last executing test programs: 2.107417388s ago: executing program 1 (id=8610): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x80000}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x3, 0x407ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.065570294s ago: executing program 1 (id=8612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) 1.55069875s ago: executing program 3 (id=8625): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.464294401s ago: executing program 3 (id=8626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190da) 1.463388541s ago: executing program 3 (id=8627): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.437157154s ago: executing program 3 (id=8628): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.420568146s ago: executing program 3 (id=8629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) 1.230097141s ago: executing program 3 (id=8636): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="993b972bf7e4b64b3e102589970b43b82e2e15d1fcf90548751106d02393741f13ebef9c8fcdce6b8653bab9c3cebbd444d50177c886cd421d72b64c63c3e1af4ac299b450a5954b5538f88897e1b008024954a7865926eb620a3f7318a314fc7912d5cb5486d920ccb8e5592b80ae916eb16aff373c097df7037f54d6b1760b6dee1a725129bb2e89cc804b3d864e11a0ab2a6169431b5234cf52dfcfb487d04e734a7470eddda688fddb84d2b0ab99c1731da488b2a1a3e2243cdf683ad4c0aba9f146d53560fa708ab11f2df7e8f0226b6527efe780a399b0686175", @ANYRESDEC=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x8080) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x31, r3, 0x1, 0x70bda6, 0x24dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x80, 0xb0, 0xffe00000, 0x4, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x66, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x26201, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c00)={0x1ff}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="150000002000000000000052", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x34, r8, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = socket(0x10, 0x3, 0x0) connect$netlink(r12, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000003680)=@newtaction={0x2774, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x2760, 0x1, [@m_csum={0x12c, 0x20, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x6, 0x1, 0xfffffff8}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd67c, 0x7, 0x5, 0x5, 0xb94ad1eb}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8001, 0x1, 0x0, 0x40}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xf6, 0xffffffffffffffff, 0x9, 0x200}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x8871, 0x7, 0x28, 0xa}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1000, 0x5, 0x8, 0x8001}, 0x3d}}]}, {0x56, 0x6, "66548f3a5c407f43ba0c934eb4d58a492e3f0bd5a1a2bfd29435008c71136ebf338cdd5ab0d5e4074b740a0b8ee2a45f39b65738d94ad2093ecd7be4f9eb52e303299eb8694dd2f2061d58bc8f627e896ae8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2224, 0xd, 0x0, 0x0, {{0xb}, {0x2158, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x9, 0x80000001, 0x40, 0x9, 0x13e, 0x10000, 0x2a, 0x2, 0x9, 0xffffff59, 0x4, 0xd, 0x3, 0x1000, 0x7, 0x6, 0x101, 0x0, 0xa, 0x6, 0xffffffff, 0xb, 0x8, 0x0, 0x0, 0x7, 0x1, 0xa000, 0xa, 0x1, 0x2, 0x6, 0xfff, 0x6, 0x4, 0x2, 0x800, 0x8, 0x12, 0x8, 0xa26, 0x6, 0x3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x80000000, 0x10001, 0x7ff, 0xef01, 0x9, 0x2, 0xf, 0xd, 0xfffffffa, 0x3, 0x6, 0x0, 0x465d, 0x5, 0x1, 0x8, 0x4, 0x401, 0x4, 0x6, 0x4, 0xb49, 0x498, 0xbcde, 0x401, 0x7fffffff, 0x36e, 0x3, 0xffff7fff, 0x4e92286a, 0x1, 0x9, 0x8, 0x98, 0x401, 0x8, 0x9, 0x6, 0x2, 0xfffff461, 0x9547, 0x1, 0x5, 0x81, 0x3, 0x1, 0x0, 0xfae, 0x2, 0x0, 0xf17f, 0x0, 0x1, 0x8c3, 0x9, 0x80000001, 0x0, 0x20e, 0x8, 0x1, 0x7, 0xf5, 0x10001, 0x101, 0x4, 0x867b, 0x8000000, 0x1, 0xf4d, 0x7, 0x9, 0x4, 0x2, 0x3, 0x8, 0x2, 0x5634, 0x0, 0x2, 0x8, 0x6, 0xa, 0x9, 0x4, 0x100, 0xa, 0x949, 0x0, 0x4, 0x400, 0x8, 0x5, 0x0, 0x6, 0x6, 0x0, 0x101, 0x800, 0x7ff, 0x0, 0x9, 0x1, 0x6, 0x3, 0x2, 0x4, 0x2, 0xd2b, 0x400, 0xf6e1, 0xae, 0x0, 0x8, 0x8, 0xfffffffd, 0xa00, 0x4, 0x2, 0x2, 0x5, 0x3, 0x0, 0x40, 0x2, 0x0, 0xf, 0xffffffff, 0x2, 0x25, 0x9e9c, 0x7, 0x0, 0x6, 0xa, 0xffffffff, 0x8, 0xffffffbb, 0x8, 0x6, 0x800, 0x8, 0x401, 0x7, 0xa, 0x0, 0xffff7170, 0x7, 0xffffffff, 0x4, 0x80000000, 0xd1, 0x29d, 0x2, 0x8, 0x2, 0x6, 0xe, 0x0, 0x80000000, 0x3, 0x7, 0xa9, 0x4, 0x0, 0x0, 0x399, 0x3, 0x2, 0x7, 0xff, 0x56, 0x73, 0x1, 0x4, 0x8, 0x1, 0x0, 0xfff, 0x6e, 0x7fff, 0x5, 0xff, 0x8001, 0x1, 0x2, 0x100, 0x1, 0x2, 0x2, 0xcfe, 0x3, 0x5, 0xceb, 0x400, 0x9, 0x9, 0x6, 0x9, 0x3, 0xba, 0x1e7, 0xfff, 0x6, 0x0, 0x5, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x10000000, 0x8, 0xf, 0x9, {0x0, 0x3, 0x1, 0x1, 0x1, 0x7}, {0x2, 0x1, 0x2, 0x95, 0x3, 0x7}, 0x6, 0x10}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x2, 0x4, 0xd9, {0x1, 0x814c8bbdee165c2a, 0x6, 0x7, 0x4, 0x400}, {0x5d, 0x0, 0x9, 0x5, 0x200, 0x5a0}, 0x10, 0x3, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x57, 0x0, 0x800000, 0x8, 0x4, 0x9, 0xa, 0xddd, 0x400, 0x6, 0x7fff, 0x1, 0x5, 0x16f3, 0x58, 0x0, 0x5, 0x12e6, 0x2, 0x2, 0x4, 0x2, 0x15b, 0xffffffff, 0x10001, 0x3, 0x2, 0xfffffff7, 0x7, 0x3, 0x6, 0x3ff, 0x9, 0x2, 0x4, 0xff, 0x6, 0x4, 0x5, 0x9, 0x3, 0x3, 0x80, 0x2, 0x5, 0x842b, 0x2, 0xf6, 0x4, 0x1, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0xffffff2e, 0x5, 0x5, 0x8, 0xc, 0x10, 0x9, 0x8, 0x37ff, 0xe, 0x0, 0x8e, 0x9, 0x0, 0x8001, 0x7, 0x10, 0x8, 0x3, 0x7, 0x8000, 0x0, 0x5, 0x1, 0xc86, 0x8, 0x80000001, 0x401, 0x7, 0xd, 0x400, 0x9, 0x7f, 0x8000, 0xfff, 0x4, 0x3, 0x200, 0x200, 0x5, 0x0, 0x5, 0x2c, 0x80, 0x3, 0x9, 0x3, 0x2, 0x1, 0x1, 0xc2, 0x70ef, 0xe01, 0x3, 0xe, 0x8f95, 0xfffffffe, 0x6, 0x7, 0x3, 0x1, 0x6, 0xffff, 0x0, 0x4, 0x7, 0x4, 0xd, 0x2, 0x6, 0x96ad, 0x0, 0x1, 0x8, 0x0, 0x3, 0x4, 0x5, 0x8, 0x8, 0x4, 0x95, 0x7, 0xec67, 0x5, 0xb, 0x5, 0x1ae, 0x6, 0x5, 0x5d, 0x1, 0xd, 0x1, 0x7, 0x9, 0x4, 0x0, 0x9, 0x2, 0xf4b, 0x4, 0x3ff, 0x8, 0x9, 0x7, 0x0, 0x3, 0x7, 0xbb59, 0x6d, 0x7, 0x2, 0x6, 0x8, 0x1, 0x505, 0x0, 0x4, 0x7, 0x10c1, 0x0, 0x10001, 0x0, 0x8000, 0xf6fc, 0x6, 0xffff, 0x49511d45, 0x4, 0x7, 0x100, 0x4, 0x3, 0x10, 0x101, 0x6, 0x4, 0xffffc000, 0x7, 0xff, 0xfffffff7, 0x5, 0x1, 0x6, 0x9, 0x7, 0x7fff, 0x0, 0x9, 0x9, 0x0, 0x20000, 0x40, 0x3, 0x7f5, 0x8, 0xb, 0x2, 0x6, 0x4, 0x10000, 0x172, 0x8, 0x0, 0x8, 0xff, 0x3, 0xd, 0x8a6f8ed, 0x10000, 0x500000, 0x9, 0x6, 0xc00000, 0x7, 0x4, 0x7, 0xfffffff9, 0x1, 0x4, 0x6d9b, 0x8, 0x4, 0x1000, 0x0, 0x7fffffff, 0x8, 0x59e, 0x8, 0xd65, 0x8, 0x9, 0x2, 0x7fffffff, 0xab, 0x4, 0x0, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x4, 0x2, 0x2, {0xb1, 0x2, 0x0, 0x6, 0x8, 0x90000}, {0x80, 0x2, 0x8, 0x5, 0x8, 0x22e80000}, 0x2, 0x7, 0x41}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x3, 0xb10c, 0x22, 0x5, 0x5, 0x0, 0xf, 0x1, 0x68af669a, 0x81, 0x40, 0x4c3, 0x7ff, 0x2, 0xffff8fb9, 0x9, 0x4, 0x9, 0x6, 0x7, 0xac04, 0x3, 0xe1, 0x6, 0xd, 0x1, 0x1, 0x0, 0xa06f, 0x3, 0x9, 0x37ced84b, 0x10000, 0xe651, 0x0, 0x7, 0x4, 0x4, 0x2, 0x80, 0x4d8, 0x0, 0x67, 0x1, 0x8, 0xfffffffe, 0x8, 0x1, 0x9, 0x6, 0x401, 0x1ff, 0x8001, 0xfffffffb, 0x6, 0x1, 0x3, 0x5, 0xe, 0x200, 0x6, 0xffffffff, 0x200, 0x7fff, 0x8, 0xfffffc00, 0x2, 0x2, 0x80000000, 0xd4, 0x4, 0x4, 0x5, 0x1, 0x5, 0x4, 0x1ff, 0x401, 0x5, 0x4, 0x2000, 0x9, 0x8000, 0x5, 0xfffffff8, 0x6ed9, 0x80000000, 0x9, 0x2, 0x6, 0x1200000, 0xffff, 0x5, 0x4, 0x8d84, 0x9a3f, 0x225a, 0x800, 0x142, 0xfffffffd, 0x784b, 0x2, 0x6, 0x5, 0x4, 0x2d77, 0x5, 0x3, 0x1, 0x9, 0x9, 0x86d, 0x2, 0x7, 0x7, 0x1, 0x8, 0x3, 0x9, 0x0, 0x9, 0xab, 0x7, 0x8, 0x1, 0x1, 0x800, 0x7070, 0x9, 0x9, 0x6, 0x4, 0x0, 0x10000, 0xd68, 0x1, 0x5, 0x1, 0xce5, 0x6, 0xd, 0x7ff, 0x328, 0x80, 0x5, 0xc, 0x6, 0x4, 0x3, 0x2, 0xe, 0x1, 0x5, 0x4, 0x7, 0x3, 0x3ff, 0xfff, 0x9, 0x7, 0x44ae9dda, 0xe96, 0x7, 0x6, 0x4, 0x0, 0xc, 0xb, 0x7fffffff, 0x6, 0x6, 0x4, 0x1, 0x8, 0x0, 0x6, 0x1, 0xde6a, 0x2, 0x2, 0x7, 0x7, 0x2, 0xfffffffa, 0xffffffff, 0x8b85, 0x16, 0x8000, 0x2, 0x800, 0x2, 0x5, 0x4, 0x5, 0x7, 0xd284, 0xe77, 0x3, 0x8, 0x144, 0x6, 0x6, 0x7, 0x7, 0x8000, 0xffff493e, 0xce9a, 0x8, 0x9, 0x7, 0x9, 0x4, 0x5, 0x4, 0x1, 0x6, 0xb9, 0x800, 0x1, 0x28, 0x7, 0x4, 0x10, 0x10, 0x8e, 0x0, 0xc, 0x8, 0xcaaf, 0x72, 0x7, 0xffffff94, 0x8, 0x1, 0x8, 0x3, 0xa00, 0x7, 0x8000, 0x2, 0x7f, 0x5, 0x3, 0x6, 0x1, 0x7, 0x20000000, 0x9, 0xffffbce9, 0x9, 0xfffffffe, 0x0, 0x1, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x70de, 0x2, 0x4, 0x5, 0x0, 0x0, 0x8, 0x10, 0x7f, 0x5, 0x75a9, 0x8, 0x8001, 0x9, 0x4, 0x6, 0x7f, 0x80, 0x0, 0x2, 0x3d, 0x3, 0x5, 0x2, 0xffffffff, 0x5, 0x8, 0xfffff096, 0x0, 0xf5b4, 0x4, 0x61, 0x800, 0x13, 0x401, 0x401, 0x5, 0xfffffffb, 0x2a, 0x0, 0xfc2, 0x6c000000, 0x3, 0x5, 0x0, 0x4, 0x80000000, 0xf8000000, 0x8000, 0x10, 0x8, 0x40, 0x7a, 0xf, 0x0, 0xfffffff8, 0x1, 0x1, 0x9, 0x4, 0x800, 0x0, 0x40, 0x3bf9, 0x0, 0x757, 0x6, 0xffffff01, 0x0, 0x1, 0x8, 0xff, 0x6, 0x1, 0x3a7, 0x3, 0x7, 0x2000000, 0x700, 0x6, 0xb1e, 0x3d1b, 0x3c13, 0x40, 0x9, 0x400, 0x9, 0x7, 0x10001, 0x67a, 0x1, 0x8, 0xe, 0x1f0, 0xc, 0x9, 0x3, 0x401, 0x10000, 0x2, 0xfff, 0xff, 0x1, 0x0, 0x4, 0x1, 0x3, 0x3, 0x5, 0xfffffff9, 0x1c00, 0x7fff, 0x7, 0x8001, 0x7fffffff, 0x0, 0x0, 0x800, 0x6, 0x72a9, 0x10001, 0x7, 0x81, 0x17, 0x1, 0x9, 0x8, 0x7, 0x0, 0x8, 0x100, 0x9, 0x6, 0xc1, 0x8, 0x0, 0x0, 0xff, 0xb2, 0x757, 0x7fffffff, 0x101, 0xf911, 0x3, 0x1, 0x7, 0x7f, 0x5, 0x9, 0xdb, 0xfffffffc, 0xffffffff, 0x7, 0x96, 0x80000000, 0x301f, 0x1000, 0x2, 0x800, 0x8, 0x1, 0x3, 0x1000, 0x2e, 0x2, 0x6, 0x7, 0x2, 0x8, 0x6e, 0x7fffffff, 0x80000001, 0xd8, 0x2, 0xfffff10b, 0x78, 0x7fff, 0xfffffff7, 0x8f0c, 0x401, 0x5, 0xd3, 0xa, 0x7, 0x4, 0x10000, 0x5f31, 0x6f, 0x6, 0xee, 0x0, 0xd71c, 0x33, 0x81, 0x5, 0x6, 0x80, 0x1000, 0x6, 0x8, 0xeb3, 0x3, 0x4, 0x6, 0xc2, 0x0, 0x27a, 0x5, 0xfffffff0, 0x9b8e, 0x800, 0x7fffffff, 0x6, 0x6, 0x1, 0x0, 0x4, 0x5, 0x79, 0x22a, 0x80, 0xfff, 0x7fffffff, 0xcc, 0x2, 0x5, 0x3ff, 0x3, 0x1, 0x1, 0x9, 0x7ff, 0x68d7, 0x5, 0x9, 0x5, 0x6b, 0x0, 0x101, 0x7, 0xa89, 0x0, 0x9, 0x1ff, 0x2, 0x3ff, 0x889, 0x101, 0x1, 0x5, 0xe, 0x6, 0x2, 0x14, 0x8001, 0x9]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0x6, 0x6, 0x400, 0x10, 0x3, 0x2, 0x0, 0x2, 0x3, 0x6, 0x8, 0xf038, 0x0, 0x40, 0x0, 0x2, 0x5, 0x7, 0x5, 0xfffffc00, 0x4, 0x3, 0x6, 0x9, 0xfffffffd, 0x4, 0x0, 0xfffffffc, 0x3, 0x6, 0x6, 0x7fff, 0x3, 0x2, 0x81, 0x4, 0x8c8d, 0x8001, 0x1ff, 0x6, 0x3, 0x3, 0x190e, 0x5, 0x80000001, 0x0, 0x2, 0xf, 0x6, 0x12, 0x6, 0x1, 0x3, 0x8, 0x8, 0x11c, 0x2, 0x1cc, 0x81, 0x3, 0x8, 0x1, 0x800, 0x80000001, 0x2, 0x18e5, 0x4, 0x2, 0x9, 0x1, 0x5, 0x8, 0x9, 0x80000000, 0x800, 0x1, 0xac9, 0x7, 0xd6, 0xfffffff9, 0x8, 0x9, 0x3, 0x1ff, 0x5, 0x5, 0x26a9, 0x800, 0x1, 0xfffffffd, 0x401, 0xd, 0x5, 0x4, 0x80000000, 0x6, 0x2, 0xffffecc4, 0x7f, 0x6, 0x2, 0x3, 0xa4, 0xf924, 0x4, 0x3ff, 0x1, 0x401, 0x9, 0x1, 0x36b5, 0x6, 0xfffffff8, 0x6, 0x3, 0x10, 0x4d, 0x8, 0x8, 0x3, 0x2, 0xfffffe01, 0xe, 0x1000, 0xeca9, 0x6, 0x1, 0xfffffff4, 0x0, 0x0, 0x4, 0xf19e, 0x4, 0x2, 0x0, 0x100, 0x5, 0x7, 0x97, 0x2, 0x8, 0x9, 0x7ff, 0x2, 0x5b14, 0x3, 0x1, 0xd, 0x15, 0x0, 0xffffffff, 0x7, 0xa7e7, 0x7, 0x80, 0x9, 0xfffffffb, 0x2, 0x80000000, 0x2fc, 0x6, 0x3, 0x8000, 0x2, 0x3, 0xfffffffd, 0x444, 0x2, 0x2, 0x4, 0x7, 0x6, 0x5, 0x5, 0x4, 0x3, 0x2, 0x2, 0x733, 0x0, 0x9, 0x3, 0x3, 0x6, 0xa7f4, 0x7, 0x1, 0x5, 0x40, 0x98, 0x5, 0x7fffffff, 0x0, 0x8, 0x7, 0x9, 0xfffffffb, 0x0, 0xd5b8, 0x8, 0x2, 0x8, 0x9, 0x0, 0x4, 0x7, 0x5, 0x9, 0x9, 0x4, 0xfffffffa, 0x7fff, 0x101, 0x5, 0x8bb, 0x8, 0x9, 0x2, 0xffffffff, 0x6, 0x42, 0x8001, 0x7, 0x3, 0x2, 0x1, 0x400, 0x6, 0x5, 0x30, 0x950, 0x3, 0x6, 0x10001, 0x9, 0x401, 0xfffffffa, 0x7, 0x2, 0x7, 0x10001, 0x75d3, 0x1, 0x4, 0x9, 0x3, 0x512, 0xfffffc4a, 0xffffffff, 0x1, 0x7, 0x37b, 0x3, 0x3, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x7, 0xfffffff8, 0x3, 0x2, 0x483, 0x4, 0x7d, 0x5, 0xe549, 0x6, 0x80000000, 0xffffffc0, 0x8001, 0x4, 0x6, 0xfffffffb, 0xf, 0x81, 0xfffffffd, 0x4, 0x1ff, 0x5, 0x0, 0x3, 0x9, 0x2, 0xff, 0x1, 0x4, 0x1, 0x7, 0x1000, 0x2, 0x4f6, 0x6, 0x9, 0x3, 0x0, 0x5, 0x9, 0x6f2, 0x6, 0x3, 0x6, 0x7, 0x3, 0x8, 0x5, 0x1, 0x0, 0x80000000, 0x0, 0x8, 0xb, 0x8, 0x40, 0x800, 0xe2bb, 0x4, 0x1, 0x0, 0xb90e, 0x200, 0x5, 0x3, 0xffff, 0xb, 0xc5c, 0x5, 0x200, 0x2, 0x5, 0x7fff, 0x711, 0x40, 0x9, 0x7fffffff, 0x1, 0x5, 0x1, 0x2, 0xee, 0x3, 0x9, 0x200, 0x4, 0x2, 0x2, 0x1, 0x6, 0x17, 0xa55, 0x8, 0x1580, 0xffff1890, 0x9, 0x8, 0x0, 0x49, 0xf0c7, 0x81, 0xaa, 0x10000, 0x5, 0x2, 0x10001, 0x5, 0x2, 0x9, 0x0, 0x0, 0x6, 0x3, 0xbd8c, 0x10001, 0xb9e3, 0x412, 0x200, 0x7, 0x2f, 0x8, 0x0, 0x3ff, 0x8, 0x4, 0x1, 0x3e, 0x22, 0xfffff637, 0x180, 0xa, 0xfffffffc, 0x8001, 0x9, 0x6, 0x401, 0x9, 0xcf3e0000, 0x65, 0x2, 0x5, 0x5, 0x6, 0x81, 0x4e1e, 0xf, 0x6, 0x2, 0x3, 0x7ff, 0x6, 0xa, 0xfffffff6, 0x1, 0x6, 0x2, 0x3, 0x3, 0x4, 0x5, 0x7, 0x7, 0x4, 0x7fff, 0x1711a4eb, 0x80000000, 0x5, 0x7, 0xffff, 0x4, 0x4, 0x2f9, 0x80000000, 0x0, 0x4, 0xb, 0x7, 0x5, 0x50700, 0x4, 0x147c, 0x8, 0x2, 0x12ac4ee0, 0x6, 0x1, 0x3, 0x34, 0x3, 0x8, 0x1ff, 0x6, 0x28, 0x2, 0x8, 0x7, 0x0, 0x80000000, 0x4, 0x10, 0x4, 0x7, 0x0, 0xa, 0x2, 0x6, 0x9, 0xa6, 0x144d000, 0xc, 0x9, 0x800, 0xd, 0xd, 0xfffffffb, 0x6, 0x9, 0x3, 0xffffff7f, 0x71, 0x8, 0x8, 0xc229, 0x3, 0x931a, 0x9, 0x2, 0x9, 0x3, 0xc, 0x5, 0x1ff, 0xfff, 0x6, 0x3, 0x1cea4d5f, 0x5, 0x7, 0xfff, 0x55, 0x0, 0x100, 0xd, 0x4, 0x1, 0x3, 0x7, 0x2c9d, 0x0, 0x200, 0x0, 0xc83, 0x0, 0x80000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xc, 0x9, 0x3, 0x9, 0x1, 0x8, 0x3, 0x8001, 0xb5, 0xd3, 0x6, 0x3, 0x4, 0x87, 0x848c, 0x0, 0x91f3, 0x5a71, 0x94, 0x0, 0x9, 0xe8a, 0x80000000, 0x5, 0x3, 0x8001, 0x200, 0x0, 0x4, 0x7ccf, 0x4, 0x5, 0xfffff908, 0x9, 0xffff, 0x1ceb, 0x7, 0x1, 0xd, 0x5780, 0x9, 0x4, 0x6, 0x4, 0xc, 0xef8b, 0x4, 0xfb2f, 0x479, 0xd6e, 0x8, 0xdc, 0x8, 0xc, 0x94f5, 0x7, 0x7f, 0x101, 0xfffffffc, 0x9e80, 0xef6, 0x4, 0xffff0001, 0x8001, 0xacbc, 0x5e01, 0x7, 0x5, 0x2, 0x6, 0x9e4, 0x2bc6, 0x2, 0x8, 0x7fff, 0x82, 0x5, 0x7, 0x9, 0x2, 0xb8dc, 0x7fffffff, 0x7, 0xff, 0x6, 0x4, 0x668, 0x1, 0x0, 0xa7aa, 0x8, 0xa48, 0x4, 0x10, 0x7ff, 0xff, 0x6, 0x9, 0x4, 0x3, 0x8, 0x2, 0x3, 0x9, 0x315, 0xfffffff1, 0x9, 0xda49, 0x80b2, 0x8, 0x80, 0x0, 0x46a, 0x2, 0x1, 0x4, 0x4, 0xfa9f, 0x7, 0xfffffff1, 0x9, 0xfffff800, 0x6, 0x2, 0x8000, 0x9, 0x7, 0x6, 0xfa7, 0x4, 0x0, 0xf, 0x3, 0xc2dd, 0xbe, 0x7f, 0x4, 0x400, 0x6, 0x40, 0x2, 0x2, 0x2, 0xb, 0x6, 0x7, 0xff, 0x9, 0x9, 0x7d71ad21, 0x1, 0xc0d, 0xff, 0x8fa, 0x6, 0x4bd, 0x40, 0x2, 0x55, 0x7d941639, 0x4, 0x9ac, 0x88, 0x5, 0x6, 0x2, 0x3, 0x1010, 0x3, 0x7, 0x1, 0x9, 0x1, 0x81, 0x4, 0xff, 0x81, 0x6, 0x7f, 0x9, 0x5, 0x6, 0x9, 0x1000, 0x5, 0x0, 0x5, 0xfff, 0x7, 0xee3, 0x1, 0x1, 0x6, 0x3, 0x8, 0xfffffff2, 0x4, 0xb9cc, 0x12b7, 0x6, 0x0, 0x10, 0xffff, 0xc97, 0xfac, 0x9, 0x80000001, 0x7, 0x7, 0xec4d, 0x7, 0x5, 0x9ae, 0x6, 0x5, 0x423d, 0x3, 0x80000001, 0x8001, 0xf, 0x7, 0x800, 0x5, 0x6, 0x80000000, 0x4, 0x6, 0x2, 0x80000000, 0x38, 0x7, 0x4, 0x4, 0x8001, 0xfffffff9, 0x4601b0e7, 0xc2, 0x80, 0x2, 0x101, 0x2, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0x4, 0x5, 0x5, 0x2, 0x3ff, 0x8, 0x9, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x22778b07}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x35a8, 0x390, 0x1, 0x8001, 0x1, 0x7, 0x3, 0xfff, 0x9, 0x6, 0x3, 0x5, 0xff, 0x100, 0xe, 0x0, 0x1, 0x3fd6, 0x9, 0x6, 0xfffffff8, 0x698, 0x401, 0x800, 0x7, 0x6, 0x2, 0x800, 0x516f, 0xfffffffe, 0x3ff, 0xfffffff7, 0x665f, 0x1, 0x9, 0x1, 0x1, 0x40, 0x10000, 0x4, 0xaa, 0x764, 0x1, 0x62d, 0x200, 0x1b4, 0x5, 0x4, 0x3b, 0x2, 0x3, 0x4, 0x1, 0x9, 0x8001, 0x8, 0x9, 0x7, 0xfffffff7, 0x8, 0x6, 0x2, 0x7f, 0x5, 0x7, 0x6, 0x8000, 0x80000000, 0x8, 0x4, 0x8, 0x5, 0x3, 0x9, 0x52f, 0xffffffff, 0x8001, 0x1, 0x2, 0x1, 0x7, 0x9, 0x9, 0x2, 0x7, 0x9, 0x80000000, 0x3ff, 0x0, 0x10000, 0x81, 0x4, 0x401, 0x7, 0xf2da, 0xc, 0x3, 0x0, 0xfffeffff, 0x100, 0x4, 0xc, 0xc, 0x9, 0x4, 0x6, 0x0, 0xe6, 0x2, 0x7, 0x6, 0x1, 0xce, 0x6, 0x4, 0x8, 0x8, 0x0, 0x7, 0x5, 0x4, 0x2, 0x6, 0x800, 0x2, 0x400000, 0x17, 0x400, 0x5, 0x5, 0x0, 0x9, 0x1, 0x5, 0x2, 0x724, 0x4, 0x52, 0x4, 0x7fffffff, 0x1, 0x7ff, 0x40008, 0x6, 0xd673, 0x3ff, 0x101, 0x2, 0x100, 0x2, 0x8, 0xe0000, 0x7, 0xbc, 0x3, 0x4, 0x101, 0xfffffffd, 0x1, 0x7f, 0x4901bf56, 0x10000, 0x1, 0x2, 0x3ff, 0x6, 0x2eb6, 0x0, 0xba2, 0x5, 0x200, 0x3, 0x9, 0x400, 0x2, 0x17, 0x1, 0x4, 0x8000, 0xffff0000, 0x3, 0x80000000, 0xa, 0x4, 0x0, 0x4, 0x7, 0x2, 0xffff, 0xfffffff4, 0xff, 0x3, 0x80000000, 0x3ff, 0x1, 0x9, 0x6, 0x1, 0xd, 0x3, 0x6, 0x4, 0x2, 0x7, 0x4, 0x1, 0x9, 0x8, 0x200, 0x8, 0xffffff41, 0xf3, 0x3, 0x0, 0x1, 0x8, 0x479a, 0x0, 0x7, 0x1, 0xfffffff9, 0x0, 0x3, 0xffffeb1d, 0x7, 0x0, 0xa, 0x1, 0x8, 0x7, 0x1, 0x6, 0x545c, 0x1, 0xa48, 0xfffffff8, 0x7, 0x4, 0x8100000, 0x4, 0x9, 0xf, 0xfffffffc, 0x7, 0x7, 0xcb, 0x8, 0x7, 0x3, 0x2, 0x8, 0x2, 0x4, 0x6, 0x4]}], []]}, {0xa3, 0x6, "4ef0ce1e751b571023b34536a19707dc100befb052f70fe3a490d18b20cd98f9e4d7b2c9d182de9310b697065b865d0a520b31e0b93fd1fa72ce7143845e9b820938c53a8abb5c57cbd10b40469dc7107214f47921d2d3b1c29718d462e823d8082c6dd9ecc7aa8fd2af8d7daa93f91b28db9b5b54e00f69a7f157601a567a1ae4076cf20d82e89cf2d2bbf2fab1ca73c804a9b71a7f5169532e30a6e282be"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x120, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_ACTION={0x6, 0x3, 0x2d}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ZONE={0x6, 0x4, 0x10}]}, {0xcd, 0x6, "de9f2023d60e95c328181e40b987c6279d5e2dc1957d864adc6c394038d326956fc6134d1d8991561e0508b26eaa89a5b6d55963878b0240efa26d08f149e51217b18cefdaa04ddbdad619ec13ba268d1b98b6c212979f1564925048596ccfc7f452f7a9fbf17b0556e53d4875c39ec9c38ee5acba1f726d13c1c149b40dc123a0b79a626c4f390e38ed5c4cfa787e48afbb8e8309319b18559a5cf4231f748709211b0c45e9abe269cfe9b609f566ac7e16bfbe67910b8574bac02df46fadad1b73815c7396399ad6"}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}, @m_mirred={0x1b4, 0x18, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0xffffffffffffffff, 0x400, 0xc1}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x68, 0x4, 0x7ff, 0xc}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffd47, 0x3, 0x4, 0x6b}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7fff, 0x6, 0x1, 0x9}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x5, 0x2, 0x2, 0x80000000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x405, 0x1, 0x6, 0x2}, 0x3}}]}, {0xc5, 0x6, "0157a649b3c61d28ea04bb425d49f2bce71f0614ec4a2327a4b6d275097088a5d62a410c6024ac313380d0d6849910eab9827574379824304329f17fa4bda47110622ae076b986d47658a34bc031d0be314489af39ff0d33b54f125d52579cbc3abb31138b455a0d209c19604dc8b43c3b5aef52ef08098e18cb9618db00d3bea55763c071387b71d9bda82772912c604115928362001627cd219adb7b6726dfe4c7fcde637f1ac77ae5d2f73df0257e67aa294f4f51a507570a399070c44a8c82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x138, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x80000001, 0x8, 0x36, 0x10001}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7ff}]}, {0xdc, 0x6, "1a238b6d853f87e8e2687f76d57d35648bba48541fe999e45286a9af9ee1ca02d127884282ab9854520ec3ce7446299922b8af1bc3add7088d8752fa2206c141d923dc8d35b47ba31630f9379a5f39b8de65301b0c9c6adc6bdf58d58f9b7792d1413ab5061f16f53b387777b966bd854b6db327deac7bcb96728674f91688069fdaf778420d74d8a5ab86b2d57052a75d011b227b53789609154317f62f484840b9e22a6d285cda407f13a339f787c3930b3aae31838cf4afb00b0a03cd57aa0692f9383cc5d828a6b68b322d55ef6732d29b3b20aea8b9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2774}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_getlink={0x68, 0x12, 0x200, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x10, 0x1}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000ac0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)=ANY=[@ANYBLOB="24030000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000608000100", @ANYRES32=0x0, @ANYBLOB="b400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="f400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff08000100", @ANYRES32=r14, @ANYBLOB="c000028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000d4d080007000000000044000100240001006270665f686173685f66756e630000000000000000000000000000000000000005aa03000b0000001400040002000809020002000700f7030a00000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x324}, 0x1, 0x0, 0x0, 0x40084}, 0xc040) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x3f) socket$nl_netfilter(0x10, 0x3, 0xc) 1.16410654s ago: executing program 0 (id=8637): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.16379445s ago: executing program 1 (id=8638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190da) 1.097375358s ago: executing program 0 (id=8639): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.096944458s ago: executing program 1 (id=8640): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.063562342s ago: executing program 1 (id=8641): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x10029bf, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) dup(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0xb, 0xb, 0x9, 0x8, 0x4, 0x2, 0x6, {0x0, @in6={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x7, 0x3, 0x549, 0x2, 0x80}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e22, 0x257b, @local, 0xffff}}}, &(0x7f0000000400)=0x84) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x68) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4005, 0xb, 0x8, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sync() sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf250c00000081fe260005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x1000) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 917.605821ms ago: executing program 0 (id=8643): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 858.907039ms ago: executing program 0 (id=8646): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 834.559912ms ago: executing program 0 (id=8649): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 774.37221ms ago: executing program 0 (id=8650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) 632.117968ms ago: executing program 2 (id=8654): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 592.344403ms ago: executing program 2 (id=8655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000008400"], 0x0, 0xffffffff}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) 568.493196ms ago: executing program 2 (id=8656): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x80000}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x3, 0x407ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 551.133229ms ago: executing program 2 (id=8657): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 502.019755ms ago: executing program 2 (id=8660): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 422.637445ms ago: executing program 2 (id=8662): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYRES8=r1, @ANYBLOB="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"/4353, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="94e542782be96b73ae155733ed5ae053388905acaeb7bec7d82edcc1d6fb138d0b4f20b04238b9a44672e09c1c2c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x100, 0x22}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ppoll(&(0x7f0000003840), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000040)=0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 150.56139ms ago: executing program 4 (id=8666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 128.928303ms ago: executing program 4 (id=8667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000008400"], 0x0, 0xffffffff}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) 113.554915ms ago: executing program 4 (id=8668): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x80000}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x3, 0x407ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 100.473697ms ago: executing program 1 (id=8669): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x240440c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 95.649137ms ago: executing program 4 (id=8670): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c0d0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 28.264286ms ago: executing program 4 (id=8671): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 0s ago: executing program 4 (id=8672): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): pat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.427770][ T29] audit: type=1326 audit(3536822497.672:49378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.451573][ T29] audit: type=1326 audit(3536822497.672:49379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.475681][ T29] audit: type=1326 audit(3536822497.672:49380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.499444][ T29] audit: type=1326 audit(3536822497.672:49381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.523110][ T29] audit: type=1326 audit(3536822497.672:49382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.546574][ T29] audit: type=1326 audit(3536822497.672:49383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.570098][ T29] audit: type=1326 audit(3536822497.672:49384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.0.7683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 477.599529][ T2588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.622934][ T2588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.631430][ T2588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.688729][ T2588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.712159][ T3769] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.744291][ T3767] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 477.765546][ T3779] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 477.821376][ T3769] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.882188][ T3769] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.941606][ T3769] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.958033][ T3798] siw: device registration error -23 [ 478.057658][ T2588] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.091052][ T3811] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 2, id = 0 [ 478.105941][ T3801] IPVS: stopping backup sync thread 3811 ... [ 478.116196][ T2588] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.145170][ T2576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.164918][ T2576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.218920][ T3825] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 478.308778][ T3835] infiniband !yz!: set active [ 478.313583][ T3835] infiniband !yz!: added team_slave_0 [ 478.321865][ T3837] loop0: detected capacity change from 0 to 256 [ 478.324777][ T3835] RDS/IB: !yz!: added [ 478.336398][ T3837] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 478.350448][ T3835] smc: adding ib device !yz! with port count 1 [ 478.356829][ T3837] vfat filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 478.357581][ T3835] smc: ib device !yz! port 1 has no pnetid [ 478.422261][ T2594] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 478.480962][ T3854] FAULT_INJECTION: forcing a failure. [ 478.480962][ T3854] name failslab, interval 1, probability 0, space 0, times 0 [ 478.493692][ T3854] CPU: 0 UID: 0 PID: 3854 Comm: syz.0.7720 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 478.493758][ T3854] Tainted: [W]=WARN [ 478.493802][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.493816][ T3854] Call Trace: [ 478.493823][ T3854] [ 478.493832][ T3854] __dump_stack+0x1d/0x30 [ 478.493856][ T3854] dump_stack_lvl+0x95/0xd0 [ 478.493886][ T3854] dump_stack+0x15/0x1b [ 478.493904][ T3854] should_fail_ex+0x265/0x280 [ 478.493926][ T3854] should_failslab+0x8c/0xb0 [ 478.493956][ T3854] kmem_cache_alloc_noprof+0x69/0x4b0 [ 478.494029][ T3854] ? audit_log_start+0x342/0x720 [ 478.494056][ T3854] audit_log_start+0x342/0x720 [ 478.494077][ T3854] ? __rcu_read_unlock+0x4f/0x70 [ 478.494096][ T3854] audit_seccomp+0x48/0x100 [ 478.494129][ T3854] ? __seccomp_filter+0x832/0x1260 [ 478.494200][ T3854] __seccomp_filter+0x843/0x1260 [ 478.494292][ T3854] ? __schedule+0x85f/0xcd0 [ 478.494318][ T3854] ? __fget_files+0x184/0x1c0 [ 478.494345][ T3854] __secure_computing+0x82/0x150 [ 478.494369][ T3854] syscall_trace_enter+0xcf/0x1e0 [ 478.494439][ T3854] do_syscall_64+0xa4/0x2b0 [ 478.494469][ T3854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.494530][ T3854] RIP: 0033:0x7fc1c79bf749 [ 478.494547][ T3854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.494611][ T3854] RSP: 002b:00007fc1c641f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 478.494632][ T3854] RAX: ffffffffffffffda RBX: 00007fc1c7c15fa0 RCX: 00007fc1c79bf749 [ 478.494658][ T3854] RDX: 0000000000000000 RSI: 0000000000000407 RDI: 0000000000000005 [ 478.494670][ T3854] RBP: 00007fc1c641f090 R08: 0000000000000000 R09: 0000000000000000 [ 478.494681][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.494692][ T3854] R13: 00007fc1c7c16038 R14: 00007fc1c7c15fa0 R15: 00007ffcbefc8108 [ 478.494748][ T3854] [ 478.509179][ T3858] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 478.704835][ T3859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.745189][ T3869] syzkaller0: entered allmulticast mode [ 478.761785][ T3859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.806963][ T3872] syzkaller0: left allmulticast mode [ 478.831444][ T3859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.881556][ T3859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.083022][ T3885] 9p: Bad value for 'wfdno' [ 479.113056][ T3887] __nla_validate_parse: 17 callbacks suppressed [ 479.113070][ T3887] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7734'. [ 479.441402][ T3900] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 479.530145][ T3905] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 479.639688][ T3913] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7745'. [ 479.685038][ T3911] netlink: 'syz.0.7744': attribute type 13 has an invalid length. [ 479.740089][ T3911] gretap0: refused to change device tx_queue_len [ 479.749113][ T3911] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 479.952170][ T3936] netlink: 'syz.1.7755': attribute type 13 has an invalid length. [ 479.969447][ T3936] gretap0: refused to change device tx_queue_len [ 479.976342][ T3936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 480.282848][ T3942] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7757'. [ 480.389439][ T3957] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 480.418447][ T3961] netlink: 'syz.3.7765': attribute type 7 has an invalid length. [ 480.426901][ T3961] netlink: 'syz.3.7765': attribute type 4 has an invalid length. [ 480.453303][ T3961] netlink: 'syz.3.7765': attribute type 4 has an invalid length. [ 480.527605][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7771'. [ 480.536733][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7771'. [ 480.549481][ T2618] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.561082][ T2618] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.580572][ T2618] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.589077][ T2618] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.648018][ T3982] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 480.738286][ T3990] loop0: detected capacity change from 0 to 128 [ 480.748838][ T3990] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 480.769321][ T3990] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 480.792319][ T3990] vfat filesystem being mounted at /245/bus supports timestamps until 2107-12-31 (0x10391447e) [ 480.816165][T22211] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 480.849684][ T3997] loop0: detected capacity change from 0 to 1024 [ 480.856504][ T3997] ext4: Unknown parameter 'obj_type' [ 480.863058][ T3997] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7781'. [ 480.889371][ T3995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7779'. [ 480.914935][ T4002] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.971592][ T4002] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.011664][ T4002] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.075252][ T4002] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.635681][ T4011] tbf_change: 1 callbacks suppressed [ 481.635692][ T4011] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 481.767062][ T4022] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 481.804734][ T4026] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7792'. [ 481.894027][ T2618] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.908203][ T2618] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.916969][ T4032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7793'. [ 481.923680][ T2618] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.934922][ T2618] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.973761][ T4038] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 482.115442][ T4051] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.191180][ T4051] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.270838][ T4051] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.283571][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 482.283584][ T29] audit: type=1326 audit(3536822502.552:50045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.318514][ T29] audit: type=1326 audit(3536822502.582:50046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.342032][ T29] audit: type=1326 audit(3536822502.582:50047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.365655][ T29] audit: type=1326 audit(3536822502.582:50048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.389186][ T29] audit: type=1326 audit(3536822502.582:50049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.412670][ T29] audit: type=1326 audit(3536822502.582:50050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca3628df90 code=0x7ffc0000 [ 482.436201][ T29] audit: type=1326 audit(3536822502.582:50051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.459733][ T29] audit: type=1326 audit(3536822502.582:50052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.483293][ T29] audit: type=1326 audit(3536822502.582:50053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.506756][ T29] audit: type=1326 audit(3536822502.582:50054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.7801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 482.550706][ T4051] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.746010][ T4967] usb usb8-port1: attempt power cycle [ 482.773990][T22211] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.784924][T22211] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.796008][T22211] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.807240][ T2618] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.932357][ T4071] loop0: detected capacity change from 0 to 256 [ 482.942059][ T4071] msdos filesystem being mounted at /250/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 483.020073][ T4074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4074 comm=syz.1.7807 [ 483.299259][ T4097] netlink: 'syz.1.7817': attribute type 10 has an invalid length. [ 483.309706][ T4097] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 483.327191][ T4097] netlink: 'syz.1.7817': attribute type 1 has an invalid length. [ 483.335121][ T4097] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7817'. [ 483.544255][ T2588] Bluetooth: hci0: Frame reassembly failed (-84) [ 484.230268][ T4123] loop0: detected capacity change from 0 to 256 [ 484.240184][ T4123] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 484.257742][ T4123] vfat filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 484.297111][ T2618] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 484.322025][ T4126] __nla_validate_parse: 2 callbacks suppressed [ 484.322040][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7830'. [ 484.485947][ T4133] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 484.559168][ T4137] loop0: detected capacity change from 0 to 512 [ 484.579636][ T4967] usb usb8-port1: unable to enumerate USB device [ 484.649609][ T4145] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 484.805286][ T4151] netlink: 'syz.0.7841': attribute type 4 has an invalid length. [ 484.834287][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7838'. [ 484.970001][ T4163] loop0: detected capacity change from 0 to 512 [ 484.995166][ T4164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7843'. [ 485.111706][ T4171] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 485.161324][ T4173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7850'. [ 485.170303][ T4173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7850'. [ 485.448931][ T2576] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.482024][ T2576] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.514110][ T2576] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.546307][ T2576] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.559336][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 485.565376][ T4248] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 485.926753][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.935917][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.945684][ T4195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.081757][ T4207] netlink: 'syz.3.7863': attribute type 4 has an invalid length. [ 486.167709][ T4205] loop0: detected capacity change from 0 to 764 [ 486.189070][ T4205] rock: directory entry would overflow storage [ 486.195344][ T4205] rock: sig=0x4f50, size=4, remaining=3 [ 486.201027][ T4205] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 486.825997][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7874'. [ 486.877772][ T4237] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 486.906897][ T4234] IPVS: Error connecting to the multicast addr [ 487.017247][ T4249] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 487.290769][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 487.290784][ T29] audit: type=1326 audit(3536822507.562:50829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.353509][ T29] audit: type=1326 audit(3536822507.602:50830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.377357][ T29] audit: type=1326 audit(3536822507.602:50831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.400948][ T29] audit: type=1326 audit(3536822507.612:50832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.424426][ T29] audit: type=1326 audit(3536822507.612:50833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.447972][ T29] audit: type=1326 audit(3536822507.612:50834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.471459][ T29] audit: type=1326 audit(3536822507.612:50835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.495080][ T29] audit: type=1326 audit(3536822507.612:50836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.518609][ T29] audit: type=1326 audit(3536822507.622:50837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.542111][ T29] audit: type=1326 audit(3536822507.622:50838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4255 comm="syz.3.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3eb39c2005 code=0x7ffc0000 [ 487.621803][ T4271] loop0: detected capacity change from 0 to 1024 [ 487.641183][ T4271] EXT4-fs: Ignoring removed orlov option [ 487.660693][ T4271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.990968][ T4279] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.061287][ T4279] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.072589][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7889'. [ 488.141069][ T4279] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.242458][ T4279] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.369948][ T2576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.395504][T22211] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.429458][T22211] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.459970][T22211] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.574567][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.644956][ T4307] loop0: detected capacity change from 0 to 256 [ 488.652418][ T4307] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 488.664367][ T4307] vfat filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 488.770122][ T2618] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 488.863669][ T4325] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 488.878711][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7903'. [ 489.118804][ T4336] netlink: 'syz.4.7910': attribute type 2 has an invalid length. [ 489.126669][ T4336] netlink: 'syz.4.7910': attribute type 4 has an invalid length. [ 489.134425][ T4336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7910'. [ 489.143610][ T4337] netlink: 'syz.4.7910': attribute type 2 has an invalid length. [ 489.151394][ T4337] netlink: 'syz.4.7910': attribute type 4 has an invalid length. [ 489.159184][ T4337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7910'. [ 489.173018][ T4336] tipc: Enabled bearer , priority 0 [ 489.192531][ T4335] tipc: Disabling bearer [ 489.260928][ T4339] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 489.318274][ T4347] FAULT_INJECTION: forcing a failure. [ 489.318274][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.331572][ T4347] CPU: 1 UID: 0 PID: 4347 Comm: syz.4.7915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 489.331620][ T4347] Tainted: [W]=WARN [ 489.331627][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.331641][ T4347] Call Trace: [ 489.331648][ T4347] [ 489.331657][ T4347] __dump_stack+0x1d/0x30 [ 489.331682][ T4347] dump_stack_lvl+0x95/0xd0 [ 489.331730][ T4347] dump_stack+0x15/0x1b [ 489.331747][ T4347] should_fail_ex+0x265/0x280 [ 489.331827][ T4347] should_fail+0xb/0x20 [ 489.331844][ T4347] should_fail_usercopy+0x1a/0x20 [ 489.331921][ T4347] _copy_from_user+0x1c/0xb0 [ 489.331985][ T4347] ___sys_recvmsg+0xaa/0x370 [ 489.332013][ T4347] ? _parse_integer+0x27/0x40 [ 489.332036][ T4347] do_recvmmsg+0x1ef/0x540 [ 489.332122][ T4347] ? fput+0x8f/0xc0 [ 489.332146][ T4347] __x64_sys_recvmmsg+0xe5/0x170 [ 489.332175][ T4347] x64_sys_call+0x2b75/0x3000 [ 489.332229][ T4347] do_syscall_64+0xca/0x2b0 [ 489.332264][ T4347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.332287][ T4347] RIP: 0033:0x7fabb0def749 [ 489.332304][ T4347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.332324][ T4347] RSP: 002b:00007fabaf84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 489.332462][ T4347] RAX: ffffffffffffffda RBX: 00007fabb1045fa0 RCX: 00007fabb0def749 [ 489.332473][ T4347] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003 [ 489.332484][ T4347] RBP: 00007fabaf84f090 R08: 0000000000000000 R09: 0000000000000000 [ 489.332552][ T4347] R10: 0000000000002041 R11: 0000000000000246 R12: 0000000000000001 [ 489.332565][ T4347] R13: 00007fabb1046038 R14: 00007fabb1045fa0 R15: 00007fffd0988428 [ 489.332582][ T4347] [ 489.602422][ T4353] SELinux: failed to load policy [ 489.604856][ T4357] __nla_validate_parse: 1 callbacks suppressed [ 489.604919][ T4357] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7920'. [ 489.623625][ T4357] netlink: zone id is out of range [ 489.628739][ T4357] netlink: zone id is out of range [ 489.634078][ T4357] netlink: zone id is out of range [ 489.639252][ T4357] netlink: zone id is out of range [ 489.645455][ T4357] netlink: zone id is out of range [ 489.645746][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7921'. [ 489.650673][ T4357] netlink: zone id is out of range [ 489.667875][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7921'. [ 489.678726][ T4357] netlink: zone id is out of range [ 489.686576][ T4357] netlink: zone id is out of range [ 489.696033][ T4357] netlink: zone id is out of range [ 489.705693][ T4359] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7921'. [ 489.766562][ T4366] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 490.031777][ T4373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4373 comm=syz.2.7925 [ 490.045732][ T4373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7925'. [ 490.338596][ T4392] wireguard0: entered promiscuous mode [ 490.344307][ T4392] wireguard0: entered allmulticast mode [ 490.374877][ T4397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=4397 comm=syz.0.7931 [ 490.520148][ T4407] bond0: entered promiscuous mode [ 490.525241][ T4407] bond_slave_0: entered promiscuous mode [ 490.531190][ T4407] bond_slave_1: entered promiscuous mode [ 490.536877][ T4407] syz_tun: entered promiscuous mode [ 490.570519][ T4409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7936'. [ 490.585421][ T4407] batadv0: entered promiscuous mode [ 490.593732][ T4407] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 490.603624][ T4407] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 490.639266][ T4407] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 490.671910][ T4407] bond0: left promiscuous mode [ 490.676770][ T4407] bond_slave_0: left promiscuous mode [ 490.682350][ T4407] bond_slave_1: left promiscuous mode [ 490.687784][ T4407] syz_tun: left promiscuous mode [ 490.698424][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'. [ 490.748357][ T4407] batadv0: left promiscuous mode [ 490.781851][ T4423] loop0: detected capacity change from 0 to 128 [ 490.800770][ T4423] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 490.845671][ T4423] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 490.857334][ T4423] vfat filesystem being mounted at /277/bus supports timestamps until 2107-12-31 (0x10391447e) [ 490.872872][ T4423] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 490.889559][ T2588] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.011425][ T4435] loop0: detected capacity change from 0 to 512 [ 491.022590][ T4435] EXT4-fs: dax option not supported [ 491.042395][ T4439] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4439 comm=syz.1.7943 [ 491.067543][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7944'. [ 491.098768][ T4443] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7943'. [ 491.279663][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7947'. [ 491.592916][ T4457] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.642680][ T4457] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.702993][ T4457] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.762247][ T4457] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.833060][ T4471] FAULT_INJECTION: forcing a failure. [ 491.833060][ T4471] name failslab, interval 1, probability 0, space 0, times 0 [ 491.835479][ T53] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.845735][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.3.7956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 491.845830][ T4471] Tainted: [W]=WARN [ 491.845837][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.845850][ T4471] Call Trace: [ 491.845857][ T4471] [ 491.845865][ T4471] __dump_stack+0x1d/0x30 [ 491.845889][ T4471] dump_stack_lvl+0x95/0xd0 [ 491.845911][ T4471] dump_stack+0x15/0x1b [ 491.845952][ T4471] should_fail_ex+0x265/0x280 [ 491.845975][ T4471] should_failslab+0x8c/0xb0 [ 491.845996][ T4471] __kmalloc_node_noprof+0xbe/0x5c0 [ 491.846021][ T4471] ? __vmalloc_node_range_noprof+0x433/0x1310 [ 491.846066][ T4471] __vmalloc_node_range_noprof+0x433/0x1310 [ 491.846165][ T4471] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 491.846206][ T4471] __vmalloc_noprof+0xa4/0xf0 [ 491.846229][ T4471] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 491.846263][ T4471] bpf_prog_alloc_no_stats+0x47/0x390 [ 491.846356][ T4471] ? bpf_prog_alloc+0x2a/0x150 [ 491.846375][ T4471] bpf_prog_alloc+0x3c/0x150 [ 491.846393][ T4471] bpf_prog_load+0x506/0x1140 [ 491.846472][ T4471] ? security_bpf+0x2b/0x90 [ 491.846499][ T4471] __sys_bpf+0x469/0x7c0 [ 491.846524][ T4471] __x64_sys_bpf+0x41/0x50 [ 491.846628][ T4471] x64_sys_call+0x28e1/0x3000 [ 491.846652][ T4471] do_syscall_64+0xca/0x2b0 [ 491.846686][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.846755][ T4471] RIP: 0033:0x7f3eb398f749 [ 491.846771][ T4471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.846859][ T4471] RSP: 002b:00007f3eb23ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.846879][ T4471] RAX: ffffffffffffffda RBX: 00007f3eb3be5fa0 RCX: 00007f3eb398f749 [ 491.846892][ T4471] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 491.846905][ T4471] RBP: 00007f3eb23ef090 R08: 0000000000000000 R09: 0000000000000000 [ 491.846917][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.846930][ T4471] R13: 00007f3eb3be6038 R14: 00007f3eb3be5fa0 R15: 00007ffd1c598a18 [ 491.846948][ T4471] [ 491.847032][ T4471] syz.3.7956: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 491.873095][ T53] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.879245][ T4471] ,cpuset=/ [ 491.885793][ T53] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.889841][ T4471] ,mems_allowed=0 [ 491.894464][ T53] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.898466][ T4471] [ 491.898480][ T4471] CPU: 0 UID: 0 PID: 4471 Comm: syz.3.7956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 491.898510][ T4471] Tainted: [W]=WARN [ 491.898517][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.898530][ T4471] Call Trace: [ 491.898572][ T4471] [ 491.898580][ T4471] __dump_stack+0x1d/0x30 [ 491.898605][ T4471] dump_stack_lvl+0x95/0xd0 [ 491.898625][ T4471] dump_stack+0x15/0x1b [ 491.898669][ T4471] warn_alloc+0x12b/0x1a0 [ 491.898697][ T4471] __vmalloc_node_range_noprof+0x7fc/0x1310 [ 491.898809][ T4471] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 491.898843][ T4471] __vmalloc_noprof+0xa4/0xf0 [ 491.898867][ T4471] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 491.898951][ T4471] bpf_prog_alloc_no_stats+0x47/0x390 [ 491.899057][ T4471] ? bpf_prog_alloc+0x2a/0x150 [ 491.899076][ T4471] bpf_prog_alloc+0x3c/0x150 [ 491.899174][ T4471] bpf_prog_load+0x506/0x1140 [ 491.899202][ T4471] ? security_bpf+0x2b/0x90 [ 491.899228][ T4471] __sys_bpf+0x469/0x7c0 [ 491.899278][ T4471] __x64_sys_bpf+0x41/0x50 [ 491.899309][ T4471] x64_sys_call+0x28e1/0x3000 [ 491.899334][ T4471] do_syscall_64+0xca/0x2b0 [ 491.899427][ T4471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.899449][ T4471] RIP: 0033:0x7f3eb398f749 [ 491.899465][ T4471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.899549][ T4471] RSP: 002b:00007f3eb23ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.899567][ T4471] RAX: ffffffffffffffda RBX: 00007f3eb3be5fa0 RCX: 00007f3eb398f749 [ 491.899579][ T4471] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 491.899655][ T4471] RBP: 00007f3eb23ef090 R08: 0000000000000000 R09: 0000000000000000 [ 491.899668][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.899742][ T4471] R13: 00007f3eb3be6038 R14: 00007f3eb3be5fa0 R15: 00007ffd1c598a18 [ 491.899759][ T4471] [ 491.899821][ T4471] Mem-Info: [ 492.105069][ T4475] loop0: detected capacity change from 0 to 512 [ 492.110672][ T4471] active_anon:12474 inactive_anon:3 isolated_anon:0 [ 492.110672][ T4471] active_file:21441 inactive_file:2689 isolated_file:0 [ 492.110672][ T4471] unevictable:0 dirty:209 writeback:0 [ 492.110672][ T4471] slab_reclaimable:3744 slab_unreclaimable:45913 [ 492.110672][ T4471] mapped:36417 shmem:5969 pagetables:1302 [ 492.110672][ T4471] sec_pagetables:0 bounce:0 [ 492.110672][ T4471] kernel_misc_reclaimable:0 [ 492.110672][ T4471] free:1797233 free_pcp:28065 free_cma:0 [ 492.110736][ T4471] Node 0 active_anon:49896kB inactive_anon:12kB active_file:85764kB inactive_file:10756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145668kB dirty:836kB writeback:0kB shmem:23876kB kernel_stack:5440kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 492.143897][ T4475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 492.144473][ T4471] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.167207][ T4475] EXT4-fs (loop0): 1 truncate cleaned up [ 492.167642][ T4471] lowmem_reserve[]: 0 [ 492.189935][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.193772][ T4471] 2880 [ 492.212802][ T4475] EXT4-fs (loop0): shut down requested (0) [ 492.216183][ T4471] 7859 7859 [ 492.216205][ T4471] Node 0 DMA32 free:2947316kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:2204kB local_pcp:1440kB free_cma:0kB [ 492.430107][ T4481] netlink: 'syz.4.7957': attribute type 10 has an invalid length. [ 492.434650][ T4471] lowmem_reserve[]: 0 0 4978 4978 [ 492.434701][ T4471] Node 0 [ 492.482436][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 492.482452][ T29] audit: type=1400 audit(3536822512.752:51638): avc: denied { setattr } for pid=4474 comm="syz.0.7958" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 492.494374][ T4471] Normal free:4123728kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37020kB inactive_anon:12kB active_file:85764kB inactive_file:10756kB unevictable:0kB writepending:952kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:113312kB local_pcp:64740kB free_cma:0kB [ 492.571706][ T4471] lowmem_reserve[]: 0 0 0 0 [ 492.576257][ T4471] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 492.588999][ T4471] Node 0 DMA32: 3*4kB (M) 3*8kB (UM) 3*16kB (M) 5*32kB (M) 4*64kB (UM) 4*128kB (UM) 5*256kB (M) 4*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 715*4096kB (UM) = 2947316kB [ 492.605669][ T4471] Node 0 Normal: 287*4kB (UME) 264*8kB (UME) 440*16kB (UM) 829*32kB (UME) 1651*64kB (UME) 1272*128kB (UE) 1186*256kB (UME) 1161*512kB (UME) 1045*1024kB (UME) 860*2048kB (UME) 2*4096kB (U) = 4042908kB [ 492.619744][ T4478] futex_wake_op: syz.4.7957 tries to shift op by -1; fix this program [ 492.625259][ T4471] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 492.642694][ T4471] 24419 total pagecache pages [ 492.647366][ T4471] 12 pages in swap cache [ 492.651663][ T4471] Free swap = 46636kB [ 492.655711][ T4471] Total swap = 124996kB [ 492.659866][ T4471] 2097051 pages RAM [ 492.663766][ T4471] 0 pages HighMem/MovableOnly [ 492.668439][ T4471] 81271 pages reserved [ 492.716901][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.724070][ T4487] 9p: Could not find request transport: rdmap [ 492.760631][ T29] audit: type=1326 audit(3536822513.032:51639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.811531][ T4501] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4501 comm=syz.3.7959 [ 492.838217][ T29] audit: type=1326 audit(3536822513.052:51640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.861880][ T29] audit: type=1326 audit(3536822513.052:51641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.885609][ T29] audit: type=1326 audit(3536822513.052:51642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.909219][ T29] audit: type=1326 audit(3536822513.052:51643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.932846][ T29] audit: type=1326 audit(3536822513.052:51644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.956621][ T29] audit: type=1326 audit(3536822513.052:51645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 492.980332][ T29] audit: type=1326 audit(3536822513.052:51646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 493.003830][ T29] audit: type=1326 audit(3536822513.052:51647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 493.037386][ T4509] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 493.069399][ T4509] SELinux: failed to load policy [ 493.094683][ T4513] loop0: detected capacity change from 0 to 1024 [ 493.102192][ T4513] EXT4-fs: inline encryption not supported [ 493.108203][ T4513] EXT4-fs: Ignoring removed nobh option [ 493.113843][ T4513] EXT4-fs: Ignoring removed bh option [ 493.134617][ T4513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.151810][ T4513] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.7969: Allocating blocks 497-513 which overlap fs metadata [ 493.208391][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.227941][ T4517] SELinux: failed to load policy [ 493.301186][ T4521] netlink: 'syz.4.7973': attribute type 1 has an invalid length. [ 493.324224][ T4521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.340707][ T4536] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 493.353984][ T4521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 493.361259][ T4536] SELinux: failed to load policy [ 493.368231][ T4521] bond2: (slave batadv1): making interface the new active one [ 493.383594][ T4521] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 493.403621][ T4541] loop0: detected capacity change from 0 to 256 [ 493.425324][ T4541] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 493.434950][ T4541] vfat filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 493.482370][T22812] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 493.527783][ T4552] FAULT_INJECTION: forcing a failure. [ 493.527783][ T4552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.540958][ T4552] CPU: 0 UID: 0 PID: 4552 Comm: syz.4.7982 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 493.540986][ T4552] Tainted: [W]=WARN [ 493.541053][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.541065][ T4552] Call Trace: [ 493.541072][ T4552] [ 493.541146][ T4552] __dump_stack+0x1d/0x30 [ 493.541170][ T4552] dump_stack_lvl+0x95/0xd0 [ 493.541193][ T4552] dump_stack+0x15/0x1b [ 493.541253][ T4552] should_fail_ex+0x265/0x280 [ 493.541278][ T4552] should_fail+0xb/0x20 [ 493.541296][ T4552] should_fail_usercopy+0x1a/0x20 [ 493.541364][ T4552] _copy_from_user+0x1c/0xb0 [ 493.541459][ T4552] ___sys_sendmsg+0xc1/0x1d0 [ 493.541497][ T4552] __x64_sys_sendmsg+0xd4/0x160 [ 493.541529][ T4552] x64_sys_call+0x17ba/0x3000 [ 493.541609][ T4552] do_syscall_64+0xca/0x2b0 [ 493.541649][ T4552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.541715][ T4552] RIP: 0033:0x7fabb0def749 [ 493.541729][ T4552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.541744][ T4552] RSP: 002b:00007fabaf82e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.541814][ T4552] RAX: ffffffffffffffda RBX: 00007fabb1046090 RCX: 00007fabb0def749 [ 493.541825][ T4552] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 493.541836][ T4552] RBP: 00007fabaf82e090 R08: 0000000000000000 R09: 0000000000000000 [ 493.541846][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.541916][ T4552] R13: 00007fabb1046128 R14: 00007fabb1046090 R15: 00007fffd0988428 [ 493.541931][ T4552] [ 493.543441][ T4554] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 493.738180][ T4563] loop0: detected capacity change from 0 to 512 [ 493.751680][ T4563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 493.764270][ T4563] EXT4-fs (loop0): 1 orphan inode deleted [ 493.770059][ T4563] EXT4-fs (loop0): 1 truncate cleaned up [ 493.776432][ T4563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.801700][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.902319][ T4572] SELinux: failed to load policy [ 494.382396][ T4625] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.402541][ T4625] block device autoloading is deprecated and will be removed. [ 494.854130][ T4635] __nla_validate_parse: 10 callbacks suppressed [ 494.854148][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8014'. [ 494.934124][ T4637] loop0: detected capacity change from 0 to 512 [ 495.265206][ T4642] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.291242][ T4643] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 495.314887][ T4642] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.416151][ T4642] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.450325][ T4658] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 495.494217][ T4661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8025'. [ 495.505030][ T4642] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.520659][ T4658] SELinux: failed to load policy [ 495.535884][ T4664] loop0: detected capacity change from 0 to 512 [ 495.661004][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.669555][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.681749][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.690120][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.703748][ T4674] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 495.893441][ T4692] loop0: detected capacity change from 0 to 512 [ 495.935704][ T4696] wg2: entered promiscuous mode [ 495.940617][ T4696] wg2: entered allmulticast mode [ 495.962292][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8040'. [ 496.156331][ T4700] FAULT_INJECTION: forcing a failure. [ 496.156331][ T4700] name failslab, interval 1, probability 0, space 0, times 0 [ 496.169181][ T4700] CPU: 0 UID: 0 PID: 4700 Comm: syz.0.8041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 496.169257][ T4700] Tainted: [W]=WARN [ 496.169264][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.169281][ T4700] Call Trace: [ 496.169288][ T4700] [ 496.169296][ T4700] __dump_stack+0x1d/0x30 [ 496.169319][ T4700] dump_stack_lvl+0x95/0xd0 [ 496.169342][ T4700] dump_stack+0x15/0x1b [ 496.169406][ T4700] should_fail_ex+0x265/0x280 [ 496.169426][ T4700] should_failslab+0x8c/0xb0 [ 496.169526][ T4700] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 496.169550][ T4700] ? bpf_insn_prepare_dump+0x61/0x490 [ 496.169577][ T4700] kmemdup_noprof+0x2b/0x70 [ 496.169644][ T4700] bpf_insn_prepare_dump+0x61/0x490 [ 496.169673][ T4700] bpf_obj_get_info_by_fd+0x1131/0x1ff0 [ 496.169715][ T4700] __sys_bpf+0x50f/0x7c0 [ 496.169740][ T4700] __x64_sys_bpf+0x41/0x50 [ 496.169818][ T4700] x64_sys_call+0x28e1/0x3000 [ 496.169842][ T4700] do_syscall_64+0xca/0x2b0 [ 496.169911][ T4700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.169931][ T4700] RIP: 0033:0x7fc1c79bf749 [ 496.169946][ T4700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.169979][ T4700] RSP: 002b:00007fc1c63dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.170059][ T4700] RAX: ffffffffffffffda RBX: 00007fc1c7c16180 RCX: 00007fc1c79bf749 [ 496.170071][ T4700] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 496.170142][ T4700] RBP: 00007fc1c63dd090 R08: 0000000000000000 R09: 0000000000000000 [ 496.170153][ T4700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.170165][ T4700] R13: 00007fc1c7c16218 R14: 00007fc1c7c16180 R15: 00007ffcbefc8108 [ 496.170182][ T4700] [ 496.361118][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8042'. [ 496.389209][ T4707] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 496.712514][ T4728] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 496.719119][ T4728] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 496.726671][ T4728] vhci_hcd vhci_hcd.0: Device attached [ 496.790926][ T4729] vhci_hcd: connection closed [ 496.791115][T22812] vhci_hcd vhci_hcd.0: stop threads [ 496.801037][T22812] vhci_hcd vhci_hcd.0: release socket [ 496.806406][T22812] vhci_hcd vhci_hcd.0: disconnect device [ 496.917536][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8050'. [ 496.945027][ T4738] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 496.979146][ T4743] FAULT_INJECTION: forcing a failure. [ 496.979146][ T4743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.992256][ T4743] CPU: 1 UID: 0 PID: 4743 Comm: syz.2.8058 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 496.992286][ T4743] Tainted: [W]=WARN [ 496.992367][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.992382][ T4743] Call Trace: [ 496.992389][ T4743] [ 496.992397][ T4743] __dump_stack+0x1d/0x30 [ 496.992485][ T4743] dump_stack_lvl+0x95/0xd0 [ 496.992509][ T4743] dump_stack+0x15/0x1b [ 496.992531][ T4743] should_fail_ex+0x265/0x280 [ 496.992614][ T4743] should_fail+0xb/0x20 [ 496.992634][ T4743] should_fail_usercopy+0x1a/0x20 [ 496.992662][ T4743] _copy_to_user+0x20/0xa0 [ 496.992687][ T4743] simple_read_from_buffer+0xb5/0x130 [ 496.992708][ T4743] proc_fail_nth_read+0x10e/0x150 [ 496.992734][ T4743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.992776][ T4743] vfs_read+0x1a8/0x770 [ 496.992791][ T4743] ? __rcu_read_unlock+0x4f/0x70 [ 496.992823][ T4743] ? __fget_files+0x184/0x1c0 [ 496.992844][ T4743] ? mutex_lock+0x58/0x90 [ 496.992931][ T4743] ksys_read+0xda/0x1a0 [ 496.992949][ T4743] __x64_sys_read+0x40/0x50 [ 496.992967][ T4743] x64_sys_call+0x2889/0x3000 [ 496.993020][ T4743] do_syscall_64+0xca/0x2b0 [ 496.993112][ T4743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.993137][ T4743] RIP: 0033:0x7f0a2494e15c [ 496.993154][ T4743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 496.993173][ T4743] RSP: 002b:00007f0a233af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.993255][ T4743] RAX: ffffffffffffffda RBX: 00007f0a24ba5fa0 RCX: 00007f0a2494e15c [ 496.993267][ T4743] RDX: 000000000000000f RSI: 00007f0a233af0a0 RDI: 0000000000000007 [ 496.993278][ T4743] RBP: 00007f0a233af090 R08: 0000000000000000 R09: 0000000000000000 [ 496.993328][ T4743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.993342][ T4743] R13: 00007f0a24ba6038 R14: 00007f0a24ba5fa0 R15: 00007ffc42fd50d8 [ 496.993362][ T4743] [ 497.465125][ T4758] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.511378][ T4758] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.531852][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 497.531869][ T29] audit: type=1326 audit(3536822517.802:51831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.574283][ T4758] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.592074][ T29] audit: type=1326 audit(3536822517.832:51832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.615684][ T29] audit: type=1326 audit(3536822517.832:51833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.639254][ T29] audit: type=1326 audit(3536822517.832:51834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.662771][ T29] audit: type=1326 audit(3536822517.832:51835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.686417][ T29] audit: type=1326 audit(3536822517.832:51836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.709953][ T29] audit: type=1326 audit(3536822517.832:51837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.733879][ T29] audit: type=1326 audit(3536822517.832:51838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.757262][ T29] audit: type=1326 audit(3536822517.832:51839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.780732][ T29] audit: type=1326 audit(3536822517.832:51840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 497.841623][ T4758] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.908875][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.923144][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.952639][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.973002][ T53] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.002184][ T4777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8067'. [ 498.127476][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8069'. [ 498.228630][ T4794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8074'. [ 498.575835][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8080'. [ 498.639102][ T4816] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 498.680811][ T4820] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.735503][ T4820] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.812057][ T4820] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.893331][ T4820] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.921269][ T4839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8091'. [ 499.359647][ T4856] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 499.980120][ T4881] __nla_validate_parse: 2 callbacks suppressed [ 499.980215][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8109'. [ 500.081939][ T4890] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 500.198636][ T4898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8114'. [ 500.340128][ T4911] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 500.496689][ T4912] chnl_net:caif_netlink_parms(): no params data found [ 500.531629][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.538679][ T4912] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.545939][ T4912] bridge_slave_0: entered allmulticast mode [ 500.552255][ T4912] bridge_slave_0: entered promiscuous mode [ 500.559008][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.566074][ T4912] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.573414][ T4912] bridge_slave_1: entered allmulticast mode [ 500.587617][ T4912] bridge_slave_1: entered promiscuous mode [ 500.616974][ T4912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.627745][ T4912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.661126][ T4912] team0: Port device team_slave_0 added [ 500.668296][ T4912] team0: Port device team_slave_1 added [ 500.685473][ T4938] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 500.693426][ T4912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.700463][ T4912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.726773][ T4912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.738840][ T4912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.745961][ T4912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.772124][ T4912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.826883][ T4912] hsr_slave_0: entered promiscuous mode [ 500.832852][ T4949] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8132'. [ 500.833322][ T4912] hsr_slave_1: entered promiscuous mode [ 500.848809][ T4912] debugfs: 'hsr0' already exists in 'hsr' [ 500.854683][ T4912] Cannot create hsr debugfs directory [ 500.876385][ T2588] Bluetooth: hci0: Frame reassembly failed (-84) [ 501.314462][ T2588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.325914][ T2588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.336704][ T2588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.347561][ T2588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.395806][ T2594] bridge_slave_1: left allmulticast mode [ 501.401776][ T2594] bridge_slave_1: left promiscuous mode [ 501.407502][ T2594] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.415493][ T2594] bridge_slave_0: left allmulticast mode [ 501.421223][ T2594] bridge_slave_0: left promiscuous mode [ 501.426931][ T2594] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.450601][ T2594] tipc: Disabling bearer [ 501.601171][ T4970] loop0: detected capacity change from 0 to 1024 [ 501.609582][ T4970] EXT4-fs: inline encryption not supported [ 501.615480][ T4970] EXT4-fs: Ignoring removed nobh option [ 501.621152][ T4970] EXT4-fs: Ignoring removed bh option [ 501.631684][ T4970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.681968][ T2594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.691487][ T2594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.701164][ T2594] bond0 (unregistering): Released all slaves [ 501.709237][ T2594] bond1 (unregistering): Released all slaves [ 501.717588][ T2594] bond2 (unregistering): (slave batadv1): Releasing active interface [ 501.726369][ T2594] bond2 (unregistering): Released all slaves [ 501.748564][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.766700][ T2594] tipc: Disabling bearer [ 501.772047][ T2594] tipc: Left network mode [ 501.794762][ T4978] loop0: detected capacity change from 0 to 1024 [ 501.801846][ T4978] ext4: Unknown parameter 'obj_type' [ 501.808243][ T4978] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8142'. [ 501.850957][ T2594] hsr_slave_0: left promiscuous mode [ 501.856648][ T2594] hsr_slave_1: left promiscuous mode [ 501.862497][ T2594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.870107][ T2594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.894521][ T4980] SELinux: failed to load policy [ 501.929023][ T4984] loop0: detected capacity change from 0 to 512 [ 501.947181][ T4984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 501.960099][ T4984] EXT4-fs (loop0): 1 orphan inode deleted [ 501.965971][ T4984] EXT4-fs (loop0): 1 truncate cleaned up [ 501.972387][ T4984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.986100][ T4982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.005039][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.023087][ T4912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 502.032399][ T4912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 502.043681][ T4912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 502.054275][ T1060] udevd[1060]: Failed to create symlink /run/udev/watch/1640: File exists [ 502.067948][ T4982] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.071822][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8146'. [ 502.087043][ T4912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.124644][ T4982] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.143327][ T4998] loop0: detected capacity change from 0 to 1024 [ 502.169054][ T4998] EXT4-fs: inline encryption not supported [ 502.189692][ T4998] EXT4-fs: Ignoring removed nobh option [ 502.195354][ T4998] EXT4-fs: Ignoring removed bh option [ 502.202263][ T4982] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.232937][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.251632][ T4912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.264310][ T4912] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.275703][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.282799][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.291308][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.298351][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.322898][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.350837][ T4912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.361339][ T4912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.421451][ T4912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.422212][ T5014] loop0: detected capacity change from 0 to 1024 [ 502.435285][ T5014] EXT4-fs: inline encryption not supported [ 502.455413][ T5014] EXT4-fs: Ignoring removed nobh option [ 502.461100][ T5014] EXT4-fs: Ignoring removed bh option [ 502.484062][ T5014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.508993][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.541216][ T4912] veth0_vlan: entered promiscuous mode [ 502.551781][ T4912] veth1_vlan: entered promiscuous mode [ 502.557515][ T5032] loop0: detected capacity change from 0 to 1024 [ 502.565051][ T5032] ext4: Unknown parameter 'obj_type' [ 502.571543][ T5032] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8152'. [ 502.582572][ T4912] veth0_macvtap: entered promiscuous mode [ 502.593225][ T4912] veth1_macvtap: entered promiscuous mode [ 502.613731][ T4912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.625592][ T4912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.636771][ T2594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.653372][ T2576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.662673][ T2576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.676115][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 502.676166][ T29] audit: type=1400 audit(3536822522.942:52201): avc: denied { mounton } for pid=4912 comm="syz-executor" path="/root/syzkaller.XzDxWE/syz-tmp" dev="sda1" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 502.679871][ T2576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.709855][ T29] audit: type=1400 audit(3536822522.942:52202): avc: denied { mount } for pid=4912 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 502.737800][ T29] audit: type=1400 audit(3536822522.942:52203): avc: denied { mount } for pid=4912 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 502.760119][ T29] audit: type=1400 audit(3536822522.942:52204): avc: denied { mounton } for pid=4912 comm="syz-executor" path="/root/syzkaller.XzDxWE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 502.786881][ T29] audit: type=1400 audit(3536822522.942:52205): avc: denied { mounton } for pid=4912 comm="syz-executor" path="/root/syzkaller.XzDxWE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=134520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 502.815430][ T29] audit: type=1400 audit(3536822522.982:52206): avc: denied { mounton } for pid=4912 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 502.838427][ T29] audit: type=1400 audit(3536822522.982:52207): avc: denied { mount } for pid=4912 comm="syz-executor" name="/" dev="gadgetfs" ino=4046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 502.861025][ T29] audit: type=1400 audit(3536822523.082:52208): avc: denied { open } for pid=4912 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 502.929433][ T3606] Bluetooth: hci0: command 0x1003 tx timeout [ 502.930662][ T4248] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 503.051680][ T29] audit: type=1326 audit(3536822523.322:52209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 503.101517][ T29] audit: type=1326 audit(3536822523.322:52210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.8154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 503.314340][ T5061] loop0: detected capacity change from 0 to 1024 [ 503.322059][ T5061] EXT4-fs: inline encryption not supported [ 503.331159][ T5061] EXT4-fs: Ignoring removed nobh option [ 503.336804][ T5061] EXT4-fs: Ignoring removed bh option [ 503.363769][ T5061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.388571][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.477862][ T5069] netlink: 'syz.1.8165': attribute type 10 has an invalid length. [ 503.498182][ T5069] team0: Port device dummy0 added [ 503.557710][ T5070] futex_wake_op: syz.1.8165 tries to shift op by -1; fix this program [ 503.643594][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8164'. [ 503.777325][ T5079] SELinux: failed to load policy [ 503.834471][ T5087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.872683][ T5087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.905598][ T5096] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8176'. [ 504.446346][ T5110] SET target dimension over the limit! [ 504.495032][ T5116] loop0: detected capacity change from 0 to 256 [ 504.505039][ T5116] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 504.514388][ T5116] vfat filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 504.557142][T22211] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 504.577938][ T5120] loop0: detected capacity change from 0 to 1024 [ 504.584817][ T5120] EXT4-fs: inline encryption not supported [ 504.590954][ T5120] EXT4-fs: Ignoring removed nobh option [ 504.596523][ T5120] EXT4-fs: Ignoring removed bh option [ 504.613259][ T5120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.638363][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.671609][ T2588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.675261][ T5132] netlink: 'syz.0.8188': attribute type 10 has an invalid length. [ 504.703407][ T2588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.719107][ T2588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.728236][ T2588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.767605][ T5139] futex_wake_op: syz.0.8188 tries to shift op by -1; fix this program [ 504.856845][ T5146] syzkaller0: entered allmulticast mode [ 504.860662][ T5141] SELinux: failed to load policy [ 504.863269][ T5146] syzkaller0: entered promiscuous mode [ 504.883769][ T5146] syzkaller0 (unregistering): left promiscuous mode [ 504.890578][ T5146] syzkaller0 (unregistering): left allmulticast mode [ 504.953563][ T3493] IPVS: starting estimator thread 0... [ 505.010768][ T5156] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 505.042769][ T5151] IPVS: using max 2688 ests per chain, 134400 per kthread [ 505.064954][ T5159] SELinux: failed to load policy [ 505.093328][ T5164] random: crng reseeded on system resumption [ 505.124508][ T5167] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8201'. [ 505.278212][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8204'. [ 505.297942][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8204'. [ 505.321737][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 505.340803][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8204'. [ 505.385292][ T5087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.571690][ T5188] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 505.596427][ T5190] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.661034][ T5190] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.725484][ T5198] loop0: detected capacity change from 0 to 1024 [ 505.740631][ T5198] ext4: Unknown parameter 'obj_type' [ 505.740885][ T5190] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.772462][ T5198] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8214'. [ 505.850725][ T5190] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.872665][ T5200] EXT4-fs: inline encryption not supported [ 505.902750][ T5200] EXT4-fs: Ignoring removed nobh option [ 505.908341][ T5200] EXT4-fs: Ignoring removed bh option [ 505.952523][ T5200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.986279][ T2618] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.015424][ T2618] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.049351][ T2618] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.057618][ T2618] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.081215][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.203787][ T5205] EXT4-fs: Ignoring removed orlov option [ 506.242570][ T5205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.275867][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.370300][ T5212] random: crng reseeded on system resumption [ 506.381082][ T5227] netlink: 'syz.0.8221': attribute type 10 has an invalid length. [ 506.404263][ T5087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.459586][ T2588] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.483597][ T2588] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.488417][ T5231] futex_wake_op: syz.0.8221 tries to shift op by -1; fix this program [ 506.500348][ T2588] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.539173][ T2588] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.670592][ T5241] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.690782][ T5235] SELinux: failed to load policy [ 506.722613][ T5241] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.783816][ T5241] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.851259][ T5241] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.942694][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8226'. [ 507.032213][ T5270] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.061051][ T5270] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.111223][ T5270] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.164468][ T5270] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.229732][ T2588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.252088][ T2618] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.261680][ T2618] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.272411][ T2618] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.288642][ T5278] set_capacity_and_notify: 2 callbacks suppressed [ 507.288659][ T5278] loop0: detected capacity change from 0 to 1024 [ 507.321272][ T5278] EXT4-fs: Ignoring removed orlov option [ 507.337197][ T5278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.442829][ T5284] netlink: 'syz.3.8237': attribute type 10 has an invalid length. [ 507.450714][ T5284] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8237'. [ 507.502068][ T5284] team0: entered promiscuous mode [ 507.507227][ T5284] team_slave_0: entered promiscuous mode [ 507.512978][ T5284] team_slave_1: entered promiscuous mode [ 507.539714][ T5284] bridge0: port 3(team0) entered blocking state [ 507.546073][ T5284] bridge0: port 3(team0) entered disabled state [ 507.553982][ T5284] team0: entered allmulticast mode [ 507.559129][ T5284] team_slave_0: entered allmulticast mode [ 507.564988][ T5284] team_slave_1: entered allmulticast mode [ 507.576199][ T5284] bridge0: port 3(team0) entered blocking state [ 507.582546][ T5284] bridge0: port 3(team0) entered forwarding state [ 507.857362][ T5292] SELinux: failed to load policy [ 507.909039][ T5294] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.970349][ T5294] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.043908][ T2576] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.078047][ T5294] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.102224][T22211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.133875][T22211] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.143187][ T5294] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.185767][T22211] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.195662][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.286631][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 508.286646][ T29] audit: type=1400 audit(3536822528.552:52823): avc: denied { create } for pid=5307 comm="syz.2.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 508.360666][ T5314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.379488][ T29] audit: type=1326 audit(3536822528.562:52824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.403265][ T29] audit: type=1326 audit(3536822528.562:52825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.426911][ T29] audit: type=1326 audit(3536822528.562:52826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.450430][ T29] audit: type=1326 audit(3536822528.562:52827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.474037][ T29] audit: type=1326 audit(3536822528.562:52828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.497606][ T29] audit: type=1326 audit(3536822528.562:52829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.521282][ T29] audit: type=1326 audit(3536822528.562:52830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.544809][ T29] audit: type=1326 audit(3536822528.562:52831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.568306][ T29] audit: type=1326 audit(3536822528.562:52832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.1.8246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fca3628f749 code=0x7ffc0000 [ 508.580328][ T5308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8245'. [ 508.654388][ T5314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.700325][ T5326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8251'. [ 508.716771][ T5327] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 508.728487][ T5314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.746801][ T5327] SELinux: failed to load policy [ 508.812366][ T5314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.866104][ T5336] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.905787][T22211] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.922041][T22211] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.941653][ T5336] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.977317][T22211] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.015954][T22211] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.058875][ T5336] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.180715][ T5336] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.452985][ T5364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5364 comm=syz.0.8261 [ 509.539933][ T5371] FAULT_INJECTION: forcing a failure. [ 509.539933][ T5371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.553099][ T5371] CPU: 0 UID: 0 PID: 5371 Comm: syz.4.8264 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 509.553129][ T5371] Tainted: [W]=WARN [ 509.553135][ T5371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.553226][ T5371] Call Trace: [ 509.553231][ T5371] [ 509.553237][ T5371] __dump_stack+0x1d/0x30 [ 509.553253][ T5371] dump_stack_lvl+0x95/0xd0 [ 509.553279][ T5371] dump_stack+0x15/0x1b [ 509.553291][ T5371] should_fail_ex+0x265/0x280 [ 509.553305][ T5371] should_fail+0xb/0x20 [ 509.553327][ T5371] should_fail_usercopy+0x1a/0x20 [ 509.553439][ T5371] _copy_from_iter+0x21c/0xe70 [ 509.553454][ T5371] ? __alloc_skb+0x396/0x4b0 [ 509.553467][ T5371] ? __alloc_skb+0x228/0x4b0 [ 509.553481][ T5371] netlink_sendmsg+0x471/0x6b0 [ 509.553581][ T5371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.553606][ T5371] __sock_sendmsg+0x145/0x180 [ 509.553618][ T5371] ____sys_sendmsg+0x31e/0x4a0 [ 509.553672][ T5371] ___sys_sendmsg+0x17b/0x1d0 [ 509.553696][ T5371] __x64_sys_sendmsg+0xd4/0x160 [ 509.553794][ T5371] x64_sys_call+0x17ba/0x3000 [ 509.553855][ T5371] do_syscall_64+0xca/0x2b0 [ 509.553874][ T5371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.553887][ T5371] RIP: 0033:0x7ff649aaf749 [ 509.553910][ T5371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.553920][ T5371] RSP: 002b:00007ff648517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.553932][ T5371] RAX: ffffffffffffffda RBX: 00007ff649d05fa0 RCX: 00007ff649aaf749 [ 509.553981][ T5371] RDX: 000000000000481c RSI: 0000200000000940 RDI: 0000000000000004 [ 509.553994][ T5371] RBP: 00007ff648517090 R08: 0000000000000000 R09: 0000000000000000 [ 509.554005][ T5371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.554016][ T5371] R13: 00007ff649d06038 R14: 00007ff649d05fa0 R15: 00007ffe77d05a08 [ 509.554033][ T5371] [ 509.776671][ T5369] SELinux: failed to load policy [ 509.832090][ T5377] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 509.846171][ T5379] loop0: detected capacity change from 0 to 512 [ 509.858344][ T5379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 509.873927][ T5379] EXT4-fs (loop0): 1 orphan inode deleted [ 509.879745][ T5379] EXT4-fs (loop0): 1 truncate cleaned up [ 509.890653][ T5379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.943861][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.266756][ T5401] __nla_validate_parse: 2 callbacks suppressed [ 510.266822][ T5401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8274'. [ 510.297077][ T5403] loop0: detected capacity change from 0 to 1024 [ 510.304338][ T5403] EXT4-fs: Ignoring removed orlov option [ 510.312023][ T5403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.345887][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.396412][ T5406] SELinux: failed to load policy [ 511.152429][ T2588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.185161][ T2588] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.212020][ T2588] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.241478][ T2588] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.429048][ T5441] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.491363][ T5441] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.561986][ T5441] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.642202][ T5441] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.075515][ T2618] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.109342][ T2618] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.117569][ T2618] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.153349][ T2618] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.192033][ T5466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.251447][ T5466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.329255][ T5466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.390768][ T5466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.487131][ T2618] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.517115][ T2618] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.553519][ T2618] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.580624][ T2618] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.630203][ T2618] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.656228][ T2618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.670846][ T5490] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 512.689853][ T2576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.698196][ T2576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.729640][ T5489] SELinux: failed to load policy [ 512.916986][ T5514] SELinux: Context /usr/sbin/cups-browsed is not valid (left unmapped). [ 512.947689][ T5505] ALSA: seq fatal error: cannot create timer (-19) [ 513.179999][ T5528] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8323'. [ 513.354231][ T29] kauditd_printk_skb: 5472 callbacks suppressed [ 513.354245][ T29] audit: type=1326 audit(3536822533.622:58305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.460356][ T29] audit: type=1326 audit(3536822533.622:58306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.483939][ T29] audit: type=1326 audit(3536822533.622:58307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.507835][ T29] audit: type=1326 audit(3536822533.622:58308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.531335][ T29] audit: type=1326 audit(3536822533.622:58309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.555017][ T29] audit: type=1326 audit(3536822533.622:58310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.578711][ T29] audit: type=1326 audit(3536822533.622:58311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.602223][ T29] audit: type=1326 audit(3536822533.622:58312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.625926][ T29] audit: type=1326 audit(3536822533.682:58313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.626457][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8326'. [ 513.649425][ T29] audit: type=1326 audit(3536822533.682:58314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5536 comm="syz.3.8326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eb398f749 code=0x7ffc0000 [ 513.713424][ T5555] SELinux: failed to load policy [ 513.931804][ T5570] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 513.978837][ T5577] netlink: 'syz.0.8342': attribute type 10 has an invalid length. [ 514.026756][ T5582] SELinux: failed to load policy [ 514.071589][ T5592] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 514.079003][ T5597] futex_wake_op: syz.0.8342 tries to shift op by -1; fix this program [ 514.113150][ T5596] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 514.321640][ T5622] SELinux: failed to load policy [ 514.447822][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8362'. [ 514.460043][ T5633] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 514.663055][ T5645] ALSA: seq fatal error: cannot create timer (-19) [ 514.787545][ T5651] SELinux: failed to load policy [ 514.861246][ T5666] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.891719][ T5666] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.936114][ T5666] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.003476][ T5666] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.172131][ T5689] SELinux: failed to load policy [ 515.191364][ T5692] netlink: 'syz.1.8386': attribute type 10 has an invalid length. [ 515.255564][ T5698] futex_wake_op: syz.1.8386 tries to shift op by -1; fix this program [ 515.288929][ T5701] syzkaller0: entered allmulticast mode [ 515.294749][ T5701] syzkaller0: entered promiscuous mode [ 515.302019][ T5701] syzkaller0 (unregistering): left promiscuous mode [ 515.308640][ T5701] syzkaller0 (unregistering): left allmulticast mode [ 515.632821][ T5721] SELinux: failed to load policy [ 515.825989][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8399'. [ 516.248449][ T2618] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.281146][ T2618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.299547][ T2618] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.307958][ T2618] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.395166][ T5754] SELinux: failed to load policy [ 516.426441][ T5758] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 516.520922][ T5762] ALSA: seq fatal error: cannot create timer (-19) [ 516.618879][ T5779] SELinux: failed to load policy [ 516.770014][ T5790] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.821462][ T5790] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.871228][ T5788] ALSA: seq fatal error: cannot create timer (-19) [ 516.884801][ T5790] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.931030][ T5814] loop0: detected capacity change from 0 to 256 [ 516.966690][ T5814] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 516.979128][ T5790] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.980762][ T5817] SELinux: failed to load policy [ 517.006859][ T5814] vfat filesystem being mounted at /374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 517.098053][ T2588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.127692][ T5823] ALSA: seq fatal error: cannot create timer (-19) [ 517.130692][ T2588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.168272][T22211] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 517.187830][ T2588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.218145][ T2588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.370730][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8443'. [ 517.520204][ T5855] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 517.594026][ T5855] SELinux: failed to load policy [ 517.983841][ T5878] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.087393][ T5453] bond0: (slave syz_tun): Releasing backup interface [ 518.103257][ T5878] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.202266][ T5878] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.205025][ T5900] loop0: detected capacity change from 0 to 1024 [ 518.231165][ T5900] EXT4-fs: Ignoring removed orlov option [ 518.237618][ T2588] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.273937][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.287548][ T5878] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.332486][ T2588] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.378975][ T2594] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.405091][ T2594] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.419638][ T5907] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 518.432926][ T2594] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.446429][ T2588] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.464741][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 518.464756][ T29] audit: type=1326 audit(3536822538.732:58784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.499316][ T2594] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.500324][ T29] audit: type=1326 audit(3536822538.732:58785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.515753][ T5911] ALSA: seq fatal error: cannot create timer (-19) [ 518.531401][ T29] audit: type=1326 audit(3536822538.732:58786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.561458][ T29] audit: type=1326 audit(3536822538.742:58787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.584990][ T29] audit: type=1326 audit(3536822538.742:58788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.608772][ T29] audit: type=1326 audit(3536822538.742:58789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.624510][ T5914] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 518.632513][ T29] audit: type=1326 audit(3536822538.742:58790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.639040][ T5914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.662585][ T29] audit: type=1326 audit(3536822538.742:58791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.670155][ T5914] vhci_hcd vhci_hcd.0: Device attached [ 518.693587][ T29] audit: type=1326 audit(3536822538.742:58792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.700169][ T5917] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 518.722461][ T29] audit: type=1326 audit(3536822538.742:58793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.2.8466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2494f749 code=0x7ffc0000 [ 518.728880][ T5917] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 518.759717][ T5917] vhci_hcd vhci_hcd.0: Device attached [ 518.786823][ T2588] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.807078][ T5920] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 518.813623][ T5920] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 518.821262][ T5920] vhci_hcd vhci_hcd.0: Device attached [ 518.856932][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 518.867720][ T5914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 518.894106][ T5914] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 518.900856][ T5914] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 518.908543][ T5914] vhci_hcd vhci_hcd.0: Device attached [ 518.920887][ T5914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 518.929657][ T2588] bridge_slave_1: left allmulticast mode [ 518.935332][ T2588] bridge_slave_1: left promiscuous mode [ 518.941041][ T2588] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.949785][ T2588] bridge_slave_0: left allmulticast mode [ 518.955443][ T2588] bridge_slave_0: left promiscuous mode [ 518.961716][ T2588] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.969492][ T5914] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 518.976112][ T5914] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 518.983754][ T5914] vhci_hcd vhci_hcd.0: Device attached [ 518.992858][ T5935] vhci_hcd: connection closed [ 518.992969][ T5929] vhci_hcd: connection closed [ 518.997797][ T5922] vhci_hcd: connection closed [ 519.002745][ T5918] vhci_hcd: connection closed [ 519.007582][ T5915] vhci_hcd: connection closed [ 519.012726][T22211] vhci_hcd vhci_hcd.2: stop threads [ 519.022652][T22211] vhci_hcd vhci_hcd.2: release socket [ 519.028100][T22211] vhci_hcd vhci_hcd.2: disconnect device [ 519.033913][ T3486] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 519.044071][ T5916] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 519.073267][T22211] vhci_hcd vhci_hcd.2: stop threads [ 519.073960][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.078630][T22211] vhci_hcd vhci_hcd.2: release socket [ 519.093031][T22211] vhci_hcd vhci_hcd.2: disconnect device [ 519.100024][T22211] vhci_hcd vhci_hcd.2: stop threads [ 519.105240][T22211] vhci_hcd vhci_hcd.2: release socket [ 519.110798][T22211] vhci_hcd vhci_hcd.2: disconnect device [ 519.118289][T22211] vhci_hcd vhci_hcd.2: stop threads [ 519.123653][T22211] vhci_hcd vhci_hcd.2: release socket [ 519.129103][T22211] vhci_hcd vhci_hcd.2: disconnect device [ 519.134950][T22211] vhci_hcd vhci_hcd.2: stop threads [ 519.140226][T22211] vhci_hcd vhci_hcd.2: release socket [ 519.145814][T22211] vhci_hcd vhci_hcd.2: disconnect device [ 519.175317][ T1721] smc: removing ib device syz2 [ 519.180502][ T2588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.190323][ T2588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.200264][ T2588] bond0 (unregistering): Released all slaves [ 519.202882][ T5945] sel_write_load: 1 callbacks suppressed [ 519.202896][ T5945] SELinux: failed to load policy [ 519.255655][ T5932] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.347444][ T5932] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.391926][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.399035][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.433521][ T5879] bridge_slave_0: entered allmulticast mode [ 519.450137][ T5879] bridge_slave_0: entered promiscuous mode [ 519.462245][ T5958] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 519.475921][ T5932] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.497552][ T5962] 9pnet_fd: Insufficient options for proto=fd [ 519.507083][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.514311][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.541910][ T5879] bridge_slave_1: entered allmulticast mode [ 519.555022][ T5879] bridge_slave_1: entered promiscuous mode [ 519.571718][ T5932] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.583682][ T5967] netlink: 'syz.3.8480': attribute type 10 has an invalid length. [ 519.663458][ T5967] dummy0: entered promiscuous mode [ 519.681630][ T5967] dummy0: entered allmulticast mode [ 519.693611][ T5967] team0: Port device dummy0 added [ 519.722262][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.757837][ T5967] futex_wake_op: syz.3.8480 tries to shift op by -1; fix this program [ 519.761977][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.853439][ T2588] hsr_slave_0: left promiscuous mode [ 519.870859][ T2588] hsr_slave_1: left promiscuous mode [ 519.876893][ T2588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.895006][ T5982] SELinux: failed to load policy [ 519.900552][ T2588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.957043][ T2588] team0 (unregistering): Port device team_slave_1 removed [ 519.968855][ T2588] team0 (unregistering): Port device team_slave_0 removed [ 520.000950][ T2588] team0 (unregistering): Port device dummy0 removed [ 520.012584][ T1721] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.029542][ T1721] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.057900][ T5988] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.069737][ T5879] team0: Port device team_slave_0 added [ 520.075399][ T1721] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.100456][ T5879] team0: Port device team_slave_1 added [ 520.119846][ T1721] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.161562][ T5988] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.196082][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.203197][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.229230][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.243930][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.250975][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.277710][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.294302][ T5988] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.334988][ T5879] hsr_slave_0: entered promiscuous mode [ 520.341225][ T5879] hsr_slave_1: entered promiscuous mode [ 520.347225][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 520.353006][ T5879] Cannot create hsr debugfs directory [ 520.365020][ T5988] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.447652][ T1721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.458837][ T1721] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.470331][ T1721] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.483208][ T1721] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.585819][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8495'. [ 520.689659][ T6016] SELinux: failed to load policy [ 520.725524][ T6018] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 520.750755][ T6020] netlink: 'syz.0.8500': attribute type 10 has an invalid length. [ 520.838567][ T6031] futex_wake_op: syz.0.8500 tries to shift op by -1; fix this program [ 520.855197][ T6033] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.880442][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.890086][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.899241][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.918747][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.932287][ T6033] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.991846][ T6033] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.049177][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.077386][ T6033] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.123947][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.147694][ T2594] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.154840][ T2594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.180560][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.187706][ T1721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.271318][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.342512][ T5879] veth0_vlan: entered promiscuous mode [ 521.350289][ T5879] veth1_vlan: entered promiscuous mode [ 521.368315][ T5879] veth0_macvtap: entered promiscuous mode [ 521.376219][ T5879] veth1_macvtap: entered promiscuous mode [ 521.387047][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.400720][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.421269][ T1721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.430392][ T1721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.444417][ T1721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.456543][ T1721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.630482][ T6070] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8512'. [ 521.645593][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8512'. [ 521.711535][ T6081] loop0: detected capacity change from 0 to 512 [ 521.718136][ T6081] EXT4-fs: Ignoring removed oldalloc option [ 521.724330][ T6081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.731447][ T6081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 521.749653][ T6081] EXT4-fs (loop0): 1 truncate cleaned up [ 521.763297][ T6079] SELinux: failed to load policy [ 521.769757][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.831905][ T6089] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 521.870330][ T6095] netlink: 'syz.1.8523': attribute type 7 has an invalid length. [ 521.878976][ T6095] netlink: 'syz.1.8523': attribute type 7 has an invalid length. [ 521.889379][ T6095] net_ratelimit: 5 callbacks suppressed [ 521.889394][ T6095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.349575][ T6101] FAULT_INJECTION: forcing a failure. [ 522.349575][ T6101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.363483][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.0.8517 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 522.363515][ T6101] Tainted: [W]=WARN [ 522.363521][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.363533][ T6101] Call Trace: [ 522.363539][ T6101] [ 522.363625][ T6101] __dump_stack+0x1d/0x30 [ 522.363652][ T6101] dump_stack_lvl+0x95/0xd0 [ 522.363710][ T6101] dump_stack+0x15/0x1b [ 522.363732][ T6101] should_fail_ex+0x265/0x280 [ 522.363877][ T6101] should_fail+0xb/0x20 [ 522.363902][ T6101] should_fail_usercopy+0x1a/0x20 [ 522.363923][ T6101] _copy_from_user+0x1c/0xb0 [ 522.363950][ T6101] ___sys_sendmsg+0xc1/0x1d0 [ 522.364021][ T6101] __x64_sys_sendmsg+0xd4/0x160 [ 522.364052][ T6101] x64_sys_call+0x17ba/0x3000 [ 522.364074][ T6101] do_syscall_64+0xca/0x2b0 [ 522.364178][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.364200][ T6101] RIP: 0033:0x7fc1c79bf749 [ 522.364295][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.364315][ T6101] RSP: 002b:00007fc1c63dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.364333][ T6101] RAX: ffffffffffffffda RBX: 00007fc1c7c16180 RCX: 00007fc1c79bf749 [ 522.364364][ T6101] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 522.364375][ T6101] RBP: 00007fc1c63dd090 R08: 0000000000000000 R09: 0000000000000000 [ 522.364387][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.364401][ T6101] R13: 00007fc1c7c16218 R14: 00007fc1c7c16180 R15: 00007ffcbefc8108 [ 522.364420][ T6101] [ 522.884153][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.362980][ T6126] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 523.381590][ T6121] SELinux: failed to load policy [ 523.521141][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 523.521156][ T29] audit: type=1326 audit(3536822543.792:58998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 523.565030][ T29] audit: type=1326 audit(3536822543.792:58999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1c795b829 code=0x7ffc0000 [ 523.588983][ T29] audit: type=1326 audit(3536822543.792:59000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 523.612537][ T29] audit: type=1326 audit(3536822543.792:59001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 523.725415][ T6156] loop0: detected capacity change from 0 to 512 [ 523.741874][ T6156] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 523.766389][ T6156] EXT4-fs (loop0): 1 orphan inode deleted [ 523.772286][ T6156] EXT4-fs (loop0): 1 truncate cleaned up [ 523.791668][ T6156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.811204][ T6161] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 523.834534][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.883308][ T6163] SELinux: failed to load policy [ 523.888585][ T6165] netlink: 'syz.2.8548': attribute type 10 has an invalid length. [ 523.945325][ T6173] loop0: detected capacity change from 0 to 256 [ 523.952363][ T6173] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 523.962704][ T6173] vfat filesystem being mounted at /402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 524.000747][ T6174] futex_wake_op: syz.2.8548 tries to shift op by -1; fix this program [ 524.013350][T23289] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 524.030922][ T29] audit: type=1326 audit(3536822544.302:59002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.8552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 524.062576][ T29] audit: type=1326 audit(3536822544.322:59003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.8552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 524.086221][ T29] audit: type=1326 audit(3536822544.322:59004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.8552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 524.109917][ T29] audit: type=1326 audit(3536822544.322:59005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.8552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 524.133623][ T29] audit: type=1326 audit(3536822544.322:59006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.8552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 524.139329][ T3486] usb 5-1: enqueue for inactive port 0 [ 524.157472][ T29] audit: type=1326 audit(3536822544.322:59007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.0.8552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc1c79bf749 code=0x7ffc0000 [ 524.202556][ T3486] usb 5-1: enqueue for inactive port 0 [ 524.269742][ T3486] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 524.286935][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8555'. [ 524.353554][ T6192] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 524.428015][ T6196] SELinux: failed to load policy [ 524.610228][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8563'. [ 524.636594][ T6220] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 524.654302][T22812] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.665205][T22812] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.677889][T22812] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.689472][T22812] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.808740][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8579'. [ 524.875705][ T6246] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 524.998392][ T6253] SELinux: failed to load policy [ 525.033952][ T6257] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.046376][ T6259] netlink: 'syz.4.8588': attribute type 10 has an invalid length. [ 525.060318][ T6259] team0: Port device dummy0 added [ 525.081874][ T6257] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.120190][ T6264] futex_wake_op: syz.4.8588 tries to shift op by -1; fix this program [ 525.143313][ T6257] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.201828][ T6257] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.293796][T22812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.319092][T22812] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.350758][T22812] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.372706][T22812] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.444166][ T6276] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 525.467885][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8592'. [ 525.616952][ T6287] SELinux: failed to load policy [ 525.776369][ T6308] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 525.827157][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8607'. [ 525.855248][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8600'. [ 525.875329][ T6320] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.907169][ T6322] SELinux: failed to load policy [ 525.920850][ T6320] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.971015][ T6320] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.050884][ T6320] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.151990][T22812] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.174034][ T6344] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 526.197967][T22812] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.211730][T22812] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.232865][T22812] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.308366][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8621'. [ 526.415186][ T6358] netlink: 'syz.4.8624': attribute type 10 has an invalid length. [ 526.514942][ T6365] futex_wake_op: syz.4.8624 tries to shift op by -1; fix this program [ 526.579469][ T6372] sch_tbf: burst 22 is lower than device lo mtu (76) ! [ 526.690056][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8634'. [ 526.743954][ T6385] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.765914][ T6387] loop0: detected capacity change from 0 to 512 [ 526.773225][ T6387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 526.784781][ T6387] EXT4-fs (loop0): 1 orphan inode deleted [ 526.790747][ T6387] EXT4-fs (loop0): 1 truncate cleaned up [ 526.797596][ T6387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.821936][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.827686][ T6392] SELinux: failed to load policy [ 526.841275][ T6385] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.873403][ T6394] loop0: detected capacity change from 0 to 1024 [ 526.880696][ T6394] EXT4-fs: inline encryption not supported [ 526.901947][ T6385] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.906827][ T6394] EXT4-fs: Ignoring removed nobh option [ 526.917411][ T6394] EXT4-fs: Ignoring removed bh option [ 526.955172][ T6394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.975588][ T6385] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.024525][ T6403] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 527.047969][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.077015][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8641'. [ 527.107964][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8646'. [ 527.133958][ T6420] loop0: detected capacity change from 0 to 512 [ 527.140810][ T6420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 527.152711][ T6420] EXT4-fs (loop0): 1 orphan inode deleted [ 527.158561][ T6420] EXT4-fs (loop0): 1 truncate cleaned up [ 527.165100][ T6420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.187137][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.205776][ T6423] loop0: detected capacity change from 0 to 1024 [ 527.212448][ T6423] EXT4-fs: Ignoring removed orlov option [ 527.220327][ T6423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.297200][ T6426] SELinux: failed to load policy [ 527.373583][ T6439] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 527.498987][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8661'. [ 527.524884][ T6454] netlink: 'syz.2.8662': attribute type 10 has an invalid length. [ 527.612858][ T6460] futex_wake_op: syz.2.8662 tries to shift op by -1; fix this program [ 527.777975][ T6463] SELinux: failed to load policy [ 527.966879][ T6427] ================================================================== [ 527.975267][ T6427] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 527.983407][ T6427] [ 527.985815][ T6427] write to 0xffff88811ad86e9c of 4 bytes by task 6423 on cpu 0: [ 527.993533][ T6427] xas_set_mark+0x12b/0x140 [ 527.998154][ T6427] __folio_start_writeback+0x155/0x340 [ 528.003718][ T6427] ext4_bio_write_folio+0x5ad/0x9f0 [ 528.009015][ T6427] mpage_process_page_bufs+0x4a1/0x620 [ 528.014472][ T6427] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 528.020269][ T6427] ext4_do_writepages+0x6fe/0x27e0 [ 528.025474][ T6427] ext4_writepages+0x179/0x300 [ 528.030329][ T6427] do_writepages+0x1c6/0x310 [ 528.035051][ T6427] file_write_and_wait_range+0x156/0x2c0 [ 528.040763][ T6427] generic_buffers_fsync_noflush+0x45/0x130 [ 528.046652][ T6427] ext4_sync_file+0x1ab/0x690 [ 528.051315][ T6427] vfs_fsync_range+0x10d/0x130 [ 528.056074][ T6427] ext4_buffered_write_iter+0x34f/0x3c0 [ 528.061626][ T6427] ext4_file_write_iter+0x387/0xf60 [ 528.066921][ T6427] iter_file_splice_write+0x66b/0xa20 [ 528.072290][ T6427] direct_splice_actor+0x156/0x2a0 [ 528.077576][ T6427] splice_direct_to_actor+0x312/0x680 [ 528.082935][ T6427] do_splice_direct+0xda/0x150 [ 528.087701][ T6427] do_sendfile+0x380/0x650 [ 528.092109][ T6427] __x64_sys_sendfile64+0x105/0x150 [ 528.097300][ T6427] x64_sys_call+0x2db1/0x3000 [ 528.102002][ T6427] do_syscall_64+0xca/0x2b0 [ 528.106517][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.112402][ T6427] [ 528.114794][ T6427] read to 0xffff88811ad86e9c of 4 bytes by task 6427 on cpu 1: [ 528.122335][ T6427] __writeback_single_inode+0x201/0x7c0 [ 528.127883][ T6427] writeback_single_inode+0x16d/0x3f0 [ 528.133250][ T6427] sync_inode_metadata+0x5b/0x90 [ 528.138702][ T6427] generic_buffers_fsync_noflush+0xee/0x130 [ 528.144937][ T6427] ext4_sync_file+0x1ab/0x690 [ 528.149601][ T6427] vfs_fsync_range+0x10d/0x130 [ 528.154354][ T6427] ext4_buffered_write_iter+0x34f/0x3c0 [ 528.159908][ T6427] ext4_file_write_iter+0x387/0xf60 [ 528.165106][ T6427] iter_file_splice_write+0x66b/0xa20 [ 528.170469][ T6427] direct_splice_actor+0x156/0x2a0 [ 528.175568][ T6427] splice_direct_to_actor+0x312/0x680 [ 528.180936][ T6427] do_splice_direct+0xda/0x150 [ 528.185685][ T6427] do_sendfile+0x380/0x650 [ 528.190181][ T6427] __x64_sys_sendfile64+0x105/0x150 [ 528.195373][ T6427] x64_sys_call+0x2db1/0x3000 [ 528.200141][ T6427] do_syscall_64+0xca/0x2b0 [ 528.204645][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.210527][ T6427] [ 528.212843][ T6427] value changed: 0x0a000021 -> 0x04000021 [ 528.218549][ T6427] [ 528.220859][ T6427] Reported by Kernel Concurrency Sanitizer on: [ 528.226998][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.0.8650 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 528.238371][ T6427] Tainted: [W]=WARN [ 528.242155][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.252199][ T6427] ================================================================== [ 528.280546][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.613917][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.625071][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.636577][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.648060][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0