last executing test programs: 4.549181095s ago: executing program 4 (id=702): socket$inet(0x2, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000047000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3172ca60cfd1eaf0f0d0ade6a4c46ba66d7e8648f"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x80047441, 0x2000000c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x2, 0xb, 0x1, 0x0, 0x0, 0x3897c, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000009, 0x4, @perf_config_ext={0xbf42, 0x2}, 0x290, 0x7, 0x1, 0x7, 0x3ee87add, 0x3, 0x3, 0x0, 0xabd, 0x0, 0x1}, r2, 0xc, 0xffffffffffffffff, 0x12) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.548671315s ago: executing program 2 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 4.525002447s ago: executing program 2 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 4.468397733s ago: executing program 2 (id=705): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000070a0101000000000000000002000000090002"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f0000000380)={[], [{@hash}, {@fowner_eq}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}, 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000002200)='wg2\x00', 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="81e618026d188e46bb81160f3cef29e15bf609e52dc60d942fdf833e6fe054aa143513bf06f1896ba128f2ceae3eabff372cb96362dfb1cceed2472b151291a30fc7161ca29d444f5ab2eb6754c10252f109b810dc2af2722ba5ff55982ea1ac849359f96d1ef1d646f16f453e25114b5259a910a96f6ab58f271869d62bd6f12bc92381ce2284c188420a553de7f138628e96db2898c25b", @ANYBLOB="000000000000001000"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18130000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB='\x00'/12, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085200000020000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5fce7e4a, 0x98, &(0x7f0000000400)=""/152, 0x41100, 0x21, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r7, r7], &(0x7f0000000500)=[{0x5, 0x2, 0x6, 0x4}, {0x4, 0x4, 0xf, 0x1}, {0x2, 0x2, 0x9, 0x6}, {0x1, 0x2, 0xf, 0xc}, {0x4, 0x3, 0x6, 0x1}], 0x10, 0x9, @void, @value}, 0x94) dup3(0xffffffffffffffff, r0, 0x0) r8 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0xe020280) 4.160722292s ago: executing program 2 (id=710): socket$inet(0x2, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000047000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3172ca60cfd1eaf0f0d0ade6a4c46ba66d7e8648f"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x80047441, 0x2000000c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x2, 0xb, 0x1, 0x0, 0x0, 0x3897c, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000009, 0x4, @perf_config_ext={0xbf42, 0x2}, 0x290, 0x7, 0x1, 0x7, 0x3ee87add, 0x3, 0x3, 0x0, 0xabd, 0x0, 0x1}, r2, 0xc, 0xffffffffffffffff, 0x12) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.264873245s ago: executing program 0 (id=716): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x28, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000f00)=""/274, 0x112}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f0000001140)=""/231, 0xe7}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000bc0)=""/249, 0xf9}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000940)=""/183, 0xff47}, {&(0x7f0000000880)=""/63, 0x3f}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000001400)=""/260, 0x104}, {&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f00000006c0)=""/151, 0x97}], 0xe}, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000057f7bd1886c68ed7001801000020786c2500000000002020207b1a030000000000000000000000000007010000f8ffffffb702000008000000b7030042010000008500000006000085000000a00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x0, 0x6, 0xd9, 0xf}, {0x0, 0x5, 0x5, 0x7}, {0x327d, 0x5, 0x9, 0x1}, {0xed, 0x5, 0xe5, 0x7fffffff}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r4}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {r5, r6+10000000}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f0000000380), 0x1, 0x18202) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x25dfdbff, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.754043393s ago: executing program 2 (id=720): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000025d53a934a6e98fc38c7f5e52582776fe69ee6d75270e227ddfd41ded9946a070000200800080008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.35404511s ago: executing program 0 (id=724): socket$inet(0x2, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3172ca60cfd1eaf0f0d0ade6a4c46ba66d7e8648f"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r6, 0x80047441, 0x2000000c) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.154782679s ago: executing program 4 (id=725): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) lseek(r5, 0x9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 1.730205788s ago: executing program 2 (id=727): socket$inet(0x2, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3172ca60cfd1eaf0f0d0ade6a4c46ba66d7e8648f"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r6, 0x80047441, 0x2000000c) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.491271891s ago: executing program 1 (id=729): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1.472401233s ago: executing program 0 (id=731): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000070a0101000000000000000002000000090002"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f0000000380)={[], [{@hash}, {@fowner_eq}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}, 0xfe, 0x246, &(0x7f0000000840)="$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") r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000002200)='wg2\x00', 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="81e618026d188e46bb81160f3cef29e15bf609e52dc60d942fdf833e6fe054aa143513bf06f1896ba128f2ceae3eabff372cb96362dfb1cceed2472b151291a30fc7161ca29d444f5ab2eb6754c10252f109b810dc2af2722ba5ff55982ea1ac849359f96d1ef1d646f16f453e25114b5259a910a96f6ab58f271869d62bd6f12bc92381ce2284c188420a553de7f138628e96db2898c25b", @ANYBLOB="000000000000001000"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18130000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB='\x00'/12, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085200000020000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5fce7e4a, 0x98, &(0x7f0000000400)=""/152, 0x41100, 0x21, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r7, r7], &(0x7f0000000500)=[{0x5, 0x2, 0x6, 0x4}, {0x4, 0x4, 0xf, 0x1}, {0x2, 0x2, 0x9, 0x6}, {0x1, 0x2, 0xf, 0xc}, {0x4, 0x3, 0x6, 0x1}], 0x10, 0x9, @void, @value}, 0x94) dup3(0xffffffffffffffff, r0, 0x0) r8 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0xe020280) 1.411435258s ago: executing program 1 (id=732): close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) 1.410677558s ago: executing program 1 (id=733): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.409496898s ago: executing program 3 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r5}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="0006e83232df1b695c097d00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 1.266309772s ago: executing program 4 (id=735): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x28, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000f00)=""/274, 0x112}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f0000001140)=""/231, 0xe7}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000bc0)=""/249, 0xf9}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000940)=""/183, 0xff47}, {&(0x7f0000000880)=""/63, 0x3f}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000001400)=""/260, 0x104}, {&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f00000006c0)=""/151, 0x97}], 0xe}, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000057f7bd1886c68ed7001801000020786c2500000000002020207b1a030000000000000000000000000007010000f8ffffffb702000008000000b7030042010000008500000006000085000000a00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x0, 0x6, 0xd9, 0xf}, {0x0, 0x5, 0x5, 0x7}, {0x327d, 0x5, 0x9, 0x1}, {0xed, 0x5, 0xe5, 0x7fffffff}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r4}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {r5, r6+10000000}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f0000000380), 0x1, 0x18202) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x25dfdbff, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.193591828s ago: executing program 0 (id=736): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.123403135s ago: executing program 3 (id=737): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001c00010100000000ffffffff07000000", @ANYRES32=r5, @ANYBLOB="2da4322240ea76133941020000009afccc6c943df7c8d00000002a6b55c3f9b3362a746f215492330608c15a48101481d50da564c76280ee6cc6a5da807c13da983e90d934c654dccd69e35dc92add373f40355752e9cf4cb9005e3d0dcc96a51cdc0e56be4902e6868df2"], 0x1c}}, 0x0) 969.847189ms ago: executing program 1 (id=738): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)={0x21, 0x0, 0x0, 0x1}, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file2\x00'}, 0x18) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000030c0)=""/4110, 0x100e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x1d, &(0x7f0000000d00)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000e00)='GPL\x00', 0x1, 0xb2, &(0x7f0000000e40)=""/178, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0x2, 0xf, 0x100}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000f80)=[{0x3, 0x1, 0x4, 0x2}, {0x3, 0x4, 0xb, 0x2}, {0x0, 0x2, 0x1, 0xa}, {0x5, 0x2, 0x10, 0x2}, {0x0, 0x5, 0xa, 0x1}, {0x0, 0x5, 0xc, 0x6}, {0x1, 0x2, 0x8, 0x6}], 0x10, 0x6, @void, @value}, 0x94) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) timer_create(0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x1000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xfff7, 0x58}, &(0x7f0000000280)=0x8) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f00000000c0)={[{@nombcache}, {@usrjquota}, {@discard}, {@norecovery}, {@abort}, {@nomblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}], [{@seclabel}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000010c0)=0xe331) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="8b330000000000ffff0015"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x6, 0x7}, 0x90) 901.041516ms ago: executing program 0 (id=739): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x0, 0x1, 0xfffc}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0xf8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x1f, r3, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003380)=""/4096, 0x1000}, {0x0}], 0x2}, 0x20010000) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r1, r4, 0x0, 0x8000fffffffe) r5 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfb36b7c5eda090f7, 0x0, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000600000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) pivot_root(&(0x7f0000000200)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r5) 843.135511ms ago: executing program 3 (id=740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001c00010100000000ffffffff07000000", @ANYRES32=r6, @ANYBLOB="2da4322240ea76133941020000009afccc6c943df7c8d00000002a6b55c3f9b3362a746f215492330608c15a48101481d50da564c76280ee6cc6a5da807c13da983e90d934c654dccd69e35dc92add373f40355752e9cf4cb9005e3d0dcc96a51cdc0e56be4902e6868df2"], 0x1c}}, 0x0) 694.856215ms ago: executing program 1 (id=741): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 659.432708ms ago: executing program 3 (id=742): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000070a0101000000000000000002000000090002"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f0000000380)={[], [{@hash}, {@fowner_eq}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}, 0xfe, 0x246, &(0x7f0000000840)="$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") r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000002200)='wg2\x00', 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="81e618026d188e46bb81160f3cef29e15bf609e52dc60d942fdf833e6fe054aa143513bf06f1896ba128f2ceae3eabff372cb96362dfb1cceed2472b151291a30fc7161ca29d444f5ab2eb6754c10252f109b810dc2af2722ba5ff55982ea1ac849359f96d1ef1d646f16f453e25114b5259a910a96f6ab58f271869d62bd6f12bc92381ce2284c188420a553de7f138628e96db2898c25b", @ANYBLOB="000000000000001000"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18130000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB='\x00'/12, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085200000020000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5fce7e4a, 0x98, &(0x7f0000000400)=""/152, 0x41100, 0x21, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r7, r7], &(0x7f0000000500)=[{0x5, 0x2, 0x6, 0x4}, {0x4, 0x4, 0xf, 0x1}, {0x2, 0x2, 0x9, 0x6}, {0x1, 0x2, 0xf, 0xc}, {0x4, 0x3, 0x6, 0x1}], 0x10, 0x9, @void, @value}, 0x94) dup3(0xffffffffffffffff, r0, 0x0) r8 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0xe020280) 501.566593ms ago: executing program 1 (id=743): socket$inet(0x2, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3172ca60cfd1eaf0f0d0ade6a4c46ba66d7e8648f"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 334.495348ms ago: executing program 4 (id=744): close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) 286.039643ms ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000007651034b00"/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x51}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 247.824336ms ago: executing program 3 (id=746): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 58.171205ms ago: executing program 3 (id=747): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="09000016010000001800120008000100736974000c00020008000300bde4"], 0x38}}, 0x0) 0s ago: executing program 0 (id=748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): _use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 53.574633][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.636607][ T4134] pim6reg1: entered promiscuous mode [ 53.642061][ T4134] pim6reg1: entered allmulticast mode [ 53.840072][ T4151] loop7: detected capacity change from 0 to 16384 [ 53.889663][ T4152] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 53.940797][ T4154] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 53.967146][ T4157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 54.026296][ T4155] loop7: detected capacity change from 16384 to 16383 [ 54.076203][ T4167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 54.121570][ T4167] loop2: detected capacity change from 0 to 512 [ 54.144945][ T4167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.175663][ T4167] EXT4-fs (loop2): 1 orphan inode deleted [ 54.181497][ T4167] EXT4-fs (loop2): 1 truncate cleaned up [ 54.189674][ T4167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.320802][ T4151] loop1: detected capacity change from 0 to 512 [ 54.331252][ T3258] buffer_io_error: 92 callbacks suppressed [ 54.331268][ T3258] Buffer I/O error on dev loop7, logical block 2047, lost async page write [ 54.349834][ T4183] loop4: detected capacity change from 0 to 1024 [ 54.373090][ T4151] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.399411][ T4183] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.204: iget: bad extended attribute block 8388352 [ 54.399518][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 54.421864][ T4151] EXT4-fs (loop1): 1 orphan inode deleted [ 54.427708][ T4151] EXT4-fs (loop1): 1 truncate cleaned up [ 54.441078][ T4183] EXT4-fs (loop4): Remounting filesystem read-only [ 54.574800][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 54.653887][ T4202] loop0: detected capacity change from 0 to 128 [ 54.664304][ T4202] FAT-fs (loop0): bogus number of FAT sectors [ 54.664324][ T4202] FAT-fs (loop0): Can't find a valid FAT filesystem [ 54.698050][ T4202] loop0: detected capacity change from 0 to 1024 [ 54.799865][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 54.800764][ T4212] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 54.806758][ T4212] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 54.818530][ T4212] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 54.825633][ T4212] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 54.892230][ T4216] loop1: detected capacity change from 0 to 1024 [ 54.965871][ T4218] loop0: detected capacity change from 0 to 128 [ 54.982666][ T4220] loop2: detected capacity change from 0 to 2048 [ 54.989431][ T4220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.000210][ T4218] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.079408][ T4220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 55.108653][ T4220] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.210: Abort forced by user [ 55.120240][ T4220] EXT4-fs (loop2): Remounting filesystem read-only [ 55.127332][ T4220] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 55.150751][ T4220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 55.194632][ T4232] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.370117][ T4256] loop7: detected capacity change from 0 to 16384 [ 55.372443][ T4251] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.462000][ T4261] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.474888][ T4268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 55.493950][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 55.508772][ T4268] loop1: detected capacity change from 0 to 128 [ 55.513882][ T4267] loop3: detected capacity change from 0 to 1024 [ 55.539649][ T4268] ext4: Unknown parameter 'hash' [ 55.557759][ T4268] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 55.586400][ T4264] loop7: detected capacity change from 16384 to 16383 [ 55.603358][ T4261] syz.2.224 (4261) used greatest stack depth: 10528 bytes left [ 55.618517][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 55.618533][ T29] audit: type=1400 audit(1727709362.576:391): avc: denied { setopt } for pid=4257 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.667180][ T4264] loop4: detected capacity change from 0 to 512 [ 55.678964][ T4264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.714022][ T4264] EXT4-fs (loop4): 1 orphan inode deleted [ 55.720031][ T4264] EXT4-fs (loop4): 1 truncate cleaned up [ 55.721560][ T4256] I/O error, dev loop7, sector 13824 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.738807][ T4256] I/O error, dev loop7, sector 13824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.745944][ T4280] loop3: detected capacity change from 0 to 1024 [ 55.748350][ T4256] Buffer I/O error on dev loop7, logical block 1728, async page read [ 55.793592][ T4283] loop2: detected capacity change from 0 to 128 [ 55.872392][ T4283] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.948481][ T4295] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.950471][ T4299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 56.205016][ T4324] pim6reg1: entered promiscuous mode [ 56.210412][ T4324] pim6reg1: entered allmulticast mode [ 56.221077][ T4244] I/O error, dev loop7, sector 8192 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 56.231145][ T4244] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 56.239835][ T4244] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 56.248524][ T4244] Buffer I/O error on dev loop7, logical block 1026, lost async page write [ 56.257257][ T4244] Buffer I/O error on dev loop7, logical block 1027, lost async page write [ 56.265921][ T4244] Buffer I/O error on dev loop7, logical block 1028, lost async page write [ 56.274566][ T4244] Buffer I/O error on dev loop7, logical block 1029, lost async page write [ 56.290745][ T4244] I/O error, dev loop7, sector 9216 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 56.304835][ T4244] I/O error, dev loop7, sector 10240 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 56.320790][ T4244] I/O error, dev loop7, sector 11264 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 56.335789][ T4244] I/O error, dev loop7, sector 12288 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 56.350213][ T4244] I/O error, dev loop7, sector 13312 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0 [ 56.439498][ T4348] loop1: detected capacity change from 0 to 128 [ 56.474492][ T4348] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.554787][ T4352] loop3: detected capacity change from 0 to 2048 [ 56.568953][ T4352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.617540][ T4373] loop1: detected capacity change from 0 to 1024 [ 56.634503][ T4352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 56.661537][ T4352] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.246: Abort forced by user [ 56.681430][ T4352] EXT4-fs (loop3): Remounting filesystem read-only [ 56.692921][ T4352] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 56.707726][ T4352] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 56.770495][ T4381] loop1: detected capacity change from 0 to 2048 [ 56.791855][ T4381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.847618][ T29] audit: type=1326 audit(1727709363.796:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 56.871250][ T29] audit: type=1326 audit(1727709363.796:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 56.894935][ T29] audit: type=1326 audit(1727709363.796:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 56.898904][ T4391] loop7: detected capacity change from 0 to 16384 [ 56.918409][ T29] audit: type=1326 audit(1727709363.796:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 56.926701][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 56.948271][ T29] audit: type=1326 audit(1727709363.806:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 56.967610][ T4390] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 56.980163][ T29] audit: type=1326 audit(1727709363.806:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 56.980198][ T29] audit: type=1326 audit(1727709363.806:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 57.017562][ T4390] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 57.034456][ T29] audit: type=1326 audit(1727709363.806:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 57.065519][ T29] audit: type=1326 audit(1727709363.806:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c074dff9 code=0x7ffc0000 [ 57.257194][ T4397] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 57.276008][ T4397] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 57.297382][ T4398] loop3: detected capacity change from 0 to 512 [ 57.304319][ T4398] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.334249][ T4391] loop7: detected capacity change from 16384 to 16383 [ 57.400013][ T4398] EXT4-fs (loop3): 1 orphan inode deleted [ 57.405810][ T4398] EXT4-fs (loop3): 1 truncate cleaned up [ 57.556682][ T4403] pim6reg1: entered promiscuous mode [ 57.562022][ T4403] pim6reg1: entered allmulticast mode [ 57.718893][ T4387] I/O error, dev loop7, sector 13824 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 57.732855][ T4405] loop2: detected capacity change from 0 to 128 [ 57.734713][ T4387] I/O error, dev loop7, sector 14848 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 57.755643][ T4412] veth0_vlan: left promiscuous mode [ 57.789484][ T4412] veth0_vlan: entered promiscuous mode [ 57.803462][ T4405] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.010763][ T4423] loop3: detected capacity change from 0 to 2048 [ 58.025737][ T4423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.118969][ T4423] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.260: Abort forced by user [ 58.152523][ T4423] EXT4-fs (loop3): Remounting filesystem read-only [ 58.177961][ T4423] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 58.235857][ T4429] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 58.372111][ T4440] loop3: detected capacity change from 0 to 2048 [ 58.383221][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.384783][ T4441] loop2: detected capacity change from 0 to 128 [ 58.407132][ T4440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.416117][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.426308][ T4441] ext4: Unknown parameter 'hash' [ 58.456464][ T4441] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 58.507879][ T4445] loop3: detected capacity change from 0 to 1024 [ 58.709604][ T4458] __nla_validate_parse: 3 callbacks suppressed [ 58.709624][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 58.753428][ T4458] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 58.773222][ T4458] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 58.775414][ T4462] loop1: detected capacity change from 0 to 128 [ 58.788136][ T4462] FAT-fs (loop1): bogus number of FAT sectors [ 58.794355][ T4462] FAT-fs (loop1): Can't find a valid FAT filesystem [ 58.811839][ T4462] loop1: detected capacity change from 0 to 1024 [ 58.819934][ T4460] loop4: detected capacity change from 0 to 128 [ 58.833030][ T4460] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.080162][ T4480] pim6reg1: entered promiscuous mode [ 59.085555][ T4480] pim6reg1: entered allmulticast mode [ 59.101230][ T4469] veth0_vlan: left promiscuous mode [ 59.109776][ T4469] veth0_vlan: entered promiscuous mode [ 59.641326][ T4492] loop3: detected capacity change from 0 to 512 [ 59.665662][ T4496] loop2: detected capacity change from 0 to 1024 [ 59.672467][ T4492] EXT4-fs: Ignoring removed i_version option [ 59.690839][ T4498] loop0: detected capacity change from 0 to 512 [ 59.692513][ T4492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.718241][ T4492] EXT4-fs (loop3): 1 truncate cleaned up [ 59.728291][ T4498] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.283: casefold flag without casefold feature [ 59.742644][ T4498] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.283: couldn't read orphan inode 15 (err -117) [ 59.869799][ T4506] loop3: detected capacity change from 0 to 8192 [ 59.933321][ T4506] loop3: p2 p3 p4 [ 59.947245][ T4506] loop3: p2 start 14935 is beyond EOD, truncated [ 59.965792][ T4506] loop3: p4 start 4026530307 is beyond EOD, truncated [ 60.022414][ T2967] loop3: p2 p3 p4 [ 60.026679][ T2967] loop3: p2 start 14935 is beyond EOD, truncated [ 60.037095][ T4515] pim6reg1: entered promiscuous mode [ 60.042721][ T4515] pim6reg1: entered allmulticast mode [ 60.051133][ T2967] loop3: p4 start 4026530307 is beyond EOD, truncated [ 60.057447][ T4517] pim6reg1: entered promiscuous mode [ 60.063343][ T4517] pim6reg1: entered allmulticast mode [ 60.176357][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 60.186815][ T4520] Zero length message leads to an empty skb [ 60.190607][ T4522] loop1: detected capacity change from 0 to 128 [ 60.211192][ T4522] FAT-fs (loop1): bogus number of FAT sectors [ 60.217390][ T4522] FAT-fs (loop1): Can't find a valid FAT filesystem [ 60.271352][ T4522] loop1: detected capacity change from 0 to 1024 [ 60.355583][ T4531] loop0: detected capacity change from 0 to 128 [ 60.359157][ T4539] loop3: detected capacity change from 0 to 1024 [ 60.365322][ T4538] pim6reg1: entered promiscuous mode [ 60.373642][ T4538] pim6reg1: entered allmulticast mode [ 60.389762][ T4531] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.435555][ T4545] loop2: detected capacity change from 0 to 128 [ 60.460844][ T4545] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.506407][ T4551] pim6reg1: entered promiscuous mode [ 60.511853][ T4551] pim6reg1: entered allmulticast mode [ 60.548765][ T4556] loop2: detected capacity change from 0 to 512 [ 60.558987][ T4556] EXT4-fs: Ignoring removed i_version option [ 60.584569][ T4556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.620941][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 60.631205][ T4556] EXT4-fs (loop2): 1 truncate cleaned up [ 60.641016][ T4561] validate_nla: 2 callbacks suppressed [ 60.641032][ T4561] netlink: 'syz.3.307': attribute type 29 has an invalid length. [ 60.656882][ T4561] netlink: 'syz.3.307': attribute type 29 has an invalid length. [ 60.697730][ T4564] loop0: detected capacity change from 0 to 2048 [ 60.704594][ T4564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.723042][ T4564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 60.732925][ T4567] netlink: 'syz.3.307': attribute type 29 has an invalid length. [ 60.743287][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 60.743300][ T29] audit: type=1326 audit(1727709367.706:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 60.957378][ T4570] netlink: 'syz.3.307': attribute type 29 has an invalid length. [ 60.975384][ T4564] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.308: Abort forced by user [ 61.030725][ T29] audit: type=1326 audit(1727709367.836:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.054154][ T29] audit: type=1326 audit(1727709367.836:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.078135][ T29] audit: type=1326 audit(1727709367.836:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.101733][ T29] audit: type=1326 audit(1727709367.836:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.125026][ T29] audit: type=1326 audit(1727709367.836:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.148398][ T29] audit: type=1326 audit(1727709367.836:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.171753][ T29] audit: type=1326 audit(1727709367.836:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.194992][ T29] audit: type=1326 audit(1727709367.836:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.198976][ T4572] loop4: detected capacity change from 0 to 2048 [ 61.218262][ T29] audit: type=1326 audit(1727709367.836:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 61.225042][ T4572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.255657][ T4573] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 61.269385][ T4564] EXT4-fs (loop0): Remounting filesystem read-only [ 61.276622][ T4564] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 61.315840][ T4572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 61.342264][ T4572] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.309: Abort forced by user [ 61.353423][ T4572] EXT4-fs (loop4): Remounting filesystem read-only [ 61.363275][ T4572] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 61.462768][ T4580] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 61.515805][ T4579] loop1: detected capacity change from 0 to 128 [ 61.564226][ T4579] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.605434][ T4591] loop2: detected capacity change from 0 to 128 [ 61.612753][ T4577] veth0_vlan: left promiscuous mode [ 61.626258][ T4588] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 61.643312][ T4577] veth0_vlan: entered promiscuous mode [ 61.655146][ T4591] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.788904][ T4586] veth0_vlan: left promiscuous mode [ 61.805631][ T4586] veth0_vlan: entered promiscuous mode [ 61.887934][ T4596] pim6reg1: entered promiscuous mode [ 61.893275][ T4596] pim6reg1: entered allmulticast mode [ 62.052727][ T4619] loop7: detected capacity change from 0 to 16384 [ 62.250684][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 62.268163][ T4625] loop7: detected capacity change from 16384 to 16383 [ 62.488449][ T4619] loop1: detected capacity change from 0 to 512 [ 62.519233][ T4619] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.535233][ T3258] buffer_io_error: 1018 callbacks suppressed [ 62.535328][ T3258] Buffer I/O error on dev loop7, logical block 2047, lost async page write [ 62.568388][ T4619] EXT4-fs (loop1): 1 orphan inode deleted [ 62.573778][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 62.574166][ T4619] EXT4-fs (loop1): 1 truncate cleaned up [ 62.873711][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 62.991944][ T4676] loop2: detected capacity change from 0 to 2048 [ 63.001118][ T4676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.073023][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 63.138449][ T4682] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.321: Abort forced by user [ 63.158421][ T4682] EXT4-fs (loop2): Remounting filesystem read-only [ 63.182270][ T4682] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 63.414761][ T4688] loop0: detected capacity change from 0 to 2048 [ 63.457415][ T4688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.618086][ T4688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 63.631863][ T4688] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.325: Abort forced by user [ 63.645300][ T4694] loop3: detected capacity change from 0 to 128 [ 63.653942][ T4688] EXT4-fs (loop0): Remounting filesystem read-only [ 63.662405][ T4688] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 63.692772][ T4694] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.250957][ T4710] loop3: detected capacity change from 0 to 2048 [ 64.263716][ T4710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.274797][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 64.300747][ T4711] loop0: detected capacity change from 0 to 128 [ 64.309012][ T4711] ext4: Unknown parameter 'hash' [ 64.316350][ T4711] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 64.369284][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 64.394050][ T4716] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 64.422015][ T4718] loop0: detected capacity change from 0 to 512 [ 64.511329][ T4722] loop1: detected capacity change from 0 to 1024 [ 64.532552][ T4718] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.559554][ T4720] veth0_vlan: left promiscuous mode [ 64.574183][ T4720] veth0_vlan: entered promiscuous mode [ 64.662934][ T4722] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.336: iget: bad extended attribute block 8388352 [ 64.691485][ T4722] EXT4-fs (loop1): Remounting filesystem read-only [ 64.921396][ T4736] loop4: detected capacity change from 0 to 512 [ 65.000627][ T4736] EXT4-fs: Ignoring removed i_version option [ 65.076350][ T4736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.106129][ T4736] EXT4-fs (loop4): 1 truncate cleaned up [ 65.379355][ T4743] veth0_vlan: left promiscuous mode [ 65.391804][ T4743] veth0_vlan: entered promiscuous mode [ 65.394297][ T4749] loop4: detected capacity change from 0 to 128 [ 65.423685][ T4749] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.511769][ T4762] loop0: detected capacity change from 0 to 512 [ 65.518621][ T4762] EXT4-fs: Ignoring removed i_version option [ 65.540180][ T4762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.570272][ T4765] loop1: detected capacity change from 0 to 128 [ 65.577700][ T4762] EXT4-fs (loop0): 1 truncate cleaned up [ 65.621181][ T4765] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.748831][ T4773] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 66.093378][ T4792] veth0_vlan: left promiscuous mode [ 66.135891][ T4792] veth0_vlan: entered promiscuous mode [ 66.296845][ T4810] veth0_vlan: left promiscuous mode [ 66.335108][ T4810] veth0_vlan: entered promiscuous mode [ 66.367400][ T4838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 66.386297][ T4838] loop0: detected capacity change from 0 to 128 [ 66.410588][ T4838] ext4: Unknown parameter 'hash' [ 66.417574][ T4832] loop4: detected capacity change from 0 to 128 [ 66.439707][ T4838] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 66.469871][ T4832] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.598889][ T4862] loop4: detected capacity change from 0 to 512 [ 66.646410][ T4862] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.684021][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 66.684038][ T29] audit: type=1326 audit(1727709373.636:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.713505][ T29] audit: type=1326 audit(1727709373.636:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.736866][ T29] audit: type=1326 audit(1727709373.636:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.760262][ T29] audit: type=1326 audit(1727709373.636:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.762355][ T4868] loop7: detected capacity change from 0 to 16384 [ 66.783718][ T29] audit: type=1326 audit(1727709373.636:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.813469][ T29] audit: type=1326 audit(1727709373.636:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.836858][ T29] audit: type=1326 audit(1727709373.636:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.860274][ T29] audit: type=1326 audit(1727709373.636:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.883701][ T29] audit: type=1326 audit(1727709373.636:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 66.906987][ T29] audit: type=1326 audit(1727709373.636:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4866 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65844adff9 code=0x7ffc0000 [ 67.384792][ T4870] veth0_vlan: left promiscuous mode [ 67.398981][ T4870] veth0_vlan: entered promiscuous mode [ 67.557264][ T3265] EXT4-fs unmount: 92 callbacks suppressed [ 67.557282][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.850971][ T4881] veth0_vlan: left promiscuous mode [ 67.861018][ T4892] loop2: detected capacity change from 0 to 2048 [ 67.871213][ T4881] veth0_vlan: entered promiscuous mode [ 67.876407][ T4892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.934564][ T4892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.948945][ T4895] pim6reg1: entered promiscuous mode [ 67.954259][ T4895] pim6reg1: entered allmulticast mode [ 67.991599][ T4899] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 68.105705][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'. [ 68.123625][ T4892] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.367: Abort forced by user [ 68.141019][ T4892] EXT4-fs (loop2): Remounting filesystem read-only [ 68.155338][ T4892] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 68.186460][ T4914] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 68.684808][ T4919] pim6reg1: entered promiscuous mode [ 68.690215][ T4919] pim6reg1: entered allmulticast mode [ 68.737016][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.944027][ T4951] loop1: detected capacity change from 0 to 1024 [ 68.993783][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 68.997199][ T4951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.018699][ T4967] loop4: detected capacity change from 0 to 128 [ 69.048137][ T4967] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.056145][ T4956] loop7: detected capacity change from 16384 to 16383 [ 69.067799][ T4967] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.100911][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.208259][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 69.240743][ T4963] loop2: detected capacity change from 0 to 512 [ 69.256630][ T4953] veth0_vlan: left promiscuous mode [ 69.263687][ T4963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.275329][ T4953] veth0_vlan: entered promiscuous mode [ 69.277302][ T4950] blk_print_req_error: 1 callbacks suppressed [ 69.277319][ T4950] I/O error, dev loop7, sector 10504 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 [ 69.300941][ T4950] I/O error, dev loop7, sector 10760 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 69.311065][ T4950] I/O error, dev loop7, sector 10504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.314040][ T4963] EXT4-fs (loop2): 1 orphan inode deleted [ 69.320690][ T4950] Buffer I/O error on dev loop7, logical block 1313, async page read [ 69.326440][ T4963] EXT4-fs (loop2): 1 truncate cleaned up [ 69.334670][ T4950] I/O error, dev loop7, sector 10504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.347824][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.349732][ T4950] Buffer I/O error on dev loop7, logical block 1313, async page read [ 69.372207][ T4950] I/O error, dev loop7, sector 10504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.381868][ T4950] Buffer I/O error on dev loop7, logical block 1313, async page read [ 69.450073][ T4974] veth0_vlan: left promiscuous mode [ 69.465283][ T4974] veth0_vlan: entered promiscuous mode [ 69.689119][ T4939] I/O error, dev loop7, sector 3840 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.699277][ T4939] Buffer I/O error on dev loop7, logical block 480, lost async page write [ 69.707835][ T4939] Buffer I/O error on dev loop7, logical block 481, lost async page write [ 69.716429][ T4939] Buffer I/O error on dev loop7, logical block 482, lost async page write [ 69.724949][ T4939] Buffer I/O error on dev loop7, logical block 483, lost async page write [ 69.733523][ T4939] Buffer I/O error on dev loop7, logical block 484, lost async page write [ 69.742089][ T4939] Buffer I/O error on dev loop7, logical block 485, lost async page write [ 69.794026][ T4984] loop0: detected capacity change from 0 to 2048 [ 69.808962][ T3265] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.823081][ T4939] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.833441][ T4984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.848279][ T4939] I/O error, dev loop7, sector 5888 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.866754][ T4939] I/O error, dev loop7, sector 6912 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.880120][ T4939] I/O error, dev loop7, sector 7936 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 69.962473][ T4984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.975588][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.992176][ T4984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'. [ 70.074641][ T4984] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.383: Abort forced by user [ 70.274991][ T4984] EXT4-fs (loop0): Remounting filesystem read-only [ 70.318529][ T5007] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 70.414488][ T4984] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 70.633703][ T5029] loop2: detected capacity change from 0 to 8192 [ 70.660329][ T5029] loop2: p2 p3 p4 [ 70.664311][ T5029] loop2: p2 start 14935 is beyond EOD, truncated [ 70.671941][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.681462][ T5029] loop2: p4 start 4026530307 is beyond EOD, truncated [ 70.760640][ T5024] veth0_vlan: left promiscuous mode [ 70.770146][ T5024] veth0_vlan: entered promiscuous mode [ 70.779607][ T5036] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 70.784547][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 70.842579][ T5042] loop1: detected capacity change from 0 to 1024 [ 70.879817][ T5042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.880902][ T5041] loop0: detected capacity change from 0 to 2048 [ 70.899357][ T5041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.938494][ T5041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.011760][ T5064] loop2: detected capacity change from 0 to 128 [ 71.024124][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 71.037249][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.049968][ T5064] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.068223][ T5064] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.143263][ T5041] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.392: Abort forced by user [ 71.155166][ T5041] EXT4-fs (loop0): Remounting filesystem read-only [ 71.172439][ T5039] veth0_vlan: left promiscuous mode [ 71.184232][ T5039] veth0_vlan: entered promiscuous mode [ 71.192124][ T5041] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 71.212697][ T5080] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 71.277691][ T5089] loop4: detected capacity change from 0 to 512 [ 71.298498][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.349604][ T5089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.367759][ T5089] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.415087][ T5094] pim6reg1: entered promiscuous mode [ 71.420493][ T5094] pim6reg1: entered allmulticast mode [ 71.582081][ T5100] loop1: detected capacity change from 0 to 128 [ 71.646792][ T5100] FAT-fs (loop1): bogus number of FAT sectors [ 71.652914][ T5100] FAT-fs (loop1): Can't find a valid FAT filesystem [ 71.788845][ T3272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.884291][ T5100] loop1: detected capacity change from 0 to 1024 [ 71.919434][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.993474][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.062637][ T5103] loop2: detected capacity change from 0 to 8192 [ 72.088655][ T5107] loop0: detected capacity change from 0 to 8192 [ 72.093598][ T5110] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 72.103839][ T5103] loop2: p2 p3 p4 [ 72.119746][ T5103] loop2: p2 start 14935 is beyond EOD, truncated [ 72.127285][ T5103] loop2: p4 start 4026530307 is beyond EOD, truncated [ 72.135902][ T2967] loop2: p2 p3 p4 [ 72.139838][ T2967] loop2: p2 start 14935 is beyond EOD, truncated [ 72.146702][ T2967] loop2: p4 start 4026530307 is beyond EOD, truncated [ 72.170719][ T5107] loop0: p2 p3 p4 [ 72.175289][ T5107] loop0: p2 start 14935 is beyond EOD, truncated [ 72.183899][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.184312][ T5107] loop0: p4 start 4026530307 is beyond EOD, truncated [ 72.201821][ T3428] udevd[3428]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.219711][ T5113] loop4: detected capacity change from 0 to 512 [ 72.245611][ T2967] loop0: p2 p3 p4 [ 72.253448][ T5113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.269906][ T2967] loop0: p2 start 14935 is beyond EOD, truncated [ 72.277835][ T5113] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.283027][ T5115] loop2: detected capacity change from 0 to 1024 [ 72.337322][ T2967] loop0: p4 start 4026530307 is beyond EOD, truncated [ 72.384001][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 72.384017][ T29] audit: type=1326 audit(1727709379.306:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.413446][ T29] audit: type=1326 audit(1727709379.306:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.436743][ T29] audit: type=1326 audit(1727709379.306:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.460167][ T29] audit: type=1326 audit(1727709379.306:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.483514][ T29] audit: type=1326 audit(1727709379.306:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.506848][ T29] audit: type=1326 audit(1727709379.306:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.530225][ T29] audit: type=1326 audit(1727709379.306:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.531132][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.553597][ T29] audit: type=1326 audit(1727709379.306:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.587228][ T29] audit: type=1326 audit(1727709379.306:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 72.610629][ T29] audit: type=1326 audit(1727709379.306:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 73.372785][ T5115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.388931][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 73.429431][ T5128] loop1: detected capacity change from 0 to 512 [ 73.506130][ T5128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.532678][ T5128] EXT4-fs (loop1): 1 orphan inode deleted [ 73.538200][ T5135] loop0: detected capacity change from 0 to 2048 [ 73.538509][ T5128] EXT4-fs (loop1): 1 truncate cleaned up [ 73.555249][ T5135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.562258][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.576401][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.590733][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.638292][ T5135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.651660][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.670705][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 73.679777][ T5146] loop2: detected capacity change from 0 to 2048 [ 73.686657][ T5146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.698105][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.715323][ T5146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.721657][ T5147] loop3: detected capacity change from 0 to 512 [ 73.727799][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 73.746384][ T5147] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.771693][ T5146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.414'. [ 73.782661][ T5146] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.414: Abort forced by user [ 73.793229][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 73.797166][ T5147] EXT4-fs (loop3): 1 orphan inode deleted [ 73.804261][ T5145] loop4: detected capacity change from 0 to 128 [ 73.807926][ T5147] EXT4-fs (loop3): 1 truncate cleaned up [ 73.819989][ T5145] ext4: Unknown parameter 'hash' [ 73.835166][ T5146] EXT4-fs (loop2): Remounting filesystem read-only [ 73.845977][ T5147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.848777][ T5135] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.412: Abort forced by user [ 73.858825][ T5154] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 73.881491][ T5135] EXT4-fs (loop0): Remounting filesystem read-only [ 73.890162][ T5153] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 73.891648][ T5135] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 73.909404][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.916143][ T5146] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 73.966022][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.003272][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.071779][ T5162] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 74.085690][ T5171] loop7: detected capacity change from 0 to 16384 [ 74.133734][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 74.146655][ T5164] loop0: detected capacity change from 0 to 128 [ 74.158921][ T5164] ext4: Unknown parameter 'hash' [ 74.172728][ T5164] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 74.334438][ T5187] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 74.474680][ T5188] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.530726][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.624470][ T5203] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 74.725273][ T5213] pim6reg1: entered promiscuous mode [ 74.731032][ T5213] pim6reg1: entered allmulticast mode [ 74.788756][ T5224] loop4: detected capacity change from 0 to 2048 [ 74.799396][ T5227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 74.801802][ T5224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.838137][ T5224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.864033][ T5220] loop3: detected capacity change from 0 to 128 [ 74.875795][ T5220] ext4: Unknown parameter 'hash' [ 74.897643][ T5224] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.434: Abort forced by user [ 74.911305][ T5231] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.978398][ T5224] EXT4-fs (loop4): Remounting filesystem read-only [ 75.005139][ T5240] loop1: detected capacity change from 0 to 512 [ 75.011960][ T5240] EXT4-fs: Ignoring removed i_version option [ 75.019629][ T5237] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 75.029225][ T5240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.034410][ T5224] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 75.061580][ T5240] EXT4-fs (loop1): 1 truncate cleaned up [ 75.067742][ T5240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.121618][ T5242] loop3: detected capacity change from 0 to 2048 [ 75.136995][ T5242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.164059][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.191856][ T5242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.234425][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 75.305907][ T5242] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.437: Abort forced by user [ 75.326450][ T5254] loop4: detected capacity change from 0 to 128 [ 75.333340][ T5254] FAT-fs (loop4): bogus number of FAT sectors [ 75.339635][ T5254] FAT-fs (loop4): Can't find a valid FAT filesystem [ 75.350437][ T5242] EXT4-fs (loop3): Remounting filesystem read-only [ 75.357568][ T5255] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 75.382844][ T5242] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 75.394125][ T5254] loop4: detected capacity change from 0 to 1024 [ 75.412993][ T5254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.478875][ T5258] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 75.489042][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.498842][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.533767][ T5246] veth0_vlan: left promiscuous mode [ 75.545295][ T5246] veth0_vlan: entered promiscuous mode [ 75.597504][ T5262] loop4: detected capacity change from 0 to 8192 [ 75.612307][ T5265] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 75.656816][ T5262] loop4: p2 p3 p4 [ 75.664674][ T5262] loop4: p2 start 14935 is beyond EOD, truncated [ 75.677303][ T5262] loop4: p4 start 4026530307 is beyond EOD, truncated [ 75.702103][ T2967] loop4: p2 p3 p4 [ 75.705965][ T2967] loop4: p2 start 14935 is beyond EOD, truncated [ 75.713557][ T2967] loop4: p4 start 4026530307 is beyond EOD, truncated [ 75.743779][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.765947][ T3258] udevd[3258]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 75.826493][ T5269] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 75.851477][ T5275] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 75.923034][ T5289] pim6reg1: entered promiscuous mode [ 75.928517][ T5289] pim6reg1: entered allmulticast mode [ 75.970397][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.040277][ T5303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 76.069707][ T5303] loop1: detected capacity change from 0 to 512 [ 76.091741][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 76.131878][ T5303] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.167667][ T5305] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 76.194002][ T5305] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 76.196172][ T5307] loop7: detected capacity change from 16384 to 16383 [ 76.203164][ T5303] EXT4-fs (loop1): 1 orphan inode deleted [ 76.215294][ T5303] EXT4-fs (loop1): 1 truncate cleaned up [ 76.251977][ T5303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.463781][ T5307] loop4: detected capacity change from 0 to 512 [ 76.514454][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.604279][ T5307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.625647][ T5307] EXT4-fs (loop4): 1 orphan inode deleted [ 76.628534][ T5294] buffer_io_error: 827 callbacks suppressed [ 76.628575][ T5294] Buffer I/O error on dev loop7, logical block 2047, async page read [ 76.631530][ T5307] EXT4-fs (loop4): 1 truncate cleaned up [ 76.637734][ T5294] Buffer I/O error on dev loop7, logical block 2047, async page read [ 76.661559][ T5307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.784843][ T5293] blk_print_req_error: 2 callbacks suppressed [ 76.784864][ T5293] I/O error, dev loop7, sector 12288 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 76.801226][ T5293] Buffer I/O error on dev loop7, logical block 1536, lost async page write [ 76.809956][ T5293] Buffer I/O error on dev loop7, logical block 1537, lost async page write [ 76.818660][ T5293] Buffer I/O error on dev loop7, logical block 1538, lost async page write [ 76.827337][ T5293] Buffer I/O error on dev loop7, logical block 1539, lost async page write [ 76.835952][ T5293] Buffer I/O error on dev loop7, logical block 1540, lost async page write [ 76.844706][ T5293] Buffer I/O error on dev loop7, logical block 1541, lost async page write [ 76.853379][ T5293] Buffer I/O error on dev loop7, logical block 1542, lost async page write [ 76.862299][ T5293] Buffer I/O error on dev loop7, logical block 1543, lost async page write [ 76.889248][ T5335] loop1: detected capacity change from 0 to 2048 [ 76.892599][ T5293] I/O error, dev loop7, sector 13312 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 76.906308][ T5335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.937332][ T5293] I/O error, dev loop7, sector 14336 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 76.952396][ T5293] I/O error, dev loop7, sector 15360 op 0x1:(WRITE) flags 0x800 phys_seg 127 prio class 0 [ 76.982624][ T5335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.005771][ T5335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 77.034603][ T5339] veth0_vlan: left promiscuous mode [ 77.041571][ T5339] veth0_vlan: entered promiscuous mode [ 77.048062][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.052505][ T5337] veth0_vlan: left promiscuous mode [ 77.083754][ T5337] veth0_vlan: entered promiscuous mode [ 77.189229][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.192226][ T5349] pim6reg1: entered promiscuous mode [ 77.203603][ T5349] pim6reg1: entered allmulticast mode [ 77.253654][ T5354] loop7: detected capacity change from 0 to 16384 [ 77.473434][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 77.712488][ T5367] loop1: detected capacity change from 0 to 512 [ 77.789037][ T5360] loop7: detected capacity change from 16384 to 16383 [ 77.802940][ T5351] veth0_vlan: left promiscuous mode [ 77.844657][ T5351] veth0_vlan: entered promiscuous mode [ 77.862464][ T5367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.933123][ T5367] EXT4-fs (loop1): 1 orphan inode deleted [ 77.939037][ T5367] EXT4-fs (loop1): 1 truncate cleaned up [ 77.953213][ T5367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.037701][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 78.037717][ T29] audit: type=1326 audit(1727709384.986:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.067656][ T29] audit: type=1326 audit(1727709384.986:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.129961][ T29] audit: type=1326 audit(1727709385.086:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.153311][ T29] audit: type=1326 audit(1727709385.086:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.176583][ T29] audit: type=1326 audit(1727709385.086:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.205942][ T29] audit: type=1326 audit(1727709385.086:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.229600][ T29] audit: type=1326 audit(1727709385.086:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cdf37c990 code=0x7ffc0000 [ 78.253036][ T29] audit: type=1326 audit(1727709385.086:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.276359][ T29] audit: type=1326 audit(1727709385.086:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.299618][ T29] audit: type=1326 audit(1727709385.086:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 78.612322][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.830788][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 78.901908][ T5397] loop3: detected capacity change from 0 to 8192 [ 78.922572][ T5403] pim6reg1: entered promiscuous mode [ 78.927981][ T5403] pim6reg1: entered allmulticast mode [ 78.946336][ T5397] loop3: p2 p3 p4 [ 78.950214][ T5397] loop3: p2 start 14935 is beyond EOD, truncated [ 78.957166][ T5397] loop3: p4 start 4026530307 is beyond EOD, truncated [ 78.990698][ T5399] veth0_vlan: left promiscuous mode [ 79.019566][ T5399] veth0_vlan: entered promiscuous mode [ 79.212670][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 79.225941][ T5422] loop7: detected capacity change from 0 to 16384 [ 79.279641][ T5421] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 79.331864][ T5421] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 79.334349][ T5427] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.374478][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 79.431788][ T5432] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.441258][ T5429] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 79.458630][ T5429] netlink: 'syz.3.484': attribute type 29 has an invalid length. [ 79.466922][ T5425] loop7: detected capacity change from 16384 to 16383 [ 79.484473][ T5422] I/O error, dev loop7, sector 12544 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 79.497688][ T5433] loop1: detected capacity change from 0 to 512 [ 79.509215][ T5433] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.519769][ T5422] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 79.533119][ T5422] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.544440][ T5422] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.554981][ T5433] EXT4-fs (loop1): 1 orphan inode deleted [ 79.561028][ T5433] EXT4-fs (loop1): 1 truncate cleaned up [ 79.568432][ T5433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.606657][ T5427] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.808128][ T5460] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.842796][ T5460] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.926139][ T5460] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 79.955824][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 79.972922][ T5477] loop0: detected capacity change from 0 to 512 [ 79.987566][ T5477] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.033418][ T5477] EXT4-fs (loop0): 1 orphan inode deleted [ 80.039124][ T5415] I/O error, dev loop7, sector 6656 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 80.039409][ T5477] EXT4-fs (loop0): 1 truncate cleaned up [ 80.059257][ T5415] I/O error, dev loop7, sector 7680 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 80.072111][ T5477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.113068][ T5485] loop3: detected capacity change from 0 to 512 [ 80.130080][ T5485] EXT4-fs: Ignoring removed i_version option [ 80.145047][ T5485] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.169328][ T5463] veth0_vlan: left promiscuous mode [ 80.177809][ T5485] EXT4-fs (loop3): 1 truncate cleaned up [ 80.185438][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.198971][ T5485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.232895][ T5463] veth0_vlan: entered promiscuous mode [ 80.263474][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.283346][ T5497] loop7: detected capacity change from 0 to 16384 [ 80.454054][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 80.486246][ T5500] loop7: detected capacity change from 16384 to 16383 [ 80.544639][ T5506] loop2: detected capacity change from 0 to 512 [ 80.572486][ T5507] loop1: detected capacity change from 0 to 512 [ 80.612936][ T5506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.614697][ T5509] pim6reg1: entered promiscuous mode [ 80.631167][ T5509] pim6reg1: entered allmulticast mode [ 80.641966][ T5507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.689270][ T5506] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.711943][ T5507] EXT4-fs (loop1): 1 orphan inode deleted [ 80.717771][ T5507] EXT4-fs (loop1): 1 truncate cleaned up [ 80.726881][ T5507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.785366][ T5514] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 80.845162][ T5514] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 80.881609][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.954679][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 81.001539][ T5522] netlink: 'syz.0.505': attribute type 29 has an invalid length. [ 81.083761][ T5522] netlink: 'syz.0.505': attribute type 29 has an invalid length. [ 81.252881][ T5543] loop3: detected capacity change from 0 to 2048 [ 81.276431][ T5543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.296107][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.327657][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.372693][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.372715][ T5537] netlink: 'syz.0.505': attribute type 29 has an invalid length. [ 81.374269][ T5522] netlink: 'syz.0.505': attribute type 29 has an invalid length. [ 81.401762][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.422115][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 81.432783][ T5543] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.507: Abort forced by user [ 81.444958][ T5543] EXT4-fs (loop3): Remounting filesystem read-only [ 81.453013][ T5543] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 81.465629][ T5543] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 81.495390][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.583594][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.824148][ T5566] loop3: detected capacity change from 0 to 2048 [ 81.833740][ T5566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.856670][ T5566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.876838][ T5566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 81.896764][ T5566] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.513: Abort forced by user [ 81.907174][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 81.914055][ T5566] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 81.933005][ T5566] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 81.958746][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 81.969939][ T5575] loop0: detected capacity change from 0 to 128 [ 81.976596][ T5575] ext4: Unknown parameter 'hash' [ 82.005958][ T5578] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 82.019510][ T5572] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 82.041159][ T5578] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 82.044085][ T5574] loop1: detected capacity change from 0 to 2048 [ 82.056847][ T5574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.075668][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.103346][ T5574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.131204][ T5574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 82.157674][ T5574] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.516: Abort forced by user [ 82.168960][ T5574] EXT4-fs (loop1): Remounting filesystem read-only [ 82.175752][ T5574] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 82.187620][ T5574] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 82.202369][ T5578] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 82.283516][ T5591] loop4: detected capacity change from 0 to 128 [ 82.300663][ T5591] FAT-fs (loop4): bogus number of FAT sectors [ 82.306954][ T5591] FAT-fs (loop4): Can't find a valid FAT filesystem [ 82.334599][ T5589] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.535565][ T5591] loop4: detected capacity change from 0 to 1024 [ 82.738359][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 82.777812][ T5604] netlink: 'syz.1.525': attribute type 29 has an invalid length. [ 82.786269][ T5604] netlink: 'syz.1.525': attribute type 29 has an invalid length. [ 82.820522][ T5610] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 82.834482][ T5610] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 82.896260][ T5610] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 83.089760][ T5617] loop4: detected capacity change from 0 to 8192 [ 83.157481][ T5617] loop4: p2 p3 p4 [ 83.161448][ T5617] loop4: p2 start 14935 is beyond EOD, truncated [ 83.201895][ T5617] loop4: p4 start 4026530307 is beyond EOD, truncated [ 83.324945][ T5635] veth0_vlan: left promiscuous mode [ 83.444523][ T5635] veth0_vlan: entered promiscuous mode [ 83.575388][ T5611] veth0_vlan: left promiscuous mode [ 83.598656][ T5611] veth0_vlan: entered promiscuous mode [ 83.669613][ T5654] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 83.703761][ T5654] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 83.786412][ T5654] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 83.842860][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 83.842877][ T29] audit: type=1326 audit(1727709390.796:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 83.872851][ T29] audit: type=1326 audit(1727709390.796:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 83.895868][ T5660] loop7: detected capacity change from 0 to 16384 [ 83.969495][ T29] audit: type=1326 audit(1727709390.796:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 83.994253][ T29] audit: type=1326 audit(1727709390.796:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.017928][ T29] audit: type=1326 audit(1727709390.796:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.024192][ T5662] loop3: detected capacity change from 0 to 1024 [ 84.041347][ T29] audit: type=1326 audit(1727709390.796:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.071762][ T29] audit: type=1326 audit(1727709390.796:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.095313][ T29] audit: type=1326 audit(1727709390.796:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.118656][ T29] audit: type=1326 audit(1727709390.796:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.142039][ T29] audit: type=1326 audit(1727709390.796:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdf37dff9 code=0x7ffc0000 [ 84.180164][ T5662] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.534: iget: bad extended attribute block 8388352 [ 84.191680][ T5667] loop2: detected capacity change from 0 to 512 [ 84.199689][ T5662] EXT4-fs (loop3): Remounting filesystem read-only [ 84.218712][ T5665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 84.228350][ T5663] loop7: detected capacity change from 16384 to 16383 [ 84.240935][ T5667] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.461627][ T5677] loop4: detected capacity change from 0 to 2048 [ 84.475500][ T5663] loop1: detected capacity change from 0 to 512 [ 84.476671][ T5663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.497625][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.590342][ T3258] buffer_io_error: 1222 callbacks suppressed [ 84.590359][ T3258] Buffer I/O error on dev loop7, logical block 2047, lost async page write [ 84.662882][ T5663] EXT4-fs (loop1): 1 orphan inode deleted [ 84.662905][ T5663] EXT4-fs (loop1): 1 truncate cleaned up [ 84.694760][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.536'. [ 84.915116][ T5677] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.536: Abort forced by user [ 84.937475][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 84.946806][ T5677] EXT4-fs (loop4): Remounting filesystem read-only [ 84.953966][ T5677] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 85.040761][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 85.140203][ T5694] loop2: detected capacity change from 0 to 512 [ 85.161900][ T5694] EXT4-fs: Ignoring removed i_version option [ 85.175545][ T5694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.189743][ T5694] EXT4-fs (loop2): 1 truncate cleaned up [ 85.255265][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 85.278847][ T5698] loop4: detected capacity change from 0 to 2048 [ 85.295912][ T5698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.314577][ T5702] validate_nla: 2 callbacks suppressed [ 85.314595][ T5702] netlink: 'syz.2.543': attribute type 29 has an invalid length. [ 85.342778][ T5698] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.541: Abort forced by user [ 85.422687][ T5698] EXT4-fs (loop4): Remounting filesystem read-only [ 85.422808][ T5710] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 85.439728][ T5698] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 85.462158][ T5708] netlink: 'syz.2.543': attribute type 29 has an invalid length. [ 85.471132][ T5708] netlink: 'syz.2.543': attribute type 29 has an invalid length. [ 85.491516][ T5704] veth0_vlan: left promiscuous mode [ 85.520808][ T5704] veth0_vlan: entered promiscuous mode [ 85.578874][ T5716] loop7: detected capacity change from 0 to 16384 [ 85.705768][ T5720] __nla_validate_parse: 1 callbacks suppressed [ 85.705789][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 85.742494][ T5715] veth0_vlan: left promiscuous mode [ 85.761508][ T5715] veth0_vlan: entered promiscuous mode [ 85.776578][ T5718] loop7: detected capacity change from 16384 to 16383 [ 85.914794][ T5720] loop1: detected capacity change from 0 to 512 [ 85.932383][ T5720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.944378][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 85.981399][ T5720] EXT4-fs (loop1): 1 orphan inode deleted [ 85.987304][ T5720] EXT4-fs (loop1): 1 truncate cleaned up [ 86.023478][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 86.041166][ T5726] loop0: detected capacity change from 0 to 128 [ 86.057844][ T5726] ext4: Unknown parameter 'hash' [ 86.102472][ T5723] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 86.113814][ T5725] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.175393][ T5730] loop2: detected capacity change from 0 to 2048 [ 86.182898][ T5730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.208881][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'. [ 86.228834][ T5730] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.549: Abort forced by user [ 86.239588][ T5730] EXT4-fs (loop2): Remounting filesystem read-only [ 86.247657][ T5730] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 86.258637][ T5730] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 86.280536][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 86.307788][ T5735] loop0: detected capacity change from 0 to 512 [ 86.336166][ T5735] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.367057][ T3258] Buffer I/O error on dev loop7, logical block 2047, async page read [ 86.379889][ T5735] EXT4-fs (loop0): 1 orphan inode deleted [ 86.385677][ T5735] EXT4-fs (loop0): 1 truncate cleaned up [ 86.452357][ T5741] loop3: detected capacity change from 0 to 512 [ 86.459291][ T5741] EXT4-fs: Ignoring removed i_version option [ 86.476281][ T5741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.499653][ T5741] EXT4-fs (loop3): 1 truncate cleaned up [ 86.621740][ T5750] loop4: detected capacity change from 0 to 2048 [ 86.629636][ T5750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.630240][ T5752] loop3: detected capacity change from 0 to 2048 [ 86.643095][ T5752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.711703][ T5752] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.556: Abort forced by user [ 86.729137][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.555'. [ 86.739837][ T5752] EXT4-fs (loop3): Remounting filesystem read-only [ 86.748637][ T5752] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 86.765143][ T5752] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 86.778633][ T5750] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.555: Abort forced by user [ 86.804780][ T5750] EXT4-fs (loop4): Remounting filesystem read-only [ 86.826487][ T5750] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 86.839760][ T5757] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 86.947505][ T5765] loop2: detected capacity change from 0 to 128 [ 86.957289][ T5765] FAT-fs (loop2): bogus number of FAT sectors [ 86.963693][ T5765] FAT-fs (loop2): Can't find a valid FAT filesystem [ 86.971594][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 86.984490][ T5761] loop1: detected capacity change from 0 to 2048 [ 86.984488][ T5766] loop3: detected capacity change from 0 to 128 [ 86.984721][ T5766] ext4: Unknown parameter 'hash' [ 87.001422][ T5761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.014429][ T5765] loop2: detected capacity change from 0 to 1024 [ 87.036615][ T5766] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 87.088200][ T5761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 87.100991][ T5775] loop2: detected capacity change from 0 to 2048 [ 87.111671][ T5775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.121345][ T5761] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.558: Abort forced by user [ 87.133851][ T5761] EXT4-fs (loop1): Remounting filesystem read-only [ 87.146197][ T5761] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 87.158076][ T5601] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.174663][ T5761] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 87.194235][ T5601] EXT4-fs (loop0): Remounting filesystem read-only [ 87.205446][ T5775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 87.278158][ T5775] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.561: Abort forced by user [ 87.331805][ T5790] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 87.335917][ T5775] EXT4-fs (loop2): Remounting filesystem read-only [ 87.372565][ T5775] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 87.431227][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 87.461399][ T5784] loop0: detected capacity change from 0 to 128 [ 87.516611][ T5797] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.524974][ T5784] ext4: Unknown parameter 'hash' [ 87.568331][ T5801] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 87.687352][ T5784] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 87.812253][ T5797] syz.4.570 (5797) used greatest stack depth: 10336 bytes left [ 87.887732][ T5801] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 87.951281][ T5801] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 88.045223][ T5792] veth0_vlan: left promiscuous mode [ 88.053495][ T5808] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 88.072459][ T5792] veth0_vlan: entered promiscuous mode [ 88.352813][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 88.390088][ T5853] loop3: detected capacity change from 0 to 128 [ 88.400148][ T5853] ext4: Unknown parameter 'hash' [ 88.407206][ T5853] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 88.484245][ T5858] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 88.632459][ T5858] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 89.080904][ T5905] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 89.112262][ T5905] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 89.159776][ T5887] veth0_vlan: left promiscuous mode [ 89.177193][ T5887] veth0_vlan: entered promiscuous mode [ 89.210548][ T5903] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.218531][ T5884] veth0_vlan: left promiscuous mode [ 89.231517][ T5884] veth0_vlan: entered promiscuous mode [ 89.371626][ T5905] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 89.500681][ T5917] loop1: detected capacity change from 0 to 512 [ 89.553636][ T5917] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.571126][ T5915] netlink: 'syz.4.588': attribute type 29 has an invalid length. [ 89.643762][ T5921] netlink: 'syz.4.588': attribute type 29 has an invalid length. [ 89.692739][ T5921] netlink: 'syz.4.588': attribute type 29 has an invalid length. [ 89.793986][ T5926] netlink: 'syz.4.588': attribute type 29 has an invalid length. [ 90.000850][ T5931] veth0_vlan: left promiscuous mode [ 90.063160][ T5931] veth0_vlan: entered promiscuous mode [ 90.534606][ T5958] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.882750][ T5965] veth0_vlan: left promiscuous mode [ 90.911569][ T5971] __nla_validate_parse: 1 callbacks suppressed [ 90.911648][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 90.931752][ T5965] veth0_vlan: entered promiscuous mode [ 91.069287][ T5971] loop2: detected capacity change from 0 to 128 [ 91.114855][ T5971] ext4: Unknown parameter 'hash' [ 91.170190][ T5971] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 91.353351][ T5981] loop3: detected capacity change from 0 to 128 [ 91.372497][ T5981] FAT-fs (loop3): bogus number of FAT sectors [ 91.378661][ T5981] FAT-fs (loop3): Can't find a valid FAT filesystem [ 91.462151][ T5981] loop3: detected capacity change from 0 to 1024 [ 91.473218][ T5984] loop0: detected capacity change from 0 to 1024 [ 91.535450][ T5984] EXT4-fs error (device loop0): ext4_lookup:1813: inode #15: comm syz.0.598: iget: bad extended attribute block 8388352 [ 91.561833][ T5984] EXT4-fs (loop0): Remounting filesystem read-only [ 91.565866][ T5986] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.775771][ T6006] loop1: detected capacity change from 0 to 2048 [ 91.792368][ T6004] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.800463][ T6006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.900631][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'. [ 91.903338][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 91.903356][ T29] audit: type=1326 audit(1727709398.856:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 91.938932][ T29] audit: type=1326 audit(1727709398.856:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 91.962284][ T29] audit: type=1326 audit(1727709398.856:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 91.986437][ T29] audit: type=1326 audit(1727709398.856:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.011305][ T29] audit: type=1326 audit(1727709398.856:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.013060][ T6015] loop7: detected capacity change from 0 to 16384 [ 92.035444][ T29] audit: type=1326 audit(1727709398.876:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.035482][ T29] audit: type=1326 audit(1727709398.876:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.088808][ T29] audit: type=1326 audit(1727709398.876:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.112523][ T29] audit: type=1326 audit(1727709398.876:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.135801][ T29] audit: type=1326 audit(1727709398.876:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e83b2dff9 code=0x7ffc0000 [ 92.173355][ T6014] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.604: Abort forced by user [ 92.184466][ T6014] EXT4-fs (loop1): Remounting filesystem read-only [ 92.191507][ T6014] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 92.208978][ T6006] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 92.327088][ T6019] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 92.403204][ T6022] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 92.488463][ T6017] veth0_vlan: left promiscuous mode [ 92.501516][ T6017] veth0_vlan: entered promiscuous mode [ 92.569156][ T6020] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 93.049950][ T6070] loop4: detected capacity change from 0 to 1024 [ 93.092453][ T6070] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.612: iget: bad extended attribute block 8388352 [ 93.137353][ T6070] EXT4-fs (loop4): Remounting filesystem read-only [ 93.318066][ T6101] netlink: 'syz.2.616': attribute type 29 has an invalid length. [ 93.318718][ T6101] netlink: 'syz.2.616': attribute type 29 has an invalid length. [ 93.382373][ T6111] netlink: 'syz.2.616': attribute type 29 has an invalid length. [ 93.384575][ T6111] netlink: 'syz.2.616': attribute type 29 has an invalid length. [ 93.620664][ T6123] veth0_vlan: left promiscuous mode [ 93.650788][ T6123] veth0_vlan: entered promiscuous mode [ 93.733440][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 93.806753][ T6146] loop7: detected capacity change from 16384 to 16383 [ 93.882674][ T6140] blk_print_req_error: 4 callbacks suppressed [ 93.882689][ T6140] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 93.901996][ T6140] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.911817][ T6140] Buffer I/O error on dev loop7, logical block 1537, async page read [ 93.920312][ T6140] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.930166][ T6140] Buffer I/O error on dev loop7, logical block 1537, async page read [ 93.938840][ T6140] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.948901][ T6140] Buffer I/O error on dev loop7, logical block 1537, async page read [ 93.988024][ T6146] loop0: detected capacity change from 0 to 512 [ 94.002397][ T6146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.019625][ T6146] EXT4-fs (loop0): 1 orphan inode deleted [ 94.025582][ T6146] EXT4-fs (loop0): 1 truncate cleaned up [ 94.091400][ T6166] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.327931][ T6175] loop4: detected capacity change from 0 to 512 [ 94.359760][ T6172] veth0_vlan: left promiscuous mode [ 94.370361][ T6175] EXT4-fs: Ignoring removed i_version option [ 94.381797][ T6172] veth0_vlan: entered promiscuous mode [ 94.393946][ T6175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.431890][ T6175] EXT4-fs (loop4): 1 truncate cleaned up [ 94.488992][ T6132] I/O error, dev loop7, sector 8960 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 94.499143][ T6132] Buffer I/O error on dev loop7, logical block 1120, lost async page write [ 94.507868][ T6132] Buffer I/O error on dev loop7, logical block 1121, lost async page write [ 94.516747][ T6132] Buffer I/O error on dev loop7, logical block 1122, lost async page write [ 94.525392][ T6132] Buffer I/O error on dev loop7, logical block 1123, lost async page write [ 94.534080][ T6132] Buffer I/O error on dev loop7, logical block 1124, lost async page write [ 94.542728][ T6132] Buffer I/O error on dev loop7, logical block 1125, lost async page write [ 94.551466][ T6132] Buffer I/O error on dev loop7, logical block 1126, lost async page write [ 94.575801][ T6132] I/O error, dev loop7, sector 9984 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 94.609438][ T6132] I/O error, dev loop7, sector 11008 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 94.621618][ T6177] veth0_vlan: left promiscuous mode [ 94.639478][ T6132] I/O error, dev loop7, sector 12032 op 0x1:(WRITE) flags 0x800 phys_seg 33 prio class 0 [ 94.658814][ T6177] veth0_vlan: entered promiscuous mode [ 95.192293][ T6195] loop4: detected capacity change from 0 to 512 [ 95.215197][ T6195] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.833682][ T6201] loop3: detected capacity change from 0 to 2048 [ 95.837809][ T6203] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 95.849756][ T6201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.861684][ T6203] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 95.916603][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.631'. [ 95.969576][ T6207] loop0: detected capacity change from 0 to 2048 [ 95.971967][ T6201] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.631: Abort forced by user [ 95.976883][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.993992][ T6201] EXT4-fs (loop3): Remounting filesystem read-only [ 96.001344][ T6201] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 96.014829][ T6201] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 96.099746][ T6211] loop2: detected capacity change from 0 to 128 [ 96.112689][ T6213] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 96.127852][ T6211] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.166986][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 96.193041][ T6207] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.633: Abort forced by user [ 96.204685][ T6207] EXT4-fs (loop0): Remounting filesystem read-only [ 96.214893][ T6207] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 96.226464][ T6207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 96.276760][ T6217] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 96.373654][ T6234] loop1: detected capacity change from 0 to 512 [ 96.390960][ T6238] loop4: detected capacity change from 0 to 512 [ 96.398104][ T6238] EXT4-fs: Ignoring removed i_version option [ 96.413772][ T6238] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.440473][ T6234] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.456752][ T6238] EXT4-fs (loop4): 1 truncate cleaned up [ 96.593288][ T6260] loop0: detected capacity change from 0 to 512 [ 96.603219][ T6223] veth0_vlan: left promiscuous mode [ 96.636290][ T6223] veth0_vlan: entered promiscuous mode [ 96.695155][ T6251] pim6reg1: entered promiscuous mode [ 96.700721][ T6251] pim6reg1: entered allmulticast mode [ 96.775840][ T6260] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.991362][ T3264] EXT4-fs unmount: 58 callbacks suppressed [ 97.991404][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.048506][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.064540][ T6284] loop3: detected capacity change from 0 to 128 [ 98.074090][ T6284] FAT-fs (loop3): bogus number of FAT sectors [ 98.080375][ T6284] FAT-fs (loop3): Can't find a valid FAT filesystem [ 98.107452][ T6285] loop7: detected capacity change from 0 to 16384 [ 98.117444][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.123010][ T6284] loop3: detected capacity change from 0 to 1024 [ 98.157182][ T6284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.171080][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 98.184944][ T6296] loop1: detected capacity change from 0 to 512 [ 98.187083][ T6296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.220841][ T6296] EXT4-fs (loop1): 1 orphan inode deleted [ 98.220863][ T6296] EXT4-fs (loop1): 1 truncate cleaned up [ 98.221206][ T6296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.280307][ T6295] loop4: detected capacity change from 0 to 1024 [ 98.304475][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 98.304811][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.324807][ T6305] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 98.325333][ T6295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.336399][ T6300] loop7: detected capacity change from 16384 to 16383 [ 98.354511][ T6305] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 98.381426][ T6295] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.649: iget: bad extended attribute block 8388352 [ 98.428779][ T6308] loop3: detected capacity change from 0 to 2048 [ 98.444436][ T6295] EXT4-fs (loop4): Remounting filesystem read-only [ 98.450274][ T6308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.463315][ T6312] loop2: detected capacity change from 0 to 512 [ 98.472479][ T6312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.494460][ T6285] I/O error, dev loop7, sector 11016 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 98.494887][ T6312] EXT4-fs (loop2): 1 orphan inode deleted [ 98.507756][ T6285] I/O error, dev loop7, sector 11272 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 0 [ 98.510262][ T6312] EXT4-fs (loop2): 1 truncate cleaned up [ 98.527731][ T6312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.601896][ T6319] loop0: detected capacity change from 0 to 2048 [ 98.608953][ T6319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.625882][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.654166][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 98.678871][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.700962][ T6308] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.651: Abort forced by user [ 98.705076][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.653'. [ 98.734333][ T6308] EXT4-fs (loop3): Remounting filesystem read-only [ 98.746881][ T6319] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.653: Abort forced by user [ 98.759854][ T6308] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 98.770145][ T6339] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 98.770281][ T6319] EXT4-fs (loop0): Remounting filesystem read-only [ 98.792592][ T6319] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 98.809558][ T6344] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 98.847726][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.871533][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.899909][ T6281] blk_print_req_error: 3 callbacks suppressed [ 98.899929][ T6281] I/O error, dev loop7, sector 9216 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 98.916215][ T6281] buffer_io_error: 413 callbacks suppressed [ 98.916228][ T6281] Buffer I/O error on dev loop7, logical block 1152, lost async page write [ 98.931231][ T6281] Buffer I/O error on dev loop7, logical block 1153, lost async page write [ 98.935156][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.940621][ T6281] Buffer I/O error on dev loop7, logical block 1154, lost async page write [ 98.957629][ T6281] Buffer I/O error on dev loop7, logical block 1155, lost async page write [ 98.966272][ T6281] Buffer I/O error on dev loop7, logical block 1156, lost async page write [ 98.974917][ T6281] Buffer I/O error on dev loop7, logical block 1157, lost async page write [ 98.983736][ T6281] Buffer I/O error on dev loop7, logical block 1158, lost async page write [ 98.992451][ T6281] Buffer I/O error on dev loop7, logical block 1159, lost async page write [ 99.001137][ T6281] Buffer I/O error on dev loop7, logical block 1160, lost async page write [ 99.009975][ T6281] Buffer I/O error on dev loop7, logical block 1161, lost async page write [ 99.025393][ T6281] I/O error, dev loop7, sector 10240 op 0x1:(WRITE) flags 0x800 phys_seg 97 prio class 0 [ 99.092994][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.111842][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.121403][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.153058][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.194088][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 99.194392][ T6359] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.205630][ T6364] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 99.221834][ T6364] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 99.290390][ T6366] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 99.314799][ T6366] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 99.330105][ T6361] veth0_vlan: left promiscuous mode [ 99.344857][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 99.344871][ T29] audit: type=1326 audit(1727709406.296:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.371323][ T6361] veth0_vlan: entered promiscuous mode [ 99.382214][ T29] audit: type=1326 audit(1727709406.336:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.407353][ T29] audit: type=1326 audit(1727709406.366:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.430690][ T29] audit: type=1326 audit(1727709406.366:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.454095][ T29] audit: type=1326 audit(1727709406.366:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.477818][ T29] audit: type=1326 audit(1727709406.366:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.501225][ T29] audit: type=1326 audit(1727709406.366:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.524518][ T29] audit: type=1326 audit(1727709406.366:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.547859][ T29] audit: type=1326 audit(1727709406.366:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.571234][ T29] audit: type=1326 audit(1727709406.366:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6369 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 99.598214][ T6371] loop7: detected capacity change from 0 to 16384 [ 99.806670][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 99.856187][ T6372] loop7: detected capacity change from 16384 to 16383 [ 100.091656][ T6371] loop2: detected capacity change from 0 to 512 [ 100.107503][ T6386] loop1: detected capacity change from 0 to 1024 [ 100.139415][ T6386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.158441][ T6386] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.666: iget: bad extended attribute block 8388352 [ 100.172778][ T6371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.174360][ T6388] loop4: detected capacity change from 0 to 2048 [ 100.195911][ T6388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.203947][ T6386] EXT4-fs (loop1): Remounting filesystem read-only [ 100.252635][ T6371] EXT4-fs (loop2): 1 orphan inode deleted [ 100.259058][ T6371] EXT4-fs (loop2): 1 truncate cleaned up [ 100.267296][ T6388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.283107][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.311588][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 100.322702][ T6388] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.668: Abort forced by user [ 100.334182][ T6388] EXT4-fs (loop4): Remounting filesystem read-only [ 100.342769][ T6388] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 100.354583][ T6388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 100.398929][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.571851][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.602282][ T6410] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 100.712665][ T6410] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 101.199930][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.217574][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.217583][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.334752][ T6446] loop7: detected capacity change from 0 to 16384 [ 101.412585][ T6458] loop4: detected capacity change from 0 to 2048 [ 101.429232][ T6458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.448476][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.465316][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.678'. [ 101.476393][ T6458] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.678: Abort forced by user [ 101.487889][ T6458] EXT4-fs (loop4): Remounting filesystem read-only [ 101.494749][ T6458] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 101.505733][ T6458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 101.535437][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.613483][ T6464] loop4: detected capacity change from 0 to 128 [ 101.620695][ T6464] FAT-fs (loop4): bogus number of FAT sectors [ 101.626856][ T6464] FAT-fs (loop4): Can't find a valid FAT filesystem [ 101.645189][ T6464] loop4: detected capacity change from 0 to 1024 [ 101.658350][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.685715][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.827593][ T6475] pim6reg1: entered promiscuous mode [ 101.833029][ T6475] pim6reg1: entered allmulticast mode [ 101.972057][ T6486] loop2: detected capacity change from 0 to 2048 [ 101.980434][ T6486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.994510][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 102.004462][ T6490] netlink: 'syz.0.691': attribute type 29 has an invalid length. [ 102.004893][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.013417][ T6490] netlink: 'syz.0.691': attribute type 29 has an invalid length. [ 102.036875][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 102.047697][ T6486] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.689: Abort forced by user [ 102.057997][ T6486] EXT4-fs (loop2): Remounting filesystem read-only [ 102.064879][ T6486] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 102.077522][ T6486] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 102.098246][ T6494] netlink: 'syz.0.691': attribute type 29 has an invalid length. [ 102.121052][ T6494] netlink: 'syz.0.691': attribute type 29 has an invalid length. [ 102.168782][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.390492][ T6508] loop1: detected capacity change from 0 to 512 [ 102.444431][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.447202][ T6509] loop2: detected capacity change from 0 to 2048 [ 102.473153][ T6508] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.484685][ T6509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.538916][ T6509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.580782][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 102.603305][ T6509] EXT4-fs error (device loop2): __ext4_remount:6522: comm syz.2.697: Abort forced by user [ 102.625039][ T6509] EXT4-fs (loop2): Remounting filesystem read-only [ 102.625509][ T6515] pim6reg1: entered promiscuous mode [ 102.637365][ T6515] pim6reg1: entered allmulticast mode [ 102.645177][ T6516] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 102.654597][ T6509] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 102.690555][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.947843][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 103.026121][ T6533] loop2: detected capacity change from 0 to 128 [ 103.032701][ T6533] ext4: Unknown parameter 'hash' [ 103.045662][ T6537] pim6reg1: entered promiscuous mode [ 103.051109][ T6537] pim6reg1: entered allmulticast mode [ 103.117767][ T6530] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 103.138229][ T6541] loop3: detected capacity change from 0 to 512 [ 103.180031][ T6524] veth0_vlan: left promiscuous mode [ 103.190255][ T6524] veth0_vlan: entered promiscuous mode [ 103.394138][ T6541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.407486][ T6541] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.420493][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.535344][ T6546] veth0_vlan: left promiscuous mode [ 103.564243][ T6546] veth0_vlan: entered promiscuous mode [ 103.585653][ T6552] loop1: detected capacity change from 0 to 1024 [ 103.734744][ T6555] pim6reg1: entered promiscuous mode [ 103.740156][ T6555] pim6reg1: entered allmulticast mode [ 103.750594][ T6552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.795929][ T6552] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.711: iget: bad extended attribute block 8388352 [ 103.827725][ T6552] EXT4-fs (loop1): Remounting filesystem read-only [ 104.017283][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.059728][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 104.107194][ T6566] netlink: 'syz.0.716': attribute type 29 has an invalid length. [ 104.122179][ T6571] netlink: 'syz.0.716': attribute type 29 has an invalid length. [ 104.152475][ T6570] pim6reg1: entered promiscuous mode [ 104.158113][ T6570] pim6reg1: entered allmulticast mode [ 104.422607][ T6576] veth0_vlan: left promiscuous mode [ 104.430822][ T6576] veth0_vlan: entered promiscuous mode [ 104.519608][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.577342][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 104.577358][ T29] audit: type=1326 audit(1727709411.536:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.700985][ T29] audit: type=1326 audit(1727709411.566:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.724395][ T29] audit: type=1326 audit(1727709411.566:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.734574][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 104.748023][ T29] audit: type=1326 audit(1727709411.566:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.780435][ T29] audit: type=1326 audit(1727709411.566:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.803724][ T29] audit: type=1326 audit(1727709411.566:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.827031][ T29] audit: type=1326 audit(1727709411.566:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.850306][ T29] audit: type=1326 audit(1727709411.566:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.854409][ T6588] loop1: detected capacity change from 0 to 512 [ 104.875702][ T29] audit: type=1326 audit(1727709411.566:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.905456][ T29] audit: type=1326 audit(1727709411.566:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f61bd49dff9 code=0x7ffc0000 [ 104.983800][ T6591] validate_nla: 2 callbacks suppressed [ 104.983821][ T6591] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 105.000954][ T6593] pim6reg1: entered promiscuous mode [ 105.006539][ T6593] pim6reg1: entered allmulticast mode [ 105.012467][ T6585] loop7: detected capacity change from 16384 to 16383 [ 105.036664][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.052490][ T6591] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 105.081048][ T6588] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.102747][ T6582] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 105.116265][ T6585] loop2: detected capacity change from 0 to 512 [ 105.123986][ T6582] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.126994][ T6598] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 105.133590][ T6582] buffer_io_error: 217 callbacks suppressed [ 105.133679][ T6582] Buffer I/O error on dev loop7, logical block 1184, async page read [ 105.175664][ T6585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.186417][ T6601] loop4: detected capacity change from 0 to 512 [ 105.195924][ T6598] netlink: 'syz.3.723': attribute type 29 has an invalid length. [ 105.224746][ T6585] EXT4-fs (loop2): 1 orphan inode deleted [ 105.230644][ T6585] EXT4-fs (loop2): 1 truncate cleaned up [ 105.239955][ T6585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.240680][ T6601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.267478][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.280145][ T6601] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.294337][ T6599] veth0_vlan: left promiscuous mode [ 105.304198][ T6599] veth0_vlan: entered promiscuous mode [ 105.409017][ T6581] I/O error, dev loop7, sector 8192 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 105.419437][ T6581] Buffer I/O error on dev loop7, logical block 1024, lost async page write [ 105.428142][ T6581] Buffer I/O error on dev loop7, logical block 1025, lost async page write [ 105.436811][ T6581] Buffer I/O error on dev loop7, logical block 1026, lost async page write [ 105.445469][ T6581] Buffer I/O error on dev loop7, logical block 1027, lost async page write [ 105.454213][ T6581] Buffer I/O error on dev loop7, logical block 1028, lost async page write [ 105.463075][ T6581] Buffer I/O error on dev loop7, logical block 1029, lost async page write [ 105.471847][ T6581] Buffer I/O error on dev loop7, logical block 1030, lost async page write [ 105.480865][ T6581] Buffer I/O error on dev loop7, logical block 1031, lost async page write [ 105.489559][ T6581] Buffer I/O error on dev loop7, logical block 1032, lost async page write [ 105.501675][ T6581] I/O error, dev loop7, sector 9216 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 105.618059][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.935314][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 105.949106][ T6627] loop0: detected capacity change from 0 to 128 [ 105.971006][ T6627] ext4: Unknown parameter 'hash' [ 106.045977][ T6624] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.057715][ T6618] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 106.075704][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.118609][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 106.158775][ T6620] veth0_vlan: left promiscuous mode [ 106.179121][ T6620] veth0_vlan: entered promiscuous mode [ 106.213059][ T6641] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 106.243182][ T6634] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 106.251495][ T6639] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 106.265954][ T6638] pim6reg1: entered promiscuous mode [ 106.271378][ T6638] pim6reg1: entered allmulticast mode [ 106.320439][ T6639] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 106.364182][ T6639] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 106.373879][ T6647] loop1: detected capacity change from 0 to 2048 [ 106.381236][ T6647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.388507][ T6641] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 106.418887][ T6647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.450625][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 106.481090][ T6655] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 106.496783][ T6655] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 106.508659][ T6647] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.738: Abort forced by user [ 106.539664][ T6647] EXT4-fs (loop1): Remounting filesystem read-only [ 106.547396][ T6661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 106.574925][ T6647] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 106.621318][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.725424][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 106.748422][ T6681] loop3: detected capacity change from 0 to 128 [ 106.765295][ T6681] ext4: Unknown parameter 'hash' [ 106.778128][ T6681] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 107.039684][ T6689] veth0_vlan: left promiscuous mode [ 107.065346][ T6689] veth0_vlan: entered promiscuous mode [ 107.073540][ T6706] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 107.136357][ T6706] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 107.283932][ T3428] ================================================================== [ 107.292657][ T3428] BUG: KCSAN: data-race in generic_fillattr / shmem_unlink [ 107.299912][ T3428] [ 107.302256][ T3428] write to 0xffff8881043723d8 of 4 bytes by task 3258 on cpu 0: [ 107.310002][ T3428] shmem_unlink+0x130/0x180 [ 107.314547][ T3428] vfs_unlink+0x275/0x430 [ 107.318949][ T3428] do_unlinkat+0x236/0x4c0 [ 107.323403][ T3428] __x64_sys_unlink+0x2e/0x40 [ 107.328151][ T3428] x64_sys_call+0x280f/0x2d60 [ 107.332866][ T3428] do_syscall_64+0xc9/0x1c0 [ 107.337499][ T3428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.343446][ T3428] [ 107.345790][ T3428] read to 0xffff8881043723d8 of 4 bytes by task 3428 on cpu 1: [ 107.353372][ T3428] generic_fillattr+0x1dd/0x2f0 [ 107.358256][ T3428] shmem_getattr+0x17b/0x200 [ 107.363222][ T3428] vfs_getattr+0x19b/0x1e0 [ 107.367685][ T3428] vfs_statx+0x134/0x2f0 [ 107.371962][ T3428] vfs_fstatat+0xec/0x110 [ 107.376333][ T3428] __se_sys_newfstatat+0x58/0x260 [ 107.381400][ T3428] __x64_sys_newfstatat+0x55/0x70 [ 107.386540][ T3428] x64_sys_call+0x141f/0x2d60 [ 107.391268][ T3428] do_syscall_64+0xc9/0x1c0 [ 107.395851][ T3428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.401799][ T3428] [ 107.404140][ T3428] value changed: 0x0d850111 -> 0x0e1d9791 [ 107.409934][ T3428] [ 107.412363][ T3428] Reported by Kernel Concurrency Sanitizer on: [ 107.418800][ T3428] CPU: 1 UID: 0 PID: 3428 Comm: udevd Not tainted 6.12.0-rc1-syzkaller #0 [ 107.427433][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.437795][ T3428] ==================================================================