last executing test programs:

2m37.549907594s ago: executing program 4 (id=401):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)

2m37.517900314s ago: executing program 4 (id=403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
add_key$keyring(&(0x7f00000004c0), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0)

2m36.511510609s ago: executing program 4 (id=414):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0)

2m36.373768382s ago: executing program 4 (id=416):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}]}, 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d0009000000060008001500000008000300", @ANYRES8], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
chdir(&(0x7f0000000140)='./file0\x00')
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001bc0)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4cc84a4b515c16e6}, {0xf, 0x4}, {0xfff1, 0x8}}}, 0x24}}, 0x4000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x400, &(0x7f0000000080), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000880)="b4595c8f80591226f818d4a1df4ba874c1e7227d41c645f7be84a8d31da9b937c2dde1648210d671f8eb7415734f49b7c375be6f424a25600df3fb7a024bb76f44f2288dc70ff5eda595777cb4ba3afc96c043bb6c81f761ce1f389bb7a2845391f9398e44bdf3f1acbe0bcb8de128f93e4ff2f456e037cdaf93687a4b20e65af9d6020730fe193fcd77c8e9c6bbfc927563b9e100df9fedbc55c753a7a83bf2ab67eb473735b3438564cf9b3c1612491df0f4bc03ecd8f2f57a4145d80c733b9e0ec05a559fecd47610c866db8a6a978f877c096cf9185f279734fa5f330a8d731582c49f97cb3bc1d2a38200ce73768db8f045")

2m36.158674615s ago: executing program 4 (id=417):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0x0, 0xee00, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)

2m35.285659218s ago: executing program 4 (id=432):
r0 = io_uring_setup(0x2987, &(0x7f0000000080)={0x0, 0x40000000, 0x800, 0x4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)={0x118, 0x30, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x8, 0x28, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100000}, 0x18)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x82000714)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000940)=0xfffffffd)
close_range(r0, 0xffffffffffffffff, 0x0)

2m35.275206268s ago: executing program 32 (id=432):
r0 = io_uring_setup(0x2987, &(0x7f0000000080)={0x0, 0x40000000, 0x800, 0x4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)={0x118, 0x30, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x8, 0x28, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100000}, 0x18)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x82000714)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000940)=0xfffffffd)
close_range(r0, 0xffffffffffffffff, 0x0)

32.075041647s ago: executing program 3 (id=2583):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r5, 0x1}}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x2, 0x2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010102}, {0x1, @random="dd61f27c3708"}, 0x4c, {0x2, 0x4e22, @remote}, 'bridge_slave_1\x00'})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

32.059719747s ago: executing program 3 (id=2584):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000ff0000000000000007e90000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f0000000800)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000009000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
r6 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r6, 0xffffffffffffffff, 0xee01)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="81cf98", @ANYRES16=0x0, @ANYBLOB="010000000000004000002c0000000800030000000100070001007063690011000200303030303a30303a31302e30000000000800580000000000"], 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x584, &(0x7f0000001280)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
recvmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000600), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/160, 0xa0}], 0x4}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sync()

31.648290193s ago: executing program 3 (id=2590):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)

31.622907583s ago: executing program 3 (id=2592):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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")
truncate(0x0, 0xf000)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32=0x0, @ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r2}, 0x18)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

31.471400496s ago: executing program 3 (id=2596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='kfree\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e000000000002000004"], 0x14}, 0x1, 0x40030000000000}, 0x0)

31.412685976s ago: executing program 3 (id=2597):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f00000000c0)="e1338d74c8f760f236", 0x9)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1}, {0x0, 0x4, 0x3}, {0x0, 0x3}, 0x201, 0x4, 0xa}, 0x5, 0x9}, [@tfcpad={0x8, 0x24, 0x6}, @offload={0xc}]}, 0x10c}}, 0x4000080)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$qrtrtun(r0, &(0x7f00000000c0)="e1338d74c8f760f236", 0x9) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1}, {0x0, 0x4, 0x3}, {0x0, 0x3}, 0x201, 0x4, 0xa}, 0x5, 0x9}, [@tfcpad={0x8, 0x24, 0x6}, @offload={0xc}]}, 0x10c}}, 0x4000080) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async)

16.384213543s ago: executing program 33 (id=2597):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f00000000c0)="e1338d74c8f760f236", 0x9)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1}, {0x0, 0x4, 0x3}, {0x0, 0x3}, 0x201, 0x4, 0xa}, 0x5, 0x9}, [@tfcpad={0x8, 0x24, 0x6}, @offload={0xc}]}, 0x10c}}, 0x4000080)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$qrtrtun(r0, &(0x7f00000000c0)="e1338d74c8f760f236", 0x9) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1}, {0x0, 0x4, 0x3}, {0x0, 0x3}, 0x201, 0x4, 0xa}, 0x5, 0x9}, [@tfcpad={0x8, 0x24, 0x6}, @offload={0xc}]}, 0x10c}}, 0x4000080) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async)

3.550225907s ago: executing program 2 (id=3000):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc93, 0x0, 0x0, 0x0}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d01040a0000000040000000000000030017"], 0x50}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
socket$inet6_sctp(0xa, 0x1, 0x84)

3.31881517s ago: executing program 2 (id=3003):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5046e2918d511178f950d0cdb1738eb606a7e665b96b5942ec409f260dcdf5855b7614706d6ac9dcec897a31f3cdcdb8e78ac6cb44a4a65a5c64bf7729162123"], 0x48)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000001140))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r3, 0x0, 0x2000}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
shutdown(0xffffffffffffffff, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='btrfs_clear_extent_bit\x00'}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000180)=ANY=[@ANYRES8=r4])

2.466602923s ago: executing program 2 (id=3014):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r3 = socket(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x280020, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1f8, &(0x7f0000000600)="$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")
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
pwrite64(r6, 0x0, 0x0, 0x2)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
eventfd(0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x60)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x8010)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140037"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000004c80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0x40}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}}, {{0x0, 0x2d, 0x0, 0x0, &(0x7f0000001380)=[@hopopts={{0x18, 0x29, 0x36, {0x73}}}], 0x18}}], 0x2, 0x44004)

2.439649624s ago: executing program 0 (id=3016):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000ff0000000000000007e90000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f0000000800)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000009000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r6, 0xffffffffffffffff, 0xee01)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="81cf98", @ANYRES16=0x0, @ANYBLOB="010000000000004000002c0000000800030000000100070001007063690011000200303030303a30303a3130"], 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x584, &(0x7f0000001280)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
recvmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000600), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/160, 0xa0}], 0x4}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sync()

2.293465195s ago: executing program 2 (id=3017):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0x407}, &(0x7f0000000180)=0x9, 0x0, 0x800029, 0x5, 0x6, 0x968, 0x20, 0xfffffffffffffff9}}], 0x58, 0x4804}, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18)
process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x0, 0x1000f4)
syz_clone3(&(0x7f0000001ac0)={0x282000200, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=<r5=>0x0, {0x34}, &(0x7f0000001900)=""/101, 0x65, &(0x7f0000001980)=""/196, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58)
process_vm_readv(r5, 0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000001b40)=""/31, 0x1f}, {&(0x7f0000001b80)=""/153, 0x99}], 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f00000000c0))
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==")
r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r9, r9, 0x0, 0x800000009)
write$cgroup_pid(r0, &(0x7f0000001cc0)=r5, 0x12)
pwritev2(r0, &(0x7f0000002b00)=[{&(0x7f0000000140)="ffeaebca9fb0ad30e7ab5b9cea062ca840b10d2b965161aa8e12a08d0b8547a20a22f0d77507098cb139621dcbf0e0c91e3337cb5c98971badb1b52b1b2f60", 0x3f}], 0x1, 0x2556, 0x7, 0x4)

2.140672808s ago: executing program 5 (id=3018):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r5, 0x1}}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010102}, {0x1, @random="dd61f27c3708"}, 0x4c, {0x2, 0x4e22, @remote}, 'bridge_slave_1\x00'})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

2.059863789s ago: executing program 1 (id=3019):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f00000016c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14, 0x7}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7e8, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0x7f6)

1.800202553s ago: executing program 2 (id=3021):
syz_open_dev$sg(0x0, 0x0, 0x8002)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80043, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000004})
syz_io_uring_setup(0x708a, &(0x7f0000000280)={0x0, 0xf391, 0x200, 0x1, 0x9f, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000300))
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0})

1.799192183s ago: executing program 1 (id=3023):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0xfffffffc}, {&(0x7f0000000200)="8fd26291dc7d67b112d3e8b82fa2c2c44486653b44834d66239fa66393c45a6031f6c1bd07000000000000000903e1c5863cc58490e29936da789cff4b90234d9c63654eaf2fac23d471ffd86e91f5754393f475a5a558936be5c3791a864c78e4a0aad7e6f039a697ab36de627cd7a4cae2743f5cced83b6f2909c5e96c05c85c13169658ad5799404148be9cade82f750069f711a9b715a8277295ed66f89453901389962590d5551afdf10aea56939b89dff5569c1f34c3c03850ec32e3d483cff3bdb845c803e818b44440ba537edd30f57101cfb74cf087c6f5101ef2a328801d60ba54f5e8d807441e03974548c534c99811e95067dc40eaa385d69c74589e33d31e1bcf57c35c2a31f69750f90edb264d6509bd8383f90c004949d8", 0x11f}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0476103c6133c7da6313848373c719a1f43ba5a765b8aa97caf7717fa063166951aa4e72d5616e6b42d6866fb308970430b2ff44c25b7dde2494389d1717c83f83ac7a632da0472bd6b0295b9f1fd1fc43099b1062bef744785158264f636cbf13926e7fcde7ebc1560a20961df3286df51b246ee7fe9474a8d51498bd90230bc89ea8dccb85035edd01aa93ed2f82297c3c3703990cb5201c7b92a04ea7abf9a36a488369161a9bfa42664d84860974fddbabed7eb509350917a3bbd427fe226bd1dd34275dfd3882c0a7d711641babb2e36d9637c0b33a41a3578861d75e7e93c22ee94e9594258dc186ec2d749cad6e03b767555610c200efb5f104f91be7fb2513c97f3f279da2baedf7f91ed97ae33edef2ab348dded9df075b1ca5855866843aff902b6678075cb4a3d988ffd8ed61885400d1bcf6dc38c6be9b6428d4eba30711556510eb41b5c04590f11e393317a4fc988b39ecdbe322344c5ec4ed178e1dd35182a00f3ac345bfeea9936b6a015151332962bd28c5e1dbcdd825d51c78ef6db73170d9cfd47f2ca210ce8c103d37be1c61427bd3cf1bb5bcf9888f6e1631f404ea51f9cd8e0725459f9a531af19e2b533532f0b66fb5e9614d0895d35ccda358ac482a824fe67165bdaedcda5ddd86924c4fe5f22a043f92aed7a105fb54ec323273e660c17b8ae89d1546022320711ae0cab37564fc6b394f39e0b216227fa74b76c2a020d42f167891cbaf960fc0288547f2d31dceff3787135659a65878e5df65ce0004104a665098be576ebaf3733b6ba57e40f40ac74aad7d8b41db0f55513389faa84b1ce0fafed7018bcc5a687118bfab115b7a3163fb22af534406206065acf06066a5fb65f0b928cd25838c0c1a7b06bc42e622f502e515b87426b2a184b593bf35a4d454dc56881bbda1b9350f956e086196447a5052288aa0556e638d292bfd1abad58ef5db98f92694b30c3eda5b25a44688b24eadf579616c034ef688fad705c3dc99aafda0f7bbb591fd20e0ff96e8941188b9676b833aa91ba5ab1cf7acbdf16f14c843dd3cfeedf8e7628051f361ba328496c8a05aa68997257cb505dba270e132c437bc6df39134b0807fea53ecb84714ab0d9d8cda271e15bddac37ae4e0534322d649b74c90499919b771679c7211b4df2c80864809991750f966f52d217f63e80b7142b9205576133469a0a950060cd2fa0c25554b89900ebb6a991954990adeee517e55ff3abe4f3f7c07cb735b80be674d53ccc5bef27421c7bb602c7f22dde056ae0c85086f9850fe6a7dd108fd29c7f99f3d1316da10415b2e4e029762a39369cd8738e0a840690c5e2167099a6c1d59a6cc8827630b699da0d592e01c2db8af46daa48575fc2f4eeca2c3abf26ec776906572e712c6f0c57ec39ab4e004d994a341570a6e117edc13626aeaf794266a0f3103c84ae1300e6928b749cce7a1ba4e7609ceca262324cbc503cde9c897848a015c4d7cdb02cfc0c", 0x541}], 0x1}}], 0x4000000000001e5, 0xc010)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2843c2, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000a40)={0x6, 0x2, "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"})
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.448461598s ago: executing program 1 (id=3024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x89901)

1.36650249s ago: executing program 6 (id=3025):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "01d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x40000000, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
r9 = dup(r5)
write$UHID_INPUT(r9, &(0x7f0000002080)={0xc, {"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", 0x4a}}, 0x1006)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

1.31032879s ago: executing program 1 (id=3026):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spmi_write_begin\x00', r0, 0x0, 0x9}, 0x18)
ioperm(0x3, 0x7, 0x7)
ioperm(0x0, 0x7ff, 0xa)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="420f42aec526", 0x0, 0x3, 0x10000, 0x22, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r3}, 0x38)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044)
poll(&(0x7f0000000080)=[{r4, 0x1080}, {r4, 0x274}], 0x2, 0x7f)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8404f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r6, 0x5608, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xe, 0x1, 0x0, 0x8}]})
ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)={[0x5]}, 0x8)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2)
r7 = timerfd_create(0x8, 0x0)
perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
exit(0x5)
timerfd_settime(r7, 0x3, &(0x7f0000000400), 0x0)
unshare(0x2040400)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x2)

1.232310272s ago: executing program 5 (id=3027):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000380)=""/92, 0x5c}], 0x2, 0x9})
r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c8, 0x10, 0x1000, 0x5cc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

1.230611002s ago: executing program 0 (id=3028):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x200, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa}, 0x18426, 0x10000, 0x0, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000500000000000000000000170000000000000000e9051d2bdd59f8"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000017000000000000003e0f000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6, 0xa3, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[r0, r0, r2, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x5, 0x1, 0x3, 0x9}, {0x4, 0x1, 0x3, 0x7}, {0x5, 0x4, 0x2, 0x1}, {0x5, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x9, 0x6}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x3)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x474482, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8}}}]}, 0x38}}, 0x20000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x12}, {0x7, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x86}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={<r8=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r7, @ANYRESHEX, @ANYRES32=<r12=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32=<r13=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="3075253f97c78b70e75f469022b12c3de45ca0c79c5217f2f164e61a5f0967ad748f3e080d98a0bd726374b642dda15d32f838df70ab74d927f8eef21675a01f18cc2a8a1a94005aa96ffde0a7d0c10ec126e5ad3b33a9b21f814bac9b701c92d22baa8ef2ff024dc09d10", @ANYRES16, @ANYRES32, @ANYRES32], 0xffffffffffffff41, 0x24040094}, 0x80)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r10)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001300)=ANY=[@ANYRESDEC, @ANYRES32=r13, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="101134a98f83abd7970f8d53c9fe3b0e6f2c99609640b6082ec96d74eafc70e18e1e49ecf606bb1537f6b19ef8d90d688842f870114104da7884d0745ed38f7c20f69891dd50e5c8717c367677a620b59355abe81a22aa2cd1b0ac7e2cf6ab7dfcfd6605fee5ea4a7fbf0c20a027123bf92a0978a6ffbf15c21324e34f798e62816e56ab9d4e1f", @ANYRES32=0xee00, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRES16=r12, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRESOCT, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x181, 0x800}, 0x7fff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x40})
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000440)={0xfd})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.180309222s ago: executing program 5 (id=3029):
syz_open_dev$sg(0x0, 0x0, 0x8002)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80043, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000004})
syz_io_uring_setup(0x708a, &(0x7f0000000280)={0x0, 0xf391, 0x200, 0x1, 0x9f, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000300))
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0})
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
io_uring_setup(0x2987, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x100000}, 0x18)
sync()

1.098790734s ago: executing program 0 (id=3030):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000008c0)='\x04\x01&w\x11\xd6\"\vW\x1c\xcf\x01VZ\xfc\x1a\x00\x00\xea,M\x00y\x0eX\xf2b8];\x9c\t\xb6\xcf\x9e]\xde\x04m\x1b\xfb\xb8\xebL3\b\xe0\x97\x8dh\xe29~#lf\x91\xad\x19\x13\x1d:\x0fh\xf0\x1e0\x18c\xf2[\xef\t\xd3\xc3\xc0\x88\xe5\xc2\xdf\x13\xa4]\xfe\xa7e|v_k B\x82\xe0h\'p~\xf2\"H+\x188y6~W\xeb\xd2\xfc!^\xb6\x02p\xb5b\x8cq\xcbY\x00\x00\x00\x00\x00')
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b0000000400000008904acc51155ba5a14344e74b88ec6218b9291d7e261af7e60b8ad2ca6dd31a583654e15fa3be808200eedb169c76e18f5c001d5b05dea485b40941ed4db21319d52b250753d91a949005eade646f2099786a49531e1308ed9fa4e8daf4d0b400fc5840d3a81375338a4415d6d882e72b5f65b99e4e77cf1f0814e92c9713f674c0508ed9974856c6f113390de2a7fc1d20d62d5574576ee62f9cf7db678c0a1450e80835d0e65bf10ea07e35a2741b41001f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
getcwd(&(0x7f0000000580)=""/171, 0xab)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
close(0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c100000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf25300000000500350000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040810)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6})
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3}, 0x8)
syz_open_dev$rtc(&(0x7f0000001480), 0x0, 0x20081)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1})
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
creat(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

1.056101014s ago: executing program 5 (id=3031):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18)
r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x200000, 0x0, 0x800000, 0x2a9})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x9d14fd9bbd71d4f0}, 0x20)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x8000000)
socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88)
preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f000030e000/0x1000)=nil, 0x1000, 0x10)
r5 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0xfd, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
clock_gettime(0x0, &(0x7f0000000000)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000000c0000000010000000000000", @ANYRES64=r7, @ANYRES64=r8/1000+60000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03007fdfb2266c35a62be100080300"], 0x48}}, 0x1)
ioctl$SG_IO(r6, 0x2285, 0x0)
writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
syz_io_uring_setup(0x62f5, &(0x7f0000000140)={0x0, 0x99f2, 0x400, 0x0, 0x1c2}, &(0x7f00000000c0), &(0x7f0000000380))
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
memfd_secret(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls}, 0x94)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
r9 = semget$private(0x0, 0x6, 0x0)
semtimedop(r9, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)

1.042234524s ago: executing program 6 (id=3032):
syz_open_dev$sg(0x0, 0x0, 0x8002)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80043, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000004})
syz_io_uring_setup(0x708a, &(0x7f0000000280)={0x0, 0xf391, 0x200, 0x1, 0x9f, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000300))
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0})

981.423036ms ago: executing program 6 (id=3033):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
connect(r0, &(0x7f0000000080)=@ax25={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @bcast]}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x5}}, './file0\x00'})
sync()
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0xb70, 0x10000)
setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=@ng={0x4, 0x0, "443c68135cb4a44c3e4be45e"}, 0xe, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000280)={0x1d, r4}, 0x10)
close_range(r1, r1, 0x2)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000002c0)=0x1)
socket$netlink(0x10, 0x3, 0x15)
write$UHID_CREATE2(r3, &(0x7f0000000300)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x8001, 0x2, 0xb, 0xc9e, 0x2, "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"}}, 0x1118)
futex_waitv(&(0x7f0000001b80)=[{0xffffffffffffff67, &(0x7f0000001440)=0x4, 0x2}, {0x66, &(0x7f0000001480)=0xf, 0x82}, {0x1, &(0x7f00000014c0)=0x4, 0x82}, {0x5, &(0x7f0000001500)=0x1, 0x2}, {0x9, &(0x7f0000001540)=0x3ff, 0x82}, {0x2, &(0x7f0000001580)=0x2, 0x82}, {0x8, &(0x7f00000015c0)=0x101, 0x82}, {0x100000001, &(0x7f0000001600), 0x82}, {0x8, &(0x7f0000001640)=0x9, 0x82}, {0x7, &(0x7f0000001680)=0x8000000000000000, 0x82}, {0x3, &(0x7f00000016c0)=0x2, 0x2}, {0x2, &(0x7f0000001700)=0x3, 0x82}, {0x2, &(0x7f0000001740)=0x5, 0x2}, {0x2f4, &(0x7f0000001780)=0x5d5, 0x82}, {0x0, &(0x7f00000017c0)=0x7ff, 0x82}, {0x0, &(0x7f0000001800), 0x82}, {0xe, &(0x7f0000001840)=0x401, 0x82}, {0x0, &(0x7f0000001880)=0x8001, 0x2}, {0x8, &(0x7f00000018c0)=0x9, 0x2}, {0x1, &(0x7f0000001900)=0x2, 0x2}, {0x0, &(0x7f0000001940)=0xffffffff, 0x80}, {0x3, &(0x7f0000001980)=0x8000, 0x2}, {0x8, &(0x7f00000019c0)=0x5, 0x2}, {0x1, &(0x7f0000001a00)=0x4b4e659a, 0x2}, {0x4, &(0x7f0000001a40)=0x8000000000000000, 0x82}, {0x10, &(0x7f0000001a80)=0x80000000, 0x2}, {0x2, &(0x7f0000001ac0)=0x1, 0x82}, {0x7, &(0x7f0000001b00)=0x7f, 0x2}, {0x7, &(0x7f0000001b40)=0x2b, 0x2}], 0x1d, 0x0, &(0x7f0000001e40)={0x0, 0x989680}, 0x1)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001e80)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x10)
mq_timedreceive(r3, &(0x7f0000001ec0)=""/4096, 0x1000, 0xfffffffffffffffb, &(0x7f0000002ec0))
io_uring_enter(r3, 0x85, 0xa4d0, 0x31, &(0x7f0000002f00)={[0x6]}, 0x8)
setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000002f40)=0xfff, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002f80)={'gre0\x00'})
bpf$TOKEN_CREATE(0x24, &(0x7f0000002fc0)={0x0, r0}, 0x8)
setxattr(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)=@random={'os2.', '@:-\x00'}, &(0x7f0000003080)='/dev/autofs\x00', 0xc, 0x1)
setxattr$security_evm(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), &(0x7f0000003140)=@v1={0x2, "192192eaf3fc8ed2ae3286bd6029dc3df80911"}, 0x14, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000003180)=0x2000, 0x4)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000031c0), 0x141001, 0x0)
faccessat2(r5, &(0x7f0000003200)='./file1\x00', 0x8, 0x180)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000003240)={'vlan0\x00', {0x2, 0x4e24, @local}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xce, 0xce, 0xa, [@union={0xa, 0x9, 0x0, 0x5, 0x0, 0xfffffffb, [{0x2, 0x5, 0x4}, {0x2, 0x2, 0x3}, {0x8, 0x2, 0x10001}, {0xfffffffd, 0x1, 0x1e43}, {0x4, 0x1, 0x2}, {0xe, 0x4, 0x9}, {0x3, 0x2, 0x6}, {0x8, 0x0, 0x400}, {0x9, 0x0, 0x1b1}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @fwd={0x4}, @datasec={0x1, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x5, 0x4}, {0x2, 0x2}, {0x5, 0x6, 0x7fff}, {0x5, 0x8, 0x7fffffff}], '`o'}]}, {0x0, [0x30, 0x0, 0x2e, 0x30, 0x0, 0x0, 0x41, 0x0]}}, &(0x7f0000003380)=""/184, 0xf2, 0xb8, 0x0, 0x9, 0x10000, @value=r3}, 0x28)
socket(0x9, 0x3, 0x47)

942.964646ms ago: executing program 6 (id=3034):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0xfffffffc}, {&(0x7f0000000200)="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", 0x11f}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}], 0x4000000000001e5, 0xc010)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2843c2, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

922.446386ms ago: executing program 2 (id=3035):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0xfffffffc}, {&(0x7f0000000200)="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", 0x11f}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}], 0x4000000000001e5, 0xc010)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2843c2, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

891.258417ms ago: executing program 34 (id=3035):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0xfffffffc}, {&(0x7f0000000200)="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", 0x11f}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}], 0x4000000000001e5, 0xc010)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2843c2, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

778.953379ms ago: executing program 5 (id=3037):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000ff0000000000000007e90000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1ff}, 0x18)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f0000000800)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000009000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r6, 0xffffffffffffffff, 0xee01)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="81cf98", @ANYRES16=0x0, @ANYBLOB="010000000000004000002c0000000800030000000100070001007063690011000200303030303a30303a31302e30000000000800580000000000"], 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x584, &(0x7f0000001280)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
recvmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000600), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/160, 0xa0}], 0x4}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sync()

445.479774ms ago: executing program 1 (id=3038):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00')
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r5, 0x1}}, 0x18)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010102}, {0x1, @random="dd61f27c3708"}, 0x4c, {0x2, 0x4e22, @remote}, 'bridge_slave_1\x00'})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

421.439834ms ago: executing program 1 (id=3039):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000ff0000000000000007e90000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f0000000800)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000009000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r6, 0xffffffffffffffff, 0xee01)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="81cf98", @ANYRES16=0x0, @ANYBLOB="010000000000004000002c0000000800030000000100070001007063690011000200303030303a30303a3130"], 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x584, &(0x7f0000001280)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
recvmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000600), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/160, 0xa0}], 0x4}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sync()

216.876597ms ago: executing program 0 (id=3040):
gettid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000006600000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb21", 0x6c}], 0x1}, 0x20000080)

179.931047ms ago: executing program 0 (id=3041):
r0 = socket(0x10, 0x3, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xe0204000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48840}, 0x20000080)

110.565348ms ago: executing program 0 (id=3042):
syz_open_dev$sg(0x0, 0x0, 0x8002)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80043, 0x0)
fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000004})
syz_io_uring_setup(0x708a, &(0x7f0000000280)={0x0, 0xf391, 0x200, 0x1, 0x9f, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000300))
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0})
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
io_uring_setup(0x2987, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x100000}, 0x18)
sync()

108.944668ms ago: executing program 5 (id=3043):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000ff0000000000000007e90000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18)
symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f0000000800)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x49, &(0x7f0000009000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r6, 0xffffffffffffffff, 0xee01)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="81cf98", @ANYRES16=0x0, @ANYBLOB="010000000000004000002c0000000800030000000100070001007063690011000200303030303a30303a31302e30000000000800580000000000"], 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x584, &(0x7f0000001280)="$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")
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
recvmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000600), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/160, 0xa0}], 0x4}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sync()

66.1851ms ago: executing program 6 (id=3044):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x20}, 0x18)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)

0s ago: executing program 6 (id=3045):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/171, 0xab)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r2, &(0x7f0000009300)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000c000000002000000000000000290000003600fefffe000000000000000100000000000000615d4ed8b2f936c1db2e7e0eac9e045a2f61737db08df9288ba2bd9af77b9f73ed3aa0c452c7ea4a83977fbcd53258bef74ead7fb946cbeb19fb1fb8903003aab8c6d1e25ddf15e0"], 0x38}}], 0x1, 0x24008004)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000440)="9bc0f2bb1f99194ea93de83f2b692d639c5159b3b1c1386ed03fdc4b8eafa792ae3049f02aef269f76cf563a4fd41a2f31b096729f7003ef7a5ba684fd3b35256bb7fcecbfb903ef0f7490ce86d0c0e95d47c7d3ecdc13a9372d975db40fa60d9b452ae7b0ff1fb4c1430715ec3b0475078b81e10dfaa881a1c891cd47fdf7ce311bd98cc9340597e49064254afb", 0x8e, 0x80, &(0x7f0000000500)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket(0x1e, 0x1, 0x0)
connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r9, &(0x7f0000000400), 0x2000011a)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100000000000000040005000000000008000200", @ANYRES32=0x0, @ANYBLOB="100000002e0000002000010000000000"], 0x2c, 0x0)
openat$cgroup_procs(r8, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)

kernel console output (not intermixed with test programs):

de:6459: inode #16: comm syz.5.2690: mark_inode_dirty error
[  181.930566][T10895] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2690: corrupted inode contents
[  181.944485][T10895] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2690: mark_inode_dirty error
[  181.957061][T10895] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2690: corrupted inode contents
[  181.970133][T10895] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  181.978910][T10895] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2690: corrupted inode contents
[  181.992577][T10895] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.2690: mark_inode_dirty error
[  182.036444][T10899] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  182.046042][T10895] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  182.060722][T10895] EXT4-fs (loop5): 1 truncate cleaned up
[  182.066772][T10895] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.087642][T10901] loop0: detected capacity change from 0 to 512
[  182.095117][T10901] EXT4-fs: Ignoring removed nobh option
[  182.101691][T10895] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2690: Failed to acquire dquot type 1
[  182.130803][T10901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2692: corrupted inode contents
[  182.142937][T10901] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.2692: mark_inode_dirty error
[  182.155440][T10901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2692: corrupted inode contents
[  182.167593][T10901] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2692: mark_inode_dirty error
[  182.181420][T10901] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2692: Failed to acquire dquot type 0
[  182.193062][T10901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2692: corrupted inode contents
[  182.205122][T10901] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.2692: mark_inode_dirty error
[  182.216694][T10901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2692: corrupted inode contents
[  182.228844][T10901] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2692: mark_inode_dirty error
[  182.240289][T10901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2692: corrupted inode contents
[  182.252349][T10901] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  182.261944][T10901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2692: corrupted inode contents
[  182.274852][T10901] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.2692: mark_inode_dirty error
[  182.286194][T10901] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  182.297363][T10901] EXT4-fs (loop0): 1 truncate cleaned up
[  182.303637][T10901] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.317294][T10903] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  182.317294][T10903]    program syz.1.2693 not setting count and/or reply_len properly
[  182.323259][T10901] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2692: Failed to acquire dquot type 1
[  182.418328][T10911] syzkaller1: entered promiscuous mode
[  182.424002][T10911] syzkaller1: entered allmulticast mode
[  182.435949][T10913] syzkaller1: entered promiscuous mode
[  182.441545][T10913] syzkaller1: entered allmulticast mode
[  182.490769][T10922] loop0: detected capacity change from 0 to 512
[  182.497469][T10922] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.504790][T10922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  182.507056][T10923] FAULT_INJECTION: forcing a failure.
[  182.507056][T10923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.517794][T10922] EXT4-fs (loop0): 1 truncate cleaned up
[  182.527688][T10923] CPU: 1 UID: 0 PID: 10923 Comm: syz.1.2697 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  182.527723][T10923] Tainted: [W]=WARN
[  182.527729][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.527742][T10923] Call Trace:
[  182.527749][T10923]  <TASK>
[  182.527757][T10923]  __dump_stack+0x1d/0x30
[  182.527784][T10923]  dump_stack_lvl+0xe8/0x140
[  182.527803][T10923]  dump_stack+0x15/0x1b
[  182.527819][T10923]  should_fail_ex+0x265/0x280
[  182.527867][T10923]  should_fail+0xb/0x20
[  182.528012][T10923]  should_fail_usercopy+0x1a/0x20
[  182.528040][T10923]  _copy_to_user+0x20/0xa0
[  182.528060][T10923]  simple_read_from_buffer+0xb5/0x130
[  182.528090][T10923]  proc_fail_nth_read+0x100/0x140
[  182.528136][T10923]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  182.528165][T10923]  vfs_read+0x1a0/0x6f0
[  182.528247][T10923]  ? __rcu_read_unlock+0x4f/0x70
[  182.528268][T10923]  ? __fget_files+0x184/0x1c0
[  182.528293][T10923]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  182.528320][T10923]  ksys_read+0xda/0x1a0
[  182.528387][T10923]  __x64_sys_read+0x40/0x50
[  182.528416][T10923]  x64_sys_call+0x2d77/0x2fb0
[  182.528489][T10923]  do_syscall_64+0xd2/0x200
[  182.528506][T10923]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  182.528532][T10923]  ? clear_bhb_loop+0x40/0x90
[  182.528552][T10923]  ? clear_bhb_loop+0x40/0x90
[  182.528573][T10923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.528596][T10923] RIP: 0033:0x7f62a594d33c
[  182.528668][T10923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  182.528685][T10923] RSP: 002b:00007f62a3f96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  182.528703][T10923] RAX: ffffffffffffffda RBX: 00007f62a5b76080 RCX: 00007f62a594d33c
[  182.528728][T10923] RDX: 000000000000000f RSI: 00007f62a3f960a0 RDI: 0000000000000008
[  182.528738][T10923] RBP: 00007f62a3f96090 R08: 0000000000000000 R09: 0000000000000000
[  182.528748][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.528759][T10923] R13: 0000000000000000 R14: 00007f62a5b76080 R15: 00007fffef7d9978
[  182.528777][T10923]  </TASK>
[  182.763496][T10922] EXT4-fs (loop0): shut down requested (0)
[  182.795704][T10935] loop2: detected capacity change from 0 to 2048
[  182.819504][T10935] EXT4-fs (loop2): failed to initialize system zone (-117)
[  182.836911][T10935] EXT4-fs (loop2): mount failed
[  182.972599][T10938] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  182.972599][T10938]    program syz.5.2707 not setting count and/or reply_len properly
[  182.976152][T10958] smc: net device bond0 applied user defined pnetid SYZ2
[  183.001146][T10958] smc: net device bond0 erased user defined pnetid SYZ2
[  183.026256][T10961] SET target dimension over the limit!
[  183.069069][T10967] syzkaller1: entered promiscuous mode
[  183.074563][T10967] syzkaller1: entered allmulticast mode
[  183.188993][T10981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.214570][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2725'.
[  183.223605][T10981] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2725'.
[  183.232740][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2725'.
[  183.241804][T10981] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2725'.
[  183.250929][T10981] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2725'.
[  183.410278][T10986] siw: device registration error -23
[  183.539374][T10992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.799084][T10997] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  183.799084][T10997]    program syz.5.2730 not setting count and/or reply_len properly
[  183.889497][T11008] syzkaller1: entered promiscuous mode
[  183.895015][T11008] syzkaller1: entered allmulticast mode
[  184.047029][T11019] netlink: 'syz.5.2739': attribute type 3 has an invalid length.
[  184.056579][T11019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  184.124445][T11014] siw: device registration error -23
[  184.166091][T11030] loop1: detected capacity change from 0 to 512
[  184.172977][T11030] EXT4-fs: Ignoring removed nobh option
[  184.190034][T11030] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.2743: corrupted inode contents
[  184.202417][T11030] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.2743: mark_inode_dirty error
[  184.214081][T11030] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.2743: corrupted inode contents
[  184.225986][T11030] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2743: mark_inode_dirty error
[  184.237815][T11030] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2743: Failed to acquire dquot type 0
[  184.251189][T11030] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2743: corrupted inode contents
[  184.263379][T11030] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.2743: mark_inode_dirty error
[  184.275841][T11030] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2743: corrupted inode contents
[  184.287941][T11030] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2743: mark_inode_dirty error
[  184.300119][T11030] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2743: corrupted inode contents
[  184.313180][T11030] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  184.322939][T11030] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2743: corrupted inode contents
[  184.335036][T11030] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.2743: mark_inode_dirty error
[  184.346922][T11030] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  184.356162][T11030] EXT4-fs (loop1): 1 truncate cleaned up
[  184.363088][T11030] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.377453][T11030] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2743: Failed to acquire dquot type 1
[  184.472430][T11038] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  184.472430][T11038]    program syz.2.2745 not setting count and/or reply_len properly
[  184.568819][T11047] syzkaller1: entered promiscuous mode
[  184.574349][T11047] syzkaller1: entered allmulticast mode
[  184.689938][T11052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11052 comm=syz.0.2750
[  184.818510][T11060] gretap0: left promiscuous mode
[  184.838519][T11060] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.855489][T11060] 8021q: adding VLAN 0 to HW filter on device team0
[  184.865228][T11060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.880991][ T9878] ( speed is unknown, defaulting to 1000
[  184.886639][ T9878] syz0: Port: 1 Link ACTIVE
[  185.064489][T11066] loop2: detected capacity change from 0 to 512
[  185.072791][T11066] EXT4-fs: Ignoring removed nobh option
[  185.100225][T11066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.2756: corrupted inode contents
[  185.115983][T11066] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.2756: mark_inode_dirty error
[  185.128565][T11066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.2756: corrupted inode contents
[  185.145551][T11066] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2756: mark_inode_dirty error
[  185.157331][T11066] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2756: Failed to acquire dquot type 0
[  185.168961][T11066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2756: corrupted inode contents
[  185.181057][T11066] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.2756: mark_inode_dirty error
[  185.201890][T11066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2756: corrupted inode contents
[  185.218427][T11066] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2756: mark_inode_dirty error
[  185.229851][T11066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2756: corrupted inode contents
[  185.242973][T11066] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  185.257631][T11066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2756: corrupted inode contents
[  185.277721][T11066] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.2756: mark_inode_dirty error
[  185.292218][T11070] ( speed is unknown, defaulting to 1000
[  185.304611][T11066] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  185.316306][   T29] kauditd_printk_skb: 679 callbacks suppressed
[  185.316319][   T29] audit: type=1400 audit(1751509207.952:15358): avc:  denied  { ioctl } for  pid=11085 comm="syz.5.2761" path="socket:[30151]" dev="sockfs" ino=30151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  185.319161][T11066] EXT4-fs (loop2): 1 truncate cleaned up
[  185.354862][T11066] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.365787][   T29] audit: type=1326 audit(1751509208.002:15359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ba950d290 code=0x7ffc0000
[  185.389415][   T29] audit: type=1326 audit(1751509208.002:15360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6ba950d677 code=0x7ffc0000
[  185.414735][   T29] audit: type=1326 audit(1751509208.002:15361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ba950d290 code=0x7ffc0000
[  185.438450][   T29] audit: type=1326 audit(1751509208.002:15362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba950e929 code=0x7ffc0000
[  185.462018][   T29] audit: type=1326 audit(1751509208.002:15363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba950e929 code=0x7ffc0000
[  185.485571][   T29] audit: type=1326 audit(1751509208.032:15364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ba950e929 code=0x7ffc0000
[  185.517877][   T29] audit: type=1326 audit(1751509208.152:15365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba950e929 code=0x7ffc0000
[  185.541637][   T29] audit: type=1326 audit(1751509208.162:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba950e929 code=0x7ffc0000
[  185.541667][   T29] audit: type=1326 audit(1751509208.162:15367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ba950e929 code=0x7ffc0000
[  185.567248][T11070] chnl_net:caif_netlink_parms(): no params data found
[  185.612905][T11097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11097 comm=syz.1.2763
[  185.657519][T11070] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.664700][T11070] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.673383][T11070] bridge_slave_0: entered allmulticast mode
[  185.679983][T11070] bridge_slave_0: entered promiscuous mode
[  185.689927][T11104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.703450][T11070] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.710530][T11070] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.718520][T11070] bridge_slave_1: entered allmulticast mode
[  185.725149][T11070] bridge_slave_1: entered promiscuous mode
[  185.747422][T11070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.901092][T11114] loop2: detected capacity change from 0 to 512
[  186.000458][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.009763][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.018567][ T3560] bond0 (unregistering): Released all slaves
[  186.027273][T11070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.046781][T11116] netlink: 'syz.2.2770': attribute type 3 has an invalid length.
[  186.061248][T11116] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  186.080464][T11104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.092390][T11070] team0: Port device team_slave_0 added
[  186.105954][T11070] team0: Port device team_slave_1 added
[  186.120486][T11118] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  186.142712][T11070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.149743][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.175881][T11070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.187246][T11070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.194216][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.220216][T11070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.237924][T11104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.251424][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.259198][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.284575][ T3560] team0 (unregistering): Port device team_slave_1 removed
[  186.294267][ T3560] team0 (unregistering): Port device C removed
[  186.301601][ T3562] smc: removing ib device syz!
[  186.330461][ T3414] ( speed is unknown, defaulting to 1000
[  186.336128][ T3414] infiniband syz0: ib_query_port failed (-19)
[  186.348389][T11104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.402708][T11070] hsr_slave_0: entered promiscuous mode
[  186.431667][T11070] hsr_slave_1: entered promiscuous mode
[  186.437584][T11070] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.460503][T11070] Cannot create hsr debugfs directory
[  186.474195][T11104] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.482556][T11126] loop5: detected capacity change from 0 to 512
[  186.501672][T11104] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.529207][T11126] EXT4-fs: Ignoring removed nobh option
[  186.543944][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.2774: corrupted inode contents
[  186.558428][T11104] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.581461][T11126] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.2774: mark_inode_dirty error
[  186.598453][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.2774: corrupted inode contents
[  186.611190][T11126] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2774: mark_inode_dirty error
[  186.623539][T11126] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2774: Failed to acquire dquot type 0
[  186.636210][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2774: corrupted inode contents
[  186.648144][T11126] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.2774: mark_inode_dirty error
[  186.660353][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2774: corrupted inode contents
[  186.672365][T11126] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2774: mark_inode_dirty error
[  186.684283][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2774: corrupted inode contents
[  186.696292][T11126] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  186.705804][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2774: corrupted inode contents
[  186.718094][T11126] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.2774: mark_inode_dirty error
[  186.730699][T11126] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  186.740930][T11126] EXT4-fs (loop5): 1 truncate cleaned up
[  186.747257][T11126] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.753000][T11104] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.762239][T11126] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2774: Failed to acquire dquot type 1
[  186.844857][T11133] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11133 comm=syz.1.2776
[  186.876884][T11139] syzkaller1: entered promiscuous mode
[  186.882453][T11139] syzkaller1: entered allmulticast mode
[  187.042459][T11148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.067173][T11148] __nla_validate_parse: 20 callbacks suppressed
[  187.067187][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2782'.
[  187.082597][T11148] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2782'.
[  187.092680][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2782'.
[  187.101836][T11148] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2782'.
[  187.111003][T11148] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2782'.
[  187.140336][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.148886][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.204655][T11070] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  187.256011][T11070] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  187.265875][T11070] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  187.279972][T11070] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  187.347083][T11070] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.370392][T11070] 8021q: adding VLAN 0 to HW filter on device team0
[  187.390788][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.397854][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.425368][T11070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.435777][T11070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.469600][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.476747][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.537176][T11070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.554511][T11155] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  187.554511][T11155]    program syz.2.2784 not setting count and/or reply_len properly
[  187.721408][T11070] veth0_vlan: entered promiscuous mode
[  187.737532][T11070] veth1_vlan: entered promiscuous mode
[  187.756097][T11070] veth0_macvtap: entered promiscuous mode
[  187.765824][T11070] veth1_macvtap: entered promiscuous mode
[  187.777920][T11070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.804881][T11070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.816114][T11070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.824946][T11070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.833794][T11070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.842499][T11070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.090079][T11188] loop0: detected capacity change from 0 to 512
[  188.097055][T11188] EXT4-fs: Ignoring removed nobh option
[  188.120915][T11188] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2790: corrupted inode contents
[  188.133924][T11188] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.2790: mark_inode_dirty error
[  188.153850][T11188] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2790: corrupted inode contents
[  188.166355][T11188] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2790: mark_inode_dirty error
[  188.178400][T11188] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2790: Failed to acquire dquot type 0
[  188.195230][T11188] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2790: corrupted inode contents
[  188.217345][T11188] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.2790: mark_inode_dirty error
[  188.230030][T11188] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2790: corrupted inode contents
[  188.249476][T11188] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2790: mark_inode_dirty error
[  188.289770][T11188] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2790: corrupted inode contents
[  188.297284][T11178] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  188.297284][T11178]    program syz.2.2787 not setting count and/or reply_len properly
[  188.307822][T11188] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  188.327842][T11188] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2790: corrupted inode contents
[  188.341230][T11188] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.2790: mark_inode_dirty error
[  188.353352][T11188] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  188.363229][T11188] EXT4-fs (loop0): 1 truncate cleaned up
[  188.369453][T11188] EXT4-fs mount: 26 callbacks suppressed
[  188.369464][T11188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.388454][T11188] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.410778][T11188] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2790: Failed to acquire dquot type 1
[  188.582263][T11192] chnl_net:caif_netlink_parms(): no params data found
[  188.620298][T11192] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.627371][T11192] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.636478][T11192] bridge_slave_0: entered allmulticast mode
[  188.643092][T11192] bridge_slave_0: entered promiscuous mode
[  188.650051][T11192] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.657084][T11192] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.667279][T11192] bridge_slave_1: entered allmulticast mode
[  188.673740][T11192] bridge_slave_1: entered promiscuous mode
[  188.673761][T11070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.701345][T11207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2792'.
[  188.710460][T11207] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2792'.
[  188.720061][T11207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2792'.
[  188.729248][T11207] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2792'.
[  188.738360][T11207] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2792'.
[  188.749177][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.761647][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.783210][T11192] team0: Port device team_slave_0 added
[  188.789865][T11192] team0: Port device team_slave_1 added
[  188.807254][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.814370][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.840319][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.851037][T11209] lo speed is unknown, defaulting to 1000
[  188.851489][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.863820][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.889867][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.902518][T11209] lo speed is unknown, defaulting to 1000
[  188.916513][T11209] lo speed is unknown, defaulting to 1000
[  188.919242][T11192] hsr_slave_0: entered promiscuous mode
[  188.928158][T11192] hsr_slave_1: entered promiscuous mode
[  188.935301][T11192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.935786][T11209] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  188.942940][T11192] Cannot create hsr debugfs directory
[  188.959202][ T3575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.970669][T11209] lo speed is unknown, defaulting to 1000
[  188.978156][T11209] lo speed is unknown, defaulting to 1000
[  188.984475][T11209] lo speed is unknown, defaulting to 1000
[  188.991912][T11209] lo speed is unknown, defaulting to 1000
[  188.999876][T11209] lo speed is unknown, defaulting to 1000
[  189.007445][T11209] lo speed is unknown, defaulting to 1000
[  189.025512][ T3575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.123321][ T3575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.151317][ T3575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.236116][T11215] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  189.236116][T11215]    program syz.0.2794 not setting count and/or reply_len properly
[  189.254967][ T3575] bridge_slave_1: left allmulticast mode
[  189.260904][ T3575] bridge_slave_1: left promiscuous mode
[  189.266548][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.275781][ T3575] bridge_slave_0: left allmulticast mode
[  189.281480][ T3575] bridge_slave_0: left promiscuous mode
[  189.287218][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.361091][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.370840][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.380114][ T3575] bond0 (unregistering): Released all slaves
[  189.390443][T11218] tipc: Started in network mode
[  189.395318][T11218] tipc: Node identity ac14140f, cluster identity 4711
[  189.402266][T11218] tipc: New replicast peer: 0.0.255.255
[  189.407859][T11218] tipc: Enabled bearer <udp:s>, priority 10
[  189.435692][ T3575] veth1_macvtap: left promiscuous mode
[  189.441415][ T3575] veth0_macvtap: left promiscuous mode
[  189.476716][ T3575] team0 (unregistering): Port device team_slave_1 removed
[  189.487245][ T3575] team0 (unregistering): Port device C removed
[  189.503465][T11221] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11221 comm=syz.0.2796
[  189.504071][ T3565] smc: removing ib device syz1
[  189.537232][T11223] loop0: detected capacity change from 0 to 512
[  189.544488][T11223] EXT4-fs: Ignoring removed nobh option
[  189.551343][ T5694] syz1: Port: 1 Link DOWN
[  189.561150][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2797: corrupted inode contents
[  189.576543][T11223] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.2797: mark_inode_dirty error
[  189.589176][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2797: corrupted inode contents
[  189.601126][T11223] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2797: mark_inode_dirty error
[  189.630499][T11223] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2797: Failed to acquire dquot type 0
[  189.642327][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2797: corrupted inode contents
[  189.655017][T11223] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.2797: mark_inode_dirty error
[  189.666507][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2797: corrupted inode contents
[  189.679370][T11223] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2797: mark_inode_dirty error
[  189.691093][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2797: corrupted inode contents
[  189.703369][T11223] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  189.712110][T11223] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2797: corrupted inode contents
[  189.724124][T11223] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.2797: mark_inode_dirty error
[  189.735324][T11223] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  189.738724][T11192] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  189.751601][T11223] EXT4-fs (loop0): 1 truncate cleaned up
[  189.757671][T11223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.759289][T11192] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  189.776852][T11223] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.790447][T11192] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  189.798762][T11192] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  189.805652][T11223] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2797: Failed to acquire dquot type 1
[  189.845495][T11192] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.857147][T11192] 8021q: adding VLAN 0 to HW filter on device team0
[  189.866097][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.873176][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.885525][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.892595][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.900939][T11070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.916621][T11192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.926988][T11192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.977467][T11236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.992923][ T5696] lo speed is unknown, defaulting to 1000
[  190.022895][T11192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.073372][T11192] veth0_vlan: entered promiscuous mode
[  190.090077][T11192] veth1_vlan: entered promiscuous mode
[  190.116984][T11192] veth0_macvtap: entered promiscuous mode
[  190.129588][T11192] veth1_macvtap: entered promiscuous mode
[  190.143169][T11192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.155220][T11254] FAULT_INJECTION: forcing a failure.
[  190.155220][T11254] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.157007][T11192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.168294][T11254] CPU: 1 UID: 0 PID: 11254 Comm: syz.5.2803 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  190.168335][T11254] Tainted: [W]=WARN
[  190.168342][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  190.168353][T11254] Call Trace:
[  190.168360][T11254]  <TASK>
[  190.168367][T11254]  __dump_stack+0x1d/0x30
[  190.168395][T11254]  dump_stack_lvl+0xe8/0x140
[  190.168414][T11254]  dump_stack+0x15/0x1b
[  190.168452][T11254]  should_fail_ex+0x265/0x280
[  190.168481][T11254]  should_fail+0xb/0x20
[  190.168506][T11254]  should_fail_usercopy+0x1a/0x20
[  190.168534][T11254]  strncpy_from_user+0x25/0x230
[  190.168628][T11254]  path_setxattrat+0xeb/0x310
[  190.168660][T11254]  __x64_sys_fsetxattr+0x6b/0x80
[  190.168681][T11254]  x64_sys_call+0x2f7c/0x2fb0
[  190.168717][T11254]  do_syscall_64+0xd2/0x200
[  190.168734][T11254]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  190.168759][T11254]  ? clear_bhb_loop+0x40/0x90
[  190.168778][T11254]  ? clear_bhb_loop+0x40/0x90
[  190.168813][T11254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.168833][T11254] RIP: 0033:0x7f64d021e929
[  190.168852][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.168930][T11254] RSP: 002b:00007f64ce887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  190.168953][T11254] RAX: ffffffffffffffda RBX: 00007f64d0445fa0 RCX: 00007f64d021e929
[  190.168966][T11254] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000004
[  190.168978][T11254] RBP: 00007f64ce887090 R08: 0000000000000000 R09: 0000000000000000
[  190.168990][T11254] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  190.169077][T11254] R13: 0000000000000000 R14: 00007f64d0445fa0 R15: 00007fff6002dad8
[  190.169095][T11254]  </TASK>
[  190.206002][T11256] loop0: detected capacity change from 0 to 512
[  190.209670][T11192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.210237][T11256] EXT4-fs: Ignoring removed nobh option
[  190.214115][T11192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.231418][T11256] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2802: corrupted inode contents
[  190.231816][T11192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.237463][T11256] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.2802: mark_inode_dirty error
[  190.241741][T11192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.248443][T11256] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2802: corrupted inode contents
[  190.288069][T11262] loop1: detected capacity change from 0 to 512
[  190.307522][T11256] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2802: mark_inode_dirty error
[  190.331279][   T29] kauditd_printk_skb: 401 callbacks suppressed
[  190.331293][   T29] audit: type=1400 audit(1751509212.972:15757): avc:  denied  { mounton } for  pid=11261 comm="syz.1.2805" path="/556/file0" dev="tmpfs" ino=2976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  190.341265][T11256] Quota error (device loop0): write_blk: dquota write failed
[  190.452781][   T29] audit: type=1400 audit(1751509213.082:15758): avc:  denied  { read write } for  pid=4690 comm="syz-executor" name="loop5" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  190.457140][T11256] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  190.462757][   T29] audit: type=1400 audit(1751509213.082:15759): avc:  denied  { open } for  pid=4690 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  190.487651][T11262] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  190.549838][   T29] audit: type=1400 audit(1751509213.142:15760): avc:  denied  { mounton } for  pid=11192 comm="syz-executor" path="/root/syzkaller.dG7I1B/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  190.560737][T11262] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  190.560757][T11262] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2805: Corrupt directory, running e2fsck is recommended
[  190.561564][ T3399] tipc: Node number set to 2886997007
[  190.585288][   T29] audit: type=1400 audit(1751509213.142:15761): avc:  denied  { mount } for  pid=11192 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  190.636290][   T29] audit: type=1400 audit(1751509213.142:15762): avc:  denied  { mount } for  pid=11192 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  190.639544][T11262] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  190.658501][   T29] audit: type=1400 audit(1751509213.142:15763): avc:  denied  { mounton } for  pid=11192 comm="syz-executor" path="/root/syzkaller.dG7I1B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  190.669288][T11256] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2802: Failed to acquire dquot type 0
[  190.693567][   T29] audit: type=1400 audit(1751509213.142:15764): avc:  denied  { mounton } for  pid=11192 comm="syz-executor" path="/root/syzkaller.dG7I1B/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  190.708244][T11266] tipc: New replicast peer: 0.0.255.255
[  190.738175][T11266] tipc: Enabled bearer <udp:s>, priority 10
[  190.744432][T11262] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2805: corrupted in-inode xattr: invalid ea_ino
[  190.762371][T11256] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2802: corrupted inode contents
[  190.776662][T11256] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.2802: mark_inode_dirty error
[  190.779661][T11262] EXT4-fs (loop1): Remounting filesystem read-only
[  190.788400][T11256] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2802: corrupted inode contents
[  190.800894][T11262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.819169][T11256] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2802: mark_inode_dirty error
[  190.830656][T11256] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2802: corrupted inode contents
[  190.842962][T11256] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  190.853551][T11256] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2802: corrupted inode contents
[  190.865736][T11256] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.2802: mark_inode_dirty error
[  190.878345][T11256] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  190.887963][T11256] EXT4-fs (loop0): 1 truncate cleaned up
[  190.894686][T11256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.907376][T11256] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.912665][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.987808][T11276] loop5: detected capacity change from 0 to 512
[  190.996952][T11276] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.003838][T11276] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  191.015372][T11276] EXT4-fs (loop5): 1 truncate cleaned up
[  191.021407][T11276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.025787][T11256] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2802: Failed to acquire dquot type 1
[  191.048179][T11277] SELinux: failed to load policy
[  191.082661][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.215311][T11070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.260915][T11298] FAULT_INJECTION: forcing a failure.
[  191.260915][T11298] name failslab, interval 1, probability 0, space 0, times 0
[  191.273610][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.0.2819 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  191.273690][T11298] Tainted: [W]=WARN
[  191.273697][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  191.273709][T11298] Call Trace:
[  191.273716][T11298]  <TASK>
[  191.273724][T11298]  __dump_stack+0x1d/0x30
[  191.273745][T11298]  dump_stack_lvl+0xe8/0x140
[  191.273764][T11298]  dump_stack+0x15/0x1b
[  191.273782][T11298]  should_fail_ex+0x265/0x280
[  191.273847][T11298]  should_failslab+0x8c/0xb0
[  191.273913][T11298]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  191.273937][T11298]  ? security_set_bools+0x85/0x340
[  191.273972][T11298]  kmemdup_noprof+0x2b/0x70
[  191.274104][T11298]  security_set_bools+0x85/0x340
[  191.274178][T11298]  sel_commit_bools_write+0x1ea/0x270
[  191.274209][T11298]  vfs_writev+0x403/0x8b0
[  191.274268][T11298]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  191.274304][T11298]  ? mutex_lock+0xd/0x30
[  191.274331][T11298]  do_writev+0xe7/0x210
[  191.274371][T11298]  __x64_sys_writev+0x45/0x50
[  191.274388][T11298]  x64_sys_call+0x2006/0x2fb0
[  191.274441][T11298]  do_syscall_64+0xd2/0x200
[  191.274457][T11298]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  191.274478][T11298]  ? clear_bhb_loop+0x40/0x90
[  191.274552][T11298]  ? clear_bhb_loop+0x40/0x90
[  191.274570][T11298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.274587][T11298] RIP: 0033:0x7fb80cf4e929
[  191.274679][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.274694][T11298] RSP: 002b:00007fb80b5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  191.274710][T11298] RAX: ffffffffffffffda RBX: 00007fb80d175fa0 RCX: 00007fb80cf4e929
[  191.274723][T11298] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003
[  191.274736][T11298] RBP: 00007fb80b5b7090 R08: 0000000000000000 R09: 0000000000000000
[  191.274749][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.274762][T11298] R13: 0000000000000000 R14: 00007fb80d175fa0 R15: 00007ffe374a4a28
[  191.274816][T11298]  </TASK>
[  191.613141][T11288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  191.613141][T11288]    program syz.1.2814 not setting count and/or reply_len properly
[  191.780642][T11312] FAULT_INJECTION: forcing a failure.
[  191.780642][T11312] name failslab, interval 1, probability 0, space 0, times 0
[  191.793381][T11312] CPU: 0 UID: 0 PID: 11312 Comm: syz.0.2822 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  191.793413][T11312] Tainted: [W]=WARN
[  191.793420][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  191.793432][T11312] Call Trace:
[  191.793438][T11312]  <TASK>
[  191.793444][T11312]  __dump_stack+0x1d/0x30
[  191.793480][T11312]  dump_stack_lvl+0xe8/0x140
[  191.793496][T11312]  dump_stack+0x15/0x1b
[  191.793510][T11312]  should_fail_ex+0x265/0x280
[  191.793541][T11312]  should_failslab+0x8c/0xb0
[  191.793597][T11312]  kmem_cache_alloc_node_noprof+0x57/0x320
[  191.793625][T11312]  ? __alloc_skb+0x101/0x320
[  191.793655][T11312]  __alloc_skb+0x101/0x320
[  191.793757][T11312]  netlink_alloc_large_skb+0xba/0xf0
[  191.793856][T11312]  netlink_sendmsg+0x3cf/0x6b0
[  191.793887][T11312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.793903][T11312]  __sock_sendmsg+0x145/0x180
[  191.793941][T11312]  ____sys_sendmsg+0x31e/0x4e0
[  191.793971][T11312]  ___sys_sendmsg+0x17b/0x1d0
[  191.794061][T11312]  __x64_sys_sendmsg+0xd4/0x160
[  191.794096][T11312]  x64_sys_call+0x2999/0x2fb0
[  191.794118][T11312]  do_syscall_64+0xd2/0x200
[  191.794134][T11312]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  191.794227][T11312]  ? clear_bhb_loop+0x40/0x90
[  191.794278][T11312]  ? clear_bhb_loop+0x40/0x90
[  191.794295][T11312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.794312][T11312] RIP: 0033:0x7fb80cf4e929
[  191.794325][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.794340][T11312] RSP: 002b:00007fb80b575038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.794360][T11312] RAX: ffffffffffffffda RBX: 00007fb80d176160 RCX: 00007fb80cf4e929
[  191.794507][T11312] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008
[  191.794517][T11312] RBP: 00007fb80b575090 R08: 0000000000000000 R09: 0000000000000000
[  191.794527][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.794538][T11312] R13: 0000000000000000 R14: 00007fb80d176160 R15: 00007ffe374a4a28
[  191.794553][T11312]  </TASK>
[  192.236966][T11310] lo speed is unknown, defaulting to 1000
[  192.300277][T11310] chnl_net:caif_netlink_parms(): no params data found
[  192.311516][T11331] loop1: detected capacity change from 0 to 512
[  192.331978][T11331] EXT4-fs (loop1): 1 orphan inode deleted
[  192.338247][T11331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.351474][T11331] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.352381][ T3562] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1
[  192.374089][T11310] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.381263][T11310] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.388347][T11310] bridge_slave_0: entered allmulticast mode
[  192.394826][T11310] bridge_slave_0: entered promiscuous mode
[  192.396280][T11310] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.396390][T11310] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.396854][T11310] bridge_slave_1: entered allmulticast mode
[  192.398295][T11310] bridge_slave_1: entered promiscuous mode
[  192.430981][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.457520][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.468148][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.505670][T11310] team0: Port device team_slave_0 added
[  192.514303][T11310] team0: Port device team_slave_1 added
[  192.536333][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.543377][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.569612][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.581907][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.588903][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.614904][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.716834][T11310] hsr_slave_0: entered promiscuous mode
[  192.722978][T11310] hsr_slave_1: entered promiscuous mode
[  192.728947][T11310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.736539][T11310] Cannot create hsr debugfs directory
[  192.776335][T11354] __nla_validate_parse: 12 callbacks suppressed
[  192.776350][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2834'.
[  192.816482][T11310] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  192.825349][T11310] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  192.833803][T11310] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  192.842467][T11310] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  192.859015][T11310] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.866144][T11310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.873438][T11310] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.873469][T11310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.895333][T11310] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.907281][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.916315][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.930682][T11310] 8021q: adding VLAN 0 to HW filter on device team0
[  192.941483][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.948554][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.961763][T11366] SET target dimension over the limit!
[  192.980669][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.987822][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.001109][T11366] loop0: detected capacity change from 0 to 8192
[  193.015309][T11366] blkio.reset_stats is deprecated
[  193.022348][T11310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.073880][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.196572][T11310] veth0_vlan: entered promiscuous mode
[  193.207093][T11310] veth1_vlan: entered promiscuous mode
[  193.224767][T11310] veth0_macvtap: entered promiscuous mode
[  193.233018][T11310] veth1_macvtap: entered promiscuous mode
[  193.256392][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.267341][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.276740][T11310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.285539][T11310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.294278][T11310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.302993][T11310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.450798][T11394] loop1: detected capacity change from 0 to 512
[  193.470183][T11394] EXT4-fs: Ignoring removed nobh option
[  193.702369][T11406] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2823'.
[  193.726652][T11408] random: crng reseeded on system resumption
[  193.751975][T11410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11410 comm=syz.6.2846
[  193.772393][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.2841: corrupted inode contents
[  193.784762][T11394] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.2841: mark_inode_dirty error
[  193.798241][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.2841: corrupted inode contents
[  193.811778][T11394] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2841: mark_inode_dirty error
[  193.831750][T11412] C: renamed from team_slave_0 (while UP)
[  193.839664][T11394] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2841: Failed to acquire dquot type 0
[  193.856432][T11412] netlink: 'syz.6.2847': attribute type 3 has an invalid length.
[  193.864533][T11412] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2847'.
[  193.873938][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2841: corrupted inode contents
[  193.874102][T11394] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.2841: mark_inode_dirty error
[  193.874204][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2841: corrupted inode contents
[  193.874693][T11394] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2841: mark_inode_dirty error
[  193.889371][T11412] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  193.918479][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2841: corrupted inode contents
[  193.960689][T11394] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  193.972786][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.2841: corrupted inode contents
[  193.984915][T11394] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.2841: mark_inode_dirty error
[  193.995961][T11419] loop6: detected capacity change from 0 to 512
[  194.003867][T11394] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  194.004170][T11394] EXT4-fs (loop1): 1 truncate cleaned up
[  194.004487][T11394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.004588][T11394] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.014757][T11419] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  194.014779][T11419] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  194.014796][T11419] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2850: Corrupt directory, running e2fsck is recommended
[  194.014997][T11419] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  194.015124][T11419] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2850: corrupted in-inode xattr: invalid ea_ino
[  194.015282][T11419] EXT4-fs (loop6): Remounting filesystem read-only
[  194.015737][T11419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.017207][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2850'.
[  194.017418][T11419] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2850'.
[  194.026793][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.314648][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.332248][T11434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.405315][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2855'.
[  194.414475][T11434] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2855'.
[  194.425209][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2855'.
[  194.434342][T11434] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2855'.
[  194.443397][T11434] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2855'.
[  194.742557][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.753581][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.766263][T11451] netlink: 'syz.5.2861': attribute type 3 has an invalid length.
[  194.774452][T11451] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  194.811192][T11454] loop6: detected capacity change from 0 to 512
[  194.826763][T11454] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  194.838335][T11454] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  194.848447][T11454] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2862: Corrupt directory, running e2fsck is recommended
[  194.907429][T11440] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  194.907429][T11440]    program syz.1.2856 not setting count and/or reply_len properly
[  194.928869][T11454] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  194.969524][T11454] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2862: corrupted in-inode xattr: invalid ea_ino
[  195.003664][T11454] EXT4-fs (loop6): Remounting filesystem read-only
[  195.023508][T11460] vlan0: entered allmulticast mode
[  195.030539][T11454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.087804][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.109407][T11467] loop1: detected capacity change from 0 to 512
[  195.117462][T11467] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2867: casefold flag without casefold feature
[  195.131766][T11467] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2867: couldn't read orphan inode 15 (err -117)
[  195.144742][T11467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.209621][T11472] 9pnet_fd: Insufficient options for proto=fd
[  195.288208][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.339005][   T29] kauditd_printk_skb: 458 callbacks suppressed
[  195.339020][   T29] audit: type=1326 audit(1751509217.982:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d01bab19 code=0x7ffc0000
[  195.373864][   T29] audit: type=1326 audit(1751509218.012:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d02158e7 code=0x7ffc0000
[  195.397623][   T29] audit: type=1326 audit(1751509218.012:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d01bab19 code=0x7ffc0000
[  195.421208][   T29] audit: type=1326 audit(1751509218.012:16221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f64d021e929 code=0x7ffc0000
[  195.447285][   T29] audit: type=1326 audit(1751509218.092:16222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d02158e7 code=0x7ffc0000
[  195.470939][   T29] audit: type=1326 audit(1751509218.092:16223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d01bab19 code=0x7ffc0000
[  195.494500][   T29] audit: type=1326 audit(1751509218.092:16224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f64d021e929 code=0x7ffc0000
[  195.523598][   T29] audit: type=1326 audit(1751509218.162:16225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d02158e7 code=0x7ffc0000
[  195.547168][   T29] audit: type=1326 audit(1751509218.162:16226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d01bab19 code=0x7ffc0000
[  195.570696][   T29] audit: type=1326 audit(1751509218.162:16227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11455 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f64d021e929 code=0x7ffc0000
[  195.893392][T11500] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  195.963862][T11500] wg2: entered promiscuous mode
[  195.968917][T11500] wg2: entered allmulticast mode
[  196.475866][T11509] loop0: detected capacity change from 0 to 512
[  196.486939][T11510] FAULT_INJECTION: forcing a failure.
[  196.486939][T11510] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  196.487626][T11509] EXT4-fs: Ignoring removed nobh option
[  196.500252][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.5.2879 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  196.500341][T11510] Tainted: [W]=WARN
[  196.500349][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  196.500359][T11510] Call Trace:
[  196.500365][T11510]  <TASK>
[  196.500373][T11510]  __dump_stack+0x1d/0x30
[  196.500394][T11510]  dump_stack_lvl+0xe8/0x140
[  196.500413][T11510]  dump_stack+0x15/0x1b
[  196.500430][T11510]  should_fail_ex+0x265/0x280
[  196.500522][T11510]  should_fail_alloc_page+0xf2/0x100
[  196.500545][T11510]  __alloc_frozen_pages_noprof+0xff/0x360
[  196.500578][T11510]  alloc_pages_mpol+0xb3/0x250
[  196.500628][T11510]  alloc_pages_noprof+0x90/0x130
[  196.500655][T11510]  pte_alloc_one+0x2d/0x120
[  196.500675][T11510]  __pte_alloc+0x32/0x2b0
[  196.500744][T11510]  ? walk_pgd_range+0xd14/0x14e0
[  196.500776][T11510]  walk_pgd_range+0x9f2/0x14e0
[  196.500806][T11510]  ? __pfx_guard_install_set_pte+0x10/0x10
[  196.500839][T11510]  ? __pfx_guard_install_set_pte+0x10/0x10
[  196.500867][T11510]  ? __pfx_guard_install_set_pte+0x10/0x10
[  196.500992][T11510]  ? __pfx_guard_install_set_pte+0x10/0x10
[  196.501087][T11510]  __walk_page_range+0xdd/0x340
[  196.501141][T11510]  walk_page_range_mm+0x352/0x4a0
[  196.501203][T11510]  madvise_do_behavior+0x8d5/0x1f20
[  196.501229][T11510]  ? proc_fail_nth_write+0xd2/0x160
[  196.501260][T11510]  ? proc_fail_nth_write+0x12d/0x160
[  196.501349][T11510]  ? down_read+0x77/0xe0
[  196.501395][T11510]  do_madvise+0x103/0x190
[  196.501478][T11510]  __x64_sys_madvise+0x64/0x80
[  196.501654][T11510]  x64_sys_call+0x2455/0x2fb0
[  196.501695][T11510]  do_syscall_64+0xd2/0x200
[  196.501712][T11510]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  196.501737][T11510]  ? clear_bhb_loop+0x40/0x90
[  196.501757][T11510]  ? clear_bhb_loop+0x40/0x90
[  196.501854][T11510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.501907][T11510] RIP: 0033:0x7f64d021e929
[  196.501922][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.501939][T11510] RSP: 002b:00007f64ce866038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  196.501965][T11510] RAX: ffffffffffffffda RBX: 00007f64d0446080 RCX: 00007f64d021e929
[  196.501977][T11510] RDX: 0000000000000066 RSI: 0000000000600003 RDI: 0000200000000000
[  196.501989][T11510] RBP: 00007f64ce866090 R08: 0000000000000000 R09: 0000000000000000
[  196.502002][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.502014][T11510] R13: 0000000000000000 R14: 00007f64d0446080 R15: 00007fff6002dad8
[  196.502032][T11510]  </TASK>
[  196.719977][T11509] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2881: corrupted inode contents
[  196.782854][T11509] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.2881: mark_inode_dirty error
[  196.809819][T11509] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2881: corrupted inode contents
[  196.826266][T11522] loop2: detected capacity change from 0 to 512
[  196.841348][T11519] loop6: detected capacity change from 0 to 1764
[  196.855004][T11522] EXT4-fs: Ignoring removed nobh option
[  196.864734][T11509] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2881: mark_inode_dirty error
[  196.877344][T11522] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.2885: corrupted inode contents
[  196.890664][T11509] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2881: Failed to acquire dquot type 0
[  196.902779][T11522] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.2885: mark_inode_dirty error
[  196.916543][T11509] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2881: corrupted inode contents
[  196.932014][T11509] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.2881: mark_inode_dirty error
[  196.947926][T11522] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.2885: corrupted inode contents
[  196.957507][T11509] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2881: corrupted inode contents
[  196.972915][T11522] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2885: mark_inode_dirty error
[  196.979945][T11509] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2881: mark_inode_dirty error
[  196.994289][T11525] siw: device registration error -23
[  196.996628][T11509] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2881: corrupted inode contents
[  197.014778][T11522] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2885: Failed to acquire dquot type 0
[  197.027036][T11509] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  197.036138][T11522] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2885: corrupted inode contents
[  197.048110][T11509] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2881: corrupted inode contents
[  197.060570][T11522] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.2885: mark_inode_dirty error
[  197.064202][T11509] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.2881: mark_inode_dirty error
[  197.072285][T11522] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2885: corrupted inode contents
[  197.084061][T11509] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  197.095007][T11522] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2885: mark_inode_dirty error
[  197.119069][T11522] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2885: corrupted inode contents
[  197.131723][T11509] EXT4-fs (loop0): 1 truncate cleaned up
[  197.140067][T11509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.155241][T11522] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  197.168839][T11509] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.176397][T11522] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2885: corrupted inode contents
[  197.192434][T11522] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.2885: mark_inode_dirty error
[  197.203706][T11522] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  197.214216][T11522] EXT4-fs (loop2): 1 truncate cleaned up
[  197.220400][T11522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.237763][T11522] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.257049][T11522] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2885: Failed to acquire dquot type 1
[  197.269101][T11509] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2881: Failed to acquire dquot type 1
[  197.300135][T11545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.337409][T11192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.348201][T11070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.398422][T11553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.575652][T11567] random: crng reseeded on system resumption
[  198.103732][T11580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.129550][T11580] __nla_validate_parse: 19 callbacks suppressed
[  198.129563][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2904'.
[  198.144881][T11580] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2904'.
[  198.154131][T11580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2904'.
[  198.163640][T11580] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2904'.
[  198.172762][T11580] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2904'.
[  198.191466][T11584] loop6: detected capacity change from 0 to 512
[  198.198137][T11584] EXT4-fs: Ignoring removed nobh option
[  198.210502][T11584] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2905: corrupted inode contents
[  198.226359][T11584] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.2905: mark_inode_dirty error
[  198.239777][T11584] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2905: corrupted inode contents
[  198.252641][T11584] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2905: mark_inode_dirty error
[  198.264887][T11584] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2905: Failed to acquire dquot type 0
[  198.280707][T11591] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2906'.
[  198.290640][T11588] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2906'.
[  198.302445][T11584] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2905: corrupted inode contents
[  198.328771][T11584] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.2905: mark_inode_dirty error
[  198.343611][T11584] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2905: corrupted inode contents
[  198.367575][T11584] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2905: mark_inode_dirty error
[  198.379039][T11588] loop0: detected capacity change from 0 to 164
[  198.386240][T11584] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2905: corrupted inode contents
[  198.395981][T11588] syz.0.2906: attempt to access beyond end of device
[  198.395981][T11588] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  198.413843][T11588] syz.0.2906: attempt to access beyond end of device
[  198.413843][T11588] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  198.427340][T11584] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  198.447566][T11594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.476966][T11584] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2905: corrupted inode contents
[  198.497252][T11584] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.2905: mark_inode_dirty error
[  198.517276][T11601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'.
[  198.519042][T11603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2912'.
[  198.535637][T11584] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  198.536973][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2908'.
[  198.545908][T11584] EXT4-fs (loop6): 1 truncate cleaned up
[  198.567485][T11584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.582070][T11584] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.607115][T11584] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2905: Failed to acquire dquot type 1
[  198.646253][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.718897][T11619] loop6: detected capacity change from 0 to 512
[  198.725928][T11619] EXT4-fs: Ignoring removed nobh option
[  198.746579][T11619] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2919: corrupted inode contents
[  198.761216][T11619] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.2919: mark_inode_dirty error
[  198.773314][T11619] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2919: corrupted inode contents
[  198.787478][T11624] netlink: 'syz.1.2920': attribute type 10 has an invalid length.
[  198.789275][T11619] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2919: mark_inode_dirty error
[  198.809915][T11624] team0 (unregistering): Port device C removed
[  198.817794][T11619] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2919: Failed to acquire dquot type 0
[  198.823946][T11624] team0 (unregistering): Port device team_slave_1 removed
[  198.830580][T11619] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2919: corrupted inode contents
[  198.848187][T11624] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.848945][T11619] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.2919: mark_inode_dirty error
[  198.855280][T11624] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.868915][T11624] team0 (unregistering): Port device bridge0 removed
[  198.874540][T11619] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2919: corrupted inode contents
[  198.893015][T11631] loop0: detected capacity change from 0 to 512
[  198.895710][T11619] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2919: mark_inode_dirty error
[  198.901062][T11631] EXT4-fs: Ignoring removed nobh option
[  198.916778][T11619] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2919: corrupted inode contents
[  198.930378][T11619] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  198.930900][T11631] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2922: corrupted inode contents
[  198.939008][T11619] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2919: corrupted inode contents
[  198.952709][T11631] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.2922: mark_inode_dirty error
[  198.963182][T11619] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.2919: mark_inode_dirty error
[  198.974763][T11631] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.2922: corrupted inode contents
[  198.991389][T11619] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  198.997118][T11631] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2922: mark_inode_dirty error
[  199.006381][T11619] EXT4-fs (loop6): 1 truncate cleaned up
[  199.023499][T11619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.036354][T11619] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.037064][T11631] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2922: Failed to acquire dquot type 0
[  199.060085][T11631] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2922: corrupted inode contents
[  199.079962][T11631] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.2922: mark_inode_dirty error
[  199.093038][T11631] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2922: corrupted inode contents
[  199.106721][T11619] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2919: Failed to acquire dquot type 1
[  199.120399][T11631] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2922: mark_inode_dirty error
[  199.132364][T11631] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2922: corrupted inode contents
[  199.164091][T11631] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  199.187867][T11631] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.2922: corrupted inode contents
[  199.204343][T11631] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.2922: mark_inode_dirty error
[  199.249519][T11631] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  199.263106][T11631] EXT4-fs (loop0): 1 truncate cleaned up
[  199.270603][T11631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.283742][T11631] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.410835][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.446195][T11631] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2922: Failed to acquire dquot type 1
[  199.822508][T11070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.881258][T11662] syzkaller1: entered promiscuous mode
[  199.886784][T11662] syzkaller1: entered allmulticast mode
[  200.110668][T11673] siw: device registration error -23
[  200.304577][T11691] netlink: 'syz.1.2944': attribute type 1 has an invalid length.
[  200.382889][   T29] kauditd_printk_skb: 456 callbacks suppressed
[  200.382904][   T29] audit: type=1326 audit(1751509223.022:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a594e929 code=0x7ffc0000
[  200.433219][   T29] audit: type=1326 audit(1751509223.062:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62a594e929 code=0x7ffc0000
[  200.456818][   T29] audit: type=1326 audit(1751509223.062:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a594e929 code=0x7ffc0000
[  200.480410][   T29] audit: type=1326 audit(1751509223.062:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a594e929 code=0x7ffc0000
[  200.493608][T11696] syzkaller1: entered promiscuous mode
[  200.504018][   T29] audit: type=1326 audit(1751509223.062:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62a594e929 code=0x7ffc0000
[  200.509647][T11696] syzkaller1: entered allmulticast mode
[  200.540716][T11699] loop5: detected capacity change from 0 to 256
[  200.553019][   T29] audit: type=1326 audit(1751509223.182:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a594e929 code=0x7ffc0000
[  200.576650][   T29] audit: type=1326 audit(1751509223.182:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62a59458e7 code=0x7ffc0000
[  200.600140][   T29] audit: type=1326 audit(1751509223.182:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a58eab19 code=0x7ffc0000
[  200.623703][   T29] audit: type=1326 audit(1751509223.182:16672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62a59458e7 code=0x7ffc0000
[  200.647365][   T29] audit: type=1326 audit(1751509223.182:16673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.1.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62a58eab19 code=0x7ffc0000
[  200.745253][T11698] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  200.807268][T11704] loop2: detected capacity change from 0 to 512
[  200.868868][T11704] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  200.887558][T11704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ee01c, mo2=0102]
[  200.906109][T11704] EXT4-fs (loop2): orphan cleanup on readonly fs
[  201.100845][T11704] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.2948: invalid block
[  201.123464][T11704] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2948: invalid indirect mapped block 2185560079 (level 1)
[  201.157947][T11704] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2948: bg 0: block 361: padding at end of block bitmap is not set
[  201.172610][T11706] loop5: detected capacity change from 0 to 512
[  201.187550][T11714] x_tables: duplicate underflow at hook 1
[  201.191346][T11706] EXT4-fs: Ignoring removed nobh option
[  201.206165][T11704] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  201.229727][T11704] EXT4-fs (loop2): 1 truncate cleaned up
[  201.239240][T11704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  201.239960][T11706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.2949: corrupted inode contents
[  201.289882][T11192] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  201.344254][T11706] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.2949: mark_inode_dirty error
[  201.356922][T11706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.2949: corrupted inode contents
[  201.370082][T11706] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2949: mark_inode_dirty error
[  201.393784][T11706] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2949: Failed to acquire dquot type 0
[  201.405649][T11706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2949: corrupted inode contents
[  201.427453][T11706] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.2949: mark_inode_dirty error
[  201.447103][T11706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2949: corrupted inode contents
[  201.469356][T11706] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2949: mark_inode_dirty error
[  201.482377][T11706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2949: corrupted inode contents
[  201.498010][T11706] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  201.508376][T11706] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2949: corrupted inode contents
[  201.527396][T11706] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.2949: mark_inode_dirty error
[  201.538918][T11706] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  201.548460][T11706] EXT4-fs (loop5): 1 truncate cleaned up
[  201.557058][T11706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.574101][T11706] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.635357][T11706] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2949: Failed to acquire dquot type 1
[  201.689920][T11728] syzkaller1: entered promiscuous mode
[  201.695400][T11728] syzkaller1: entered allmulticast mode
[  201.769115][T11732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.869056][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.933986][T11737] SELinux: failed to load policy
[  202.098802][T11734] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  202.098802][T11734]    program syz.6.2960 not setting count and/or reply_len properly
[  202.155018][T11750] loop0: detected capacity change from 0 to 512
[  202.165810][T11741] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  202.165810][T11741]    program syz.5.2962 not setting count and/or reply_len properly
[  202.223114][T11752] IPv6: Can't replace route, no match found
[  202.240329][T11752] loop1: detected capacity change from 0 to 1024
[  202.250055][T11752] EXT4-fs: Ignoring removed bh option
[  202.255603][T11752] EXT4-fs: inline encryption not supported
[  202.261624][T11752] ext4: Unknown parameter 'smackfsroot'
[  202.272252][T11752] rdma_op ffff888102a7ad80 conn xmit_rdma 0000000000000000
[  202.320215][T11758] usb usb7: usbfs: process 11758 (syz.5.2969) did not claim interface 0 before use
[  202.352480][T11761] loop5: detected capacity change from 0 to 512
[  202.360064][T11761] EXT4-fs: Ignoring removed nobh option
[  202.370221][T11761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.2970: corrupted inode contents
[  202.382323][T11761] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.2970: mark_inode_dirty error
[  202.400861][T11761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.2970: corrupted inode contents
[  202.413990][T11761] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2970: mark_inode_dirty error
[  202.440647][T11761] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2970: Failed to acquire dquot type 0
[  202.486833][T11761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2970: corrupted inode contents
[  202.500564][T11769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.571310][T11761] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.2970: mark_inode_dirty error
[  202.583562][T11761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2970: corrupted inode contents
[  202.597212][T11761] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2970: mark_inode_dirty error
[  202.610364][T11761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2970: corrupted inode contents
[  202.624419][T11761] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  202.635549][T11761] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.2970: corrupted inode contents
[  202.650131][T11761] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.2970: mark_inode_dirty error
[  202.661573][T11761] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  202.672544][T11761] EXT4-fs (loop5): 1 truncate cleaned up
[  202.678949][T11761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.693030][T11761] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.713576][T11761] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2970: Failed to acquire dquot type 1
[  202.828875][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.173718][T11805] syzkaller1: entered promiscuous mode
[  203.179251][T11805] syzkaller1: entered allmulticast mode
[  203.240805][T11801] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  203.240805][T11801]    program syz.6.2981 not setting count and/or reply_len properly
[  203.306204][T11812] __nla_validate_parse: 17 callbacks suppressed
[  203.306220][T11812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2986'.
[  203.331658][T11814] loop6: detected capacity change from 0 to 512
[  203.338494][T11814] EXT4-fs: Ignoring removed nobh option
[  203.350167][T11814] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2987: corrupted inode contents
[  203.363422][T11814] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.2987: mark_inode_dirty error
[  203.375166][T11814] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.2987: corrupted inode contents
[  203.388406][T11814] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2987: mark_inode_dirty error
[  203.395472][T11818] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.399992][T11814] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2987: Failed to acquire dquot type 0
[  203.406562][T11818] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.419226][T11814] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2987: corrupted inode contents
[  203.425076][T11818] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.438321][T11814] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.2987: mark_inode_dirty error
[  203.443787][T11818] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.456361][T11814] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2987: corrupted inode contents
[  203.474533][T11814] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2987: mark_inode_dirty error
[  203.485946][T11818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.486048][T11814] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2987: corrupted inode contents
[  203.513365][T11814] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  203.522108][T11814] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.2987: corrupted inode contents
[  203.534241][T11814] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.2987: mark_inode_dirty error
[  203.545696][T11814] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  203.555055][T11814] EXT4-fs (loop6): 1 truncate cleaned up
[  203.561148][T11814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.573733][T11814] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.590992][T11814] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2987: Failed to acquire dquot type 1
[  203.642285][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.697016][T11826] FAULT_INJECTION: forcing a failure.
[  203.697016][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.710201][T11826] CPU: 1 UID: 0 PID: 11826 Comm: syz.0.2992 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  203.710296][T11826] Tainted: [W]=WARN
[  203.710304][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.710315][T11826] Call Trace:
[  203.710322][T11826]  <TASK>
[  203.710330][T11826]  __dump_stack+0x1d/0x30
[  203.710380][T11826]  dump_stack_lvl+0xe8/0x140
[  203.710399][T11826]  dump_stack+0x15/0x1b
[  203.710413][T11826]  should_fail_ex+0x265/0x280
[  203.710438][T11826]  should_fail+0xb/0x20
[  203.710519][T11826]  should_fail_usercopy+0x1a/0x20
[  203.710545][T11826]  _copy_from_user+0x1c/0xb0
[  203.710580][T11826]  ___sys_sendmsg+0xc1/0x1d0
[  203.710605][T11826]  __x64_sys_sendmsg+0xd4/0x160
[  203.710730][T11826]  x64_sys_call+0x2999/0x2fb0
[  203.710742][T11826]  do_syscall_64+0xd2/0x200
[  203.710752][T11826]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  203.710775][T11826]  ? clear_bhb_loop+0x40/0x90
[  203.710853][T11826]  ? clear_bhb_loop+0x40/0x90
[  203.710865][T11826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.710987][T11826] RIP: 0033:0x7fb80cf4e929
[  203.710997][T11826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.711007][T11826] RSP: 002b:00007fb80b5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.711019][T11826] RAX: ffffffffffffffda RBX: 00007fb80d175fa0 RCX: 00007fb80cf4e929
[  203.711026][T11826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  203.711061][T11826] RBP: 00007fb80b5b7090 R08: 0000000000000000 R09: 0000000000000000
[  203.711068][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.711075][T11826] R13: 0000000000000000 R14: 00007fb80d175fa0 R15: 00007ffe374a4a28
[  203.711112][T11826]  </TASK>
[  204.043838][T11836] syzkaller1: entered promiscuous mode
[  204.049450][T11836] syzkaller1: entered allmulticast mode
[  204.359562][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2998'.
[  204.560902][T11849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.586949][T11847] siw: device registration error -23
[  204.649594][T11855] loop6: detected capacity change from 0 to 512
[  204.656395][T11844] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  204.656395][T11844]    program syz.0.2997 not setting count and/or reply_len properly
[  204.656667][T11855] EXT4-fs: Ignoring removed nobh option
[  204.717991][T11855] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3001: corrupted inode contents
[  204.731051][T11855] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.3001: mark_inode_dirty error
[  204.744663][T11855] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3001: corrupted inode contents
[  204.760446][T11855] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3001: mark_inode_dirty error
[  204.787431][T11855] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3001: Failed to acquire dquot type 0
[  204.807719][T11855] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3001: corrupted inode contents
[  204.841623][T11873] program syz.2.3003 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.851499][T11855] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.3001: mark_inode_dirty error
[  204.863310][T11855] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3001: corrupted inode contents
[  204.863526][T11855] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3001: mark_inode_dirty error
[  204.864360][T11855] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3001: corrupted inode contents
[  204.873068][T11855] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  204.912591][T11855] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3001: corrupted inode contents
[  204.912926][T11855] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.3001: mark_inode_dirty error
[  204.913019][T11855] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  204.913443][T11855] EXT4-fs (loop6): 1 truncate cleaned up
[  204.913922][T11855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.963863][T11855] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.981641][T11855] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3001: Failed to acquire dquot type 1
[  205.035170][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.055687][T11878] loop6: detected capacity change from 0 to 512
[  205.062687][T11878] EXT4-fs: Ignoring removed nobh option
[  205.080464][T11878] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3006: corrupted inode contents
[  205.092489][T11878] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.3006: mark_inode_dirty error
[  205.104127][T11878] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3006: corrupted inode contents
[  205.116297][T11878] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3006: mark_inode_dirty error
[  205.127734][T11878] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3006: Failed to acquire dquot type 0
[  205.139647][T11878] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3006: corrupted inode contents
[  205.151666][T11878] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.3006: mark_inode_dirty error
[  205.163141][T11878] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3006: corrupted inode contents
[  205.175236][T11878] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3006: mark_inode_dirty error
[  205.186663][T11878] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3006: corrupted inode contents
[  205.198838][T11878] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  205.207646][T11878] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3006: corrupted inode contents
[  205.219780][T11878] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.3006: mark_inode_dirty error
[  205.231080][T11878] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  205.240529][T11878] EXT4-fs (loop6): 1 truncate cleaned up
[  205.246686][T11878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.259496][T11878] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.273659][T11878] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3006: Failed to acquire dquot type 1
[  205.339146][T11310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.358443][T11882] syzkaller1: entered promiscuous mode
[  205.364075][T11882] syzkaller1: entered allmulticast mode
[  205.445493][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3009'.
[  205.455370][T11886] usb usb7: usbfs: process 11886 (syz.6.3009) did not claim interface 0 before use
[  205.525769][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3012'.
[  205.577778][T11894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.629007][T11898] loop2: detected capacity change from 0 to 128
[  205.637104][T11898] loop2: detected capacity change from 0 to 128
[  205.644222][   T29] kauditd_printk_skb: 4576 callbacks suppressed
[  205.644234][   T29] audit: type=1400 audit(1751509228.262:21230): avc:  denied  { create } for  pid=11895 comm="syz.2.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  205.650851][T11901] loop0: detected capacity change from 0 to 512
[  205.670079][   T29] audit: type=1400 audit(1751509228.272:21231): avc:  denied  { remount } for  pid=11895 comm="syz.2.3014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  205.698609][T11898] vfat: Unknown parameter 'nodots'
[  205.699134][T11901] EXT4-fs: Ignoring removed nobh option
[  205.730630][   T29] audit: type=1326 audit(1751509228.282:21232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.754447][   T29] audit: type=1326 audit(1751509228.282:21233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.778009][   T29] audit: type=1326 audit(1751509228.282:21234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.801585][   T29] audit: type=1326 audit(1751509228.282:21235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.818752][T11901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3016: corrupted inode contents
[  205.825069][   T29] audit: type=1326 audit(1751509228.282:21236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.860375][   T29] audit: type=1326 audit(1751509228.282:21237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.883961][   T29] audit: type=1326 audit(1751509228.282:21238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.902440][T11901] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3016: mark_inode_dirty error
[  205.907488][   T29] audit: type=1326 audit(1751509228.282:21239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11900 comm="syz.0.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80cf4e929 code=0x7ffc0000
[  205.946984][T11905] loop2: detected capacity change from 0 to 512
[  205.954354][T11901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3016: corrupted inode contents
[  205.966496][T11901] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3016: mark_inode_dirty error
[  205.980331][T11905] EXT4-fs (loop2): 1 orphan inode deleted
[  205.986503][T11905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.999348][T11905] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.010967][ T3562] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1
[  206.028663][T11901] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3016: Failed to acquire dquot type 0
[  206.041235][T11905] atomic_op ffff88811c234d28 conn xmit_atomic 0000000000000000
[  206.050808][T11901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3016: corrupted inode contents
[  206.067542][T11897] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  206.067542][T11897]    program syz.6.3015 not setting count and/or reply_len properly
[  206.085752][T11901] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3016: mark_inode_dirty error
[  206.103281][T11914] syzkaller1: entered promiscuous mode
[  206.108919][T11914] syzkaller1: entered allmulticast mode
[  206.114646][T11901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3016: corrupted inode contents
[  206.126894][T11901] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3016: mark_inode_dirty error
[  206.140169][T11901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3016: corrupted inode contents
[  206.152593][T11901] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  206.163282][T11901] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3016: corrupted inode contents
[  206.176588][T11901] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3016: mark_inode_dirty error
[  206.191747][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3020'.
[  206.209774][T11901] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  206.209942][T11905] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.3017: iget: bad i_size value: 360287970189639690
[  206.219079][T11901] EXT4-fs (loop0): 1 truncate cleaned up
[  206.237389][T11901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.261490][T11901] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.271943][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.273710][T11192] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /55/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.279617][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.302134][T11192] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.307803][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.334060][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.338734][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.341720][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.358728][T11901] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3016: Failed to acquire dquot type 1
[  206.360704][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.372141][T11192] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /55/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.379495][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.408171][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.416161][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.423854][T11192] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.423944][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.450116][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.457787][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.459647][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.465430][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465454][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465476][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465499][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465569][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465608][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465633][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465655][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465756][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465780][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465802][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465825][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465899][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.465921][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.478870][T11192] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /55/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.484959][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.493729][T11192] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.500205][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.508194][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.515419][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.525645][T11192] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /55/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.530685][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.530709][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.543189][T11192] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  206.545936][ T5699] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0
[  206.554848][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.585349][ T5699] hid-generic 0000:3000000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  206.608453][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.755776][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.770096][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.787377][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.799333][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.811095][T11192] EXT4-fs warning (device loop2): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.'
[  206.831261][T11070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.893238][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3029'.
[  207.020582][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3032'.
[  207.119865][T11915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.143128][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.178367][T11951] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  207.178367][T11951]    program syz.5.3031 not setting count and/or reply_len properly
[  207.211804][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.262000][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.295868][T11973] loop5: detected capacity change from 0 to 512
[  207.302732][T11973] EXT4-fs: Ignoring removed nobh option
[  207.308435][T11964] lo speed is unknown, defaulting to 1000
[  207.316655][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.328265][T11973] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3037: corrupted inode contents
[  207.341611][T11973] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.3037: mark_inode_dirty error
[  207.354983][T11973] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3037: corrupted inode contents
[  207.367916][T11973] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3037: mark_inode_dirty error
[  207.375920][T11964] chnl_net:caif_netlink_parms(): no params data found
[  207.379715][T11973] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3037: Failed to acquire dquot type 0
[  207.398951][T11973] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3037: corrupted inode contents
[  207.412300][T11973] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3037: mark_inode_dirty error
[  207.423856][T11973] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3037: corrupted inode contents
[  207.435943][T11973] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3037: mark_inode_dirty error
[  207.447350][T11973] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3037: corrupted inode contents
[  207.459385][T11973] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  207.467970][T11973] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3037: corrupted inode contents
[  207.470970][T11964] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.486904][T11964] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.494122][T11973] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3037: mark_inode_dirty error
[  207.495445][T11964] bridge_slave_0: entered allmulticast mode
[  207.505308][T11973] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  207.511970][T11964] bridge_slave_0: entered promiscuous mode
[  207.522429][T11973] EXT4-fs (loop5): 1 truncate cleaned up
[  207.527267][T11964] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.538443][T11964] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.546062][T11973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.547063][T11964] bridge_slave_1: entered allmulticast mode
[  207.558548][T11973] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.566355][T11964] bridge_slave_1: entered promiscuous mode
[  207.585618][ T3562] bridge_slave_1: left allmulticast mode
[  207.591324][ T3562] bridge_slave_1: left promiscuous mode
[  207.596961][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.612254][ T3562] bridge_slave_0: left allmulticast mode
[  207.617919][ T3562] bridge_slave_0: left promiscuous mode
[  207.623712][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.633420][T11973] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3037: Failed to acquire dquot type 1
[  207.652031][T11985] loop1: detected capacity change from 0 to 512
[  207.659222][T11985] EXT4-fs: Ignoring removed nobh option
[  207.672556][T11985] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3039: corrupted inode contents
[  207.684718][T11985] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.3039: mark_inode_dirty error
[  207.696372][T11985] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3039: corrupted inode contents
[  207.708393][T11985] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3039: mark_inode_dirty error
[  207.719901][T11985] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3039: Failed to acquire dquot type 0
[  207.731553][T11985] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3039: corrupted inode contents
[  207.744714][T11985] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.3039: mark_inode_dirty error
[  207.756184][T11985] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3039: corrupted inode contents
[  207.768612][T11985] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3039: mark_inode_dirty error
[  207.779989][T11985] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3039: corrupted inode contents
[  207.780061][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.792957][T11985] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  207.809102][T11985] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3039: corrupted inode contents
[  207.821303][T11985] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.3039: mark_inode_dirty error
[  207.833389][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.834548][T11985] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  207.851572][ T3562] bond0 (unregistering): Released all slaves
[  207.851799][T11985] EXT4-fs (loop1): 1 truncate cleaned up
[  207.874785][T11985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.888134][T11985] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.899735][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.909977][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.925635][T11985] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3039: Failed to acquire dquot type 1
[  207.955427][ T4690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.956114][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'.
[  207.964451][ T3562] hsr_slave_0: left promiscuous mode
[  207.989243][ T3562] hsr_slave_1: left promiscuous mode
[  208.003372][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.006470][T11995] loop5: detected capacity change from 0 to 512
[  208.010781][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.017749][T11995] EXT4-fs: Ignoring removed nobh option
[  208.030796][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.030819][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.048876][ T3562] veth1_macvtap: left promiscuous mode
[  208.055557][ T3562] veth0_macvtap: left promiscuous mode
[  208.061293][ T3562] veth1_vlan: left promiscuous mode
[  208.062142][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3043: corrupted inode contents
[  208.066766][ T3562] veth0_vlan: left promiscuous mode
[  208.080767][T11995] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.3043: mark_inode_dirty error
[  208.095906][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3043: corrupted inode contents
[  208.110058][T11995] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3043: mark_inode_dirty error
[  208.121666][T11995] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3043: Failed to acquire dquot type 0
[  208.134903][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3043: corrupted inode contents
[  208.176335][T11995] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3043: mark_inode_dirty error
[  208.199660][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3043: corrupted inode contents
[  208.213307][ T3564] ==================================================================
[  208.221396][ T3564] BUG: KCSAN: data-race in batadv_hard_if_event / batadv_mcast_mla_update
[  208.229907][ T3564] 
[  208.232229][ T3564] write to 0xffff888119a25010 of 1 bytes by task 3562 on cpu 0:
[  208.239858][ T3564]  batadv_hard_if_event+0x76a/0x1070
[  208.245144][ T3564]  raw_notifier_call_chain+0x6c/0x1b0
[  208.250513][ T3564]  call_netdevice_notifiers_info+0xae/0x100
[  208.256413][ T3564]  unregister_netdevice_many_notify+0xd9d/0x1690
[  208.262749][ T3564]  default_device_exit_batch+0x50c/0x560
[  208.268375][ T3564]  ops_undo_list+0x2bd/0x410
[  208.272957][ T3564]  cleanup_net+0x2de/0x4d0
[  208.277363][ T3564]  process_scheduled_works+0x4cb/0x9d0
[  208.282816][ T3564]  worker_thread+0x582/0x770
[  208.287398][ T3564]  kthread+0x489/0x510
[  208.291457][ T3564]  ret_from_fork+0xda/0x150
[  208.295947][ T3564]  ret_from_fork_asm+0x1a/0x30
[  208.300705][ T3564] 
[  208.303013][ T3564] read to 0xffff888119a25010 of 1 bytes by task 3564 on cpu 1:
[  208.310544][ T3564]  batadv_mcast_mla_update+0x29f/0x1850
[  208.316078][ T3564]  process_scheduled_works+0x4cb/0x9d0
[  208.321534][ T3564]  worker_thread+0x582/0x770
[  208.326117][ T3564]  kthread+0x489/0x510
[  208.330171][ T3564]  ret_from_fork+0xda/0x150
[  208.334662][ T3564]  ret_from_fork_asm+0x1a/0x30
[  208.339418][ T3564] 
[  208.341730][ T3564] value changed: 0x00 -> 0x01
[  208.346386][ T3564] 
[  208.348696][ T3564] Reported by Kernel Concurrency Sanitizer on:
[  208.354834][ T3564] CPU: 1 UID: 0 PID: 3564 Comm: kworker/u8:15 Tainted: G        W           6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) 
[  208.369059][ T3564] Tainted: [W]=WARN
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  208.372846][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  208.382891][ T3564] Workqueue: bat_events batadv_mcast_mla_update
[  208.389125][ T3564] ==================================================================
[  208.425971][T11995] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3043: mark_inode_dirty error
[  208.437373][T12003] loop6: detected capacity change from 0 to 512
[  208.469838][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3043: corrupted inode contents
[  208.521460][ T3562] team0 (unregistering): Port device team_slave_1 removed
[  208.530725][T12003] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6.
[  208.558067][ T3562] team0 (unregistering): Port device team_slave_0 removed
[  208.567297][T11995] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  208.589790][T11995] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3043: corrupted inode contents
[  208.603115][T11995] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3043: mark_inode_dirty error
[  208.611170][T11964] team0: Port device team_slave_0 added
[  208.620303][T11995] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  208.632641][T11995] EXT4-fs (loop5): 1 truncate cleaned up
[  208.639470][T11995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.653127][T11995] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.698020][T11995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.879895][T11985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.972065][ T3562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.061424][ T3562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.110472][ T3562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.171703][ T3562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.230696][ T3562] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.290961][ T3562] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.340676][ T3562] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.380442][ T3562] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.619897][ T3562] bridge_slave_1: left allmulticast mode
[  209.625533][ T3562] bridge_slave_1: left promiscuous mode
[  209.631164][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.639064][ T3562] bridge_slave_0: left allmulticast mode
[  209.644734][ T3562] bridge_slave_0: left promiscuous mode
[  209.650414][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.658477][ T3562] bridge_slave_1: left allmulticast mode
[  209.664239][ T3562] bridge_slave_1: left promiscuous mode
[  209.669931][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.677736][ T3562] bridge_slave_0: left allmulticast mode
[  209.683440][ T3562] bridge_slave_0: left promiscuous mode
[  209.689078][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.697074][ T3562] bridge_slave_1: left allmulticast mode
[  209.702731][ T3562] bridge_slave_1: left promiscuous mode
[  209.708441][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.715971][ T3562] bridge_slave_0: left allmulticast mode
[  209.721636][ T3562] bridge_slave_0: left promiscuous mode
[  209.727264][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.735336][ T3562] bridge_slave_1: left allmulticast mode
[  209.741104][ T3562] bridge_slave_1: left promiscuous mode
[  209.746697][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.754309][ T3562] bridge_slave_0: left promiscuous mode
[  209.759991][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.860722][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.870452][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.879918][ T3562] bond0 (unregistering): Released all slaves
[  209.950862][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.960480][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.969836][ T3562] bond0 (unregistering): Released all slaves
[  210.009969][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.019315][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.028362][ T3562] bond0 (unregistering): Released all slaves
[  210.170043][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.179091][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.187976][ T3562] bond0 (unregistering): Released all slaves
[  210.231314][ T3562] tipc: Disabling bearer <udp:s>
[  210.236253][ T3562] tipc: Left network mode
[  210.241327][ T3562] tipc: Disabling bearer <udp:s>
[  210.246262][ T3562] tipc: Left network mode
[  210.254375][ T3562] hsr_slave_0: left promiscuous mode
[  210.259884][ T3562] hsr_slave_1: left promiscuous mode
[  210.265479][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.272961][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.280577][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.287958][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.296919][ T3562] hsr_slave_0: left promiscuous mode
[  210.302551][ T3562] hsr_slave_1: left promiscuous mode
[  210.308140][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.315547][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.323022][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.330533][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.338663][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.346095][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.358194][ T3562] veth1_macvtap: left promiscuous mode
[  210.363731][ T3562] veth0_macvtap: left promiscuous mode
[  210.369213][ T3562] veth1_vlan: left promiscuous mode
[  210.374492][ T3562] veth0_vlan: left promiscuous mode
[  210.380154][ T3562] veth1_macvtap: left promiscuous mode
[  210.385610][ T3562] veth0_macvtap: left promiscuous mode
[  210.391111][ T3562] veth1_vlan: left promiscuous mode
[  210.396353][ T3562] veth0_vlan: left promiscuous mode
[  210.474046][ T3562] team0 (unregistering): Port device team_slave_1 removed
[  210.482865][ T3562] team0 (unregistering): Port device team_slave_0 removed
[  210.528381][ T3562] team0 (unregistering): Port device team_slave_1 removed
[  210.537183][ T3562] team0 (unregistering): Port device C removed
[  210.564563][ T3562] team0 (unregistering): Port device team_slave_0 removed
[  210.596328][ T3562] team0 (unregistering): Port device hsr_slave_0 removed
[  210.607577][ T3562] team0 (unregistering): Port device team_slave_1 removed
[  210.616722][ T3562] team0 (unregistering): Port device C removed
[  210.639164][ T5690] lo speed is unknown, defaulting to 1000
[  210.644877][ T5690] infiniband syz0: ib_query_port failed (-19)