:
[  104.424464][ T5934]  <TASK>
[  104.424471][ T5934]  __dump_stack+0x1d/0x30
[  104.424508][ T5934]  dump_stack_lvl+0xe8/0x140
[  104.424588][ T5934]  dump_stack+0x15/0x1b
[  104.424664][ T5934]  should_fail_ex+0x265/0x280
[  104.424748][ T5934]  should_failslab+0x8c/0xb0
[  104.424782][ T5934]  kmem_cache_alloc_noprof+0x50/0x480
[  104.424816][ T5934]  ? radix_tree_node_alloc+0x8a/0x1f0
[  104.424849][ T5934]  radix_tree_node_alloc+0x8a/0x1f0
[  104.424955][ T5934]  radix_tree_extend+0xcf/0x370
[  104.425058][ T5934]  idr_get_free+0x12d/0x550
[  104.425090][ T5934]  idr_alloc_u32+0xca/0x180
[  104.425193][ T5934]  ? __pfx_loop_control_ioctl+0x10/0x10
[  104.425301][ T5934]  idr_alloc+0x6e/0xd0
[  104.425336][ T5934]  loop_add+0x145/0x590
[  104.425445][ T5934]  ? __pfx_loop_control_ioctl+0x10/0x10
[  104.425466][ T5934]  loop_control_ioctl+0xd0/0x3f0
[  104.425487][ T5934]  ? __pfx_loop_control_ioctl+0x10/0x10
[  104.425513][ T5934]  __se_sys_ioctl+0xcb/0x140
[  104.425597][ T5934]  __x64_sys_ioctl+0x43/0x50
[  104.425698][ T5934]  x64_sys_call+0x1816/0x3000
[  104.425726][ T5934]  do_syscall_64+0xd2/0x200
[  104.425760][ T5934]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  104.425795][ T5934]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  104.425837][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.425862][ T5934] RIP: 0033:0x7f0badd1eec9
[  104.425881][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.425904][ T5934] RSP: 002b:00007f0bac766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.425929][ T5934] RAX: ffffffffffffffda RBX: 00007f0badf76090 RCX: 00007f0badd1eec9
[  104.425999][ T5934] RDX: 00000000000fffff RSI: 0000000000004c80 RDI: 0000000000000008
[  104.426033][ T5934] RBP: 00007f0bac766090 R08: 0000000000000000 R09: 0000000000000000
[  104.426100][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.426116][ T5934] R13: 00007f0badf76128 R14: 00007f0badf76090 R15: 00007ffd37f64158
[  104.426176][ T5934]  </TASK>
[  104.458260][ T5931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.564051][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.619529][ T5938] loop0: detected capacity change from 0 to 512
[  104.627956][ T5933] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.696677][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.705835][ T5941] loop1: detected capacity change from 0 to 512
[  104.712457][ T5941] EXT4-fs: Ignoring removed mblk_io_submit option
[  104.719191][ T5941] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.726711][ T5941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  104.735272][ T5941] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  104.736110][ T5938] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  104.753059][ T5938] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.766675][ T5938] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.757: corrupted inode contents
[  104.784472][ T5941] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.758: Allocating blocks 41-42 which overlap fs metadata
[  104.798569][ T5938] EXT4-fs (loop0): Remounting filesystem read-only
[  104.805526][ T5938] EXT4-fs (loop0): 1 truncate cleaned up
[  104.811535][ T2189] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  104.822157][ T2189] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  104.848236][ T5941] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.758: Failed to acquire dquot type 1
[  104.885476][ T2189] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  104.902348][ T5938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.916983][ T5941] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  104.942087][ T5941] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.758: corrupted inode contents
[  104.965783][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.980877][ T5941] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.758: mark_inode_dirty error
[  105.000286][ T5941] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.758: corrupted inode contents
[  105.019215][ T5941] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.758: mark_inode_dirty error
[  105.025756][ T5954] loop3: detected capacity change from 0 to 512
[  105.031918][ T5941] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.758: corrupted inode contents
[  105.053133][ T5952] ip6gre3: entered allmulticast mode
[  105.058514][ T5941] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  105.069182][ T5941] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.758: corrupted inode contents
[  105.081327][ T5954] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.089095][ T5941] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.758: mark_inode_dirty error
[  105.100538][ T5941] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  105.105105][ T5954] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.110101][ T5941] EXT4-fs (loop1): 1 truncate cleaned up
[  105.130966][ T5956] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.141082][ T5954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  105.144882][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.149735][ T5954] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  105.172763][ T5941] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  105.183137][ T5954] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.762: Allocating blocks 41-42 which overlap fs metadata
[  105.197853][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.208480][ T5956] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.220107][ T5954] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.762: Failed to acquire dquot type 1
[  105.241838][ T5954] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  105.264954][ T5954] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.762: corrupted inode contents
[  105.279749][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.280304][ T5956] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.292065][ T5954] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.762: mark_inode_dirty error
[  105.310231][ T5954] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.762: corrupted inode contents
[  105.332590][ T5954] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.762: mark_inode_dirty error
[  105.343893][ T5960] loop1: detected capacity change from 0 to 4096
[  105.350527][ T5960] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.358423][ T5956] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.368442][ T5954] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.762: corrupted inode contents
[  105.381172][ T5954] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  105.382732][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.405769][ T5954] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.762: corrupted inode contents
[  105.417899][ T5954] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.762: mark_inode_dirty error
[  105.437235][ T5960] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  105.437235][ T5960]    program syz.1.764 not setting count and/or reply_len properly
[  105.455042][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'.
[  105.465084][ T2189] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.473456][ T2189] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.481886][ T2189] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.490497][ T2189] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.502409][ T5954] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  105.513401][ T5954] EXT4-fs (loop3): 1 truncate cleaned up
[  105.520156][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.540458][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.556932][ T5968] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  105.584655][ T5954] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  105.641132][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'.
[  105.650905][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.665971][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'.
[  105.683656][ T5976] loop2: detected capacity change from 0 to 4096
[  105.700641][ T5976] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.722236][ T5976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.779375][ T5982] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  105.785931][ T5982] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  105.793380][ T5982] vhci_hcd vhci_hcd.0: Device attached
[  105.849491][ T5989] loop0: detected capacity change from 0 to 512
[  105.867213][ T5982] siw: device registration error -23
[  105.899097][ T5989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.913727][ T5986] vhci_hcd: connection closed
[  105.915465][   T37] vhci_hcd: stop threads
[  105.922251][ T5976] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  105.922251][ T5976]    program syz.2.769 not setting count and/or reply_len properly
[  105.924447][   T37] vhci_hcd: release socket
[  105.924476][   T37] vhci_hcd: disconnect device
[  105.961783][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'.
[  105.977919][ T5989] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.988485][ T3388] vhci_hcd: vhci_device speed not set
[  106.058853][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.185894][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.250990][ T6001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.264521][ T5999] loop0: detected capacity change from 0 to 512
[  106.295489][ T5999] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  106.307010][ T6001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.315906][ T5999] EXT4-fs (loop0): orphan cleanup on readonly fs
[  106.336504][ T5999] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.775: corrupted inode contents
[  106.366156][ T5999] EXT4-fs (loop0): Remounting filesystem read-only
[  106.367337][ T6001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.372980][ T5999] EXT4-fs (loop0): 1 truncate cleaned up
[  106.391719][ T3461] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  106.402298][ T3461] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  106.413505][ T3461] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  106.426920][ T6001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.442212][ T5999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.511991][ T3461] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.525168][ T3461] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.618612][ T6006] loop3: detected capacity change from 0 to 4096
[  106.621742][   T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.626272][ T6006] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.635490][   T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.688734][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.706949][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.722273][ T6013] netlink: 'syz.1.780': attribute type 3 has an invalid length.
[  106.817002][ T6025] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  106.817002][ T6025]    program syz.3.778 not setting count and/or reply_len properly
[  106.865806][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'.
[  106.988987][ T6040] loop3: detected capacity change from 0 to 512
[  107.018091][ T6045] serio: Serial port ptm0
[  107.040232][ T6040] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.047016][ T6040] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.054538][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'.
[  107.059823][ T6042] loop4: detected capacity change from 0 to 4096
[  107.070484][ T6042] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.077847][ T6040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  107.086364][ T6040] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.112765][ T6040] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.785: Allocating blocks 41-42 which overlap fs metadata
[  107.127136][ T6040] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.785: Failed to acquire dquot type 1
[  107.139378][ T6040] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  107.154254][ T6040] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.785: corrupted inode contents
[  107.172395][ T6040] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.785: mark_inode_dirty error
[  107.188316][ T6040] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.785: corrupted inode contents
[  107.205956][ T6040] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.785: mark_inode_dirty error
[  107.218484][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'.
[  107.219399][ T6040] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.785: corrupted inode contents
[  107.244275][ T6040] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  107.253199][ T6040] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.785: corrupted inode contents
[  107.265389][ T6040] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.785: mark_inode_dirty error
[  107.284418][ T6040] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  107.293691][ T6040] EXT4-fs (loop3): 1 truncate cleaned up
[  107.302315][ T6040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  107.508679][ T6063] netlink: 'syz.3.791': attribute type 3 has an invalid length.
[  107.609697][ T6069] loop2: detected capacity change from 0 to 512
[  107.620900][ T6069] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  107.621018][ T6069] EXT4-fs (loop2): orphan cleanup on readonly fs
[  107.622616][ T6069] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.793: corrupted inode contents
[  107.622868][ T6069] EXT4-fs (loop2): Remounting filesystem read-only
[  107.622929][ T6069] EXT4-fs (loop2): 1 truncate cleaned up
[  107.623313][ T2189] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  107.623339][ T2189] __quota_error: 279 callbacks suppressed
[  107.623352][ T2189] Quota error (device loop2): write_blk: dquota write failed
[  107.623369][ T2189] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  107.623390][ T2189] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  107.623485][ T2189] Quota error (device loop2): write_blk: dquota write failed
[  107.623501][ T2189] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  107.623521][ T2189] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  107.733302][ T2189] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  107.742482][ T2189] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  107.806277][   T29] audit: type=1326 audit(1759598484.738:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f33eec9 code=0x7ffc0000
[  107.806435][   T29] audit: type=1326 audit(1759598484.738:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f33eec9 code=0x7ffc0000
[  107.806604][   T29] audit: type=1326 audit(1759598484.738:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63f33eec9 code=0x7ffc0000
[  107.806653][   T29] audit: type=1326 audit(1759598484.738:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63f33eec9 code=0x7ffc0000
[  107.917922][ T6078] loop1: detected capacity change from 0 to 512
[  107.921257][ T6076] loop0: detected capacity change from 0 to 4096
[  107.921560][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.999859][ T6078] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.034531][ T6084] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  108.034531][ T6084]    program syz.0.795 not setting count and/or reply_len properly
[  108.035389][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'.
[  108.161177][ T6086] loop3: detected capacity change from 0 to 4096
[  108.161457][ T6086] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.186679][ T6086] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  108.186679][ T6086]    program syz.3.797 not setting count and/or reply_len properly
[  108.187407][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'.
[  108.313242][ T6094] loop1: detected capacity change from 0 to 2048
[  108.330193][ T6094] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.800: bg 0: block 234: padding at end of block bitmap is not set
[  108.341696][ T6101] netlink: 'syz.3.802': attribute type 3 has an invalid length.
[  108.394841][ T6104] loop1: detected capacity change from 0 to 512
[  108.395248][ T6104] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.395303][ T6104] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.396155][ T6104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  108.396170][ T6104] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  108.442876][ T6110] loop3: detected capacity change from 0 to 1024
[  108.446588][ T6104] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.803: Allocating blocks 41-42 which overlap fs metadata
[  108.446820][ T6104] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.803: Allocating blocks 41-42 which overlap fs metadata
[  108.447006][ T6104] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.803: Failed to acquire dquot type 1
[  108.447250][ T6104] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  108.447313][ T6104] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.803: corrupted inode contents
[  108.447631][ T6104] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.803: mark_inode_dirty error
[  108.447770][ T6104] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.803: corrupted inode contents
[  108.448004][ T6104] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.803: mark_inode_dirty error
[  108.448216][ T6104] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.803: corrupted inode contents
[  108.448335][ T6104] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  108.448488][ T6104] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.803: corrupted inode contents
[  108.448633][ T6104] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.803: mark_inode_dirty error
[  108.448844][ T6104] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  108.449011][ T6104] EXT4-fs (loop1): 1 truncate cleaned up
[  108.480750][ T6104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  108.700755][ T6110] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.713078][ T6110] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.804: lblock 0 mapped to illegal pblock 0 (length 1)
[  108.736906][ T6110] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  108.749336][ T6110] EXT4-fs (loop3): This should not happen!! Data will be lost
[  108.749336][ T6110] 
[  108.759773][ T6110] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.804: lblock 0 mapped to illegal pblock 0 (length 1)
[  108.761004][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'.
[  108.795148][ T6110] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  108.807491][ T6110] EXT4-fs (loop3): This should not happen!! Data will be lost
[  108.807491][ T6110] 
[  108.857430][ T6123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.897355][ T2189] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1)
[  108.917389][ T2189] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  108.929757][ T2189] EXT4-fs (loop3): This should not happen!! Data will be lost
[  108.929757][ T2189] 
[  108.946996][ T6123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.005860][ T6126] loop3: detected capacity change from 0 to 512
[  109.029936][    C0] hrtimer: interrupt took 39947 ns
[  109.048821][ T6123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.060257][ T6126] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  109.085130][ T6126] EXT4-fs (loop3): orphan cleanup on readonly fs
[  109.096937][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.809: corrupted inode contents
[  109.127068][ T6123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.155117][ T6126] EXT4-fs (loop3): Remounting filesystem read-only
[  109.161918][ T6126] EXT4-fs (loop3): 1 truncate cleaned up
[  109.167766][ T3461] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  109.178344][ T3461] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  109.188928][ T3461] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  109.262514][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.285188][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.293688][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.302277][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.332360][ T6134] loop4: detected capacity change from 0 to 1024
[  109.362889][ T6134] EXT4-fs: Ignoring removed bh option
[  109.378698][ T6134] EXT4-fs: inline encryption not supported
[  109.396389][ T6134] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  109.425625][ T6134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  109.552520][ T6134] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.811: lblock 2 mapped to illegal pblock 2 (length 1)
[  109.567835][ T6142] netlink: 'syz.0.814': attribute type 3 has an invalid length.
[  109.600158][ T6134] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.811: lblock 0 mapped to illegal pblock 48 (length 1)
[  109.625029][ T6134] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.811: Failed to acquire dquot type 0
[  109.646651][ T6134] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  109.652218][ T6147] loop3: detected capacity change from 0 to 512
[  109.666019][ T6134] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.811: mark_inode_dirty error
[  109.673074][ T6147] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.677483][ T6134] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  109.694518][ T6147] EXT4-fs: Ignoring removed nomblk_io_submit option
[  109.701885][ T6147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  109.710508][ T6147] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  109.710790][ T6134] EXT4-fs (loop4): 1 orphan inode deleted
[  109.743039][   T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  109.762202][   T12] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0
[  109.777856][ T6147] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.815: Allocating blocks 41-42 which overlap fs metadata
[  109.793933][ T6147] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.815: Allocating blocks 41-42 which overlap fs metadata
[  109.822743][ T6147] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.815: Failed to acquire dquot type 1
[  109.836125][ T3299] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  109.862637][ T3299] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  109.882655][ T6147] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  109.909572][ T6147] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.815: corrupted inode contents
[  109.921875][ T3299] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  109.932138][ T6147] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.815: mark_inode_dirty error
[  109.983460][ T6147] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.815: corrupted inode contents
[  110.008561][ T6147] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.815: mark_inode_dirty error
[  110.032405][ T6147] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.815: corrupted inode contents
[  110.062489][ T6147] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  110.080930][ T6147] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.815: corrupted inode contents
[  110.102024][ T6160] FAULT_INJECTION: forcing a failure.
[  110.102024][ T6160] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  110.105226][ T6147] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.815: mark_inode_dirty error
[  110.115171][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.4.820 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  110.115208][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  110.115248][ T6160] Call Trace:
[  110.115258][ T6160]  <TASK>
[  110.115269][ T6160]  __dump_stack+0x1d/0x30
[  110.115321][ T6160]  dump_stack_lvl+0xe8/0x140
[  110.115369][ T6160]  dump_stack+0x15/0x1b
[  110.115457][ T6160]  should_fail_ex+0x265/0x280
[  110.115494][ T6160]  should_fail+0xb/0x20
[  110.115538][ T6160]  should_fail_usercopy+0x1a/0x20
[  110.115567][ T6160]  _copy_to_user+0x20/0xa0
[  110.115678][ T6160]  simple_read_from_buffer+0xb5/0x130
[  110.115712][ T6160]  proc_fail_nth_read+0x10e/0x150
[  110.115756][ T6160]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  110.115823][ T6160]  vfs_read+0x1a8/0x770
[  110.115853][ T6160]  ? __rcu_read_unlock+0x4f/0x70
[  110.115886][ T6160]  ? __fget_files+0x184/0x1c0
[  110.115926][ T6160]  ksys_read+0xda/0x1a0
[  110.115958][ T6160]  __x64_sys_read+0x40/0x50
[  110.116048][ T6160]  x64_sys_call+0x27c0/0x3000
[  110.116077][ T6160]  do_syscall_64+0xd2/0x200
[  110.116116][ T6160]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  110.116151][ T6160]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  110.116208][ T6160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.116256][ T6160] RIP: 0033:0x7f82d143d8dc
[  110.116276][ T6160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  110.116303][ T6160] RSP: 002b:00007f82cfea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  110.116328][ T6160] RAX: ffffffffffffffda RBX: 00007f82d1695fa0 RCX: 00007f82d143d8dc
[  110.116346][ T6160] RDX: 000000000000000f RSI: 00007f82cfea70a0 RDI: 0000000000000003
[  110.116363][ T6160] RBP: 00007f82cfea7090 R08: 0000000000000000 R09: 0000000000000000
[  110.116445][ T6160] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001
[  110.116462][ T6160] R13: 00007f82d1696038 R14: 00007f82d1695fa0 R15: 00007fff1669ec38
[  110.116487][ T6160]  </TASK>
[  110.325904][ T6147] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  110.337761][ T6162] loop4: detected capacity change from 0 to 4096
[  110.343708][ T6166] loop2: detected capacity change from 0 to 1024
[  110.344606][ T6162] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.357578][ T6147] EXT4-fs (loop3): 1 truncate cleaned up
[  110.403048][ T6147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  110.426104][ T6166] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.438677][ T6166] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.819: lblock 0 mapped to illegal pblock 0 (length 1)
[  110.452296][ T6166] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  110.464684][ T6166] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.464684][ T6166] 
[  110.483542][ T6166] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.819: lblock 0 mapped to illegal pblock 0 (length 1)
[  110.505575][ T6166] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  110.517909][ T6166] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.517909][ T6166] 
[  110.554489][ T6178] loop4: detected capacity change from 0 to 512
[  110.557787][ T6179] loop1: detected capacity change from 0 to 1024
[  110.585336][  T156] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1)
[  110.617658][ T6181] netlink: 'syz.3.827': attribute type 3 has an invalid length.
[  110.632394][ T6179] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.647937][  T156] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  110.660421][  T156] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.660421][  T156] 
[  110.702471][ T6178] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  110.715457][ T6178] EXT4-fs (loop4): orphan cleanup on readonly fs
[  110.733174][ T6178] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.826: corrupted inode contents
[  110.761975][ T6194] FAULT_INJECTION: forcing a failure.
[  110.761975][ T6194] name failslab, interval 1, probability 0, space 0, times 0
[  110.774762][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  110.774796][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  110.774813][ T6194] Call Trace:
[  110.774821][ T6194]  <TASK>
[  110.774830][ T6194]  __dump_stack+0x1d/0x30
[  110.774874][ T6194]  dump_stack_lvl+0xe8/0x140
[  110.774944][ T6194]  dump_stack+0x15/0x1b
[  110.774985][ T6194]  should_fail_ex+0x265/0x280
[  110.775027][ T6194]  should_failslab+0x8c/0xb0
[  110.775068][ T6194]  __kmalloc_node_noprof+0xaa/0x580
[  110.775099][ T6194]  ? qdisc_alloc+0x65/0x440
[  110.775200][ T6194]  qdisc_alloc+0x65/0x440
[  110.775242][ T6194]  qdisc_create_dflt+0x7f/0x2d0
[  110.775297][ T6194]  mq_init+0x1b6/0x380
[  110.775308][ T6178] EXT4-fs (loop4): Remounting filesystem read-only
[  110.775355][ T6194]  ? __rcu_read_unlock+0x4f/0x70
[  110.775392][ T6194]  qdisc_create_dflt+0xec/0x2d0
[  110.775436][ T6194]  ? dev_activate+0xbb/0x9e0
[  110.775481][ T6194]  dev_activate+0xde/0x9e0
[  110.775592][ T6194]  ? _raw_spin_unlock_bh+0x36/0x40
[  110.775643][ T6194]  __dev_open+0x472/0x530
[  110.775680][ T6194]  __dev_change_flags+0x163/0x400
[  110.775749][ T6194]  netif_change_flags+0x5a/0xd0
[  110.775832][ T6194]  dev_change_flags+0xce/0x180
[  110.775871][ T6194]  dev_ifsioc+0x44b/0xaa0
[  110.775898][ T6194]  ? __rcu_read_unlock+0x4f/0x70
[  110.775963][ T6194]  dev_ioctl+0x70a/0x960
[  110.776030][ T6194]  sock_do_ioctl+0x197/0x220
[  110.776144][ T6194]  sock_ioctl+0x41b/0x610
[  110.776179][ T6194]  ? __pfx_sock_ioctl+0x10/0x10
[  110.776229][ T6194]  __se_sys_ioctl+0xcb/0x140
[  110.776270][ T6194]  __x64_sys_ioctl+0x43/0x50
[  110.776295][ T6194]  x64_sys_call+0x1816/0x3000
[  110.776363][ T6194]  do_syscall_64+0xd2/0x200
[  110.776399][ T6194]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  110.776518][ T6194]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  110.776550][ T6194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.776578][ T6194] RIP: 0033:0x7f0badd1eec9
[  110.776595][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.776618][ T6194] RSP: 002b:00007f0bac787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.776685][ T6194] RAX: ffffffffffffffda RBX: 00007f0badf75fa0 RCX: 00007f0badd1eec9
[  110.776703][ T6194] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005
[  110.776720][ T6194] RBP: 00007f0bac787090 R08: 0000000000000000 R09: 0000000000000000
[  110.776737][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.776754][ T6194] R13: 00007f0badf76038 R14: 00007f0badf75fa0 R15: 00007ffd37f64158
[  110.776780][ T6194]  </TASK>
[  110.776962][ T6194] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  110.795048][ T6178] EXT4-fs (loop4): 1 truncate cleaned up
[  110.800998][ T6189] loop2: detected capacity change from 0 to 2048
[  110.805574][  T156] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  110.817681][ T6194] pim6reg1: entered promiscuous mode
[  110.818775][  T156] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  111.081943][ T6189] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.100645][  T156] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  111.155242][ T6198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.828: bg 0: block 345: padding at end of block bitmap is not set
[  111.184710][ T6200] loop0: detected capacity change from 0 to 512
[  111.212100][ T6200] EXT4-fs: Ignoring removed mblk_io_submit option
[  111.225833][ T6198] EXT4-fs (loop2): Remounting filesystem read-only
[  111.232413][ T3461] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  111.256725][ T6200] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.295691][ T6200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  111.304172][ T6200] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.323495][ T6204] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  111.330043][ T6204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  111.337673][ T6204] vhci_hcd vhci_hcd.0: Device attached
[  111.416228][ T6205] vhci_hcd: connection closed
[  111.425030][ T6200] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.831: Allocating blocks 41-42 which overlap fs metadata
[  111.448209][  T156] vhci_hcd: stop threads
[  111.452482][  T156] vhci_hcd: release socket
[  111.457062][  T156] vhci_hcd: disconnect device
[  111.504130][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'.
[  111.525531][   T23] vhci_hcd: vhci_device speed not set
[  111.532874][ T6200] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.831: Allocating blocks 41-42 which overlap fs metadata
[  111.551648][ T6200] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.831: Failed to acquire dquot type 1
[  111.563429][ T6200] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  111.578474][ T6200] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.831: corrupted inode contents
[  111.591202][ T6200] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #12: comm syz.0.831: mark_inode_dirty error
[  111.602805][ T6200] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.831: corrupted inode contents
[  111.615178][ T6200] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.831: mark_inode_dirty error
[  111.628491][ T6200] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.831: corrupted inode contents
[  111.646965][ T6223] loop2: detected capacity change from 0 to 1024
[  111.673655][ T6225] netlink: 'syz.4.839': attribute type 3 has an invalid length.
[  111.682981][ T6200] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  111.692437][ T6223] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.715175][ T6200] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.831: corrupted inode contents
[  111.728705][ T6223] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.838: lblock 0 mapped to illegal pblock 0 (length 1)
[  111.742338][ T6223] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  111.754655][ T6223] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.754655][ T6223] 
[  111.768125][ T6200] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.831: mark_inode_dirty error
[  111.795408][ T6223] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.838: lblock 0 mapped to illegal pblock 0 (length 1)
[  111.813881][ T6223] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  111.825114][ T6200] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  111.826209][ T6223] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.826209][ T6223] 
[  111.835183][ T6232] loop4: detected capacity change from 0 to 512
[  111.860056][ T6200] EXT4-fs (loop0): 1 truncate cleaned up
[  111.870826][  T156] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1)
[  111.886856][ T6232] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.898317][  T156] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  111.910614][  T156] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.910614][  T156] 
[  111.915567][ T6200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  112.060814][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'.
[  112.069821][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.844'.
[  112.102504][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'.
[  112.111471][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'.
[  112.157522][ T6244] loop0: detected capacity change from 0 to 128
[  112.167404][ T6241] loop1: detected capacity change from 0 to 1024
[  112.174505][ T6241] EXT4-fs: Ignoring removed bh option
[  112.182861][ T6245] loop4: detected capacity change from 0 to 1024
[  112.217655][ T6241] EXT4-fs: inline encryption not supported
[  112.238306][ T6245] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.258794][ T6241] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  112.267448][ T6241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  112.271191][ T6241] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.844: lblock 2 mapped to illegal pblock 2 (length 1)
[  112.305195][ T6241] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.844: lblock 0 mapped to illegal pblock 48 (length 1)
[  112.305363][ T6241] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.844: Failed to acquire dquot type 0
[  112.354221][ T6241] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  112.354352][ T6241] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.844: mark_inode_dirty error
[  112.354501][ T6241] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  112.354538][ T6241] EXT4-fs (loop1): 1 orphan inode deleted
[  112.366637][  T156] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  112.366786][  T156] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0
[  112.384627][ T6241] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  112.460526][ T6260] netlink: 'syz.1.850': attribute type 3 has an invalid length.
[  112.558494][ T6267] loop1: detected capacity change from 0 to 1024
[  112.580536][ T6267] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.582009][ T6267] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.851: lblock 0 mapped to illegal pblock 0 (length 1)
[  112.607638][ T6267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  112.607675][ T6267] EXT4-fs (loop1): This should not happen!! Data will be lost
[  112.607675][ T6267] 
[  112.607999][ T6267] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.851: lblock 0 mapped to illegal pblock 0 (length 1)
[  112.608143][ T6267] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  112.655798][ T6267] EXT4-fs (loop1): This should not happen!! Data will be lost
[  112.655798][ T6267] 
[  112.665672][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  112.665689][   T29] audit: type=1326 audit(1759598489.588:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.665728][   T29] audit: type=1326 audit(1759598489.588:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.665762][   T29] audit: type=1326 audit(1759598489.588:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.665798][   T29] audit: type=1326 audit(1759598489.588:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.665843][   T29] audit: type=1326 audit(1759598489.598:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.665879][   T29] audit: type=1326 audit(1759598489.598:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.666597][   T29] audit: type=1326 audit(1759598489.598:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.666637][   T29] audit: type=1326 audit(1759598489.598:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.666675][   T29] audit: type=1326 audit(1759598489.598:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.666760][   T29] audit: type=1326 audit(1759598489.598:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.1.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0badd1eec9 code=0x7ffc0000
[  112.719392][  T156] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1)
[  112.931557][ T6275] FAULT_INJECTION: forcing a failure.
[  112.931557][ T6275] name failslab, interval 1, probability 0, space 0, times 0
[  112.955524][ T6275] CPU: 0 UID: 0 PID: 6275 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.955596][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  112.955612][ T6275] Call Trace:
[  112.955619][ T6275]  <TASK>
[  112.955629][ T6275]  __dump_stack+0x1d/0x30
[  112.955671][ T6275]  dump_stack_lvl+0xe8/0x140
[  112.955749][ T6275]  dump_stack+0x15/0x1b
[  112.955786][ T6275]  should_fail_ex+0x265/0x280
[  112.955830][ T6275]  should_failslab+0x8c/0xb0
[  112.955862][ T6275]  __kmalloc_noprof+0xa5/0x570
[  112.955979][ T6275]  ? pfkey_add+0x85b/0x12e0
[  112.956011][ T6275]  pfkey_add+0x85b/0x12e0
[  112.956048][ T6275]  pfkey_sendmsg+0x718/0x900
[  112.956124][ T6275]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  112.956193][ T6275]  __sock_sendmsg+0x145/0x180
[  112.956227][ T6275]  ____sys_sendmsg+0x31e/0x4e0
[  112.956266][ T6275]  ___sys_sendmsg+0x17b/0x1d0
[  112.956383][ T6275]  __x64_sys_sendmsg+0xd4/0x160
[  112.956406][ T6275]  x64_sys_call+0x191e/0x3000
[  112.956437][ T6275]  do_syscall_64+0xd2/0x200
[  112.956493][ T6275]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.956526][ T6275]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  112.956557][ T6275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.956585][ T6275] RIP: 0033:0x7f0d62a0eec9
[  112.956652][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.956675][ T6275] RSP: 002b:00007f0d6146f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.956699][ T6275] RAX: ffffffffffffffda RBX: 00007f0d62c65fa0 RCX: 00007f0d62a0eec9
[  112.956714][ T6275] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  112.956726][ T6275] RBP: 00007f0d6146f090 R08: 0000000000000000 R09: 0000000000000000
[  112.956736][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.956747][ T6275] R13: 00007f0d62c66038 R14: 00007f0d62c65fa0 R15: 00007ffe432bc308
[  112.956766][ T6275]  </TASK>
[  113.010905][  T156] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  113.010998][  T156] EXT4-fs (loop1): This should not happen!! Data will be lost
[  113.010998][  T156] 
[  113.349494][ T6285] FAULT_INJECTION: forcing a failure.
[  113.349494][ T6285] name failslab, interval 1, probability 0, space 0, times 0
[  113.362210][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.4.857 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.362239][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  113.362317][ T6285] Call Trace:
[  113.362333][ T6285]  <TASK>
[  113.362341][ T6285]  __dump_stack+0x1d/0x30
[  113.362384][ T6285]  dump_stack_lvl+0xe8/0x140
[  113.362424][ T6285]  dump_stack+0x15/0x1b
[  113.362473][ T6285]  should_fail_ex+0x265/0x280
[  113.362505][ T6285]  should_failslab+0x8c/0xb0
[  113.362564][ T6286] loop3: detected capacity change from 0 to 512
[  113.362559][ T6285]  __kmalloc_noprof+0xa5/0x570
[  113.362592][ T6285]  ? ___neigh_create+0x4c9/0x1290
[  113.362617][ T6285]  ___neigh_create+0x4c9/0x1290
[  113.362646][ T6285]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  113.362767][ T6285]  ? enqueue_to_backlog+0x54d/0x5a0
[  113.362802][ T6285]  ? netlbl_enabled+0x25/0x40
[  113.362841][ T6285]  ? selinux_ip_postroute+0x1b7/0xb50
[  113.362882][ T6285]  __neigh_create+0x54/0x70
[  113.362929][ T6285]  ip_neigh_gw4+0x12e/0x170
[  113.362967][ T6285]  ip_finish_output2+0x857/0x8b0
[  113.363003][ T6285]  ? __rcu_read_unlock+0x4f/0x70
[  113.363036][ T6285]  ip_finish_output+0x114/0x2a0
[  113.363133][ T6285]  ip_mc_output+0x25d/0x340
[  113.363162][ T6285]  ? __pfx_ip_finish_output+0x10/0x10
[  113.363195][ T6285]  ip_send_skb+0x151/0x160
[  113.363230][ T6285]  udp_send_skb+0x6e3/0xa40
[  113.363296][ T6285]  udp_sendmsg+0x1050/0x13c0
[  113.363325][ T6285]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  113.363356][ T6285]  ? __pfx_udp_sendmsg+0x10/0x10
[  113.363377][ T6285]  inet_sendmsg+0xac/0xd0
[  113.363431][ T6285]  __sock_sendmsg+0x102/0x180
[  113.363465][ T6285]  ____sys_sendmsg+0x345/0x4e0
[  113.363493][ T6285]  ___sys_sendmsg+0x17b/0x1d0
[  113.363535][ T6285]  __sys_sendmmsg+0x178/0x300
[  113.363580][ T6285]  __x64_sys_sendmmsg+0x57/0x70
[  113.363606][ T6285]  x64_sys_call+0x1c4a/0x3000
[  113.363656][ T6285]  do_syscall_64+0xd2/0x200
[  113.363690][ T6285]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.363723][ T6285]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  113.363807][ T6285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.363839][ T6285] RIP: 0033:0x7f82d143eec9
[  113.363858][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.363880][ T6285] RSP: 002b:00007f82cfea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  113.363906][ T6285] RAX: ffffffffffffffda RBX: 00007f82d1695fa0 RCX: 00007f82d143eec9
[  113.363923][ T6285] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  113.363939][ T6285] RBP: 00007f82cfea7090 R08: 0000000000000000 R09: 0000000000000000
[  113.363953][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.363969][ T6285] R13: 00007f82d1696038 R14: 00007f82d1695fa0 R15: 00007fff1669ec38
[  113.364059][ T6285]  </TASK>
[  113.718428][ T6286] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.756852][ T6271] Set syz1 is full, maxelem 65536 reached
[  113.814122][ T6298] netlink: 'syz.0.861': attribute type 3 has an invalid length.
[  113.861611][ T6296] loop2: detected capacity change from 0 to 2048
[  113.869896][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'.
[  113.923659][ T6307] FAULT_INJECTION: forcing a failure.
[  113.923659][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.936818][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.936892][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  113.936909][ T6307] Call Trace:
[  113.936917][ T6307]  <TASK>
[  113.936926][ T6307]  __dump_stack+0x1d/0x30
[  113.936972][ T6307]  dump_stack_lvl+0xe8/0x140
[  113.937006][ T6307]  dump_stack+0x15/0x1b
[  113.937062][ T6307]  should_fail_ex+0x265/0x280
[  113.937124][ T6307]  should_fail+0xb/0x20
[  113.937164][ T6307]  should_fail_usercopy+0x1a/0x20
[  113.937251][ T6307]  _copy_from_user+0x1c/0xb0
[  113.937282][ T6307]  ethtool_get_strings+0x4a/0x640
[  113.937346][ T6307]  ? strcmp+0x22/0x50
[  113.937376][ T6307]  dev_ethtool+0x106e/0x1670
[  113.937400][ T6307]  ? full_name_hash+0x92/0xe0
[  113.937434][ T6307]  dev_ioctl+0x2e0/0x960
[  113.937530][ T6307]  sock_do_ioctl+0x197/0x220
[  113.937564][ T6307]  sock_ioctl+0x41b/0x610
[  113.937587][ T6307]  ? __pfx_sock_ioctl+0x10/0x10
[  113.937615][ T6307]  __se_sys_ioctl+0xcb/0x140
[  113.937641][ T6307]  __x64_sys_ioctl+0x43/0x50
[  113.937726][ T6307]  x64_sys_call+0x1816/0x3000
[  113.937753][ T6307]  do_syscall_64+0xd2/0x200
[  113.937786][ T6307]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.937839][ T6307]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  113.937866][ T6307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.937887][ T6307] RIP: 0033:0x7f0badd1eec9
[  113.937906][ T6307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.937939][ T6307] RSP: 002b:00007f0bac787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.937964][ T6307] RAX: ffffffffffffffda RBX: 00007f0badf75fa0 RCX: 00007f0badd1eec9
[  113.937980][ T6307] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000004
[  113.937994][ T6307] RBP: 00007f0bac787090 R08: 0000000000000000 R09: 0000000000000000
[  113.938006][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.938036][ T6307] R13: 00007f0badf76038 R14: 00007f0badf75fa0 R15: 00007ffd37f64158
[  113.938129][ T6307]  </TASK>
[  113.997732][ T3290] Alternate GPT is invalid, using primary GPT.
[  114.084455][ T6310] loop1: detected capacity change from 0 to 512
[  114.099651][ T3290]  loop2: p2 p3 p7
[  114.114551][ T6303] mmap: syz.2.860 (6303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  114.130390][ T6311] loop0: detected capacity change from 0 to 512
[  114.179581][ T6296] Alternate GPT is invalid, using primary GPT.
[  114.191978][ T6296]  loop2: p2 p3 p7
[  114.246075][ T6310] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.268094][ T6316] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  114.326695][ T6311] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.369521][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  114.380951][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  114.392399][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  114.416201][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  114.425123][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  114.436266][ T6324] loop2: detected capacity change from 0 to 4096
[  114.464194][ T6324] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.474656][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  114.496293][ T6324] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  114.496293][ T6324]    program syz.2.869 not setting count and/or reply_len properly
[  114.515371][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'.
[  114.533326][ T6331] 8021q: VLANs not supported on vcan0
[  114.559376][ T6331] FAULT_INJECTION: forcing a failure.
[  114.559376][ T6331] name failslab, interval 1, probability 0, space 0, times 0
[  114.572085][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.4.871 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.572130][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  114.572147][ T6331] Call Trace:
[  114.572155][ T6331]  <TASK>
[  114.572164][ T6331]  __dump_stack+0x1d/0x30
[  114.572203][ T6331]  dump_stack_lvl+0xe8/0x140
[  114.572252][ T6331]  dump_stack+0x15/0x1b
[  114.572294][ T6331]  should_fail_ex+0x265/0x280
[  114.572355][ T6331]  ? sctp_auth_asoc_copy_shkeys+0xfa/0x330
[  114.572389][ T6331]  should_failslab+0x8c/0xb0
[  114.572436][ T6331]  __kmalloc_cache_noprof+0x4c/0x4a0
[  114.572521][ T6331]  sctp_auth_asoc_copy_shkeys+0xfa/0x330
[  114.572559][ T6331]  sctp_association_new+0xde5/0x1200
[  114.572607][ T6331]  sctp_connect_new_asoc+0x1a8/0x3a0
[  114.572699][ T6331]  sctp_sendmsg+0xf10/0x18d0
[  114.572769][ T6331]  ? selinux_socket_sendmsg+0x161/0x1b0
[  114.572794][ T6331]  ? __pfx_sctp_sendmsg+0x10/0x10
[  114.572837][ T6331]  inet_sendmsg+0xc2/0xd0
[  114.572861][ T6331]  __sock_sendmsg+0x102/0x180
[  114.572913][ T6331]  __sys_sendto+0x268/0x330
[  114.573105][ T6331]  __x64_sys_sendto+0x76/0x90
[  114.573145][ T6331]  x64_sys_call+0x2d14/0x3000
[  114.573220][ T6331]  do_syscall_64+0xd2/0x200
[  114.573246][ T6331]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  114.573276][ T6331]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  114.573299][ T6331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.573320][ T6331] RIP: 0033:0x7f82d143eec9
[  114.573338][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.573362][ T6331] RSP: 002b:00007f82cfe86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  114.573386][ T6331] RAX: ffffffffffffffda RBX: 00007f82d1696090 RCX: 00007f82d143eec9
[  114.573511][ T6331] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000008
[  114.573527][ T6331] RBP: 00007f82cfe86090 R08: 0000200000000480 R09: 000000000000001c
[  114.573556][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.573572][ T6331] R13: 00007f82d1696128 R14: 00007f82d1696090 R15: 00007fff1669ec38
[  114.573593][ T6331]  </TASK>
[  114.815356][ T6333] netlink: 'syz.2.872': attribute type 29 has an invalid length.
[  114.824548][ T6335] netlink: 'syz.3.873': attribute type 3 has an invalid length.
[  114.881795][ T6335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.873'.
[  114.966852][ T6348] loop3: detected capacity change from 0 to 1024
[  115.012604][ T6348] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.031979][ T6351] loop2: detected capacity change from 0 to 512
[  115.099399][ T6351] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  115.121005][ T6348] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.876: lblock 0 mapped to illegal pblock 0 (length 1)
[  115.134694][ T6351] EXT4-fs (loop2): orphan cleanup on readonly fs
[  115.164037][ T6357] loop0: detected capacity change from 0 to 4096
[  115.176885][ T6351] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.879: corrupted inode contents
[  115.179540][ T6348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  115.201007][ T6348] EXT4-fs (loop3): This should not happen!! Data will be lost
[  115.201007][ T6348] 
[  115.215195][ T6351] EXT4-fs (loop2): Remounting filesystem read-only
[  115.238259][ T6351] EXT4-fs (loop2): 1 truncate cleaned up
[  115.241724][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  115.254486][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  115.288191][ T6348] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.876: lblock 0 mapped to illegal pblock 0 (length 1)
[  115.317230][   T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  115.337223][ T6348] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  115.349621][ T6348] EXT4-fs (loop3): This should not happen!! Data will be lost
[  115.349621][ T6348] 
[  115.399757][ T6370] loop0: detected capacity change from 0 to 512
[  115.415451][ T6370] EXT4-fs: Ignoring removed mblk_io_submit option
[  115.453521][ T6370] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.482790][ T6374] ip6gre7: entered allmulticast mode
[  115.496628][ T6370] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  115.505207][ T6370] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  115.528833][ T6370] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.882: Allocating blocks 41-42 which overlap fs metadata
[  115.557736][ T6380] netlink: 'syz.1.886': attribute type 3 has an invalid length.
[  115.587076][ T6370] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.882: Allocating blocks 41-42 which overlap fs metadata
[  115.618129][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.886'.
[  115.625417][ T6370] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.882: Failed to acquire dquot type 1
[  115.639065][ T6370] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  115.654114][ T6370] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.882: corrupted inode contents
[  115.666410][ T6370] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #12: comm syz.0.882: mark_inode_dirty error
[  115.706498][ T6370] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.882: corrupted inode contents
[  115.724382][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'.
[  115.727596][ T6387] loop1: detected capacity change from 0 to 512
[  115.742402][ T6370] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.882: mark_inode_dirty error
[  115.763979][ T6370] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.882: corrupted inode contents
[  115.787343][ T6370] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  115.797421][ T6387] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.808379][ T6370] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #12: comm syz.0.882: corrupted inode contents
[  115.822984][ T6370] EXT4-fs error (device loop0): ext4_truncate:4637: inode #12: comm syz.0.882: mark_inode_dirty error
[  115.855835][ T6370] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  115.870156][ T6370] EXT4-fs (loop0): 1 truncate cleaned up
[  115.899064][ T6370] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  115.920923][ T6393] 8021q: VLANs not supported on vcan0
[  115.977230][ T6402] FAULT_INJECTION: forcing a failure.
[  115.977230][ T6402] name failslab, interval 1, probability 0, space 0, times 0
[  115.990039][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.2.895 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  115.990067][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  115.990079][ T6402] Call Trace:
[  115.990086][ T6402]  <TASK>
[  115.990095][ T6402]  __dump_stack+0x1d/0x30
[  115.990202][ T6402]  dump_stack_lvl+0xe8/0x140
[  115.990242][ T6402]  dump_stack+0x15/0x1b
[  115.990329][ T6402]  should_fail_ex+0x265/0x280
[  115.990370][ T6402]  should_failslab+0x8c/0xb0
[  115.990401][ T6402]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  115.990517][ T6402]  ? nf_ct_ext_add+0x106/0x210
[  115.990541][ T6402]  krealloc_node_align_noprof+0xd7/0x340
[  115.990568][ T6402]  nf_ct_ext_add+0x106/0x210
[  115.990597][ T6402]  ctnetlink_new_conntrack+0xbea/0x1280
[  115.990697][ T6402]  ? __nla_validate_parse+0x1652/0x1d00
[  115.990733][ T6402]  ? __nla_parse+0x40/0x60
[  115.990760][ T6402]  nfnetlink_rcv_msg+0x4c3/0x590
[  115.990792][ T6402]  ? rep_movs_alternative+0xf/0x90
[  115.990909][ T6402]  netlink_rcv_skb+0x123/0x220
[  115.990941][ T6402]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  115.991007][ T6402]  nfnetlink_rcv+0x167/0x16c0
[  115.991040][ T6402]  ? kmem_cache_free+0xe4/0x3d0
[  115.991075][ T6402]  ? __kfree_skb+0x109/0x150
[  115.991175][ T6402]  ? nlmon_xmit+0x4f/0x60
[  115.991231][ T6402]  ? consume_skb+0x49/0x150
[  115.991269][ T6402]  ? nlmon_xmit+0x4f/0x60
[  115.991390][ T6402]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  115.991499][ T6402]  ? __dev_queue_xmit+0x1200/0x2000
[  115.991516][ T6402]  ? __dev_queue_xmit+0x182/0x2000
[  115.991535][ T6402]  ? ref_tracker_free+0x37d/0x3e0
[  115.991581][ T6402]  ? __netlink_deliver_tap+0x4dc/0x500
[  115.991696][ T6402]  netlink_unicast+0x5c0/0x690
[  115.991793][ T6402]  netlink_sendmsg+0x58b/0x6b0
[  115.991819][ T6402]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.991882][ T6402]  __sock_sendmsg+0x145/0x180
[  115.991982][ T6402]  ____sys_sendmsg+0x31e/0x4e0
[  115.992023][ T6402]  ___sys_sendmsg+0x17b/0x1d0
[  115.992077][ T6402]  __x64_sys_sendmsg+0xd4/0x160
[  115.992109][ T6402]  x64_sys_call+0x191e/0x3000
[  115.992136][ T6402]  do_syscall_64+0xd2/0x200
[  115.992201][ T6402]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  115.992237][ T6402]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  115.992313][ T6402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.992342][ T6402] RIP: 0033:0x7fa63f33eec9
[  115.992361][ T6402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.992380][ T6402] RSP: 002b:00007fa63dd9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.992398][ T6402] RAX: ffffffffffffffda RBX: 00007fa63f595fa0 RCX: 00007fa63f33eec9
[  115.992458][ T6402] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  115.992475][ T6402] RBP: 00007fa63dd9f090 R08: 0000000000000000 R09: 0000000000000000
[  115.992605][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.992631][ T6402] R13: 00007fa63f596038 R14: 00007fa63f595fa0 R15: 00007fff8a2d2998
[  115.992658][ T6402]  </TASK>
[  116.003612][ T6398] loop4: detected capacity change from 0 to 512
[  116.046688][ T6405] ip6gre4: entered allmulticast mode
[  116.086253][ T6398] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.165822][ T6410] loop2: detected capacity change from 0 to 512
[  116.171436][ T6398] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.239831][ T6410] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  116.250246][ T6398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  116.259056][ T6410] EXT4-fs (loop2): orphan cleanup on readonly fs
[  116.266202][ T6398] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  116.361616][ T6398] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.894: Allocating blocks 41-42 which overlap fs metadata
[  116.375728][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.897: corrupted inode contents
[  116.388864][ T6398] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.894: Failed to acquire dquot type 1
[  116.400075][ T6410] EXT4-fs (loop2): Remounting filesystem read-only
[  116.409867][ T6398] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  116.424447][ T6410] EXT4-fs (loop2): 1 truncate cleaned up
[  116.430313][  T156] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  116.430346][ T6398] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.894: corrupted inode contents
[  116.441058][  T156] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  116.454094][  T156] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  116.474943][ T6398] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.894: mark_inode_dirty error
[  116.486906][ T6398] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.894: corrupted inode contents
[  116.499464][ T6398] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.894: mark_inode_dirty error
[  116.539906][ T6398] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.894: corrupted inode contents
[  116.565139][ T6398] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  116.574075][ T6398] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.894: corrupted inode contents
[  116.600481][ T6398] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.894: mark_inode_dirty error
[  116.616557][ T6398] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  116.633277][ T6423] loop0: detected capacity change from 0 to 512
[  116.649914][ T6398] EXT4-fs (loop4): 1 truncate cleaned up
[  116.671414][ T6423] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.718873][ T6398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  116.739342][ T6429] loop3: detected capacity change from 0 to 512
[  116.769225][ T6429] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.844744][ T6435] loop1: detected capacity change from 0 to 256
[  116.939873][ T6435] FAULT_INJECTION: forcing a failure.
[  116.939873][ T6435] name failslab, interval 1, probability 0, space 0, times 0
[  116.946107][ T6438] netlink: 'syz.2.904': attribute type 3 has an invalid length.
[  116.952545][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.1.906 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  116.952650][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  116.952762][ T6435] Call Trace:
[  116.952771][ T6435]  <TASK>
[  116.952781][ T6435]  __dump_stack+0x1d/0x30
[  116.952842][ T6435]  dump_stack_lvl+0xe8/0x140
[  116.952891][ T6435]  dump_stack+0x15/0x1b
[  116.952997][ T6435]  should_fail_ex+0x265/0x280
[  116.953047][ T6435]  should_failslab+0x8c/0xb0
[  116.953084][ T6435]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  116.953192][ T6435]  ? __alloc_skb+0x101/0x320
[  116.953370][ T6435]  __alloc_skb+0x101/0x320
[  116.953414][ T6435]  netlink_alloc_large_skb+0xbf/0xf0
[  116.953460][ T6435]  netlink_sendmsg+0x3cf/0x6b0
[  116.953492][ T6435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.953520][ T6435]  __sock_sendmsg+0x145/0x180
[  116.953622][ T6435]  ____sys_sendmsg+0x31e/0x4e0
[  116.953653][ T6435]  ___sys_sendmsg+0x17b/0x1d0
[  116.953701][ T6435]  __x64_sys_sendmsg+0xd4/0x160
[  116.953782][ T6435]  x64_sys_call+0x191e/0x3000
[  116.953818][ T6435]  do_syscall_64+0xd2/0x200
[  116.953856][ T6435]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  116.953940][ T6435]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  116.953976][ T6435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.954008][ T6435] RIP: 0033:0x7f0badd1eec9
[  116.954031][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.954058][ T6435] RSP: 002b:00007f0bac787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.954085][ T6435] RAX: ffffffffffffffda RBX: 00007f0badf75fa0 RCX: 00007f0badd1eec9
[  116.954164][ T6435] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000009
[  116.954237][ T6435] RBP: 00007f0bac787090 R08: 0000000000000000 R09: 0000000000000000
[  116.954255][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.954310][ T6435] R13: 00007f0badf76038 R14: 00007f0badf75fa0 R15: 00007ffd37f64158
[  116.954338][ T6435]  </TASK>
[  117.165174][ T6441] loop2: detected capacity change from 0 to 1024
[  117.171964][ T6441] EXT4-fs: Ignoring removed orlov option
[  117.214870][ T6446] loop0: detected capacity change from 0 to 256
[  117.227854][ T6445] loop3: detected capacity change from 0 to 1024
[  117.251417][ T6446] msdos: Unknown parameter 'ÿÿÿÿ'
[  117.310395][ T6445] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.352171][ T6445] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.907: lblock 0 mapped to illegal pblock 0 (length 1)
[  117.369776][ T6445] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  117.382230][ T6445] EXT4-fs (loop3): This should not happen!! Data will be lost
[  117.382230][ T6445] 
[  117.395543][ T6445] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.907: lblock 0 mapped to illegal pblock 0 (length 1)
[  117.426364][ T6445] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  117.438862][ T6445] EXT4-fs (loop3): This should not happen!! Data will be lost
[  117.438862][ T6445] 
[  117.497637][ T2189] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1)
[  117.525320][ T2189] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  117.537798][ T2189] EXT4-fs (loop3): This should not happen!! Data will be lost
[  117.537798][ T2189] 
[  117.696564][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'.
[  117.751530][ T3290] ==================================================================
[  117.759662][ T3290] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[  117.766381][ T3290] 
[  117.768711][ T3290] write to 0xffff888106ebbcd0 of 8 bytes by task 2989 on cpu 0:
[  117.776373][ T3290]  __dentry_kill+0x142/0x4b0
[  117.780996][ T3290]  dput+0x5e/0xd0
[  117.784657][ T3290]  step_into+0x58c/0x7f0
[  117.788924][ T3290]  walk_component+0x162/0x220
[  117.793655][ T3290]  path_lookupat+0xfe/0x2a0
[  117.798202][ T3290]  filename_lookup+0x2d7/0x340
[  117.803005][ T3290]  do_readlinkat+0x7d/0x320
[  117.807524][ T3290]  __x64_sys_readlink+0x47/0x60
[  117.812405][ T3290]  x64_sys_call+0x28de/0x3000
[  117.817094][ T3290]  do_syscall_64+0xd2/0x200
[  117.821614][ T3290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.827550][ T3290] 
[  117.829880][ T3290] read to 0xffff888106ebbcd0 of 8 bytes by task 3290 on cpu 1:
[  117.837435][ T3290]  fast_dput+0x5f/0x2c0
[  117.841638][ T3290]  dput+0x24/0xd0
[  117.845303][ T3290]  do_unlinkat+0x259/0x480
[  117.849751][ T3290]  __x64_sys_unlink+0x2e/0x40
[  117.854448][ T3290]  x64_sys_call+0x2dcf/0x3000
[  117.859147][ T3290]  do_syscall_64+0xd2/0x200
[  117.863674][ T3290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.869625][ T3290] 
[  117.871958][ T3290] value changed: 0xffff88823794f1a0 -> 0x0000000000000000
[  117.879072][ T3290] 
[  117.881444][ T3290] Reported by Kernel Concurrency Sanitizer on:
[  117.887613][ T3290] CPU: 1 UID: 0 PID: 3290 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  117.896918][ T3290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  117.906989][ T3290] ==================================================================
[  117.950796][   T29] kauditd_printk_skb: 287 callbacks suppressed
[  117.950814][   T29] audit: type=1326 audit(1759598494.868:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571144eec9 code=0x7ffc0000
[  118.019516][   T29] audit: type=1326 audit(1759598494.878:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571144eec9 code=0x7ffc0000
[  118.042985][   T29] audit: type=1326 audit(1759598494.928:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f571144eec9 code=0x7ffc0000
[  118.066313][   T29] audit: type=1326 audit(1759598494.928:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571144eec9 code=0x7ffc0000
[  118.089715][   T29] audit: type=1326 audit(1759598494.928:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571144eec9 code=0x7ffc0000
[  118.259439][   T29] audit: type=1326 audit(1759598495.188:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[  118.305008][   T29] audit: type=1326 audit(1759598495.188:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[  118.328373][   T29] audit: type=1326 audit(1759598495.188:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[  118.351744][   T29] audit: type=1326 audit(1759598495.188:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000
[  118.375100][   T29] audit: type=1326 audit(1759598495.188:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.4.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d143eec9 code=0x7ffc0000