last executing test programs:

3.762257976s ago: executing program 4 (id=1465):
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

3.749799117s ago: executing program 4 (id=1466):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
tgkill(0x0, 0x0, 0x8000021)

3.734283827s ago: executing program 4 (id=1467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = socket(0x1e, 0x4, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r2, &(0x7f00000000c0), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x10f, 0x64, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x115}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@abort}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x490, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvbH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKoUaWhMhRKsHPBoS78b/wnjSi1EvmnjVuyEhhguolzGzM0OXZbfd0qXbsp9PMt33ZqY77ztv3uybeTsbQNcayv4kEdsj4o+IGMizt68wlL/cvH5p4p/rlyaSSNO3/06q6924fmmiXLX8v215Jk2L/KYG2738XsT4zMzU+SI/Mn/2w5G5CxdfnD47fnrq9NS5sePHjxze139s7Ghb4sziurHnk9m9u0+8e+XNiZNX3v85qUQed9TF0S5D+d5t6Jl2b6zDdtSkk97aJft/XUw3OhLopJ6IyKqrr9r+B6InttxaNhCvf97RwgH3VJqm6RJn5YUUuI8l0ekSAJ1RftBn17/ltEZdj3Xh2iv5BVAW981iypf0RiVP7O+ru77d3sbtD0XEyYV/v86mWOl9iP42FgQA6BrfZ/2fFxr1/yrxSJ6o9jIeKMZQBiPiwYjYGREPRcSuiHg4orruoxHx2Aq3Xz9Ccmf/p3L1roNrQdb/e7kY27q9/1cpVxnsKXI7qvH3JaemZ6YOFfvkYPRtOjWdTI0usY0fXvv9y2bLavt/2ZRtv+wLFuW42lt3g25yfH58NTHXuvZZxJ7eRvEnUQ7jJBGxOyL23OU2pp/rbbps+fiX0PxtW5Z+E/FsXv8LURd/KWk6Pjn60rGxoyObY2bq0Eh5VNzpl98uv1Ukt9QvW1X8bZDV/9aGx/+t+AeTzRFzFy6eqY7Xzq3o7bOmE5f//KLpNU0Rf9a8Wjn+T+wojv/+5J3qjPIS6OPx+eqppD95o37+/PmxxXcr89XX0Tz+gwcat/+dsbgnHo+IvRGxLyKeyC4Ki7I/GRFPRcSBJXbCT68+/cEy8Teo/7UZK83in1yu/qO2/lee6Dnz43fLx785IprV/5Fq6mAxp5XzX6sFXM2+AwAAgI0i/w58Uhm+la5Uhofz7/Dviq2Vmdm5+edPzX50bjIf9x6Mvkp5p2ug5n7oaHFvuMyP1eUPF/eNv+rZUs0PT8zOTHY6eOhy25q0/8xfPZ0uHXDPtTSO1vxZNmADa8M4OrBBaf/QnRLtH7raYvtv56NtwEbQ6PP/06ZrD397TwsDrCn9f+heLbT/hfylea8A2Jh8/kP30v6hKzV9Nr6yqkf+1zzxX/F7huulPJ1KpMnqfquh9URU1knI93uit+Ufs1hBIh3I2382Z1PDdTp9ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiP/wMAAP//KeDh8Q==")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000440)='./bus\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
r6 = socket(0x10, 0x3, 0x9)
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000e40)='locks_get_lock_context\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r10, 0x26, &(0x7f0000000000))

3.647979671s ago: executing program 4 (id=1468):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x7ffff088)

3.620598172s ago: executing program 4 (id=1469):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00')
r1 = epoll_create1(0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000002})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]})
clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x400000002, 0x2, 0x1000000000000000, 0x8000, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r3, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000800000000001c140000fe000001000000"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) (fail_nth: 4)
lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0)

1.920551166s ago: executing program 3 (id=1500):
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES64=r0, @ANYRES64=r2], 0x48)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r3)
ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f0000000100)=0x1d)

1.337228532s ago: executing program 2 (id=1512):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x52, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="58f1000c00000000000000000000000000000000000000003de4cd375451245a6032a292624c095986212774192261af2f94ff952b15a6edeb7050ebb98a41cb1eb495fb894e20bc8fc651", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

1.077989483s ago: executing program 3 (id=1516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x0, 0xe, 0x5, 0x17, @private2, @empty, 0x20, 0x7, 0x2, 0x5}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121202, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0xa0c4cc, &(0x7f0000000f80)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32], 0x1, 0x5a9, &(0x7f0000000540)="$eJzs3V9v0+odwPGfS8vaToJpmxCqCn1oN6lIJTgJBEXc4DlPUkNiR7aD2qutoimqSGGiTFp7A73ZhrQ3we1exKS9k70BtNtdnKMc2Y5p0uZPT//lnOr7iU79xP7F/j1u5N9xsR8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQwy6ZZtaQquM21tRgdsn3aklTJvssT9d3v2cyZLsiRvSfTE/L7WTW7d8eLr4V/ViU+eTdvExHk2nZ/+WtXz39zeRE+vkhCV+K3b39NxutVvP9ycKnx57wOato1wk8p2ZVppQTeKpYKJgPV8uBKjtVHawHoa4p29dW6Plq2b6vssViXunMutdwKyWrqtOZTx7kTLOgnmfq2vIDz334PBPYq0616riVOCZaHMU8ib6IL5xQhdpq3xTZbjXzo5Lc2m41sycJyo0Kypm5XDaby2ULj4uPn5jm5LEZ5hFyLGL8X1qM1zkfwYHTm7BL6RfSEVcaIvIpfqeOvGwpiS+e1I4tSV4daf3//UM9dLuGyIR06n9a5W8fLp6TuP7fTd7d/Vb/F6Sn/g/I5aJehsin3jm7sif78kY2pCUtacr7eO7CJec1vldFtLjiSCCeOFITK56jOnOUFKUgBTHlj7IqZQlESVkcqYqWQNYlkFC01GRGbPFFiyWheOKLkmWx5b4oyUpRipIXJVoysi6eNMSVipTEitYysyXb8X7PD8lR0qDsSYJyQ4Ko/zi78zx8A2fS7pz/AwAAAACAq8uI//oenf9PyZ24VXaq2hx3WgAAAAAA4BzF//I/H02motYdMTj/BwAAAADgqjHie+yS6/8XklZ6JxR/BAAAAAAA4IqIz/zvXk/fLojB+T8AAAAAAFfNP9LRd/+UjgF4dIz9oP4L49//E9+fMg7qa78zdqwoytq5loRfO7rGsDxn3OisJJ4UJjvvbD1vdEa/PBwEcyL++XVr1Fj/Rt8EjPbNY10anID8U+4lMfc2k+lmuiTZymzZqeqM7VWfZsWybkyEei38y9vtv0rc/c9u7YYhW9utZubVu9ZmnMtBtJaDnc7OOzaO4sBcvmt/iMdbiO+56NvjqXK6az+7tdlku2Z3/ye6d+DJ+v83WUxiFmeT6Wxv/6ej/mczg3rfySJ7pp5HWSwlHV5ajhtLy32yyI3KItedxan2xVISMyyLfJTFf6IVDcgif8YsAGBctkZUIeN44e8+ynUfwIYc5Y5W94mTVfeh/3vxrM8RfTmJWZ6L85qc63NEN0fVFfOM1e1fXc9AasfpH2bR/pgsimpsO/Gxt6p+iRZ/GbjdoJozol147cPOn+XW7t7+g+2djdfN1823uVy+YD4yzcc5mYq70ZlQewAAffR5xs5hZf4+qv9DI+La/ejwrDq5kODIWfWvv11SkJFX8k5asikr8d0G8RUHfdc623UZwsqIs9bZrie8rAw/q/vU/aCXvrFG8vijb+uNe5S/8N8DAACXaXFEHT5J/V8Zcd7dW8uPPiF4cC0HAAAXQ/tfjdnw74bvGyJSLGatcFUr37NfKN8pVbRy3FD79qrlVrSq+17o2V41arx0SjpQQaNe9/xQlT1f1b3AWYuf/K46j34PdM1yQ8cO6lVtBVrZnhtadqhKTmCreuMPVSdY1X784aCubafs2FboeK4KvIZv64xSgdZdgU5Ju6FTdqKmq+q+U7P8dfXSqzZqWpV0YPtOPfSSFabbctyy59fi1WbGvbMBAPiJ2N3bf7PRajXfX2Bj3H0EAAC9uqv0zLiTAQAAAAAAAAAAAAAAAAAAAAAAfZ373X5TcvE3FP5sGukYu505M0ODD067LYnHNRQZGpwOpHzK7vz3bB/v33h2wb8CQ370p/7fPs22VM+c63KKnCcv6WbcEzfGczwCcHl+CAAA//9Ba0vg")
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100))
shutdown(r9, 0x0)
getrlimit(0x8, &(0x7f0000000040))
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25090000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000030000180080003000000000008000300020000000800030003000000140002006272696467655f736c6176655f300000600001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r5, @ANYBLOB="040fef00c04d3e1c93574e4b5fa5b80a63ca169a9aec7c0e8219c30104000000000000577308", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006e696376663000"/20], 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0xfff, 0x6, 0x1, 'queue0\x00', 0xffff})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.014207296s ago: executing program 3 (id=1517):
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132"], 0x0)

996.492717ms ago: executing program 3 (id=1518):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x7f]}, 0x8, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0)
pidfd_send_signal(r2, 0x28, &(0x7f0000001340)={0x11, 0x80000001, 0x6}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
getrandom(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x73, 0x6, "a35af7e5bd81ec686aa618b41a5c21d8ba51cabd6a2a8922d438270d8b32ed44ead700a8f63af0581bf73708af0ec3d89349083f0a27f6e059356ae53e1f8bf9bc31d737530bba88466dbb3bcfc08f06d1149b90c01dabb289f4303595a094b2bf8ea9f47a69b64ef0ea84e2107cc8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}}, 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

924.30856ms ago: executing program 3 (id=1520):
futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, 0x0, 0xfffffffc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0x0, 0x4e, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

876.233052ms ago: executing program 3 (id=1521):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
faccessat(0xffffffffffffffff, 0x0, 0x5)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_lock_buffer_stall\x00'}, 0x18)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0)
alarm(0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2, 0x6, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRES32=r6, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_raw(0x1d, 0x3, 0x1)
r7 = gettid()
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4)

780.334726ms ago: executing program 4 (id=1522):
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000885"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES64=r0, @ANYRES64=r2], 0x48)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r3)
ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f0000000100)=0x1d)

720.400268ms ago: executing program 1 (id=1527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x0, 0xe, 0x5, 0x17, @private2, @empty, 0x20, 0x7, 0x2, 0x5}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121202, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0xa0c4cc, &(0x7f0000000f80)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32], 0x1, 0x5a9, &(0x7f0000000540)="$eJzs3V9v0+odwPGfS8vaToJpmxCqCn1oN6lIJTgJBEXc4DlPUkNiR7aD2qutoimqSGGiTFp7A73ZhrQ3we1exKS9k70BtNtdnKMc2Y5p0uZPT//lnOr7iU79xP7F/j1u5N9xsR8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQwy6ZZtaQquM21tRgdsn3aklTJvssT9d3v2cyZLsiRvSfTE/L7WTW7d8eLr4V/ViU+eTdvExHk2nZ/+WtXz39zeRE+vkhCV+K3b39NxutVvP9ycKnx57wOato1wk8p2ZVppQTeKpYKJgPV8uBKjtVHawHoa4p29dW6Plq2b6vssViXunMutdwKyWrqtOZTx7kTLOgnmfq2vIDz334PBPYq0616riVOCZaHMU8ib6IL5xQhdpq3xTZbjXzo5Lc2m41sycJyo0Kypm5XDaby2ULj4uPn5jm5LEZ5hFyLGL8X1qM1zkfwYHTm7BL6RfSEVcaIvIpfqeOvGwpiS+e1I4tSV4daf3//UM9dLuGyIR06n9a5W8fLp6TuP7fTd7d/Vb/F6Sn/g/I5aJehsin3jm7sif78kY2pCUtacr7eO7CJec1vldFtLjiSCCeOFITK56jOnOUFKUgBTHlj7IqZQlESVkcqYqWQNYlkFC01GRGbPFFiyWheOKLkmWx5b4oyUpRipIXJVoysi6eNMSVipTEitYysyXb8X7PD8lR0qDsSYJyQ4Ko/zi78zx8A2fS7pz/AwAAAACAq8uI//oenf9PyZ24VXaq2hx3WgAAAAAA4BzF//I/H02motYdMTj/BwAAAADgqjHie+yS6/8XklZ6JxR/BAAAAAAA4IqIz/zvXk/fLojB+T8AAAAAAFfNP9LRd/+UjgF4dIz9oP4L49//E9+fMg7qa78zdqwoytq5loRfO7rGsDxn3OisJJ4UJjvvbD1vdEa/PBwEcyL++XVr1Fj/Rt8EjPbNY10anID8U+4lMfc2k+lmuiTZymzZqeqM7VWfZsWybkyEei38y9vtv0rc/c9u7YYhW9utZubVu9ZmnMtBtJaDnc7OOzaO4sBcvmt/iMdbiO+56NvjqXK6az+7tdlku2Z3/ye6d+DJ+v83WUxiFmeT6Wxv/6ej/mczg3rfySJ7pp5HWSwlHV5ajhtLy32yyI3KItedxan2xVISMyyLfJTFf6IVDcgif8YsAGBctkZUIeN44e8+ynUfwIYc5Y5W94mTVfeh/3vxrM8RfTmJWZ6L85qc63NEN0fVFfOM1e1fXc9AasfpH2bR/pgsimpsO/Gxt6p+iRZ/GbjdoJozol147cPOn+XW7t7+g+2djdfN1823uVy+YD4yzcc5mYq70ZlQewAAffR5xs5hZf4+qv9DI+La/ejwrDq5kODIWfWvv11SkJFX8k5asikr8d0G8RUHfdc623UZwsqIs9bZrie8rAw/q/vU/aCXvrFG8vijb+uNe5S/8N8DAACXaXFEHT5J/V8Zcd7dW8uPPiF4cC0HAAAXQ/tfjdnw74bvGyJSLGatcFUr37NfKN8pVbRy3FD79qrlVrSq+17o2V41arx0SjpQQaNe9/xQlT1f1b3AWYuf/K46j34PdM1yQ8cO6lVtBVrZnhtadqhKTmCreuMPVSdY1X784aCubafs2FboeK4KvIZv64xSgdZdgU5Ju6FTdqKmq+q+U7P8dfXSqzZqWpV0YPtOPfSSFabbctyy59fi1WbGvbMBAPiJ2N3bf7PRajXfX2Bj3H0EAAC9uqv0zLiTAQAAAAAAAAAAAAAAAAAAAAAAfZ373X5TcvE3FP5sGukYu505M0ODD067LYnHNRQZGpwOpHzK7vz3bB/v33h2wb8CQ370p/7fPs22VM+c63KKnCcv6WbcEzfGczwCcHl+CAAA//9Ba0vg")
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100))
shutdown(r9, 0x0)
getrlimit(0x8, &(0x7f0000000040))
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25090000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000030000180080003000000000008000300020000000800030003000000140002006272696467655f736c6176655f300000600001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r5, @ANYBLOB="040fef00c04d3e1c93574e4b5fa5b80a63ca169a9aec7c0e8219c30104000000000000577308", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006e696376663000"/20], 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0xfff, 0x6, 0x1, 'queue0\x00', 0xffff})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

665.922661ms ago: executing program 1 (id=1528):
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132"], 0x0)

652.720422ms ago: executing program 1 (id=1529):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4dd, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O")
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="bb", 0x1}], 0x1, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000afbff0309001d3a3ad855dea159e6e90645b288d6e9010073797a31000000000800fd9063cdddff882d020073797a310000000008000a40fffffffc440000000c0a010100000000000012000a0000060900020073797a31000000000900010073797a310000000018000380100000800c00018006000100d1030000040000802c0000000e0a010200000000000000000a0000000900e7ff72797a31000000000900020073797a310000000014000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r4, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)

595.939494ms ago: executing program 1 (id=1530):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = dup(0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)=r0}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c0019"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (fail_nth: 1)

394.885093ms ago: executing program 1 (id=1531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9}}}, 0x44}}, 0x0)

372.057143ms ago: executing program 2 (id=1532):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x7f]}, 0x8, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0)
pidfd_send_signal(r2, 0x28, &(0x7f0000001340)={0x11, 0x80000001, 0x6}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
getrandom(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x73, 0x6, "a35af7e5bd81ec686aa618b41a5c21d8ba51cabd6a2a8922d438270d8b32ed44ead700a8f63af0581bf73708af0ec3d89349083f0a27f6e059356ae53e1f8bf9bc31d737530bba88466dbb3bcfc08f06d1149b90c01dabb289f4303595a094b2bf8ea9f47a69b64ef0ea84e2107cc8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}}, 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

325.703686ms ago: executing program 0 (id=1534):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
tgkill(0x0, 0x0, 0x8000021)

307.677276ms ago: executing program 0 (id=1535):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)

291.672557ms ago: executing program 0 (id=1536):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffffff, 0x1, r0}, 0x50)

287.228947ms ago: executing program 2 (id=1537):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
tgkill(0x0, 0x0, 0x8000021)

260.922918ms ago: executing program 0 (id=1538):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

260.485918ms ago: executing program 2 (id=1539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x0, 0xe, 0x5, 0x17, @private2, @empty, 0x20, 0x7, 0x2, 0x5}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121202, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0xa0c4cc, &(0x7f0000000f80)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32], 0x1, 0x5a9, &(0x7f0000000540)="$eJzs3V9v0+odwPGfS8vaToJpmxCqCn1oN6lIJTgJBEXc4DlPUkNiR7aD2qutoimqSGGiTFp7A73ZhrQ3we1exKS9k70BtNtdnKMc2Y5p0uZPT//lnOr7iU79xP7F/j1u5N9xsR8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQwy6ZZtaQquM21tRgdsn3aklTJvssT9d3v2cyZLsiRvSfTE/L7WTW7d8eLr4V/ViU+eTdvExHk2nZ/+WtXz39zeRE+vkhCV+K3b39NxutVvP9ycKnx57wOato1wk8p2ZVppQTeKpYKJgPV8uBKjtVHawHoa4p29dW6Plq2b6vssViXunMutdwKyWrqtOZTx7kTLOgnmfq2vIDz334PBPYq0616riVOCZaHMU8ib6IL5xQhdpq3xTZbjXzo5Lc2m41sycJyo0Kypm5XDaby2ULj4uPn5jm5LEZ5hFyLGL8X1qM1zkfwYHTm7BL6RfSEVcaIvIpfqeOvGwpiS+e1I4tSV4daf3//UM9dLuGyIR06n9a5W8fLp6TuP7fTd7d/Vb/F6Sn/g/I5aJehsin3jm7sif78kY2pCUtacr7eO7CJec1vldFtLjiSCCeOFITK56jOnOUFKUgBTHlj7IqZQlESVkcqYqWQNYlkFC01GRGbPFFiyWheOKLkmWx5b4oyUpRipIXJVoysi6eNMSVipTEitYysyXb8X7PD8lR0qDsSYJyQ4Ko/zi78zx8A2fS7pz/AwAAAACAq8uI//oenf9PyZ24VXaq2hx3WgAAAAAA4BzF//I/H02motYdMTj/BwAAAADgqjHie+yS6/8XklZ6JxR/BAAAAAAA4IqIz/zvXk/fLojB+T8AAAAAAFfNP9LRd/+UjgF4dIz9oP4L49//E9+fMg7qa78zdqwoytq5loRfO7rGsDxn3OisJJ4UJjvvbD1vdEa/PBwEcyL++XVr1Fj/Rt8EjPbNY10anID8U+4lMfc2k+lmuiTZymzZqeqM7VWfZsWybkyEei38y9vtv0rc/c9u7YYhW9utZubVu9ZmnMtBtJaDnc7OOzaO4sBcvmt/iMdbiO+56NvjqXK6az+7tdlku2Z3/ye6d+DJ+v83WUxiFmeT6Wxv/6ej/mczg3rfySJ7pp5HWSwlHV5ajhtLy32yyI3KItedxan2xVISMyyLfJTFf6IVDcgif8YsAGBctkZUIeN44e8+ynUfwIYc5Y5W94mTVfeh/3vxrM8RfTmJWZ6L85qc63NEN0fVFfOM1e1fXc9AasfpH2bR/pgsimpsO/Gxt6p+iRZ/GbjdoJozol147cPOn+XW7t7+g+2djdfN1823uVy+YD4yzcc5mYq70ZlQewAAffR5xs5hZf4+qv9DI+La/ejwrDq5kODIWfWvv11SkJFX8k5asikr8d0G8RUHfdc623UZwsqIs9bZrie8rAw/q/vU/aCXvrFG8vijb+uNe5S/8N8DAACXaXFEHT5J/V8Zcd7dW8uPPiF4cC0HAAAXQ/tfjdnw74bvGyJSLGatcFUr37NfKN8pVbRy3FD79qrlVrSq+17o2V41arx0SjpQQaNe9/xQlT1f1b3AWYuf/K46j34PdM1yQ8cO6lVtBVrZnhtadqhKTmCreuMPVSdY1X784aCubafs2FboeK4KvIZv64xSgdZdgU5Ju6FTdqKmq+q+U7P8dfXSqzZqWpV0YPtOPfSSFabbctyy59fi1WbGvbMBAPiJ2N3bf7PRajXfX2Bj3H0EAAC9uqv0zLiTAQAAAAAAAAAAAAAAAAAAAAAAfZ373X5TcvE3FP5sGukYu505M0ODD067LYnHNRQZGpwOpHzK7vz3bB/v33h2wb8CQ370p/7fPs22VM+c63KKnCcv6WbcEzfGczwCcHl+CAAA//9Ba0vg")
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100))
shutdown(r9, 0x0)
getrlimit(0x8, &(0x7f0000000040))
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25090000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000030000180080003000000000008000300020000000800030003000000140002006272696467655f736c6176655f300000600001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r5, @ANYBLOB="040fef00c04d3e1c93574e4b5fa5b80a63ca169a9aec7c0e8219c30104000000000000577308", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006e696376663000"/20], 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0xfff, 0x6, 0x1, 'queue0\x00', 0xffff})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

248.925609ms ago: executing program 0 (id=1540):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}]}})

208.788101ms ago: executing program 2 (id=1541):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff0200"/50], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0)

196.034921ms ago: executing program 2 (id=1542):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x52, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="58f1000c00000000000000000000000000000000000000003de4cd375451245a6032a292624c095986212774192261af2f94ff952b15a6edeb7050ebb98a41cb1eb495fb894e20bc8fc651", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00')
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

129.331124ms ago: executing program 0 (id=1543):
r0 = socket$unix(0x1, 0x2, 0x0)
flock(r0, 0x5)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = socket(0x25, 0x800, 0xad8)
get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0xfffffffffffffffd, &(0x7f0000fff000/0x1000)=nil, 0x1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
poll(&(0x7f0000000100)=[{r1, 0x8a44}, {r0, 0x10}, {r2, 0x88}, {r1, 0x1001}, {r1, 0x2021}, {r1, 0x4040}], 0x6, 0xfffffffa)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfff}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x40800)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$nci(r3, &(0x7f0000000340)=""/67, 0x43)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fstat(r4, &(0x7f00000003c0))
r5 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f00000005c0)={0x2})
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000840), 0x2)

0s ago: executing program 1 (id=1544):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffccc0600000c0a010800000000000000000a0000060900020073797a31000000000900010073797a3100000000a0060380100000800c00018006000100d10300000c0000800800034000000002"], 0x730}}, 0x40)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@limit={{}, {0x81, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x8, 0x8}}, @inet=@rpfilter={{}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @remote, [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'vxcan1\x00', 'team_slave_0\x00', {}, {}, 0x88, 0x8a, 0x4, 0x4d}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{}, {0x2}}, @common=@inet=@hashlimit1={{}, {'team0\x00', {0x16, 0x2, 0x0, 0x0, 0x1, 0x80000001, 0x2, 0x18, 0x8}, {0x6}}}]}, @common=@unspec=@NFLOG={0xf, 'NFLOG\x00', 0x0, {0xffff, 0x1, 0x643, 0x0, 0x0, "4e08203092977fe719492594d330d3734b6adb7827d6c79fd95867e711acb1a43b15ccee984d94bf7346c2675495734f4e7b6f7290d316ea911752918873b6dc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ca)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x100}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffccc0600000c0a010800000000000000000a0000060900020073797a31000000000900010073797a3100000000a0060380100000800c00018006000100d10300000c0000800800034000000002"], 0x730}}, 0x40) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@limit={{}, {0x81, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x8, 0x8}}, @inet=@rpfilter={{}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @remote, [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'vxcan1\x00', 'team_slave_0\x00', {}, {}, 0x88, 0x8a, 0x4, 0x4d}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{}, {0x2}}, @common=@inet=@hashlimit1={{}, {'team0\x00', {0x16, 0x2, 0x0, 0x0, 0x1, 0x80000001, 0x2, 0x18, 0x8}, {0x6}}}]}, @common=@unspec=@NFLOG={0xf, 'NFLOG\x00', 0x0, {0xffff, 0x1, 0x643, 0x0, 0x0, "4e08203092977fe719492594d330d3734b6adb7827d6c79fd95867e711acb1a43b15ccee984d94bf7346c2675495734f4e7b6f7290d316ea911752918873b6dc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3ca) (async)

kernel console output (not intermixed with test programs):

0][ T4916] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.497: corrupted inode contents
[   63.835872][ T4916] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.497: mark_inode_dirty error
[   63.859635][ T4916] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.497: corrupted inode contents
[   63.871976][ T4916] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   63.880957][ T4916] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.497: corrupted inode contents
[   63.895029][ T4916] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.497: mark_inode_dirty error
[   63.906558][ T4916] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   63.942955][ T4916] EXT4-fs (loop1): 1 truncate cleaned up
[   63.949991][ T4916] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.975984][ T4916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.984993][ T4916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.156891][ T4937] loop4: detected capacity change from 0 to 1024
[   64.173127][ T4937] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.195500][ T4941] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   64.245020][ T4937] netlink: 'syz.4.503': attribute type 30 has an invalid length.
[   64.280406][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'.
[   64.315597][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'.
[   64.488826][ T4977] Falling back ldisc for ptm0.
[   64.669433][ T4985] xt_hashlimit: max too large, truncated to 1048576
[   64.678099][ T4985] xt_CT: You must specify a L4 protocol and not use inversions on it
[   65.195527][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.204619][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.398313][ T5008] macvtap0: refused to change device tx_queue_len
[   65.557822][ T5025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.534'.
[   65.572271][ T5026] netlink: 68 bytes leftover after parsing attributes in process `syz.1.533'.
[   65.818527][ T5032] loop3: detected capacity change from 0 to 4096
[   66.034560][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[   66.395602][ T5041] loop4: detected capacity change from 0 to 1024
[   66.407063][ T5041] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.435308][ T5041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   66.457312][ T5041] System zones: 0-1, 3-36
[   66.627280][ T5060] syzkaller0: entered promiscuous mode
[   66.632944][ T5060] syzkaller0: entered allmulticast mode
[   66.717954][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.733720][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.885909][ T5086] netlink: 68 bytes leftover after parsing attributes in process `syz.2.549'.
[   67.589130][ T5109] loop1: detected capacity change from 0 to 512
[   67.597606][ T5109] EXT4-fs: Ignoring removed orlov option
[   67.617877][ T5109] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.561: corrupted in-inode xattr: bad e_name length
[   67.677691][ T5109] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.561: couldn't read orphan inode 15 (err -117)
[   67.721427][ T5109] IPv6: Can't replace route, no match found
[   67.739734][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'.
[   67.827572][ T5124] loop4: detected capacity change from 0 to 164
[   67.884082][   T29] kauditd_printk_skb: 1433 callbacks suppressed
[   67.884095][   T29] audit: type=1326 audit(1764541469.447:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   67.914352][   T29] audit: type=1326 audit(1764541469.447:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   67.969348][   T29] audit: type=1326 audit(1764541469.503:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   67.993029][   T29] audit: type=1326 audit(1764541469.503:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.016421][   T29] audit: type=1326 audit(1764541469.503:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.040210][   T29] audit: type=1326 audit(1764541469.503:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.064424][   T29] audit: type=1326 audit(1764541469.503:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.088451][   T29] audit: type=1326 audit(1764541469.503:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.112160][   T29] audit: type=1326 audit(1764541469.503:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.135571][   T29] audit: type=1326 audit(1764541469.503:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   68.271559][ T5147] macvtap0: refused to change device tx_queue_len
[   68.282475][ T5149] loop4: detected capacity change from 0 to 512
[   68.297917][ T5149] EXT4-fs: Ignoring removed orlov option
[   68.325856][ T5149] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.574: corrupted in-inode xattr: bad e_name length
[   68.340256][ T5149] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.574: couldn't read orphan inode 15 (err -117)
[   68.367852][ T5149] IPv6: Can't replace route, no match found
[   68.718089][ T5185] loop2: detected capacity change from 0 to 512
[   68.737524][ T5185] EXT4-fs: Ignoring removed orlov option
[   68.750870][ T5185] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.587: corrupted in-inode xattr: bad e_name length
[   68.789065][ T5185] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.587: couldn't read orphan inode 15 (err -117)
[   68.809591][ T5185] EXT4-fs mount: 35 callbacks suppressed
[   68.809608][ T5185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.839628][ T5185] IPv6: Can't replace route, no match found
[   68.860782][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.154220][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.162932][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.332737][ T5212] loop4: detected capacity change from 0 to 1024
[   69.356404][ T5212] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.383552][ T5212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   69.396924][ T5212] System zones: 0-1, 3-36
[   69.402834][ T5212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.464116][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.539743][ T5221] __nla_validate_parse: 5 callbacks suppressed
[   69.539759][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'.
[   69.557002][ T5221] loop4: detected capacity change from 0 to 164
[   69.617970][ T5227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.604'.
[   69.627034][ T5227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.604'.
[   69.636075][ T5227] netlink: 5 bytes leftover after parsing attributes in process `syz.4.604'.
[   69.671216][ T5234] loop1: detected capacity change from 0 to 512
[   69.680126][ T5234] EXT4-fs: Ignoring removed orlov option
[   69.690697][ T5234] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.607: corrupted in-inode xattr: bad e_name length
[   69.707189][ T5231] loop3: detected capacity change from 0 to 4096
[   69.717113][ T5234] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.607: couldn't read orphan inode 15 (err -117)
[   69.741356][ T5231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.759035][ T5234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.812712][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.826152][ T5234] IPv6: Can't replace route, no match found
[   69.851700][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.888434][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'.
[   69.934745][ T5249] bridge2: entered promiscuous mode
[   69.987690][ T5246] loop3: detected capacity change from 0 to 164
[   70.086148][ T5253] loop2: detected capacity change from 0 to 1024
[   70.119942][ T5253] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.151970][ T5253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.328740][ T5261] bridge3: entered promiscuous mode
[   72.898620][ T5253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'.
[   72.912586][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.934492][ T5264] bridge2: entered promiscuous mode
[   72.966278][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.983218][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.057650][ T5276] loop1: detected capacity change from 0 to 4096
[   73.083291][ T5276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.092787][ T5284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   73.113736][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.143297][ T5289] loop2: detected capacity change from 0 to 1024
[   73.161083][ T5289] EXT4-fs: Ignoring removed nomblk_io_submit option
[   73.172313][ T5289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   73.181034][ T5289] System zones: 0-1, 3-36
[   73.186584][ T5289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.222410][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.241479][ T5295] macvtap0: refused to change device tx_queue_len
[   73.333146][ T5305] loop1: detected capacity change from 0 to 1024
[   73.353508][ T5305] EXT4-fs: Ignoring removed nomblk_io_submit option
[   73.408551][ T5305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.455107][   T29] kauditd_printk_skb: 844 callbacks suppressed
[   73.455133][   T29] audit: type=1326 audit(1764541474.658:10805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.485206][   T29] audit: type=1326 audit(1764541474.658:10806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.508980][   T29] audit: type=1326 audit(1764541474.658:10807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.532526][   T29] audit: type=1326 audit(1764541474.658:10808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.556478][   T29] audit: type=1326 audit(1764541474.658:10809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.591990][   T29] audit: type=1326 audit(1764541474.733:10810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.615915][   T29] audit: type=1326 audit(1764541474.742:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.639417][   T29] audit: type=1326 audit(1764541474.752:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.663451][   T29] audit: type=1326 audit(1764541474.752:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.670633][ T5312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   73.687041][   T29] audit: type=1326 audit(1764541474.752:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   73.707247][ T5305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'.
[   73.796455][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.878020][ T5325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.637'.
[   74.004307][ T5330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   74.037425][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'.
[   74.064835][ T5335] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   74.109780][ T5335] batman_adv: batadv0: Removing interface: veth1_vlan
[   74.157470][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'.
[   74.401855][ T5352] loop1: detected capacity change from 0 to 4096
[   74.735309][ T5352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.792546][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.075456][ T5373] __nla_validate_parse: 4 callbacks suppressed
[   75.075478][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'.
[   75.164711][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[   75.205856][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[   75.285779][ T5391] loop3: detected capacity change from 0 to 1024
[   75.294804][ T5391] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   75.308590][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.665'.
[   75.310631][ T5391] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.664: Invalid block bitmap block 0 in block_group 0
[   75.346740][ T5391] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.664: Failed to acquire dquot type 0
[   75.375440][ T5391] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.664: Freeing blocks not in datazone - block = 0, count = 4096
[   75.406010][ T5391] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.664: Invalid inode bitmap blk 0 in block_group 0
[   75.436623][   T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0
[   75.465307][ T5391] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   75.474783][ T5391] EXT4-fs (loop3): 1 orphan inode deleted
[   75.481468][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.769530][ T5391] syz.3.664 (5391) used greatest stack depth: 9232 bytes left
[   75.788749][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.077144][ T5405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.089722][ T5405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.250296][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'.
[   76.268511][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'.
[   76.299627][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'.
[   77.489208][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'.
[   77.584392][ T5456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   77.621888][ T5457] bridge3: entered promiscuous mode
[   77.830743][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'.
[   77.966566][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'.
[   78.265619][ T5492] loop4: detected capacity change from 0 to 512
[   78.274356][ T5492] EXT4-fs (loop4): orphan cleanup on readonly fs
[   78.281170][ T5492] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.701: couldn't read orphan inode 26 (err -116)
[   78.293462][ T5492] EXT4-fs (loop4): Remounting filesystem read-only
[   78.301316][ T5492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   78.474422][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.518995][ T5498] loop4: detected capacity change from 0 to 4096
[   78.528059][ T5498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.552415][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.790360][ T5507] bridge_slave_0: left allmulticast mode
[   78.796380][ T5507] bridge_slave_0: left promiscuous mode
[   78.802223][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.805290][   T29] kauditd_printk_skb: 2477 callbacks suppressed
[   78.805304][   T29] audit: type=1326 audit(1764541479.673:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   78.840212][   T29] audit: type=1326 audit(1764541479.673:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[   78.864531][   T29] audit: type=1326 audit(1764541479.673:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   78.889404][   T29] audit: type=1326 audit(1764541479.673:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   78.913358][   T29] audit: type=1326 audit(1764541479.673:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[   78.937830][   T29] audit: type=1326 audit(1764541479.673:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   78.962206][   T29] audit: type=1326 audit(1764541479.682:13295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   78.986522][   T29] audit: type=1326 audit(1764541479.682:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[   79.010267][   T29] audit: type=1326 audit(1764541479.682:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   79.033853][   T29] audit: type=1326 audit(1764541479.682:13298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98777c65e7 code=0x7ffc0000
[   79.061807][ T5507] bridge_slave_1: left allmulticast mode
[   79.067829][ T5507] bridge_slave_1: left promiscuous mode
[   79.074354][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.093230][ T5507] bond0: (slave bond_slave_0): Releasing backup interface
[   79.108507][ T5507] bond0: (slave bond_slave_1): Releasing backup interface
[   79.128015][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.135870][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.145149][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.152806][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.162397][ T5507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   79.398185][ T5531] bridge6: entered promiscuous mode
[   79.714178][ T5539] loop2: detected capacity change from 0 to 164
[   79.892734][ T5551] loop3: detected capacity change from 0 to 512
[   79.900208][ T5551] EXT4-fs: Ignoring removed orlov option
[   79.918330][ T5551] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.722: corrupted in-inode xattr: bad e_name length
[   79.932762][ T5551] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.722: couldn't read orphan inode 15 (err -117)
[   79.945996][ T5551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.965556][ T5551] IPv6: Can't replace route, no match found
[   79.988765][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.994109][ T5556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   80.012063][ T5556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5556 comm=syz.4.724
[   80.128387][ T5568] loop1: detected capacity change from 0 to 1024
[   80.135561][ T5568] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.143872][ T5568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[   80.152779][ T5568] System zones: 0-1, 3-36
[   80.153065][ T5570] loop4: detected capacity change from 0 to 164
[   80.159041][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.204033][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.521408][ T5589] bridge4: entered promiscuous mode
[   80.924813][ T5598] __nla_validate_parse: 17 callbacks suppressed
[   80.924831][ T5598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.743'.
[   80.931817][ T5599] IPv6: Can't replace route, no match found
[   80.972381][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'.
[   80.990653][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'.
[   81.135116][ T5623] loop2: detected capacity change from 0 to 512
[   81.147351][ T5623] EXT4-fs (loop2): orphan cleanup on readonly fs
[   81.154476][ T5627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'.
[   81.161594][ T5623] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.754: couldn't read orphan inode 26 (err -116)
[   81.180749][ T5623] EXT4-fs (loop2): Remounting filesystem read-only
[   81.188561][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.257147][ T5638] macvtap0: refused to change device tx_queue_len
[   81.290254][ T5623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'.
[   81.326091][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.404035][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'.
[   81.418896][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'.
[   81.567658][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'.
[   81.627826][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.636402][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.661159][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'.
[   81.670810][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[   82.121622][ T5674] loop1: detected capacity change from 0 to 512
[   82.129496][ T5674] EXT4-fs (loop1): orphan cleanup on readonly fs
[   82.136368][ T5674] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.774: couldn't read orphan inode 26 (err -116)
[   82.149468][ T5674] EXT4-fs (loop1): Remounting filesystem read-only
[   82.156673][ T5674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   82.236062][ T5680] loop3: detected capacity change from 0 to 164
[   82.526711][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.562446][ T5691] loop1: detected capacity change from 0 to 512
[   82.579714][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.780: corrupted inode contents
[   82.591912][ T5691] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.780: mark_inode_dirty error
[   82.604129][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.780: corrupted inode contents
[   82.616224][ T5691] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.780: mark_inode_dirty error
[   82.629800][ T5691] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.780: Failed to acquire dquot type 0
[   82.647117][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.780: corrupted inode contents
[   82.660766][ T5691] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.780: mark_inode_dirty error
[   82.680189][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.780: corrupted inode contents
[   82.704595][ T5691] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.780: mark_inode_dirty error
[   82.717015][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.780: corrupted inode contents
[   82.750543][ T5691] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   82.759512][ T5691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.780: corrupted inode contents
[   82.772586][ T5691] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.780: mark_inode_dirty error
[   82.784510][ T5691] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   82.799460][ T5691] EXT4-fs (loop1): 1 truncate cleaned up
[   82.813244][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.845242][ T5691] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.877758][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.886366][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.146238][ T5713] loop4: detected capacity change from 0 to 164
[   83.381661][ T5737] loop4: detected capacity change from 0 to 164
[   83.454607][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.045416][ T5768] loop2: detected capacity change from 0 to 164
[   84.173453][   T29] kauditd_printk_skb: 1528 callbacks suppressed
[   84.173488][   T29] audit: type=1326 audit(1764541484.687:14825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.213968][   T29] audit: type=1326 audit(1764541484.724:14826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.238680][   T29] audit: type=1326 audit(1764541484.724:14827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.262640][   T29] audit: type=1326 audit(1764541484.724:14828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.286315][   T29] audit: type=1326 audit(1764541484.724:14829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.309898][   T29] audit: type=1326 audit(1764541484.724:14830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.333491][   T29] audit: type=1326 audit(1764541484.724:14831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.357407][   T29] audit: type=1326 audit(1764541484.724:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.381264][   T29] audit: type=1326 audit(1764541484.724:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   84.405090][   T29] audit: type=1326 audit(1764541484.724:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.2.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6774f749 code=0x7ffc0000
[   85.101968][ T5801] loop2: detected capacity change from 0 to 164
[   86.274395][ T5828] loop3: detected capacity change from 0 to 164
[   86.323569][ T5836] __nla_validate_parse: 18 callbacks suppressed
[   86.323585][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'.
[   86.345400][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'.
[   86.452757][ T5845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.837'.
[   86.556335][ T5851] loop1: detected capacity change from 0 to 512
[   86.566902][ T5851] EXT4-fs (loop1): orphan cleanup on readonly fs
[   86.569163][ T5849] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   86.577088][ T5851] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.840: couldn't read orphan inode 26 (err -116)
[   86.580450][ T5849] batman_adv: batadv0: Removing interface: veth1_vlan
[   86.629378][ T5851] EXT4-fs (loop1): Remounting filesystem read-only
[   86.645529][ T5851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.788920][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'.
[   86.821994][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.097934][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.116729][ T5868] loop2: detected capacity change from 0 to 512
[   87.127525][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.144148][ T5868] EXT4-fs (loop2): orphan cleanup on readonly fs
[   87.151373][ T5868] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.846: couldn't read orphan inode 26 (err -116)
[   87.224557][ T5868] EXT4-fs (loop2): Remounting filesystem read-only
[   87.249685][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.318220][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'.
[   87.344217][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'.
[   87.373788][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.385768][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'.
[   87.643074][ T5884] bridge5: entered promiscuous mode
[   87.785129][ T5888] macvtap0: refused to change device tx_queue_len
[   88.088469][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.855'.
[   88.101649][ T5897] loop1: detected capacity change from 0 to 512
[   88.114131][ T5897] EXT4-fs: Ignoring removed orlov option
[   88.130146][ T5897] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.856: corrupted in-inode xattr: bad e_name length
[   88.191695][ T5897] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.856: couldn't read orphan inode 15 (err -117)
[   88.207144][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.224027][ T5897] IPv6: Can't replace route, no match found
[   88.237130][ T5909] loop3: detected capacity change from 0 to 512
[   88.266221][ T5909] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.860: corrupted inode contents
[   88.280754][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.325888][ T5909] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.860: mark_inode_dirty error
[   88.349316][ T5909] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.860: corrupted inode contents
[   88.371987][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[   88.389145][ T5909] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.860: mark_inode_dirty error
[   88.400998][ T5909] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.860: Failed to acquire dquot type 0
[   88.413359][ T5909] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.860: corrupted inode contents
[   88.426125][ T5909] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.860: mark_inode_dirty error
[   88.441443][ T5909] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.860: corrupted inode contents
[   88.453810][ T5909] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.860: mark_inode_dirty error
[   88.455528][ T5917] lo speed is unknown, defaulting to 1000
[   88.465904][ T5909] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.860: corrupted inode contents
[   88.483533][ T5909] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[   88.492518][ T5909] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.860: corrupted inode contents
[   88.505140][ T5909] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.860: mark_inode_dirty error
[   88.516525][ T5909] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[   88.525999][ T5909] EXT4-fs (loop3): 1 truncate cleaned up
[   88.532602][ T5909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.533430][ T5917] lo speed is unknown, defaulting to 1000
[   88.545651][ T5909] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.564546][ T5922] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[   88.572730][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.585570][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.595132][ T5921] macvtap0: refused to change device tx_queue_len
[   88.601885][ T5917] lo speed is unknown, defaulting to 1000
[   88.655221][ T5917] infiniband s
z1: set active
[   88.660145][ T5917] infiniband s
z1: added lo
[   88.664863][ T4898] lo speed is unknown, defaulting to 1000
[   88.674924][ T5917] RDS/IB: s
z1: added
[   88.679121][ T5917] smc: adding ib device s
z1 with port count 1
[   88.685419][ T5917] smc:    ib device s
z1 port 1 has no pnetid
[   88.691762][ T4898] lo speed is unknown, defaulting to 1000
[   88.697704][ T5917] lo speed is unknown, defaulting to 1000
[   88.725314][ T5917] lo speed is unknown, defaulting to 1000
[   88.753128][ T5917] lo speed is unknown, defaulting to 1000
[   88.781154][ T5917] lo speed is unknown, defaulting to 1000
[   88.809049][ T5917] lo speed is unknown, defaulting to 1000
[   88.867075][ T5937] loop1: detected capacity change from 0 to 512
[   88.876236][ T5937] EXT4-fs (loop1): orphan cleanup on readonly fs
[   88.882932][ T5937] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.868: couldn't read orphan inode 26 (err -116)
[   88.895734][ T5937] EXT4-fs (loop1): Remounting filesystem read-only
[   88.902621][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.001010][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'.
[   89.032963][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.115483][ T5954] loop1: detected capacity change from 0 to 512
[   89.124698][ T5954] EXT4-fs (loop1): orphan cleanup on readonly fs
[   89.134510][ T5954] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.875: couldn't read orphan inode 26 (err -116)
[   89.150372][ T5954] EXT4-fs (loop1): Remounting filesystem read-only
[   89.162660][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.176103][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.194613][ T5957] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   89.270104][ T5957] batman_adv: batadv0: Removing interface: veth1_vlan
[   89.328304][ T5961] macvtap0: refused to change device tx_queue_len
[   89.363105][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.559979][   T29] kauditd_printk_skb: 912 callbacks suppressed
[   89.559995][   T29] audit: type=1326 audit(1764541489.729:15745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   89.590095][   T29] audit: type=1326 audit(1764541489.729:15746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   89.613946][   T29] audit: type=1326 audit(1764541489.729:15747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   89.637867][   T29] audit: type=1326 audit(1764541489.729:15748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[   89.662225][   T29] audit: type=1326 audit(1764541489.823:15749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   89.686104][   T29] audit: type=1326 audit(1764541489.823:15750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   89.712139][   T29] audit: type=1326 audit(1764541489.870:15751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   89.735633][   T29] audit: type=1326 audit(1764541489.870:15752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   89.759371][   T29] audit: type=1326 audit(1764541489.870:15753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5973 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   89.848657][ T5988] netlink: 'syz.2.887': attribute type 1 has an invalid length.
[   89.896483][ T5988] bond1: (slave bridge2): making interface the new active one
[   89.904603][ T5988] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   90.133637][ T5994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   90.347354][   T29] audit: type=1326 audit(1764541490.459:15754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6003 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[   91.343657][ T6046] loop3: detected capacity change from 0 to 512
[   91.352593][ T6046] EXT4-fs (loop3): orphan cleanup on readonly fs
[   91.360220][ T6046] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.911: couldn't read orphan inode 26 (err -116)
[   91.373514][ T6046] EXT4-fs (loop3): Remounting filesystem read-only
[   91.381747][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.462697][ T6052] FAULT_INJECTION: forcing a failure.
[   91.462697][ T6052] name failslab, interval 1, probability 0, space 0, times 0
[   91.475492][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.1.913 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.475520][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   91.475531][ T6052] Call Trace:
[   91.475538][ T6052]  <TASK>
[   91.475547][ T6052]  __dump_stack+0x1d/0x30
[   91.475571][ T6052]  dump_stack_lvl+0xe8/0x140
[   91.475610][ T6052]  dump_stack+0x15/0x1b
[   91.475629][ T6052]  should_fail_ex+0x265/0x280
[   91.475650][ T6052]  should_failslab+0x8c/0xb0
[   91.475747][ T6052]  kmem_cache_alloc_noprof+0x50/0x480
[   91.475776][ T6052]  ? getname_flags+0x80/0x3b0
[   91.475806][ T6052]  getname_flags+0x80/0x3b0
[   91.475879][ T6052]  do_sys_openat2+0x60/0x110
[   91.475900][ T6052]  __x64_sys_openat+0xf2/0x120
[   91.475919][ T6052]  x64_sys_call+0x2eab/0x3000
[   91.475940][ T6052]  do_syscall_64+0xd2/0x200
[   91.475960][ T6052]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   91.476062][ T6052]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   91.476172][ T6052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.476196][ T6052] RIP: 0033:0x7fd9207ef749
[   91.476214][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.476273][ T6052] RSP: 002b:00007fd91f24f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   91.476291][ T6052] RAX: ffffffffffffffda RBX: 00007fd920a45fa0 RCX: 00007fd9207ef749
[   91.476303][ T6052] RDX: 000000000000403f RSI: 0000200000005c40 RDI: ffffffffffffff9c
[   91.476317][ T6052] RBP: 00007fd91f24f090 R08: 0000000000000000 R09: 0000000000000000
[   91.476332][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.476425][ T6052] R13: 00007fd920a46038 R14: 00007fd920a45fa0 R15: 00007ffe49a19e98
[   91.476446][ T6052]  </TASK>
[   91.668382][ T6054] bridge6: entered promiscuous mode
[   91.691176][ T6046] __nla_validate_parse: 7 callbacks suppressed
[   91.691250][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.911'.
[   91.911152][ T6058] rdma_rxe: rxe_newlink: failed to add lo
[   91.952774][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.246139][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.254679][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.999309][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'.
[   93.048678][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.057705][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.112667][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'.
[   93.128821][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'.
[   93.195336][ T6106] loop4: detected capacity change from 0 to 1024
[   93.202694][ T6106] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.227129][ T6106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.250493][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.934'.
[   93.271949][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.293854][ T6115] netlink: 88 bytes leftover after parsing attributes in process `syz.4.936'.
[   93.517903][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.526631][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.672720][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'.
[   93.757980][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.945'.
[   93.767042][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[   94.087166][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'.
[   94.114696][ T6145] loop3: detected capacity change from 0 to 1024
[   94.121629][ T6145] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.134742][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.163367][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.917050][   T29] kauditd_printk_skb: 2104 callbacks suppressed
[   94.917068][   T29] audit: type=1326 audit(1764541494.744:17859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   94.947180][   T29] audit: type=1326 audit(1764541494.744:17860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[   94.971221][   T29] audit: type=1326 audit(1764541494.744:17861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   94.994719][   T29] audit: type=1326 audit(1764541494.753:17862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   95.018398][   T29] audit: type=1326 audit(1764541494.753:17863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[   95.042648][   T29] audit: type=1326 audit(1764541494.753:17864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   95.066227][   T29] audit: type=1326 audit(1764541494.763:17865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   95.089957][   T29] audit: type=1326 audit(1764541494.763:17866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[   95.113676][   T29] audit: type=1326 audit(1764541494.763:17867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[   95.137509][   T29] audit: type=1326 audit(1764541494.772:17868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[   95.439490][ T6225] loop2: detected capacity change from 0 to 512
[   95.446919][ T6225] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   95.457485][ T6225] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   95.465785][ T6225] EXT4-fs (loop2): failed to initialize system zone (-117)
[   95.473170][ T6225] EXT4-fs (loop2): mount failed
[   95.494628][ T6225] loop2: detected capacity change from 0 to 2048
[   96.270228][ T6288] loop4: detected capacity change from 0 to 164
[   96.494473][ T6308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.568591][ T6316] loop1: detected capacity change from 0 to 164
[   96.868133][ T6346] macvtap0: refused to change device tx_queue_len
[   96.970437][ T6357] loop1: detected capacity change from 0 to 512
[   96.977756][ T6357] EXT4-fs: Ignoring removed orlov option
[   96.991039][ T6357] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1025: corrupted in-inode xattr: bad e_name length
[   97.005331][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1025: couldn't read orphan inode 15 (err -117)
[   97.018488][ T6357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.049063][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.100663][ T6367] __nla_validate_parse: 38 callbacks suppressed
[   97.100717][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'.
[   97.116438][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'.
[   97.140362][ T6370] loop3: detected capacity change from 0 to 512
[   97.147998][ T6370] EXT4-fs (loop3): orphan cleanup on readonly fs
[   97.154882][ T6370] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1029: couldn't read orphan inode 26 (err -116)
[   97.167020][ T6370] EXT4-fs (loop3): Remounting filesystem read-only
[   97.174207][ T6370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   97.244770][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'.
[   97.594128][ T6383] macvtap0: refused to change device tx_queue_len
[   97.674666][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'.
[   97.683786][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'.
[   97.697938][ T6399] loop4: detected capacity change from 0 to 1024
[   97.712093][ T6399] EXT4-fs: Ignoring removed nomblk_io_submit option
[   97.749932][ T6399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.787291][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1040'.
[   97.809027][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.990964][ T6413] macvtap0: refused to change device tx_queue_len
[   98.053160][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.091372][ T6419] loop3: detected capacity change from 0 to 512
[   98.113429][ T6419] EXT4-fs: Ignoring removed orlov option
[   98.130823][ T6419] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1048: corrupted in-inode xattr: bad e_name length
[   98.161616][ T6419] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1048: couldn't read orphan inode 15 (err -117)
[   98.168506][ T6430] loop4: detected capacity change from 0 to 512
[   98.180411][ T6428] loop2: detected capacity change from 0 to 1024
[   98.187214][ T6428] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.194573][ T6419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.195030][ T6430] EXT4-fs (loop4): orphan cleanup on readonly fs
[   98.213604][ T6430] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1052: couldn't read orphan inode 26 (err -116)
[   98.226545][ T6430] EXT4-fs (loop4): Remounting filesystem read-only
[   98.233742][ T6430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   98.247791][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.262929][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.286008][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1053'.
[   98.295662][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.318391][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.338364][ T6444] loop2: detected capacity change from 0 to 512
[   98.346939][ T6444] EXT4-fs (loop2): orphan cleanup on readonly fs
[   98.353829][ T6444] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1057: couldn't read orphan inode 26 (err -116)
[   98.366310][ T6444] EXT4-fs (loop2): Remounting filesystem read-only
[   98.368338][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[   98.400918][ T6450] loop4: detected capacity change from 0 to 512
[   98.409006][ T6450] EXT4-fs (loop4): orphan cleanup on readonly fs
[   98.416016][ T6450] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1059: couldn't read orphan inode 26 (err -116)
[   98.428513][ T6450] EXT4-fs (loop4): Remounting filesystem read-only
[   98.438437][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1059'.
[   98.465152][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1057'.
[   99.321774][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.330460][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.462547][ T6500] loop4: detected capacity change from 0 to 512
[   99.470926][ T6500] EXT4-fs (loop4): orphan cleanup on readonly fs
[   99.477672][ T6500] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1076: couldn't read orphan inode 26 (err -116)
[   99.490311][ T6500] EXT4-fs (loop4): Remounting filesystem read-only
[   99.545491][ T6507] macvtap0: refused to change device tx_queue_len
[   99.900380][ T6521] loop3: detected capacity change from 0 to 164
[   99.927882][ T6526] loop3: detected capacity change from 0 to 512
[   99.936333][ T6526] EXT4-fs (loop3): orphan cleanup on readonly fs
[   99.943161][ T6526] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1087: couldn't read orphan inode 26 (err -116)
[   99.955540][ T6526] EXT4-fs (loop3): Remounting filesystem read-only
[  100.002067][ T6531] loop3: detected capacity change from 0 to 512
[  100.010215][ T6531] EXT4-fs (loop3): orphan cleanup on readonly fs
[  100.017267][ T6531] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1089: couldn't read orphan inode 26 (err -116)
[  100.029537][ T6531] EXT4-fs (loop3): Remounting filesystem read-only
[  100.272339][   T29] kauditd_printk_skb: 1527 callbacks suppressed
[  100.272355][   T29] audit: type=1326 audit(1764541499.749:19396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  100.303949][   T29] audit: type=1326 audit(1764541499.777:19397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  100.327092][   T29] audit: type=1326 audit(1764541499.777:19398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  100.350307][   T29] audit: type=1326 audit(1764541499.777:19399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  100.373579][   T29] audit: type=1326 audit(1764541499.777:19400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  100.396903][   T29] audit: type=1326 audit(1764541499.777:19401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  100.420118][   T29] audit: type=1326 audit(1764541499.777:19402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  100.585107][   T29] audit: type=1326 audit(1764541499.908:19403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  100.608234][   T29] audit: type=1326 audit(1764541499.908:19404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  100.631366][   T29] audit: type=1326 audit(1764541499.908:19405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  100.996161][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.008605][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.100315][ T6566] loop3: detected capacity change from 0 to 512
[  101.108094][ T6566] EXT4-fs (loop3): orphan cleanup on readonly fs
[  101.114878][ T6566] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1100: couldn't read orphan inode 26 (err -116)
[  101.127270][ T6566] EXT4-fs (loop3): Remounting filesystem read-only
[  101.134493][ T6566] EXT4-fs mount: 10 callbacks suppressed
[  101.134507][ T6566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  101.172338][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.292928][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.301637][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.428143][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.438901][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.882336][ T6592] macvtap0: refused to change device tx_queue_len
[  101.922179][ T6597] loop1: detected capacity change from 0 to 512
[  101.932254][ T6597] EXT4-fs (loop1): orphan cleanup on readonly fs
[  101.939097][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1113: couldn't read orphan inode 26 (err -116)
[  101.951349][ T6597] EXT4-fs (loop1): Remounting filesystem read-only
[  101.958814][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  101.983429][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.068106][ T6609] loop1: detected capacity change from 0 to 512
[  102.110942][ T6609] EXT4-fs (loop1): orphan cleanup on readonly fs
[  102.117708][ T6609] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1118: couldn't read orphan inode 26 (err -116)
[  102.131802][ T6609] EXT4-fs (loop1): Remounting filesystem read-only
[  102.138870][ T6609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.202722][ T6616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  102.227772][ T6619] loop2: detected capacity change from 0 to 512
[  102.275121][ T6623] loop3: detected capacity change from 0 to 1024
[  102.289222][ T6619] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1122: corrupted inode contents
[  102.317238][ T6619] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.1122: mark_inode_dirty error
[  102.337624][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.347290][ T6623] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.365567][ T6619] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1122: corrupted inode contents
[  102.387350][ T6623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.406644][ T6619] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1122: mark_inode_dirty error
[  102.434439][ T6619] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1122: Failed to acquire dquot type 0
[  102.449984][ T6619] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1122: corrupted inode contents
[  102.461021][ T6623] __nla_validate_parse: 12 callbacks suppressed
[  102.461036][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'.
[  102.488050][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.497611][ T6619] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.1122: mark_inode_dirty error
[  102.518428][ T6619] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1122: corrupted inode contents
[  102.534138][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  102.545229][ T6619] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1122: mark_inode_dirty error
[  102.557537][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'.
[  102.568302][ T6619] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1122: corrupted inode contents
[  102.587918][ T6619] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  102.604949][ T6619] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1122: corrupted inode contents
[  102.619578][ T6619] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.1122: mark_inode_dirty error
[  102.632900][ T6619] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  102.642415][ T6619] EXT4-fs (loop2): 1 truncate cleaned up
[  102.648646][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.661617][ T6619] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.675818][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.684641][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.693589][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.702399][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.793838][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'.
[  102.811263][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'.
[  102.820247][ T6660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1130'.
[  103.260875][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.509000][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1146'.
[  103.994948][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.004243][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.633994][ T6733] lo speed is unknown, defaulting to 1000
[  104.639985][ T6733] lo speed is unknown, defaulting to 1000
[  104.646099][ T6733] lo speed is unknown, defaulting to 1000
[  104.653137][ T6733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  104.665624][ T6733] lo speed is unknown, defaulting to 1000
[  104.671917][ T6733] lo speed is unknown, defaulting to 1000
[  104.678584][ T6733] lo speed is unknown, defaulting to 1000
[  104.682510][ T6737] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1162'.
[  104.684928][ T6733] lo speed is unknown, defaulting to 1000
[  104.701380][ T6733] lo speed is unknown, defaulting to 1000
[  105.131323][ T6740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  105.360189][ T6749] loop2: detected capacity change from 0 to 512
[  105.369198][ T6749] EXT4-fs (loop2): orphan cleanup on readonly fs
[  105.375973][ T6749] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1168: couldn't read orphan inode 26 (err -116)
[  105.389426][ T6749] EXT4-fs (loop2): Remounting filesystem read-only
[  105.396478][ T6749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.412473][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'.
[  105.437750][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.542553][ T6762] loop1: detected capacity change from 0 to 512
[  105.554302][ T6762] EXT4-fs (loop1): orphan cleanup on readonly fs
[  105.561555][ T6762] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1172: couldn't read orphan inode 26 (err -116)
[  105.573927][ T6762] EXT4-fs (loop1): Remounting filesystem read-only
[  105.581409][ T6762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.652911][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1172'.
[  105.723840][   T29] kauditd_printk_skb: 1397 callbacks suppressed
[  105.723857][   T29] audit: type=1326 audit(1764541504.847:20801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  105.755108][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.763779][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.771642][   T29] audit: type=1326 audit(1764541504.885:20802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86a461df90 code=0x7ffc0000
[  105.795883][   T29] audit: type=1326 audit(1764541504.885:20803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86a461f34b code=0x7ffc0000
[  105.820288][   T29] audit: type=1326 audit(1764541504.885:20804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86a461f34b code=0x7ffc0000
[  105.844537][   T29] audit: type=1326 audit(1764541504.922:20805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  105.868578][   T29] audit: type=1326 audit(1764541504.922:20806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  105.893595][   T29] audit: type=1326 audit(1764541504.969:20807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  105.917389][   T29] audit: type=1326 audit(1764541504.969:20808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  105.941324][   T29] audit: type=1326 audit(1764541504.969:20809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  106.135021][ T6776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.255042][ T6781] macvtap0: refused to change device tx_queue_len
[  106.279011][   T29] audit: type=1326 audit(1764541505.371:20810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98777cf749 code=0x7ffc0000
[  106.440312][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.476368][ T6795] loop3: detected capacity change from 0 to 512
[  106.491845][ T6795] EXT4-fs (loop3): orphan cleanup on readonly fs
[  106.501545][ T6793] loop1: detected capacity change from 0 to 512
[  106.508175][ T6795] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1185: couldn't read orphan inode 26 (err -116)
[  106.524008][ T6795] EXT4-fs (loop3): Remounting filesystem read-only
[  106.531427][ T6795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.559271][ T6793] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1183: corrupted inode contents
[  106.575421][ T6793] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.1183: mark_inode_dirty error
[  106.587954][ T6793] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1183: corrupted inode contents
[  106.593130][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.600616][ T6793] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1183: mark_inode_dirty error
[  106.622073][ T6793] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1183: Failed to acquire dquot type 0
[  106.635302][ T6793] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1183: corrupted inode contents
[  106.647974][ T6793] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.1183: mark_inode_dirty error
[  106.660225][ T6793] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1183: corrupted inode contents
[  106.672532][ T6793] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1183: mark_inode_dirty error
[  106.684110][ T6793] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1183: corrupted inode contents
[  106.696269][ T6793] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  106.705250][ T6793] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1183: corrupted inode contents
[  106.717472][ T6793] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.1183: mark_inode_dirty error
[  106.728933][ T6793] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  106.739188][ T6793] EXT4-fs (loop1): 1 truncate cleaned up
[  106.745455][ T6793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.759134][ T6793] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.774723][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.783349][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.871826][ T6803] bridge3: entered promiscuous mode
[  107.114552][ T6811] loop2: detected capacity change from 0 to 512
[  107.126570][ T6811] EXT4-fs (loop2): orphan cleanup on readonly fs
[  107.133711][ T6811] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1188: couldn't read orphan inode 26 (err -116)
[  107.147355][ T6811] EXT4-fs (loop2): Remounting filesystem read-only
[  107.155118][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.227298][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.261331][ T6820] loop2: detected capacity change from 0 to 1024
[  107.268386][ T6820] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.293170][ T6820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.337610][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.351779][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.372012][ T6828] loop2: detected capacity change from 0 to 512
[  107.382791][ T6828] EXT4-fs (loop2): orphan cleanup on readonly fs
[  107.391169][ T6828] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1194: couldn't read orphan inode 26 (err -116)
[  107.406073][ T6828] EXT4-fs (loop2): Remounting filesystem read-only
[  107.413214][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.460063][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.479673][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.532160][ T6844] loop1: detected capacity change from 0 to 512
[  107.540325][ T6844] EXT4-fs (loop1): orphan cleanup on readonly fs
[  107.547149][ T6844] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1200: couldn't read orphan inode 26 (err -116)
[  107.559530][ T6844] EXT4-fs (loop1): Remounting filesystem read-only
[  107.566552][ T6844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.596649][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.717712][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.726584][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.923062][ T6856] loop3: detected capacity change from 0 to 1024
[  107.929922][ T6856] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.955649][ T6856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.985235][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.006780][ T6860] loop3: detected capacity change from 0 to 512
[  108.030459][ T6860] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1206: corrupted inode contents
[  108.043020][ T6860] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.1206: mark_inode_dirty error
[  108.055328][ T6860] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1206: corrupted inode contents
[  108.067534][ T6860] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1206: mark_inode_dirty error
[  108.079627][ T6860] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1206: Failed to acquire dquot type 0
[  108.082465][ T6864] __nla_validate_parse: 5 callbacks suppressed
[  108.082497][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1207'.
[  108.093051][ T6860] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1206: corrupted inode contents
[  108.118645][ T6860] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.1206: mark_inode_dirty error
[  108.130430][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1207'.
[  108.139856][ T6860] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1206: corrupted inode contents
[  108.152164][ T6860] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1206: mark_inode_dirty error
[  108.163672][ T6860] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1206: corrupted inode contents
[  108.176210][ T6860] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  108.185360][ T6860] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1206: corrupted inode contents
[  108.198136][ T6860] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1206: mark_inode_dirty error
[  108.210870][ T6860] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  108.220211][ T6860] EXT4-fs (loop3): 1 truncate cleaned up
[  108.226858][ T6860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.239611][ T6868] loop4: detected capacity change from 0 to 512
[  108.239714][ T6860] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.246499][ T6868] EXT4-fs: Ignoring removed orlov option
[  108.266728][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.272886][ T6868] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1209: corrupted in-inode xattr: bad e_name length
[  108.276017][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.291636][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.306995][ T6868] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1209: couldn't read orphan inode 15 (err -117)
[  108.323265][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  108.337943][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.341219][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'.
[  108.405360][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.425719][ T6877] loop4: detected capacity change from 0 to 512
[  108.434059][ T6877] EXT4-fs (loop4): orphan cleanup on readonly fs
[  108.441900][ T6877] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1213: couldn't read orphan inode 26 (err -116)
[  108.454602][ T6877] EXT4-fs (loop4): Remounting filesystem read-only
[  108.461638][ T6877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  108.543713][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.588438][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'.
[  108.597535][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'.
[  108.597617][ T6889] loop4: detected capacity change from 0 to 1024
[  108.613607][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'.
[  108.630053][ T6889] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.651587][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.683665][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.746644][ T6906] loop4: detected capacity change from 0 to 512
[  108.753457][ T6906] EXT4-fs: Ignoring removed orlov option
[  108.760606][ T6906] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1225: corrupted in-inode xattr: bad e_name length
[  108.774498][ T6906] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1225: couldn't read orphan inode 15 (err -117)
[  108.787536][ T6906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.787960][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.809720][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.831329][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.852430][ T6911] loop4: detected capacity change from 0 to 512
[  108.860502][ T6911] EXT4-fs (loop4): orphan cleanup on readonly fs
[  108.867620][ T6911] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1226: couldn't read orphan inode 26 (err -116)
[  108.880077][ T6911] EXT4-fs (loop4): Remounting filesystem read-only
[  108.880815][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.887354][ T6911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  108.914332][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1226'.
[  108.935464][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'.
[  108.944837][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'.
[  108.954852][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.285948][ T6933] loop4: detected capacity change from 0 to 512
[  109.292978][ T6933] EXT4-fs: Ignoring removed orlov option
[  109.299988][ T6933] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1236: corrupted in-inode xattr: bad e_name length
[  109.314228][ T6933] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1236: couldn't read orphan inode 15 (err -117)
[  109.326942][ T6933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.352324][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.430656][ T6942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  109.818481][ T6964] bridge7: entered promiscuous mode
[  110.555172][ T6981] loop4: detected capacity change from 0 to 512
[  110.573311][ T6981] EXT4-fs (loop4): orphan cleanup on readonly fs
[  110.585198][ T6981] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1250: couldn't read orphan inode 26 (err -116)
[  110.597867][ T6981] EXT4-fs (loop4): Remounting filesystem read-only
[  110.605329][ T6981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  111.079201][   T29] kauditd_printk_skb: 1380 callbacks suppressed
[  111.079218][   T29] audit: type=1326 audit(1764541509.862:22187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[  111.110861][   T29] audit: type=1326 audit(1764541509.890:22188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[  111.134778][   T29] audit: type=1326 audit(1764541509.890:22189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9207e65e7 code=0x7ffc0000
[  111.158573][   T29] audit: type=1326 audit(1764541509.890:22190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd92078b829 code=0x7ffc0000
[  111.182260][   T29] audit: type=1326 audit(1764541509.890:22191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9207ef749 code=0x7ffc0000
[  111.206279][   T29] audit: type=1326 audit(1764541509.890:22192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44d89c65e7 code=0x7ffc0000
[  111.229891][   T29] audit: type=1326 audit(1764541509.890:22193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44d896b829 code=0x7ffc0000
[  111.253440][   T29] audit: type=1326 audit(1764541509.890:22194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  111.277015][   T29] audit: type=1326 audit(1764541509.890:22195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  111.300609][   T29] audit: type=1326 audit(1764541509.890:22196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.3.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  111.455545][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.783918][ T7034] loop1: detected capacity change from 0 to 512
[  111.799404][ T7034] EXT4-fs (loop1): orphan cleanup on readonly fs
[  111.818284][ T7034] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1269: couldn't read orphan inode 26 (err -116)
[  111.831368][ T7034] EXT4-fs (loop1): Remounting filesystem read-only
[  111.838507][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  112.010716][ T7052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.066842][ T7052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.164015][ T7052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.260252][ T7052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.354052][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.366600][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.377944][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.390267][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.713486][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.390205][ T7141] __nla_validate_parse: 24 callbacks suppressed
[  114.390222][ T7141] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1307'.
[  114.814544][ T7151] FAULT_INJECTION: forcing a failure.
[  114.814544][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.827869][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.4.1312 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.827980][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.827991][ T7151] Call Trace:
[  114.827997][ T7151]  <TASK>
[  114.828004][ T7151]  __dump_stack+0x1d/0x30
[  114.828045][ T7151]  dump_stack_lvl+0xe8/0x140
[  114.828069][ T7151]  dump_stack+0x15/0x1b
[  114.828089][ T7151]  should_fail_ex+0x265/0x280
[  114.828122][ T7151]  should_fail+0xb/0x20
[  114.828137][ T7151]  should_fail_usercopy+0x1a/0x20
[  114.828157][ T7151]  strncpy_from_user+0x25/0x230
[  114.828180][ T7151]  ? kmem_cache_alloc_noprof+0x242/0x480
[  114.828205][ T7151]  ? getname_flags+0x80/0x3b0
[  114.828318][ T7151]  getname_flags+0xae/0x3b0
[  114.828357][ T7151]  user_path_at+0x28/0x130
[  114.828384][ T7151]  __se_sys_fspick+0xaa/0x240
[  114.828462][ T7151]  __x64_sys_fspick+0x43/0x50
[  114.828493][ T7151]  x64_sys_call+0x44c/0x3000
[  114.828528][ T7151]  do_syscall_64+0xd2/0x200
[  114.828547][ T7151]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  114.828578][ T7151]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  114.828637][ T7151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.828716][ T7151] RIP: 0033:0x7f98777cf749
[  114.828732][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.828748][ T7151] RSP: 002b:00007f9876237038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1
[  114.828769][ T7151] RAX: ffffffffffffffda RBX: 00007f9877a25fa0 RCX: 00007f98777cf749
[  114.828784][ T7151] RDX: 0000000000000000 RSI: 0000200000001600 RDI: ffffffffffffff9c
[  114.828797][ T7151] RBP: 00007f9876237090 R08: 0000000000000000 R09: 0000000000000000
[  114.828842][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.828853][ T7151] R13: 00007f9877a26038 R14: 00007f9877a25fa0 R15: 00007fff05acf398
[  114.828869][ T7151]  </TASK>
[  115.142953][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1317'.
[  115.195571][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'.
[  115.217863][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'.
[  116.176109][ T7188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1325'.
[  116.269396][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'.
[  116.308296][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'.
[  116.481417][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1330'.
[  116.662878][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'.
[  116.691286][   T29] kauditd_printk_skb: 1719 callbacks suppressed
[  116.691302][   T29] audit: type=1326 audit(1764541515.110:23916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.729420][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'.
[  116.747908][   T29] audit: type=1326 audit(1764541515.148:23917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.771834][   T29] audit: type=1326 audit(1764541515.148:23918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.796243][   T29] audit: type=1326 audit(1764541515.148:23919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.820122][   T29] audit: type=1326 audit(1764541515.148:23920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.844342][   T29] audit: type=1326 audit(1764541515.148:23921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.868658][   T29] audit: type=1326 audit(1764541515.148:23922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.892602][   T29] audit: type=1326 audit(1764541515.148:23923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.916500][   T29] audit: type=1326 audit(1764541515.148:23924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  116.940775][   T29] audit: type=1326 audit(1764541515.148:23925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.0.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  117.197594][ T7223] loop4: detected capacity change from 0 to 512
[  117.216462][ T7223] EXT4-fs (loop4): 1 orphan inode deleted
[  117.222656][ T7223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.243392][ T7223] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.246512][ T7233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  117.270130][ T3408] lo speed is unknown, defaulting to 1000
[  117.317945][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.331827][ T7238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  117.859326][ T7282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  118.060496][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.080638][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.175636][ T7299] hub 6-0:1.0: USB hub found
[  118.183845][ T7299] hub 6-0:1.0: 8 ports detected
[  118.790032][ T7322] loop1: detected capacity change from 0 to 512
[  118.857487][ T7322] EXT4-fs (loop1): orphan cleanup on readonly fs
[  118.871883][ T7322] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1379: couldn't read orphan inode 26 (err -116)
[  118.947702][ T7322] EXT4-fs (loop1): Remounting filesystem read-only
[  118.955206][ T7322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.047765][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.104064][ T7327] loop3: detected capacity change from 0 to 1024
[  119.113162][ T7327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.126154][ T7327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.278103][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.583584][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.592665][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.324137][ T7415] loop1: detected capacity change from 0 to 512
[  120.414932][ T7415] EXT4-fs (loop1): orphan cleanup on readonly fs
[  120.435288][ T7415] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1411: couldn't read orphan inode 26 (err -116)
[  120.449602][ T7415] EXT4-fs (loop1): Remounting filesystem read-only
[  120.461053][ T7415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.508628][ T7415] __nla_validate_parse: 10 callbacks suppressed
[  120.508646][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'.
[  120.551561][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.827402][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.835978][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.855048][ T7440] FAULT_INJECTION: forcing a failure.
[  120.855048][ T7440] name failslab, interval 1, probability 0, space 0, times 0
[  120.868073][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.1.1414 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  120.868164][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  120.868175][ T7440] Call Trace:
[  120.868181][ T7440]  <TASK>
[  120.868188][ T7440]  __dump_stack+0x1d/0x30
[  120.868262][ T7440]  dump_stack_lvl+0xe8/0x140
[  120.868284][ T7440]  dump_stack+0x15/0x1b
[  120.868307][ T7440]  should_fail_ex+0x265/0x280
[  120.868439][ T7440]  should_failslab+0x8c/0xb0
[  120.868471][ T7440]  __kmalloc_cache_node_noprof+0x54/0x4a0
[  120.868504][ T7440]  ? __get_vm_area_node+0x106/0x1d0
[  120.868591][ T7440]  __get_vm_area_node+0x106/0x1d0
[  120.868625][ T7440]  __vmalloc_node_range_noprof+0x28c/0xed0
[  120.868658][ T7440]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.868791][ T7440]  ? __rcu_read_unlock+0x4f/0x70
[  120.868824][ T7440]  ? cred_has_capability+0x210/0x280
[  120.868852][ T7440]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.868896][ T7440]  __vmalloc_noprof+0x83/0xc0
[  120.868940][ T7440]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.868984][ T7440]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.869017][ T7440]  ? bpf_prog_alloc+0x2a/0x150
[  120.869044][ T7440]  bpf_prog_alloc+0x3c/0x150
[  120.869153][ T7440]  bpf_prog_load+0x506/0x1100
[  120.869191][ T7440]  ? security_bpf+0x2b/0x90
[  120.869221][ T7440]  __sys_bpf+0x469/0x7c0
[  120.869248][ T7440]  __x64_sys_bpf+0x41/0x50
[  120.869278][ T7440]  x64_sys_call+0x2aee/0x3000
[  120.869315][ T7440]  do_syscall_64+0xd2/0x200
[  120.869338][ T7440]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  120.869368][ T7440]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  120.869449][ T7440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.869468][ T7440] RIP: 0033:0x7fd9207ef749
[  120.869486][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.869506][ T7440] RSP: 002b:00007fd91f20d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  120.869578][ T7440] RAX: ffffffffffffffda RBX: 00007fd920a46180 RCX: 00007fd9207ef749
[  120.869592][ T7440] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005
[  120.869607][ T7440] RBP: 00007fd91f20d090 R08: 0000000000000000 R09: 0000000000000000
[  120.869618][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.869629][ T7440] R13: 00007fd920a46218 R14: 00007fd920a46180 R15: 00007ffe49a19e98
[  120.869648][ T7440]  </TASK>
[  120.869658][ T7440] syz.1.1414: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  120.942371][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.947779][ T7440] ,cpuset=/,mems_allowed=0
[  120.947816][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.1.1414 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  120.948007][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  120.948019][ T7440] Call Trace:
[  120.948027][ T7440]  <TASK>
[  120.948035][ T7440]  __dump_stack+0x1d/0x30
[  120.948120][ T7440]  dump_stack_lvl+0xe8/0x140
[  120.948191][ T7440]  dump_stack+0x15/0x1b
[  120.948208][ T7440]  warn_alloc+0x12b/0x1a0
[  120.948241][ T7440]  __vmalloc_node_range_noprof+0x2b1/0xed0
[  120.948298][ T7440]  ? __rcu_read_unlock+0x4f/0x70
[  120.948325][ T7440]  ? cred_has_capability+0x210/0x280
[  120.948402][ T7440]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.948437][ T7440]  __vmalloc_noprof+0x83/0xc0
[  120.948493][ T7440]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.948523][ T7440]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  120.948569][ T7440]  ? bpf_prog_alloc+0x2a/0x150
[  120.948605][ T7440]  bpf_prog_alloc+0x3c/0x150
[  120.948634][ T7440]  bpf_prog_load+0x506/0x1100
[  120.948660][ T7440]  ? security_bpf+0x2b/0x90
[  120.948685][ T7440]  __sys_bpf+0x469/0x7c0
[  120.948738][ T7440]  __x64_sys_bpf+0x41/0x50
[  120.948773][ T7440]  x64_sys_call+0x2aee/0x3000
[  120.948794][ T7440]  do_syscall_64+0xd2/0x200
[  120.948835][ T7440]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  120.948861][ T7440]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  120.948892][ T7440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.948970][ T7440] RIP: 0033:0x7fd9207ef749
[  120.949049][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.949067][ T7440] RSP: 002b:00007fd91f20d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  120.949086][ T7440] RAX: ffffffffffffffda RBX: 00007fd920a46180 RCX: 00007fd9207ef749
[  120.949099][ T7440] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005
[  120.949149][ T7440] RBP: 00007fd91f20d090 R08: 0000000000000000 R09: 0000000000000000
[  120.949162][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.949173][ T7440] R13: 00007fd920a46218 R14: 00007fd920a46180 R15: 00007ffe49a19e98
[  120.949191][ T7440]  </TASK>
[  120.949198][ T7440] Mem-Info:
[  120.973722][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.974709][ T7440] active_anon:28935 inactive_anon:4 isolated_anon:0
[  120.974709][ T7440]  active_file:20287 inactive_file:2275 isolated_file:0
[  120.974709][ T7440]  unevictable:0 dirty:228 writeback:0
[  120.974709][ T7440]  slab_reclaimable:3346 slab_unreclaimable:16632
[  120.974709][ T7440]  mapped:35922 shmem:25672 pagetables:866
[  120.974709][ T7440]  sec_pagetables:0 bounce:0
[  120.974709][ T7440]  kernel_misc_reclaimable:0
[  120.974709][ T7440]  free:1863218 free_pcp:6680 free_cma:0
[  121.409834][ T7440] Node 0 active_anon:115740kB inactive_anon:16kB active_file:81148kB inactive_file:9100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143688kB dirty:912kB writeback:0kB shmem:102688kB kernel_stack:3328kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.437848][ T7440] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.468106][ T7440] lowmem_reserve[]: 0 2881 7859 7859
[  121.474034][ T7440] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB
[  121.506560][ T7440] lowmem_reserve[]: 0 0 4978 4978
[  121.511742][ T7440] Node 0 Normal free:4490896kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115740kB inactive_anon:16kB active_file:81148kB inactive_file:9100kB unevictable:0kB writepending:912kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:23096kB local_pcp:13952kB free_cma:0kB
[  121.545382][ T7440] lowmem_reserve[]: 0 0 0 0
[  121.550014][ T7440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  121.563009][ T7440] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB
[  121.579575][ T7440] Node 0 Normal: 2*4kB (U) 3*8kB (UM) 33*16kB (U) 243*32kB (UM) 200*64kB (UME) 160*128kB (UME) 110*256kB (UM) 87*512kB (UM) 58*1024kB (UM) 36*2048kB (UME) 1036*4096kB (UM) = 4490896kB
[  121.598482][ T7440] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  121.607962][ T7440] 48268 total pagecache pages
[  121.612907][ T7440] 4 pages in swap cache
[  121.617121][ T7440] Free swap  = 124980kB
[  121.621546][ T7440] Total swap = 124996kB
[  121.625940][ T7440] 2097051 pages RAM
[  121.630127][ T7440] 0 pages HighMem/MovableOnly
[  121.634805][ T7440] 81087 pages reserved
[  122.189556][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'.
[  122.256867][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'.
[  122.304088][ T7447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  122.429015][   T29] kauditd_printk_skb: 767 callbacks suppressed
[  122.429042][   T29] audit: type=1326 audit(1764541520.480:24693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  122.487582][ T7457] loop2: detected capacity change from 0 to 1024
[  122.536230][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'.
[  122.547701][   T29] audit: type=1326 audit(1764541520.508:24694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  122.571606][   T29] audit: type=1326 audit(1764541520.508:24695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  122.595248][   T29] audit: type=1326 audit(1764541520.508:24696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  122.618881][   T29] audit: type=1326 audit(1764541520.508:24697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d89cf749 code=0x7ffc0000
[  122.643266][   T29] audit: type=1326 audit(1764541520.508:24698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44d89d1667 code=0x7ffc0000
[  122.666859][   T29] audit: type=1326 audit(1764541520.508:24699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f44d89d15dc code=0x7ffc0000
[  122.691092][   T29] audit: type=1326 audit(1764541520.517:24700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f44d89d1514 code=0x7ffc0000
[  122.715405][   T29] audit: type=1326 audit(1764541520.517:24701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f44d89d1514 code=0x7ffc0000
[  122.739275][   T29] audit: type=1326 audit(1764541520.517:24702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f44d89ce3aa code=0x7ffc0000
[  122.784795][ T7472] loop4: detected capacity change from 0 to 512
[  122.791771][ T7457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.811863][ T7472] EXT4-fs: Ignoring removed orlov option
[  122.842531][ T7472] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1430: corrupted in-inode xattr: bad e_name length
[  122.876482][ T7472] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1430: couldn't read orphan inode 15 (err -117)
[  122.909137][ T7472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.947694][ T7472] IPv6: Can't replace route, no match found
[  122.991522][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.101626][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  123.143621][ T7478] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  123.218750][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'.
[  123.227909][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  123.238878][ T7478] batman_adv: batadv0: Removing interface: veth1_vlan
[  123.270992][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.830202][ T7491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  124.011108][ T7511] loop3: detected capacity change from 0 to 1024
[  124.031172][ T7511] SELinux: security_context_str_to_sid (sysad) failed with errno=-22
[  124.183417][ T7521] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.193604][ T7521] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.486846][ T7522] bridge6: entered promiscuous mode
[  124.748571][ T7521] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.758480][ T7521] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.796716][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'.
[  124.815641][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'.
[  124.952744][ T7545] IPv6: Can't replace route, no match found
[  125.014186][ T7521] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.024152][ T7521] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.253134][ T7521] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.263251][ T7521] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.340905][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.349182][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.366161][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.374767][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.383692][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.392167][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.400678][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.408905][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.493020][ T7569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  125.671173][ T7577] loop4: detected capacity change from 0 to 512
[  125.678289][ T7577] EXT4-fs: Ignoring removed orlov option
[  125.685596][ T7577] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1467: corrupted in-inode xattr: bad e_name length
[  125.701020][ T7577] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1467: couldn't read orphan inode 15 (err -117)
[  125.714655][ T7577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.730751][ T7577] IPv6: Can't replace route, no match found
[  125.749651][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.783567][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  125.843244][ T7584] FAULT_INJECTION: forcing a failure.
[  125.843244][ T7584] name failslab, interval 1, probability 0, space 0, times 0
[  125.856195][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.4.1469 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  125.856227][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  125.856291][ T7584] Call Trace:
[  125.856299][ T7584]  <TASK>
[  125.856307][ T7584]  __dump_stack+0x1d/0x30
[  125.856330][ T7584]  dump_stack_lvl+0xe8/0x140
[  125.856352][ T7584]  dump_stack+0x15/0x1b
[  125.856372][ T7584]  should_fail_ex+0x265/0x280
[  125.856395][ T7584]  should_failslab+0x8c/0xb0
[  125.856435][ T7584]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  125.856532][ T7584]  ? sidtab_sid2str_get+0xa0/0x130
[  125.856624][ T7584]  kmemdup_noprof+0x2b/0x70
[  125.856641][ T7584]  sidtab_sid2str_get+0xa0/0x130
[  125.856660][ T7584]  security_sid_to_context_core+0x1eb/0x2e0
[  125.856679][ T7584]  security_sid_to_context+0x27/0x40
[  125.856760][ T7584]  selinux_lsmprop_to_secctx+0x67/0xf0
[  125.856821][ T7584]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  125.856844][ T7584]  audit_log_subj_ctx+0xa4/0x3e0
[  125.856864][ T7584]  ? skb_put+0xa9/0xf0
[  125.856894][ T7584]  audit_log_task_context+0x48/0x70
[  125.856952][ T7584]  audit_log_task+0xf4/0x250
[  125.856993][ T7584]  ? kstrtouint+0x76/0xc0
[  125.857027][ T7584]  audit_seccomp+0x61/0x100
[  125.857045][ T7584]  ? __seccomp_filter+0x82d/0x1250
[  125.857062][ T7584]  __seccomp_filter+0x83e/0x1250
[  125.857079][ T7584]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  125.857102][ T7584]  ? vfs_write+0x7e8/0x960
[  125.857117][ T7584]  ? __rcu_read_unlock+0x4f/0x70
[  125.857208][ T7584]  ? __fget_files+0x184/0x1c0
[  125.857226][ T7584]  __secure_computing+0x82/0x150
[  125.857259][ T7584]  syscall_trace_enter+0xcf/0x1e0
[  125.857276][ T7584]  do_syscall_64+0xac/0x200
[  125.857290][ T7584]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  125.857306][ T7584]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  125.857397][ T7584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.857411][ T7584] RIP: 0033:0x7f98777ce1ff
[  125.857423][ T7584] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  125.857435][ T7584] RSP: 002b:00007f9876216000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  125.857449][ T7584] RAX: ffffffffffffffda RBX: 00007f9877a26090 RCX: 00007f98777ce1ff
[  125.857520][ T7584] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8
[  125.857528][ T7584] RBP: 00007f9876216090 R08: 0000000000000000 R09: 0000000000000000
[  125.857536][ T7584] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001
[  125.857544][ T7584] R13: 00007f9877a26128 R14: 00007f9877a26090 R15: 00007fff05acf398
[  125.857556][ T7584]  </TASK>
[  126.240457][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'.
[  126.306826][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'.
[  126.316302][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'.
[  126.369851][ T7602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  126.387845][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.397958][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.533481][ T7607] loop1: detected capacity change from 0 to 512
[  126.540215][ T7607] EXT4-fs: Ignoring removed orlov option
[  126.547546][ T7607] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1478: corrupted in-inode xattr: bad e_name length
[  126.561466][ T7607] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1478: couldn't read orphan inode 15 (err -117)
[  126.574377][ T7607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.590958][ T7607] IPv6: Can't replace route, no match found
[  126.607922][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.379021][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'.
[  127.389697][ T7644] loop3: detected capacity change from 0 to 164
[  127.596883][ T7664] loop1: detected capacity change from 0 to 512
[  127.604968][ T7664] EXT4-fs (loop1): orphan cleanup on readonly fs
[  127.611888][ T7664] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1503: couldn't read orphan inode 26 (err -116)
[  127.624285][ T7664] EXT4-fs (loop1): Remounting filesystem read-only
[  127.631161][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.659849][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.703351][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'.
[  127.713944][ T7669] loop1: detected capacity change from 0 to 164
[  127.786611][   T29] kauditd_printk_skb: 2267 callbacks suppressed
[  127.786624][   T29] audit: type=1326 audit(1764541525.494:26969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  127.817652][   T29] audit: type=1326 audit(1764541525.494:26970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  127.841295][   T29] audit: type=1326 audit(1764541525.494:26971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  127.865915][   T29] audit: type=1326 audit(1764541525.541:26972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  127.889909][   T29] audit: type=1326 audit(1764541525.541:26973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  127.913433][   T29] audit: type=1326 audit(1764541525.541:26974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  127.937796][   T29] audit: type=1326 audit(1764541525.550:26975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  127.961925][   T29] audit: type=1326 audit(1764541525.550:26976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86a45bb829 code=0x7ffc0000
[  127.985883][   T29] audit: type=1326 audit(1764541525.550:26977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86a461f749 code=0x7ffc0000
[  127.986934][ T4018] Bluetooth: hci0: command 0x1003 tx timeout
[  128.009618][   T29] audit: type=1326 audit(1764541525.560:26978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86a46165e7 code=0x7ffc0000
[  128.009781][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  128.080943][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'.
[  128.095662][ T7681] loop1: detected capacity change from 0 to 164
[  128.129971][ T7694] loop1: detected capacity change from 0 to 1024
[  128.136877][ T7694] SELinux: security_context_str_to_sid (sysad) failed with errno=-22
[  128.269022][ T7702] loop1: detected capacity change from 0 to 512
[  128.277166][ T7702] EXT4-fs (loop1): orphan cleanup on readonly fs
[  128.283908][ T7702] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1515: couldn't read orphan inode 26 (err -116)
[  128.296265][ T7702] EXT4-fs (loop1): Remounting filesystem read-only
[  128.345163][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'.
[  128.356250][ T7705] loop3: detected capacity change from 0 to 164
[  128.411576][ T7711] loop3: detected capacity change from 0 to 1024
[  128.418665][ T7711] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.454372][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1518'.
[  128.697580][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'.
[  128.708197][ T7737] loop1: detected capacity change from 0 to 164
[  128.751150][ T7743] loop1: detected capacity change from 0 to 512
[  128.759570][ T7743] EXT4-fs (loop1): orphan cleanup on readonly fs
[  128.766573][ T7743] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1529: couldn't read orphan inode 26 (err -116)
[  128.779479][ T7743] EXT4-fs (loop1): Remounting filesystem read-only
[  128.807117][ T7746] FAULT_INJECTION: forcing a failure.
[  128.807117][ T7746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.820886][ T7746] CPU: 0 UID: 0 PID: 7746 Comm: syz.1.1530 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  128.820916][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.820948][ T7746] Call Trace:
[  128.820955][ T7746]  <TASK>
[  128.820964][ T7746]  __dump_stack+0x1d/0x30
[  128.820990][ T7746]  dump_stack_lvl+0xe8/0x140
[  128.821013][ T7746]  dump_stack+0x15/0x1b
[  128.821030][ T7746]  should_fail_ex+0x265/0x280
[  128.821054][ T7746]  should_fail+0xb/0x20
[  128.821073][ T7746]  should_fail_usercopy+0x1a/0x20
[  128.821095][ T7746]  _copy_from_user+0x1c/0xb0
[  128.821124][ T7746]  ___sys_sendmsg+0xc1/0x1d0
[  128.821157][ T7746]  __x64_sys_sendmsg+0xd4/0x160
[  128.821184][ T7746]  x64_sys_call+0x191e/0x3000
[  128.821237][ T7746]  do_syscall_64+0xd2/0x200
[  128.821270][ T7746]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  128.821315][ T7746]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  128.821344][ T7746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.821426][ T7746] RIP: 0033:0x7fd9207ef749
[  128.821444][ T7746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.821462][ T7746] RSP: 002b:00007fd91f24f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.821493][ T7746] RAX: ffffffffffffffda RBX: 00007fd920a45fa0 RCX: 00007fd9207ef749
[  128.821506][ T7746] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  128.821517][ T7746] RBP: 00007fd91f24f090 R08: 0000000000000000 R09: 0000000000000000
[  128.821532][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.821546][ T7746] R13: 00007fd920a46038 R14: 00007fd920a45fa0 R15: 00007ffe49a19e98
[  128.821564][ T7746]  </TASK>
[  129.006860][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'.
[  129.042890][ T7751] loop2: detected capacity change from 0 to 1024
[  129.050279][ T7751] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.168437][ T7769] loop2: detected capacity change from 0 to 164
[  129.403288][ T7791] ==================================================================
[  129.411503][ T7791] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  129.419227][ T7791] 
[  129.421662][ T7791] write to 0xffff888104b9c200 of 8 bytes by task 7788 on cpu 0:
[  129.429465][ T7791]  mas_wr_store_entry+0x1e0d/0x2750
[  129.434776][ T7791]  mas_store_prealloc+0x760/0xa90
[  129.439809][ T7791]  vma_iter_store_new+0x1c5/0x200
[  129.444914][ T7791]  vma_complete+0x125/0x580
[  129.449513][ T7791]  __split_vma+0x591/0x650
[  129.454037][ T7791]  vma_modify+0x21e/0xc80
[  129.458640][ T7791]  vma_modify_flags+0x101/0x130
[  129.463603][ T7791]  mprotect_fixup+0x2cc/0x570
[  129.468380][ T7791]  do_mprotect_pkey+0x6d6/0x980
[  129.473334][ T7791]  __x64_sys_mprotect+0x48/0x60
[  129.479415][ T7791]  x64_sys_call+0x2752/0x3000
[  129.484275][ T7791]  do_syscall_64+0xd2/0x200
[  129.488960][ T7791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.495119][ T7791] 
[  129.497443][ T7791] read to 0xffff888104b9c200 of 8 bytes by task 7791 on cpu 1:
[  129.505073][ T7791]  mas_state_walk+0x485/0x650
[  129.509849][ T7791]  mas_walk+0x60/0x150
[  129.513930][ T7791]  lock_vma_under_rcu+0x95/0x1b0
[  129.518888][ T7791]  do_user_addr_fault+0x233/0x1080
[  129.524011][ T7791]  exc_page_fault+0x62/0xa0
[  129.528615][ T7791]  asm_exc_page_fault+0x26/0x30
[  129.533473][ T7791] 
[  129.535830][ T7791] value changed: 0xffff88810220150e -> 0xffff888104b9c200
[  129.543119][ T7791] 
[  129.545448][ T7791] Reported by Kernel Concurrency Sanitizer on:
[  129.551598][ T7791] CPU: 1 UID: 0 PID: 7791 Comm: syz.1.1544 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.561418][ T7791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  129.571825][ T7791] ==================================================================