last executing test programs: 5.539965245s ago: executing program 2 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 4.995653013s ago: executing program 2 (id=3063): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x2, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x4}]}]}}]}, 0xa8}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=0x5, 0xfef3) mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0xa0) 4.965398874s ago: executing program 2 (id=3065): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x9520, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x10000}]}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffda9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="faffffff200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000280)={'batadv_slave_1\x00', 0xfffffff8}) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x40401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x40020000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x305500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) 4.432464923s ago: executing program 0 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000580)="350df906593e9e0eb8bab320dca71e51bc", &(0x7f0000000040)=""/12, &(0x7f00000004c0)="7ffba570d59d11180436741b15959ad05a1a30c416b70c39aadf4b8d4ecbca6538470ee4896cec2f5a55cc36658528a6a880d1d957529ba0b24a5a65d7c1bfea2ba61b28cf02ff9b99adbb3e58aea4a590483822d2eb2e5e1eea03df8f47d067294b7f6b1514ae80ea2a031a59fc20678ebb90a9ecf9f6e450fc5ba27df51f7e6388ef81e19f8fcd04fcbc5855dadc11716023056f9be0", &(0x7f00000005c0), 0x4, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) semop(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 3.90438523s ago: executing program 2 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @multicast}) 3.431494248s ago: executing program 0 (id=3076): socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) unshare(0x26000400) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r7, 0x0, 0x8) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x1300) 3.310540089s ago: executing program 0 (id=3079): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4c8c0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x20000000, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x2908, 0x1, 0x3, 0x2}, {0x3ff, 0x1, 0xd, 0x5}, {0xfff7, 0x2, 0xf2, 0x80000000}, {0x8, 0xb9, 0x7, 0x5}, {0x2, 0xfe, 0xfe, 0x8}, {0x3, 0xa, 0x8, 0x6}, {0x8001, 0x40, 0x8, 0x6}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r3, &(0x7f0000000380)={0x5, 0x6, 0x1, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x208, 0x0, 0x208, 0x120, 0x208, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f00000003c0), {[{{@ip={@local, @remote, 0xff, 0xffffffff, 'dvmrp1\x00', 'macvlan0\x00', {}, {}, 0x0, 0x1, 0x8}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x6, 0x6, 0x2, 0x6], 0x1, 0x4}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x1, 0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x13, 0x2c, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x2, 0xc, [0x2, 0x28, 0x23, 0x33, 0x3c, 0x3e, 0x1f, 0x18, 0x12, 0x1e, 0x13, 0x2f, 0x10, 0x6, 0x1e, 0x2b], 0x0, 0x0, 0x48cf5d8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@tcpmss={{0x28}, {0x62d, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x3}, [0xffffff00, 0xff000000, 0xff], 0x4e21, 0x4e20, 0x4e21, 0x4e23, 0xfff, 0x0, 0xc000000, 0x2, 0x80000001}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) recvfrom(r1, &(0x7f0000000a00)=""/247, 0xf7, 0x100, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000b00)={'#! ', './file0', [], 0xa, "ad8991dae7f6cdf13a6e43740a314819988a8818d25e43bde82ac6c73f79e3ee484a5766e2bf3b451634fe0f8304d07fb3f1096352150b0868961c15e2e00e6ed58ff5358df4df9776a99b2f820429d49cb927e36a2cde9f776326ec7c9e71aa7b857d5d9444dc6aa07ef5305cd24178b731d4afcdb00f36b354e7c8fcf8ca2bbdb0ba1339a384c19c08eaee878ad14d1e0117539f600c9976a3581015490e14f9e5c5238447de9bbf4647a7af0d079aedf367aacc2ccabc9da1e5f00b5b370c0c73f39de7cb8f87630f149b2a7b"}, 0xd9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c00)={'gretap0\x00', 0x0, 0x8, 0x7, 0x1000, 0x401, {{0x19, 0x4, 0x0, 0x33, 0x64, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @broadcast, {[@rr={0x7, 0xb, 0x4f, [@broadcast, @loopback]}, @ra={0x94, 0x4}, @generic={0x89, 0x4, "08f6"}, @cipso={0x86, 0x14, 0x2, [{0x0, 0xe, "c57a8091a5574257d50d48a2"}]}, @timestamp_addr={0x44, 0x1c, 0x6f, 0x1, 0xe, [{@multicast2, 0x7}, {@multicast2, 0x2}, {@empty, 0x800}]}, @ssrr={0x89, 0xb, 0x3b, [@remote, @multicast2]}]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00), 0x4) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000dc0)={0x0, r4}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x20, 0x0, 0x9, 0x3, 0x10054, 0xffffffffffffffff, 0x22ee, '\x00', r5, r6, 0x0, 0x4, 0x3, 0x0, @void, @value, @value=r7}, 0x50) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000e00)=""/33, 0x21, 0x5, &(0x7f0000000e40)={0x0, 0x3938700}) close_range(r6, r2, 0x2) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0) ioctl$EVIOCSABS0(r9, 0x401845c0, &(0x7f0000000ec0)={0xffff7fff, 0x7, 0x80000000, 0x4, 0x81, 0x5}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000f00)={0x0, 0x4f, 0xdc}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001300)={r10, 0x6, 0x1, [0x0, 0x8001, 0x4, 0x4, 0x9], [0x8, 0x74d3, 0xad, 0x4, 0x1, 0x3, 0x5, 0xfffffffffffffffa, 0x3, 0x6, 0x8, 0xffffffffffff18f7, 0x2, 0x4, 0x2, 0x3, 0x0, 0x2, 0x1, 0x6, 0xf, 0x0, 0x9, 0x1, 0x7, 0x0, 0x1, 0x9, 0x7fffffffffffffff, 0x3, 0x301, 0x0, 0x8000, 0x10000, 0x77b, 0x2, 0xfffffffffffffff9, 0x4170, 0x7, 0x206, 0x2, 0x0, 0x41, 0x2, 0x5, 0x1ff, 0xfffffffffffffff8, 0x0, 0x9, 0x5, 0x65bd, 0xd, 0x3, 0x5, 0x6, 0x7, 0x6, 0x7, 0x40, 0xeac8, 0x8, 0xd7d4, 0x100000000, 0x1, 0x3, 0x2, 0x2, 0x10001, 0xfffffffffffffff7, 0xfffffffffffffffc, 0xb, 0x5, 0xffffffff, 0x6, 0x8, 0x4, 0x9, 0xb6, 0x7, 0x8001, 0x9, 0x5, 0xf7, 0x4, 0xa, 0x754f, 0x68b, 0x6, 0xf2b1, 0x0, 0x4, 0x10000, 0x401, 0x7, 0x2, 0x4, 0x10000, 0x6, 0x3, 0x7, 0x7, 0x4, 0x926e, 0x9c, 0x2, 0xbd6d, 0x3, 0x0, 0x6, 0x80000001, 0x6, 0x10, 0xfffffffffffffff7, 0x7, 0x3, 0x3, 0x2, 0x40, 0xc3, 0x2, 0x8]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001780)=0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001740)=@rnullb, r11, &(0x7f00000017c0)={0x0, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x7, 0x0, 0x7f, 0x6, 0x8001, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x9, 0xc, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000018c0)='GPL\x00', 0x120, 0x0, 0x0, 0x40f00, 0x68, '\x00', r5, @cgroup_sock=0xc, r9, 0x8, &(0x7f0000001900)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, &(0x7f0000001940)=[r8, r8, r8], 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a80)={&(0x7f0000001a40)='ext4_da_write_pages\x00', r9, 0x0, 0x101}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ac0)) open(&(0x7f0000001b00)='./file0\x00', 0x0, 0x40) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001b40)=""/41, 0x29, 0x40010040, &(0x7f0000001b80)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x29802020}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x54, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40804}, 0x4801) 2.464832093s ago: executing program 0 (id=3082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 2.439987193s ago: executing program 0 (id=3083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='signal_generate\x00', r0, 0x0, 0x1fc}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x0, &(0x7f00000000c0)}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)='7', 0x1}], 0x1}}], 0x3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r5, 0xa49a, 0x30}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x0, 0x38e3, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, 0x80, 0x7800, 0x2, 0x2}}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x44, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}}, 0x54) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x2000000, 0xe80, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000740)={0x8, &(0x7f0000000680)=[{0x8, 0xa, 0xbb, 0x40}, {0x8000, 0x43, 0x9}, {0xc, 0x9, 0x20, 0x350}, {0x100, 0x4, 0x2, 0x4}, {0x6283, 0x7, 0x7, 0x2000}, {0xea7, 0xb, 0xf7, 0x1}, {0x5, 0xf, 0x9, 0x9}, {0xd, 0x2a, 0xe, 0x7}]}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x9}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.181740166s ago: executing program 4 (id=3089): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) stat(0x0, 0x0) 2.108875718s ago: executing program 4 (id=3090): timerfd_create(0x1, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e0000000200000008ad0021090000f3462bab87941cedf2e5ee5d83e616523d15b50e6569fecf86df28b95859dd3e296a5a6155cbb516f105590ce9702da3fb076b05f1bdd62c49044863ec1d9df718684acbc1f2602f99f585cd3792c7067ab4875a8aa230745bdb8ac13a3a6bd15f57436c270f887a0612", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000050000000600000000000000", @ANYRES32, @ANYBLOB="00000000d6676d5227f784ee5aff0a7d265649dcd8b37d3d1428cbadf59a9ef21f286abaa3c66a47608dcf91eba578cbd80ab0c47702f293e4e642d5bf7a2102cb8a336db578ce70021136b8665324"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 2.071629198s ago: executing program 4 (id=3091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 2.055559719s ago: executing program 4 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="800000000000000024001280090001007866726d000000001400028008000200020000100800010503000000140003007866726d3000"], 0x58}}, 0x0) 2.030849429s ago: executing program 2 (id=3094): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x9520, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x10000}]}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffda9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="faffffff200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000280)={'batadv_slave_1\x00', 0xfffffff8}) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x40401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x40020000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x305500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) 1.578286126s ago: executing program 3 (id=3099): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0xb) set_mempolicy(0x8000, &(0x7f0000000100)=0x3, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x400100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffb, 0x3, 0x2000000000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)='l', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000040041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50, 0x24048800}, 0x10) setregid(0xffffffffffffffff, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x2, 0x8, 0x6, 0x1}, {0xff, 0x80, 0x8, 0x10}, {0x2, 0x2, 0x7, 0x10}, {0x1, 0xfa, 0x40, 0x973}, {0x0, 0x1, 0x1, 0x1d}, {0x4, 0x2, 0x3, 0x171}, {0x2, 0x2, 0xf8, 0xfffffffb}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newchain={0x16c4, 0x64, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1, 0xfff3}, {0xc, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x24}}, @filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_BASIC_ACT={0xbc, 0x3, [@m_mpls={0xb8, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x89f65}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x72, 0x6, "06ef9bbce914db345cfbff3bbe568d71111e2270adca7ce2bf1ef81a08573846154ae5e4315d86c247e968cc5f6ca32ec3b9dc7d4a9d3733600178633b8b4b2b5a348d7856bd5305b67194ea7eafeec5702cf919ef483522d33855fac2b884e1b4e93240144f0688e89b07ca49d3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x1584, 0x2, [@TCA_CGROUP_ACT={0x7dc, 0x1, [@m_connmark={0x1a0, 0x3, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x144, 0x0, 0x99b, 0x8}, 0xa599}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xf, 0x2, 0x0, 0x3}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd4f9, 0xff, 0x6, 0x0, 0x4000000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x20000000, 0x9, 0xc3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xff, 0x2, 0x3, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x20000000, 0x1, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0x6, 0xd635}, 0xb5f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d06d4d, 0xa, 0x20000000, 0x2, 0x5}}}]}, {0x8d, 0x6, "36972f624ee71222c3e242802ceaa6f275a39acf6ceb0161a2509185cefbf6e1d4da750b3f98dd3ee72eb539d0ed98b607784f23e0050898558a02a70261cb063d839960ed2e7b067989c3b8c0da36ca426561c0044639c14faf208fd865cac5b16476085f04a9812cc325b342d641b4168b144db860a9f94737f3e45bbe8f98f3a00b5df0c156ca0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa0, 0x20, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6878, 0x100, 0x10000000, 0x2, 0x6}}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8b3fb7bb}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xc1}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x37, 0x6, "0cda6de78328666f5ec0f1572f3b744bda39de36098dbc2a31e3c850b84c70727cefe3c26ba2f1467c7a7ba39574a1e9bef0d4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x168, 0x16, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffffa99b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd0}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x46}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x10000000, 0x6}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xc0, 0x6, "a54b1ddb9c63879063669cba522ddcf463656ab631943fb2587d4eab91dbb023f5a4ed3e5f53ca6dc43cb34024a0a42ed45f03fc517c6b9e3965f48fe5d6fa3c06b012d3f7c288fbe0b3b6f69551b17071c8df2834f01d6f427aeb124427c9912e46c5a927c6083c09cb6d79e9172cd06f6f31c7321e762d4587a38698b77ebbd5d09a93aaace3eda4b74a72b4a266249dea1407e181bd70e2f5accd51f423fcb807ee0fe652d2bec33ee91cce8f58c516a2b538f3b7ca9ca45be16d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x150, 0x1b, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xb1, 0x6, "bba329ed7caeafc45174fbbacadc241c401ef97021ac7568fdf8dc29fe1379b3868a828575011e72a0421a3fd5fb3514481099c0287e38a59b651007f34578df34f83778650e35936ad4c158cb6f397f22ba602b4e98394e61950b63b3059bec4195e7ec23747f451db6fd87ef305b0749c07e8eb1f4aa1863fcb5294c968a6a04efc62fdc5153e175d78d3410f4e0db5e016e90d5a862169c5b7061c2be5000da32a76a5b67be5870b56f3686"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x14c, 0xe, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x8, 0x6, 0x2, 0x8000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x134}]}, {0xdb, 0x6, "b930b056e4132046a98459b0e54e0925d9bf61c386fe37ce1a8ed7a7c49747fffcec8397b6291f867f501c2e14b273fd923a967941b9901633f4595355f2dd3b736c4851eff6e8161136038dd549c2f27bd3b0d3fddfa140975d3d6814a86e87455e4401e02a11fe62e61181440b392e74b548b348730dba5f002a14fa871b2a697c1937db7170a3ff1fbc9514685b735d6a50e65f0b5d99f7c972ae407ac198d2376f8018342c2e1a18b5ea00f474af47b338aa581620c901e3c79b577f83ad98a4bd243239a864ca00b76073169ea3de0fc25e69044b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x80, 0x15, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0xb, 0x6, "5ae5cc3b839a18"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x7c, 0x12, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x3c, 0x6, "1fdba2e2139d0a8dd8481097ac8309b87e14c836b5e012ec537819f4a9861cf96dcd5e9101e698f37619bad08dd39670777990fda58a682b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x98, 0xe, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x10000000, 0x5eb, 0x2}, 0x121}}]}, {0x49, 0x6, "8209fcc97dbcbcd03734f4ce6b58034f1b4e036925eb69e9226526721a6e35005ead6f08a57332c990ef035c796eeb15847d46bd8bf2bd81454278a76c58516902b617b782"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x4cc, 0x1, [@m_connmark={0xfc, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x7, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x5, 0x9, 0xf}, 0x81}}]}, {0x93, 0x6, "f0c10c7b63d224d658c5f7840f4e4907c08d5ff91e7cc71ad4da94ed5ead01664100cb59679fb50fbccb6b9fd6750ab510f27f3ad792b224e3d09f99a264e832b9e65e343809d41d52298c45a92b795cfbd4924aa6041d7e5c3440ca64214ca66321e3f3a961d0a46e269ae78dfda1a5b4e1c4142e6b24c278978a674f696a3ee162ec537682914f2b979540f0a039"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xc4, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x7f, 0x6, "eefe5f8dd874384145aaa893e7ab544afd997d9a558bfb7fa8e010440c4c4503291aace1d81313254e37ce47614cefaee8ff3476e414372d88a62d42e42fd31b951e3cda9434c8cab7b0d40eaacb173df5543455bca9c6ae62697e21bac5af073f219d738b6428343aef16594567006295114972e505da0ed9b2a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xcc, 0x5, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0xf59}, @TCA_IFE_TYPE={0x6, 0x5, 0x569}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x5b, 0x6, "169bfa61ffa25943968141c3e53256ee9d2e131817390518c907b10348e497ae0c905deb8ce8aab9800126e6b5fab5577fef7164c50904540b3b94c1ddd34c9944ab254f7fd7ca07e0749d10362ecfdab9344194bc6b57"}, {0xc}, {0xc, 0x8, {0x5, 0x7}}}}, @m_skbedit={0xe0, 0x1c, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}]}, {0xa9, 0x6, "d756fef3c8213f7cecfe66e210cbd32ace630107bc3767f9d711de20889f352b84003e9f111e0b6e9a008f8a61616d222b9db80cb80479aaaca3ae57bfde7574491a7edd346e93959fd9980c9e81d748b61f75f1803b9af9939c257c20c1373aab50d24f6c72394a7f72f106cfda12f4247bf258ae8f9f46b5b9430497daf0222c5905aa8a450a1de3d1ee2c5ca1e728826549c6e0f051f1cdb10d147a06f6cc02ec7ce459"}, {0xc}, {0xc, 0x8, {0xac72d7e4f037bdf4}}}}, @m_skbedit={0x15c, 0x1c, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x642, 0x6, 0x7, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x400}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xe}}]}, {0xce, 0x6, "9acc560681936968c54df32415e9d0098d670c35069446a05d5124384847b6677e629168528e177abc82343f25acdc682e9e922df281420c717f3bcdd4f38ba23b40161ecf931e773d49a689a5f315b6604543f89b482825be8c5c613215d6ff08fbb1a9190ee33bf295ae6102ec2f17669236a68e558a3f469eea024bfce08855beb638384de51621cab748cba39c77d56f70d366fad08e06bbeeea1b27a39b1f51c66c12096bc502177968057c83859e286fdc9316631bf975d8f0b3f5adbece6cdf4d6476fd7f335d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0x8d8, 0x1, [@m_pedit={0x27c, 0x9, 0x0, 0x0, {{0xa}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x19c, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xb4, 0x6, "54f18f9c135a136549b409d2ad9465405094379a414b41d772d6bb563f071f770a05b3a348e5a3e102e6217933dbac9d628a5675e99db27f256868ff29c1c63152b2271675f9dafc829cfed46653be42f42bc7a209e3bc891979ee39a32ebab2736a1a4e4d771ed4d7f249a938a8c76f786996961cf6a98bacf90863ddff597b36d00b253af849ae94a2a6ce9bdf78c6aa3198a6b63760d425e506515ae8d9ff4ced41f4de1dbfafb27de8d7d76d7f89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x154, 0x5, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1973, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21db, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa45, 0x8, 0x0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb4, 0x401, 0x3, 0x8001, 0x21c0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7f, 0x2, 0x81, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x6, 0x1, 0x13df}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b36, 0x6}}]}, {0xa4, 0x6, "ca48c8e4d5aaaa2a4d85a450141c92037cf3d94c42ca446ff3ee7a3d452d614a704f111d4fa577b2b3ccba1ed129cf4416eeec214d99025a0079ecbac5434ade3ff70865b1f1f1cfb15ed580e7b4d4370c739c77c32376440c9be5b2d4f2d83a601e49c7f7d25941dd97b218771a8b9381f9e0d58a24ada373af9504596872e9fd4776312cc119c0962b2bf0853e26acecaef2229abdae926fd4c7671410d791"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x120, 0x1e, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3ff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x5, 0x7ff, 0x3304}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x9d, 0x6, "1b55fcdf5a59f4238bd16984d788a69c0857c08dae292580b2805a8a6e6c48c25cc974d02de69a32a015e6b65720cdfb44dfaa31ae5d20ed9c8a29287f03287e56713adff95f51e900dd929bbd9549e13035833d1e06d3ce968ced8bb755fa1958c4918ad9f5143255c1b14578015c432746f94c72ff477c709ba96b580894595743e1438f232be9dc5872c23651f5f487dc485c3d851f2b8a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xfc, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, {0xad, 0x6, "b55e4685b08511227a59478bf48f90d71e1dba03608d41c40fd28b35216dd575177a54ef64736e19c10431107134cd9f6d7b47b3820d12527a3a9c4583d77e48b98a8ca13868bea723e06001605706693d1ca1bc925dfd687cf2166cce40166c25751759cc3a59e61a172d4abbd193c5fbfbd32204359cf487bb836bc4f9ff53cdbd3dce089d25bfa8e8242dfb1163c1c853158088d7e32417bf97fb2e2b6439de1f7d05e654f32528"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x84, 0x17, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x0, 0xd1e4, 0x2}}]}, {0x3e, 0x6, "bc6164d10d4bed485afbe97add08fbf0843826b3b14bc545b86e4552ee9436042a027871902ec058cb77cc3ed6d7e20fec33b0302adc3b550b0a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x78, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x9, 0xc488}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc341}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}]}, {0x9, 0x6, "548eb2573a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xd8, 0x14, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x1, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x74e1, 0x200, 0x3, 0x7, 0x101}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x4, 0x0, 0x200, 0xfffffffd}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8a2, 0x3, 0x2, 0xe}, 0xa8}}]}, {0x36, 0x6, "c8b6aab6d5a1c205d9fc107fbfb4747b20d1a1cbbf195edda6a052495f62eabc6f4e5fc9c51dafa0b0f7292118013b1b5402"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x114, 0x17, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xba3b, 0x10, 0x10000000, 0x8, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6785}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7f}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x65, 0x6, "a4ae1cb605717bd7ba9df1cf136c5f29c46fb69f8c31549530bd7271e12ffa8149150ebd035036b1f5e73cb451007a2201cc2194cde3c683868bd17545d441b010b82803a3f5830fce3e24a752986e29b7831926286325e3e3f603ebad27dd1016"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x16c4}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00142c0000000000000000000000000000000001fc000000de00000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090780000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x86) 1.462810198s ago: executing program 3 (id=3101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="800000000000000024001280090001007866726d00000000140002800800020002000010080001050300000014000300786672"], 0x58}}, 0x0) 1.340718029s ago: executing program 3 (id=3105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 1.186876372s ago: executing program 4 (id=3108): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0xb) set_mempolicy(0x8000, &(0x7f0000000100)=0x3, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x400100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffb, 0x3, 0x2000000000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000680)=[r3]) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)='l', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000040041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50, 0x24048800}, 0x10) setregid(0xffffffffffffffff, r3) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x2, 0x8, 0x6, 0x1}, {0xff, 0x80, 0x8, 0x10}, {0x2, 0x2, 0x7, 0x10}, {0x1, 0xfa, 0x40, 0x973}, {0x0, 0x1, 0x1, 0x1d}, {0x4, 0x2, 0x3, 0x171}, {0x2, 0x2, 0xf8, 0xfffffffb}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newchain={0x1670, 0x64, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1, 0xfff3}, {0xc, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x24}}, @filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_BASIC_ACT={0x4c, 0x3, [@m_mpls={0x48, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x89f65}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x15a0, 0x2, [@TCA_CGROUP_ACT={0x7f8, 0x1, [@m_connmark={0x1a0, 0x3, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x144, 0x0, 0x99b, 0x8}, 0xa599}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xf, 0x2, 0x0, 0x3}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd4f9, 0xff, 0x6, 0x0, 0x4000000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x20000000, 0x9, 0xc3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xff, 0x2, 0x3, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x20000000, 0x1, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0x6, 0xd635}, 0xb5f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d06d4d, 0xa, 0x20000000, 0x2, 0x5}}}]}, {0x8d, 0x6, "36972f624ee71222c3e242802ceaa6f275a39acf6ceb0161a2509185cefbf6e1d4da750b3f98dd3ee72eb539d0ed98b607784f23e0050898558a02a70261cb063d839960ed2e7b067989c3b8c0da36ca426561c0044639c14faf208fd865cac5b16476085f04a9812cc325b342d641b4168b144db860a9f94737f3e45bbe8f98f3a00b5df0c156ca0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa0, 0x20, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6878, 0x100, 0x10000000, 0x2, 0x6}}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8b3fb7bb}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xc1}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x37, 0x6, "0cda6de78328666f5ec0f1572f3b744bda39de36098dbc2a31e3c850b84c70727cefe3c26ba2f1467c7a7ba39574a1e9bef0d4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x168, 0x16, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffffa99b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd0}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x46}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x10000000, 0x6}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xc0, 0x6, "a54b1ddb9c63879063669cba522ddcf463656ab631943fb2587d4eab91dbb023f5a4ed3e5f53ca6dc43cb34024a0a42ed45f03fc517c6b9e3965f48fe5d6fa3c06b012d3f7c288fbe0b3b6f69551b17071c8df2834f01d6f427aeb124427c9912e46c5a927c6083c09cb6d79e9172cd06f6f31c7321e762d4587a38698b77ebbd5d09a93aaace3eda4b74a72b4a266249dea1407e181bd70e2f5accd51f423fcb807ee0fe652d2bec33ee91cce8f58c516a2b538f3b7ca9ca45be16d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x150, 0x1b, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xb1, 0x6, "bba329ed7caeafc45174fbbacadc241c401ef97021ac7568fdf8dc29fe1379b3868a828575011e72a0421a3fd5fb3514481099c0287e38a59b651007f34578df34f83778650e35936ad4c158cb6f397f22ba602b4e98394e61950b63b3059bec4195e7ec23747f451db6fd87ef305b0749c07e8eb1f4aa1863fcb5294c968a6a04efc62fdc5153e175d78d3410f4e0db5e016e90d5a862169c5b7061c2be5000da32a76a5b67be5870b56f3686"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x168, 0xe, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x449d, 0x7b, 0xffffffffffffffff, 0x1, 0xd}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x8, 0x6, 0x2, 0x8000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x134}]}, {0xdb, 0x6, "b930b056e4132046a98459b0e54e0925d9bf61c386fe37ce1a8ed7a7c49747fffcec8397b6291f867f501c2e14b273fd923a967941b9901633f4595355f2dd3b736c4851eff6e8161136038dd549c2f27bd3b0d3fddfa140975d3d6814a86e87455e4401e02a11fe62e61181440b392e74b548b348730dba5f002a14fa871b2a697c1937db7170a3ff1fbc9514685b735d6a50e65f0b5d99f7c972ae407ac198d2376f8018342c2e1a18b5ea00f474af47b338aa581620c901e3c79b577f83ad98a4bd243239a864ca00b76073169ea3de0fc25e69044b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x80, 0x15, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0xb, 0x6, "5ae5cc3b839a18"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x7c, 0x12, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x3c, 0x6, "1fdba2e2139d0a8dd8481097ac8309b87e14c836b5e012ec537819f4a9861cf96dcd5e9101e698f37619bad08dd39670777990fda58a682b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x98, 0xe, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x10000000, 0x5eb, 0x2}, 0x121}}]}, {0x49, 0x6, "8209fcc97dbcbcd03734f4ce6b58034f1b4e036925eb69e9226526721a6e35005ead6f08a57332c990ef035c796eeb15847d46bd8bf2bd81454278a76c58516902b617b782"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x4cc, 0x1, [@m_connmark={0xfc, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x7, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x5, 0x9, 0xf}, 0x81}}]}, {0x93, 0x6, "f0c10c7b63d224d658c5f7840f4e4907c08d5ff91e7cc71ad4da94ed5ead01664100cb59679fb50fbccb6b9fd6750ab510f27f3ad792b224e3d09f99a264e832b9e65e343809d41d52298c45a92b795cfbd4924aa6041d7e5c3440ca64214ca66321e3f3a961d0a46e269ae78dfda1a5b4e1c4142e6b24c278978a674f696a3ee162ec537682914f2b979540f0a039"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xc4, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x7f, 0x6, "eefe5f8dd874384145aaa893e7ab544afd997d9a558bfb7fa8e010440c4c4503291aace1d81313254e37ce47614cefaee8ff3476e414372d88a62d42e42fd31b951e3cda9434c8cab7b0d40eaacb173df5543455bca9c6ae62697e21bac5af073f219d738b6428343aef16594567006295114972e505da0ed9b2a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xcc, 0x5, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0xf59}, @TCA_IFE_TYPE={0x6, 0x5, 0x569}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x5b, 0x6, "169bfa61ffa25943968141c3e53256ee9d2e131817390518c907b10348e497ae0c905deb8ce8aab9800126e6b5fab5577fef7164c50904540b3b94c1ddd34c9944ab254f7fd7ca07e0749d10362ecfdab9344194bc6b57"}, {0xc}, {0xc, 0x8, {0x5, 0x7}}}}, @m_skbedit={0xe0, 0x1c, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}]}, {0xa9, 0x6, "d756fef3c8213f7cecfe66e210cbd32ace630107bc3767f9d711de20889f352b84003e9f111e0b6e9a008f8a61616d222b9db80cb80479aaaca3ae57bfde7574491a7edd346e93959fd9980c9e81d748b61f75f1803b9af9939c257c20c1373aab50d24f6c72394a7f72f106cfda12f4247bf258ae8f9f46b5b9430497daf0222c5905aa8a450a1de3d1ee2c5ca1e728826549c6e0f051f1cdb10d147a06f6cc02ec7ce459"}, {0xc}, {0xc, 0x8, {0xac72d7e4f037bdf4}}}}, @m_skbedit={0x15c, 0x1c, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x642, 0x6, 0x7, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x400}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xe}}]}, {0xce, 0x6, "9acc560681936968c54df32415e9d0098d670c35069446a05d5124384847b6677e629168528e177abc82343f25acdc682e9e922df281420c717f3bcdd4f38ba23b40161ecf931e773d49a689a5f315b6604543f89b482825be8c5c613215d6ff08fbb1a9190ee33bf295ae6102ec2f17669236a68e558a3f469eea024bfce08855beb638384de51621cab748cba39c77d56f70d366fad08e06bbeeea1b27a39b1f51c66c12096bc502177968057c83859e286fdc9316631bf975d8f0b3f5adbece6cdf4d6476fd7f335d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0x8d8, 0x1, [@m_pedit={0x27c, 0x9, 0x0, 0x0, {{0xa}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x19c, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xb4, 0x6, "54f18f9c135a136549b409d2ad9465405094379a414b41d772d6bb563f071f770a05b3a348e5a3e102e6217933dbac9d628a5675e99db27f256868ff29c1c63152b2271675f9dafc829cfed46653be42f42bc7a209e3bc891979ee39a32ebab2736a1a4e4d771ed4d7f249a938a8c76f786996961cf6a98bacf90863ddff597b36d00b253af849ae94a2a6ce9bdf78c6aa3198a6b63760d425e506515ae8d9ff4ced41f4de1dbfafb27de8d7d76d7f89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x154, 0x5, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1973, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21db, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa45, 0x8, 0x0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb4, 0x401, 0x3, 0x8001, 0x21c0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7f, 0x2, 0x81, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x6, 0x1, 0x13df}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b36, 0x6}}]}, {0xa4, 0x6, "ca48c8e4d5aaaa2a4d85a450141c92037cf3d94c42ca446ff3ee7a3d452d614a704f111d4fa577b2b3ccba1ed129cf4416eeec214d99025a0079ecbac5434ade3ff70865b1f1f1cfb15ed580e7b4d4370c739c77c32376440c9be5b2d4f2d83a601e49c7f7d25941dd97b218771a8b9381f9e0d58a24ada373af9504596872e9fd4776312cc119c0962b2bf0853e26acecaef2229abdae926fd4c7671410d791"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x120, 0x1e, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3ff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x5, 0x7ff, 0x3304}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x9d, 0x6, "1b55fcdf5a59f4238bd16984d788a69c0857c08dae292580b2805a8a6e6c48c25cc974d02de69a32a015e6b65720cdfb44dfaa31ae5d20ed9c8a29287f03287e56713adff95f51e900dd929bbd9549e13035833d1e06d3ce968ced8bb755fa1958c4918ad9f5143255c1b14578015c432746f94c72ff477c709ba96b580894595743e1438f232be9dc5872c23651f5f487dc485c3d851f2b8a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xfc, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, {0xad, 0x6, "b55e4685b08511227a59478bf48f90d71e1dba03608d41c40fd28b35216dd575177a54ef64736e19c10431107134cd9f6d7b47b3820d12527a3a9c4583d77e48b98a8ca13868bea723e06001605706693d1ca1bc925dfd687cf2166cce40166c25751759cc3a59e61a172d4abbd193c5fbfbd32204359cf487bb836bc4f9ff53cdbd3dce089d25bfa8e8242dfb1163c1c853158088d7e32417bf97fb2e2b6439de1f7d05e654f32528"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x84, 0x17, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x0, 0xd1e4, 0x2}}]}, {0x3e, 0x6, "bc6164d10d4bed485afbe97add08fbf0843826b3b14bc545b86e4552ee9436042a027871902ec058cb77cc3ed6d7e20fec33b0302adc3b550b0a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x78, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x9, 0xc488}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc341}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}]}, {0x9, 0x6, "548eb2573a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xd8, 0x14, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x1, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x74e1, 0x200, 0x3, 0x7, 0x101}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x4, 0x0, 0x200, 0xfffffffd}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8a2, 0x3, 0x2, 0xe}, 0xa8}}]}, {0x36, 0x6, "c8b6aab6d5a1c205d9fc107fbfb4747b20d1a1cbbf195edda6a052495f62eabc6f4e5fc9c51dafa0b0f7292118013b1b5402"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x114, 0x17, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xba3b, 0x10, 0x10000000, 0x8, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6785}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7f}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x68, 0x6, "a4ae1cb605717bd7ba9df1cf136c5f29c46fb69f8c31549530bd7271e12ffa8149150ebd035036b1f5e73cb451007a2201cc2194cde3c683868bd17545d441b010b82803a3f5830fce3e24a752986e29b7831926286325e3e3f603ebad27dd10162ad240"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x1670}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00142c0000000000000000000000000000000001fc000000de00000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090780000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)) socket$caif_seqpacket(0x25, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x86) 1.056441744s ago: executing program 3 (id=3109): set_mempolicy(0x3, 0x0, 0xb) set_mempolicy(0x8000, &(0x7f0000000100)=0x3, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x400100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffb, 0x3, 0x2000000000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)='l', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000040041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50, 0x24048800}, 0x10) setregid(0xffffffffffffffff, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x2, 0x8, 0x6, 0x1}, {0xff, 0x80, 0x8, 0x10}, {0x2, 0x2, 0x7, 0x10}, {0x1, 0xfa, 0x40, 0x973}, {0x0, 0x1, 0x1, 0x1d}, {0x4, 0x2, 0x3, 0x171}, {0x2, 0x2, 0xf8, 0xfffffffb}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newchain={0x160c, 0x64, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1, 0xfff3}, {0xc, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x24}}, @filter_kind_options=@f_basic={{0xa}, {0xc8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_BASIC_ACT={0xbc, 0x3, [@m_mpls={0xb8, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x89f65}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x72, 0x6, "06ef9bbce914db345cfbff3bbe568d71111e2270adca7ce2bf1ef81a08573846154ae5e4315d86c247e968cc5f6ca32ec3b9dc7d4a9d3733600178633b8b4b2b5a348d7856bd5305b67194ea7eafeec5702cf919ef483522d33855fac2b884e1b4e93240144f0688e89b07ca49d3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x14cc, 0x2, [@TCA_CGROUP_ACT={0x7f8, 0x1, [@m_connmark={0x1a0, 0x3, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x144, 0x0, 0x99b, 0x8}, 0xa599}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xf, 0x2, 0x0, 0x3}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd4f9, 0xff, 0x6, 0x0, 0x4000000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x20000000, 0x9, 0xc3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xff, 0x2, 0x3, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x20000000, 0x1, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0x6, 0xd635}, 0xb5f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28d06d4d, 0xa, 0x20000000, 0x2, 0x5}}}]}, {0x8d, 0x6, "36972f624ee71222c3e242802ceaa6f275a39acf6ceb0161a2509185cefbf6e1d4da750b3f98dd3ee72eb539d0ed98b607784f23e0050898558a02a70261cb063d839960ed2e7b067989c3b8c0da36ca426561c0044639c14faf208fd865cac5b16476085f04a9812cc325b342d641b4168b144db860a9f94737f3e45bbe8f98f3a00b5df0c156ca0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa0, 0x20, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6878, 0x100, 0x10000000, 0x2, 0x6}}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8b3fb7bb}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xc1}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x37, 0x6, "0cda6de78328666f5ec0f1572f3b744bda39de36098dbc2a31e3c850b84c70727cefe3c26ba2f1467c7a7ba39574a1e9bef0d4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x168, 0x16, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffffa99b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd0}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x46}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x10000000, 0x6}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xc0, 0x6, "a54b1ddb9c63879063669cba522ddcf463656ab631943fb2587d4eab91dbb023f5a4ed3e5f53ca6dc43cb34024a0a42ed45f03fc517c6b9e3965f48fe5d6fa3c06b012d3f7c288fbe0b3b6f69551b17071c8df2834f01d6f427aeb124427c9912e46c5a927c6083c09cb6d79e9172cd06f6f31c7321e762d4587a38698b77ebbd5d09a93aaace3eda4b74a72b4a266249dea1407e181bd70e2f5accd51f423fcb807ee0fe652d2bec33ee91cce8f58c516a2b538f3b7ca9ca45be16d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x150, 0x1b, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xb1, 0x6, "bba329ed7caeafc45174fbbacadc241c401ef97021ac7568fdf8dc29fe1379b3868a828575011e72a0421a3fd5fb3514481099c0287e38a59b651007f34578df34f83778650e35936ad4c158cb6f397f22ba602b4e98394e61950b63b3059bec4195e7ec23747f451db6fd87ef305b0749c07e8eb1f4aa1863fcb5294c968a6a04efc62fdc5153e175d78d3410f4e0db5e016e90d5a862169c5b7061c2be5000da32a76a5b67be5870b56f3686"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x168, 0xe, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x449d, 0x7b, 0xffffffffffffffff, 0x1, 0xd}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7fff, 0x8, 0x6, 0x2, 0x8000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x134}]}, {0xdb, 0x6, "b930b056e4132046a98459b0e54e0925d9bf61c386fe37ce1a8ed7a7c49747fffcec8397b6291f867f501c2e14b273fd923a967941b9901633f4595355f2dd3b736c4851eff6e8161136038dd549c2f27bd3b0d3fddfa140975d3d6814a86e87455e4401e02a11fe62e61181440b392e74b548b348730dba5f002a14fa871b2a697c1937db7170a3ff1fbc9514685b735d6a50e65f0b5d99f7c972ae407ac198d2376f8018342c2e1a18b5ea00f474af47b338aa581620c901e3c79b577f83ad98a4bd243239a864ca00b76073169ea3de0fc25e69044b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x80, 0x15, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0xb, 0x6, "5ae5cc3b839a18"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x7c, 0x12, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x3c, 0x6, "1fdba2e2139d0a8dd8481097ac8309b87e14c836b5e012ec537819f4a9861cf96dcd5e9101e698f37619bad08dd39670777990fda58a682b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x98, 0xe, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x10000000, 0x5eb, 0x2}, 0x121}}]}, {0x49, 0x6, "8209fcc97dbcbcd03734f4ce6b58034f1b4e036925eb69e9226526721a6e35005ead6f08a57332c990ef035c796eeb15847d46bd8bf2bd81454278a76c58516902b617b782"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x4cc, 0x1, [@m_connmark={0xfc, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x7, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x5, 0x9, 0xf}, 0x81}}]}, {0x93, 0x6, "f0c10c7b63d224d658c5f7840f4e4907c08d5ff91e7cc71ad4da94ed5ead01664100cb59679fb50fbccb6b9fd6750ab510f27f3ad792b224e3d09f99a264e832b9e65e343809d41d52298c45a92b795cfbd4924aa6041d7e5c3440ca64214ca66321e3f3a961d0a46e269ae78dfda1a5b4e1c4142e6b24c278978a674f696a3ee162ec537682914f2b979540f0a039"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xc4, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x7f, 0x6, "eefe5f8dd874384145aaa893e7ab544afd997d9a558bfb7fa8e010440c4c4503291aace1d81313254e37ce47614cefaee8ff3476e414372d88a62d42e42fd31b951e3cda9434c8cab7b0d40eaacb173df5543455bca9c6ae62697e21bac5af073f219d738b6428343aef16594567006295114972e505da0ed9b2a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xcc, 0x5, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0xf59}, @TCA_IFE_TYPE={0x6, 0x5, 0x569}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x5b, 0x6, "169bfa61ffa25943968141c3e53256ee9d2e131817390518c907b10348e497ae0c905deb8ce8aab9800126e6b5fab5577fef7164c50904540b3b94c1ddd34c9944ab254f7fd7ca07e0749d10362ecfdab9344194bc6b57"}, {0xc}, {0xc, 0x8, {0x5, 0x7}}}}, @m_skbedit={0xe0, 0x1c, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}]}, {0xa9, 0x6, "d756fef3c8213f7cecfe66e210cbd32ace630107bc3767f9d711de20889f352b84003e9f111e0b6e9a008f8a61616d222b9db80cb80479aaaca3ae57bfde7574491a7edd346e93959fd9980c9e81d748b61f75f1803b9af9939c257c20c1373aab50d24f6c72394a7f72f106cfda12f4247bf258ae8f9f46b5b9430497daf0222c5905aa8a450a1de3d1ee2c5ca1e728826549c6e0f051f1cdb10d147a06f6cc02ec7ce459"}, {0xc}, {0xc, 0x8, {0xac72d7e4f037bdf4}}}}, @m_skbedit={0x15c, 0x1c, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x642, 0x6, 0x7, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x400}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xe}}]}, {0xce, 0x6, "9acc560681936968c54df32415e9d0098d670c35069446a05d5124384847b6677e629168528e177abc82343f25acdc682e9e922df281420c717f3bcdd4f38ba23b40161ecf931e773d49a689a5f315b6604543f89b482825be8c5c613215d6ff08fbb1a9190ee33bf295ae6102ec2f17669236a68e558a3f469eea024bfce08855beb638384de51621cab748cba39c77d56f70d366fad08e06bbeeea1b27a39b1f51c66c12096bc502177968057c83859e286fdc9316631bf975d8f0b3f5adbece6cdf4d6476fd7f335d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0x804, 0x1, [@m_pedit={0x260, 0x9, 0x0, 0x0, {{0xa}, {0x184, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x180, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0xb4, 0x6, "54f18f9c135a136549b409d2ad9465405094379a414b41d772d6bb563f071f770a05b3a348e5a3e102e6217933dbac9d628a5675e99db27f256868ff29c1c63152b2271675f9dafc829cfed46653be42f42bc7a209e3bc891979ee39a32ebab2736a1a4e4d771ed4d7f249a938a8c76f786996961cf6a98bacf90863ddff597b36d00b253af849ae94a2a6ce9bdf78c6aa3198a6b63760d425e506515ae8d9ff4ced41f4de1dbfafb27de8d7d76d7f89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x154, 0x5, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1973, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21db, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa45, 0x8, 0x0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb4, 0x401, 0x3, 0x8001, 0x21c0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7f, 0x2, 0x81, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x6, 0x1, 0x13df}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1b36, 0x6}}]}, {0xa4, 0x6, "ca48c8e4d5aaaa2a4d85a450141c92037cf3d94c42ca446ff3ee7a3d452d614a704f111d4fa577b2b3ccba1ed129cf4416eeec214d99025a0079ecbac5434ade3ff70865b1f1f1cfb15ed580e7b4d4370c739c77c32376440c9be5b2d4f2d83a601e49c7f7d25941dd97b218771a8b9381f9e0d58a24ada373af9504596872e9fd4776312cc119c0962b2bf0853e26acecaef2229abdae926fd4c7671410d791"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x84, 0x1e, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3ff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x5, 0x7ff, 0x3304}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xfc, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, {0xad, 0x6, "b55e4685b08511227a59478bf48f90d71e1dba03608d41c40fd28b35216dd575177a54ef64736e19c10431107134cd9f6d7b47b3820d12527a3a9c4583d77e48b98a8ca13868bea723e06001605706693d1ca1bc925dfd687cf2166cce40166c25751759cc3a59e61a172d4abbd193c5fbfbd32204359cf487bb836bc4f9ff53cdbd3dce089d25bfa8e8242dfb1163c1c853158088d7e32417bf97fb2e2b6439de1f7d05e654f32528"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x84, 0x17, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x0, 0xd1e4, 0x2}}]}, {0x3e, 0x6, "bc6164d10d4bed485afbe97add08fbf0843826b3b14bc545b86e4552ee9436042a027871902ec058cb77cc3ed6d7e20fec33b0302adc3b550b0a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x78, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x9, 0xc488}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc341}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8000}]}, {0x9, 0x6, "548eb2573a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xbc, 0x14, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x1, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x4, 0x0, 0x200, 0xfffffffd}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8a2, 0x3, 0x2, 0xe}, 0xa8}}]}, {0x36, 0x6, "c8b6aab6d5a1c205d9fc107fbfb4747b20d1a1cbbf195edda6a052495f62eabc6f4e5fc9c51dafa0b0f7292118013b1b5402"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x114, 0x17, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xba3b, 0x10, 0x10000000, 0x8, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6785}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7f}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x65, 0x6, "a4ae1cb605717bd7ba9df1cf136c5f29c46fb69f8c31549530bd7271e12ffa8149150ebd035036b1f5e73cb451007a2201cc2194cde3c683868bd17545d441b010b82803a3f5830fce3e24a752986e29b7831926286325e3e3f603ebad27dd1016"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x400}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x160c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x86) 807.720437ms ago: executing program 2 (id=3111): set_mempolicy(0x1, 0x0, 0x4) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_to_hsr\x00', @local}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 440.845783ms ago: executing program 1 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="800000000000000024001280090001007866726d00000000140002800800020002000010080001050300000014000300786672"], 0x58}}, 0x0) 410.126184ms ago: executing program 1 (id=3118): timerfd_create(0x1, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e0000000200000008ad0021090000f3462bab87941cedf2e5ee5d83e616523d15b50e6569fecf86df28b95859dd3e296a5a6155cbb516f105590ce9702da3fb076b05f1bdd62c49044863ec1d9df718684acbc1f2602f99f585cd3792c7067ab4875a8aa230745bdb8ac13a3a6bd15f57436c270f887a0612", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000050000000600000000000000", @ANYRES32, @ANYBLOB="00000000d6676d5227f784ee5aff0a7d265649dcd8b37d3d1428cbadf59a9ef21f286abaa3c66a47608dcf91eba578cbd80ab0c47702f293e4e642d5bf7a2102cb8a336db578ce70021136b8665324"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 317.781015ms ago: executing program 4 (id=3119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110d, &(0x7f0000000380)={0x0, 0x5f51, 0x2, 0xfffffffc, 0x334}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x40000010000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0xa4000061) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x40) read(r6, &(0x7f0000000140)=""/68, 0x44) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x72) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="60010000100013040000100000000000ac1414aa00000000000000000000000020010000000000000000000000000002000000004e2000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20040880}, 0x20040000) pause() sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[], 0x28}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r12 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0xc16}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000b80)={r13, 0x2c, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x0, @empty, 0x71}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000bc0)=0x10) pwritev(r12, &(0x7f0000000d40)=[{&(0x7f0000000440)="63c5c31903a626a5d5", 0x27}, {&(0x7f00000004c0)="4452ef8abb536149647474284f12a6d424ddad2c18b8cc1e40470d4606300298ed75fa82132f058fa6350236fba0eec03db69dd05c74c9f0080f71e5b74a884211ba7a08fab750b6ee02d90932"}, {&(0x7f0000000c00)="7df25fd4994d00030137791b6c80939dc5250ad745e450f4d222285ca9eaee86915612a3e854f7f3195624f903f6a584b23ea165e2aeb6af19883f347ad441b770ab158ca45f1b02dcca13b3e028006081ae7b5e18b928df72639977d07b669b8bd42f0f367a70b3da433acfdc8d08fdce037b5147b64eab0212dd8da3a7c50d5e3ae3f0f3dc1ddf9c168385adaec4cf0a51da9713d954548766e090817e4f2d0b6c6d98e6177150bc9b4d5d7261d191567cf587"}, {&(0x7f0000000d80)="d080248277f17835aefb0100000028369ce51493115b2cd58488e4a20b8afd1bf5e854797982713b2cc911ea346418cf7e9e9e36cb63e57ed6b34ea2e0e793ce948d400f6e6b1368ba4be3c208b3bcaa9c1606d1adbd8855043044ea639206caee73873597223b6aea9c5939ea6d8c4e96c397c0dffd79c9b55700"/141}], 0x1, 0x1498, 0x81) 245.256446ms ago: executing program 1 (id=3120): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 3) 172.854107ms ago: executing program 1 (id=3121): sched_yield() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 172.345697ms ago: executing program 1 (id=3122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 170.330437ms ago: executing program 3 (id=3123): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x47fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000500)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000005c0)={0x60, 0x1, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x40000000, &(0x7f0000000080)=[{0xef, 0xd0, 0x9154}], 0x1, 0x8, 0xa, 0x40, 0x6b}) 158.517087ms ago: executing program 1 (id=3124): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0xe0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x50000004) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[], 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004003e00040000003100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 118.331378ms ago: executing program 3 (id=3125): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800400, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x5000000, 0x8000c62) pwrite64(r1, &(0x7f0000000140)='2', 0xfffffe93, 0x1) 0s ago: executing program 0 (id=3126): timerfd_create(0x1, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e0000000200000008ad0021090000f3462bab87941cedf2e5ee5d83e616523d15b50e6569fecf86df28b95859dd3e296a5a6155cbb516f105590ce9702da3fb076b05f1bdd62c49044863ec1d9df718684acbc1f2602f99f585cd3792c7067ab4875a8aa230745bdb8ac13a3a6bd15f57436c270f887a0612", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000050000000600000000000000", @ANYRES32, @ANYBLOB="00000000d6676d5227f784ee5aff0a7d265649dcd8b37d3d1428cbadf59a9ef21f286abaa3c66a47608dcf91eba578cbd80ab0c47702f293e4e642d5bf7a2102cb8a336db578ce70021136b8665324"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) kernel console output (not intermixed with test programs): 0.2403'. [ 162.657518][T10782] SELinux: failed to load policy [ 162.711903][T10786] xt_CT: No such helper "pptp" [ 162.865433][T10797] netlink: '+}[@': attribute type 4 has an invalid length. [ 163.011482][T10800] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2412'. [ 163.127428][T10805] SELinux: failed to load policy [ 163.141908][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2415'. [ 163.159320][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2415'. [ 163.211398][T10814] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 163.240486][T10816] vhci_hcd: invalid port number 96 [ 163.245921][T10816] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 163.418863][T10825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2422'. [ 163.466838][T10827] loop0: detected capacity change from 0 to 1024 [ 163.477380][T10827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.487028][T10827] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.500394][T10827] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 163.511583][T10827] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.2423: lblock 2 mapped to illegal pblock 2 (length 1) [ 163.527063][T10827] EXT4-fs (loop0): Remounting filesystem read-only [ 163.534508][T10827] EXT4-fs (loop0): 1 orphan inode deleted [ 163.540756][T10827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.554274][T10827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.602305][T10834] SELinux: ebitmap: truncated map [ 163.608514][T10834] SELinux: failed to load policy [ 163.621027][T10836] loop2: detected capacity change from 0 to 512 [ 163.642101][T10836] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 163.677655][T10836] EXT4-fs (loop2): mount failed [ 163.789548][T10843] lo speed is unknown, defaulting to 1000 [ 163.815767][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2426'. [ 163.936039][T10855] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.986310][T10857] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 164.002047][T10855] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.062097][T10855] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.130000][T10855] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.143858][T10860] xt_CT: No such helper "pptp" [ 164.197944][T10855] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.209488][T10855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.221071][T10855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.233092][T10855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.302718][T10869] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.318592][T10871] vhci_hcd: invalid port number 96 [ 164.324772][T10871] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 164.350267][T10872] netlink: 'syz.4.2438': attribute type 10 has an invalid length. [ 164.381544][T10869] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.441189][T10869] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.503101][T10869] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.669987][T10877] wg2: left promiscuous mode [ 164.674812][T10877] wg2: left allmulticast mode [ 164.898584][T10894] xt_CT: No such helper "pptp" [ 165.094379][T10902] lo speed is unknown, defaulting to 1000 [ 165.355419][T10916] vhci_hcd: invalid port number 96 [ 165.364231][T10916] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 165.637836][T10921] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 165.701066][T10923] FAULT_INJECTION: forcing a failure. [ 165.701066][T10923] name failslab, interval 1, probability 0, space 0, times 0 [ 165.713976][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.3.2457 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 165.714005][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.714018][T10923] Call Trace: [ 165.714024][T10923] [ 165.714032][T10923] __dump_stack+0x1d/0x30 [ 165.714053][T10923] dump_stack_lvl+0xe8/0x140 [ 165.714100][T10923] dump_stack+0x15/0x1b [ 165.714118][T10923] should_fail_ex+0x265/0x280 [ 165.714159][T10923] should_failslab+0x8c/0xb0 [ 165.714180][T10923] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 165.714286][T10923] ? sock_alloc_inode+0x34/0xa0 [ 165.714313][T10923] ? __pfx_sock_alloc_inode+0x10/0x10 [ 165.714337][T10923] sock_alloc_inode+0x34/0xa0 [ 165.714427][T10923] alloc_inode+0x40/0x170 [ 165.714494][T10923] __sock_create+0x122/0x5b0 [ 165.714522][T10923] sock_create_kern+0x38/0x50 [ 165.714548][T10923] udp_sock_create4+0x66/0x2a0 [ 165.714577][T10923] rxrpc_lookup_local+0x824/0xc70 [ 165.714666][T10923] rxrpc_sendmsg+0x2f3/0x590 [ 165.714730][T10923] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 165.714896][T10923] __sock_sendmsg+0x145/0x180 [ 165.714920][T10923] ____sys_sendmsg+0x31e/0x4e0 [ 165.715026][T10923] ___sys_sendmsg+0x17b/0x1d0 [ 165.715151][T10923] __x64_sys_sendmsg+0xd4/0x160 [ 165.715196][T10923] x64_sys_call+0x2999/0x2fb0 [ 165.715217][T10923] do_syscall_64+0xd2/0x200 [ 165.715236][T10923] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.715266][T10923] ? clear_bhb_loop+0x40/0x90 [ 165.715289][T10923] ? clear_bhb_loop+0x40/0x90 [ 165.715390][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.715412][T10923] RIP: 0033:0x7fb34ba1e929 [ 165.715428][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.715446][T10923] RSP: 002b:00007fb34a087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.715467][T10923] RAX: ffffffffffffffda RBX: 00007fb34bc45fa0 RCX: 00007fb34ba1e929 [ 165.715479][T10923] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000003 [ 165.715493][T10923] RBP: 00007fb34a087090 R08: 0000000000000000 R09: 0000000000000000 [ 165.715536][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.715548][T10923] R13: 0000000000000000 R14: 00007fb34bc45fa0 R15: 00007ffc95977758 [ 165.715565][T10923] [ 165.715574][T10923] socket: no more sockets [ 165.998098][T10927] vhci_hcd: invalid port number 96 [ 166.003472][T10927] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 166.009861][T10929] lo speed is unknown, defaulting to 1000 [ 166.273904][T10938] loop3: detected capacity change from 0 to 512 [ 166.295804][T10938] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2464: Failed to acquire dquot type 1 [ 166.328727][T10938] EXT4-fs (loop3): 1 truncate cleaned up [ 166.341349][T10938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.362935][T10938] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.380314][T10956] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 166.486745][T10966] lo speed is unknown, defaulting to 1000 [ 166.524944][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.939888][ T29] kauditd_printk_skb: 1217 callbacks suppressed [ 166.939928][ T29] audit: type=1326 audit(2000000049.640:32107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cfdf658e7 code=0x7ffc0000 [ 166.999986][ T29] audit: type=1326 audit(2000000049.680:32108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cfdf0ab19 code=0x7ffc0000 [ 167.024571][ T29] audit: type=1326 audit(2000000049.680:32109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cfdf658e7 code=0x7ffc0000 [ 167.052725][ T29] audit: type=1326 audit(2000000049.680:32110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cfdf0ab19 code=0x7ffc0000 [ 167.081993][ T29] audit: type=1326 audit(2000000049.680:32111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cfdf6e929 code=0x7ffc0000 [ 167.107309][ T29] audit: type=1326 audit(2000000049.690:32112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7cfdf658e7 code=0x7ffc0000 [ 167.131912][ T29] audit: type=1326 audit(2000000049.690:32113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7cfdf0ab19 code=0x7ffc0000 [ 167.157872][ T29] audit: type=1326 audit(2000000049.690:32114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7cfdf6e929 code=0x7ffc0000 [ 167.187105][ T29] audit: type=1326 audit(2000000049.690:32115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfdf6e929 code=0x7ffc0000 [ 167.220258][ T29] audit: type=1326 audit(2000000049.690:32116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.0.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfdf6e929 code=0x7ffc0000 [ 167.305290][T10995] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 167.366102][T10997] netlink: 'syz.1.2486': attribute type 39 has an invalid length. [ 167.490644][T11003] SELinux: failed to load policy [ 167.517919][T11010] xt_CT: No such helper "pptp" [ 167.598383][T10869] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.619540][T10869] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.644456][T10869] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.672223][T10869] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.773797][T11024] netlink: 'syz.4.2497': attribute type 39 has an invalid length. [ 167.816083][T11020] lo speed is unknown, defaulting to 1000 [ 167.845548][T11031] __nla_validate_parse: 12 callbacks suppressed [ 167.845564][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 168.087732][T11041] SELinux: failed to load policy [ 168.319176][T11048] vhci_hcd: invalid port number 96 [ 168.325131][T11048] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 168.434705][T11053] FAULT_INJECTION: forcing a failure. [ 168.434705][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 168.449228][T11053] CPU: 0 UID: 0 PID: 11053 Comm: syz.3.2507 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 168.449355][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.449370][T11053] Call Trace: [ 168.449377][T11053] [ 168.449462][T11053] __dump_stack+0x1d/0x30 [ 168.449483][T11053] dump_stack_lvl+0xe8/0x140 [ 168.449499][T11053] dump_stack+0x15/0x1b [ 168.449515][T11053] should_fail_ex+0x265/0x280 [ 168.449548][T11053] should_failslab+0x8c/0xb0 [ 168.449613][T11053] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 168.449710][T11053] ? __d_alloc+0x3d/0x350 [ 168.449735][T11053] __d_alloc+0x3d/0x350 [ 168.449759][T11053] ? selinux_socket_post_create+0x214/0x2a0 [ 168.449793][T11053] d_alloc_pseudo+0x1e/0x80 [ 168.449837][T11053] alloc_file_pseudo+0x71/0x160 [ 168.449896][T11053] ? alloc_fd+0x38a/0x3c0 [ 168.449924][T11053] sock_alloc_file+0x9c/0x1e0 [ 168.449951][T11053] __sys_socket+0x116/0x180 [ 168.450012][T11053] __x64_sys_socket+0x3f/0x50 [ 168.450038][T11053] x64_sys_call+0x285a/0x2fb0 [ 168.450162][T11053] do_syscall_64+0xd2/0x200 [ 168.450181][T11053] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.450284][T11053] ? clear_bhb_loop+0x40/0x90 [ 168.450305][T11053] ? clear_bhb_loop+0x40/0x90 [ 168.450328][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.450356][T11053] RIP: 0033:0x7fb34ba20847 [ 168.450414][T11053] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.450430][T11053] RSP: 002b:00007fb34a085fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 168.450451][T11053] RAX: ffffffffffffffda RBX: 00007fb34bc45fa0 RCX: 00007fb34ba20847 [ 168.450464][T11053] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 168.450477][T11053] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 168.450490][T11053] R10: 0000200000000480 R11: 0000000000000286 R12: 0000000000000001 [ 168.450504][T11053] R13: 0000000000000000 R14: 00007fb34bc45fa0 R15: 00007ffc95977758 [ 168.450562][T11053] [ 168.798512][T11058] vhci_hcd: invalid port number 96 [ 168.805022][T11058] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 168.837420][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 168.876852][T11062] netlink: 'syz.1.2511': attribute type 39 has an invalid length. [ 168.943609][T11068] xt_CT: No such helper "pptp" [ 168.971025][T11075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2518'. [ 169.010481][T11075] loop4: detected capacity change from 0 to 512 [ 169.079301][T11078] SELinux: failed to load policy [ 169.104003][T11087] vhci_hcd: invalid port number 96 [ 169.110404][T11087] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 169.202937][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 169.289480][T11095] xt_CT: No such helper "pptp" [ 169.332307][T11105] netlink: 'syz.1.2527': attribute type 39 has an invalid length. [ 169.391881][T11112] FAULT_INJECTION: forcing a failure. [ 169.391881][T11112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.406429][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.1.2531 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 169.406538][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.406552][T11112] Call Trace: [ 169.406558][T11112] [ 169.406613][T11112] __dump_stack+0x1d/0x30 [ 169.406634][T11112] dump_stack_lvl+0xe8/0x140 [ 169.406652][T11112] dump_stack+0x15/0x1b [ 169.406669][T11112] should_fail_ex+0x265/0x280 [ 169.406699][T11112] should_fail+0xb/0x20 [ 169.406755][T11112] should_fail_usercopy+0x1a/0x20 [ 169.406787][T11112] _copy_from_user+0x1c/0xb0 [ 169.406810][T11112] ___sys_sendmsg+0xc1/0x1d0 [ 169.406856][T11112] __sys_sendmmsg+0x178/0x300 [ 169.406893][T11112] __x64_sys_sendmmsg+0x57/0x70 [ 169.406911][T11112] x64_sys_call+0x2f2f/0x2fb0 [ 169.406929][T11112] do_syscall_64+0xd2/0x200 [ 169.406969][T11112] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.407003][T11112] ? clear_bhb_loop+0x40/0x90 [ 169.407024][T11112] ? clear_bhb_loop+0x40/0x90 [ 169.407043][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.407061][T11112] RIP: 0033:0x7fcd5a71e929 [ 169.407080][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.407097][T11112] RSP: 002b:00007fcd58d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.407113][T11112] RAX: ffffffffffffffda RBX: 00007fcd5a945fa0 RCX: 00007fcd5a71e929 [ 169.407124][T11112] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000005 [ 169.407134][T11112] RBP: 00007fcd58d87090 R08: 0000000000000000 R09: 0000000000000000 [ 169.407144][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.407157][T11112] R13: 0000000000000000 R14: 00007fcd5a945fa0 R15: 00007ffee8565968 [ 169.407174][T11112] [ 169.621330][T11114] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2532'. [ 169.651351][T11118] vhci_hcd: invalid port number 96 [ 169.657327][T11118] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 169.679013][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 169.735264][T11126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2538'. [ 169.748823][T11126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2538'. [ 169.847016][T11130] netlink: 'syz.4.2539': attribute type 39 has an invalid length. [ 169.868391][T11133] loop3: detected capacity change from 0 to 2048 [ 169.930294][T11133] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 169.938269][T11133] loop3: partition table partially beyond EOD, truncated [ 169.981176][T11133] loop3: p1 size 67108992 extends beyond EOD, truncated [ 169.986293][T11138] xt_CT: No such helper "pptp" [ 169.990448][T11133] loop3: p2 start 65536 is beyond EOD, truncated [ 170.005352][T11133] loop3: p4 size 8192 extends beyond EOD, truncated [ 170.035046][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2544'. [ 170.050547][T11133] loop3: p5 size 67108992 extends beyond EOD, truncated [ 170.067814][T11133] loop3: p6 size 8192 extends beyond EOD, truncated [ 170.080659][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2546'. [ 170.213566][T11162] netlink: '+}[@': attribute type 4 has an invalid length. [ 170.222015][T11157] SELinux: failed to load policy [ 170.390096][T11175] vhci_hcd: invalid port number 96 [ 170.395453][T11175] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 170.397449][T11178] SELinux: ebitmap: truncated map [ 170.397964][T11178] SELinux: failed to load policy [ 170.584588][T11195] netlink: 'syz.0.2563': attribute type 39 has an invalid length. [ 170.783300][T11214] SELinux: ebitmap: truncated map [ 170.789836][T11214] SELinux: failed to load policy [ 170.793024][T11213] FAULT_INJECTION: forcing a failure. [ 170.793024][T11213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.809077][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.1.2569 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 170.809173][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.809187][T11213] Call Trace: [ 170.809193][T11213] [ 170.809201][T11213] __dump_stack+0x1d/0x30 [ 170.809273][T11213] dump_stack_lvl+0xe8/0x140 [ 170.809338][T11213] dump_stack+0x15/0x1b [ 170.809353][T11213] should_fail_ex+0x265/0x280 [ 170.809454][T11213] should_fail+0xb/0x20 [ 170.809537][T11213] should_fail_usercopy+0x1a/0x20 [ 170.809565][T11213] copy_folio_from_iter_atomic+0x278/0x1170 [ 170.809588][T11213] ? shmem_write_begin+0xa8/0x190 [ 170.809621][T11213] ? shmem_write_begin+0xe1/0x190 [ 170.809651][T11213] generic_perform_write+0x2c2/0x490 [ 170.809676][T11213] shmem_file_write_iter+0xc5/0xf0 [ 170.809736][T11213] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 170.809754][T11213] vfs_write+0x4a0/0x8e0 [ 170.809853][T11213] __x64_sys_pwrite64+0xfd/0x150 [ 170.809872][T11213] x64_sys_call+0xe45/0x2fb0 [ 170.809890][T11213] do_syscall_64+0xd2/0x200 [ 170.809906][T11213] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.809949][T11213] ? clear_bhb_loop+0x40/0x90 [ 170.809969][T11213] ? clear_bhb_loop+0x40/0x90 [ 170.809987][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.810006][T11213] RIP: 0033:0x7fcd5a71e929 [ 170.810021][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.810102][T11213] RSP: 002b:00007fcd58d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 170.810121][T11213] RAX: ffffffffffffffda RBX: 00007fcd5a945fa0 RCX: 00007fcd5a71e929 [ 170.810133][T11213] RDX: 00000000fffffe97 RSI: 00002000000003c0 RDI: 0000000000000004 [ 170.810145][T11213] RBP: 00007fcd58d87090 R08: 0000000000000000 R09: 0000000000000000 [ 170.810157][T11213] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 170.810168][T11213] R13: 0000000000000000 R14: 00007fcd5a945fa0 R15: 00007ffee8565968 [ 170.810188][T11213] [ 171.098350][T11223] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 171.106399][T11224] xt_CT: No such helper "pptp" [ 171.402324][T11243] vhci_hcd: invalid port number 96 [ 171.407511][T11243] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 171.473794][T11246] netlink: '+}[@': attribute type 4 has an invalid length. [ 171.515722][T11248] SELinux: ebitmap: truncated map [ 171.522199][T11248] SELinux: failed to load policy [ 171.556696][T11251] xt_CT: No such helper "pptp" [ 171.698745][T11268] FAULT_INJECTION: forcing a failure. [ 171.698745][T11268] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 171.717344][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.1.2591 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 171.717370][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.717381][T11268] Call Trace: [ 171.717388][T11268] [ 171.717428][T11268] __dump_stack+0x1d/0x30 [ 171.717452][T11268] dump_stack_lvl+0xe8/0x140 [ 171.717471][T11268] dump_stack+0x15/0x1b [ 171.717557][T11268] should_fail_ex+0x265/0x280 [ 171.717584][T11268] should_fail_alloc_page+0xf2/0x100 [ 171.717606][T11268] __alloc_frozen_pages_noprof+0xff/0x360 [ 171.717715][T11268] alloc_pages_mpol+0xb3/0x250 [ 171.717748][T11268] folio_alloc_mpol_noprof+0x39/0x80 [ 171.717843][T11268] shmem_get_folio_gfp+0x3cf/0xd60 [ 171.717881][T11268] shmem_write_begin+0xa8/0x190 [ 171.717915][T11268] generic_perform_write+0x184/0x490 [ 171.717942][T11268] shmem_file_write_iter+0xc5/0xf0 [ 171.717986][T11268] do_iter_readv_writev+0x421/0x4c0 [ 171.718005][T11268] vfs_writev+0x2df/0x8b0 [ 171.718039][T11268] ? mutex_lock+0xd/0x30 [ 171.718129][T11268] do_writev+0xe7/0x210 [ 171.718151][T11268] __x64_sys_writev+0x45/0x50 [ 171.718168][T11268] x64_sys_call+0x2006/0x2fb0 [ 171.718241][T11268] do_syscall_64+0xd2/0x200 [ 171.718257][T11268] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.718280][T11268] ? clear_bhb_loop+0x40/0x90 [ 171.718407][T11268] ? clear_bhb_loop+0x40/0x90 [ 171.718427][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.718485][T11268] RIP: 0033:0x7fcd5a71e929 [ 171.718561][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.718579][T11268] RSP: 002b:00007fcd58d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 171.718632][T11268] RAX: ffffffffffffffda RBX: 00007fcd5a945fa0 RCX: 00007fcd5a71e929 [ 171.718643][T11268] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 171.718657][T11268] RBP: 00007fcd58d87090 R08: 0000000000000000 R09: 0000000000000000 [ 171.718670][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.718683][T11268] R13: 0000000000000000 R14: 00007fcd5a945fa0 R15: 00007ffee8565968 [ 171.718703][T11268] [ 171.721864][T11270] loop2: detected capacity change from 0 to 512 [ 171.819605][T11274] SELinux: ebitmap: truncated map [ 171.984062][T11270] __quota_error: 1131 callbacks suppressed [ 171.984078][T11270] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 171.987344][T11274] SELinux: failed to load policy [ 171.990398][T11270] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.039154][T11270] EXT4-fs (loop2): mount failed [ 172.058556][T11284] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 172.065797][ T29] audit: type=1326 audit(2000000054.770:33248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.099253][ T29] audit: type=1326 audit(2000000054.800:33249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.123538][ T29] audit: type=1326 audit(2000000054.800:33250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.134105][T11289] vhci_hcd: invalid port number 96 [ 172.149098][ T29] audit: type=1326 audit(2000000054.800:33251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.154159][T11289] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 172.188548][ T29] audit: type=1326 audit(2000000054.800:33252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.215922][ T29] audit: type=1326 audit(2000000054.800:33253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.241984][ T29] audit: type=1326 audit(2000000054.800:33254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.269242][ T29] audit: type=1326 audit(2000000054.800:33255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.295546][ T29] audit: type=1326 audit(2000000054.800:33256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 172.317811][T11290] xt_CT: No such helper "pptp" [ 172.379609][T11297] loop4: detected capacity change from 0 to 512 [ 172.387762][T11297] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.394923][T11297] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.408101][T11297] EXT4-fs (loop4): 1 truncate cleaned up [ 172.414098][T11297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.539406][T11305] loop0: detected capacity change from 0 to 2048 [ 172.547982][T11305] EXT4-fs: Ignoring removed i_version option [ 172.561762][ T3346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.571683][T11305] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 172.596144][T11308] lo speed is unknown, defaulting to 1000 [ 172.665522][T11312] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 172.763058][T11321] xt_CT: No such helper "pptp" [ 172.929835][T11345] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 172.953198][T11343] netlink: 'syz.0.2620': attribute type 39 has an invalid length. [ 172.977830][T11350] FAULT_INJECTION: forcing a failure. [ 172.977830][T11350] name failslab, interval 1, probability 0, space 0, times 0 [ 172.984071][T11351] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 172.990515][T11350] CPU: 0 UID: 0 PID: 11350 Comm: syz.0.2624 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 172.990544][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.990585][T11350] Call Trace: [ 172.990592][T11350] [ 172.990600][T11350] __dump_stack+0x1d/0x30 [ 172.990623][T11350] dump_stack_lvl+0xe8/0x140 [ 172.990642][T11350] dump_stack+0x15/0x1b [ 172.990657][T11350] should_fail_ex+0x265/0x280 [ 172.990739][T11350] should_failslab+0x8c/0xb0 [ 172.990762][T11350] kmem_cache_alloc_noprof+0x50/0x310 [ 172.990903][T11350] ? audit_log_start+0x365/0x6c0 [ 172.990973][T11350] audit_log_start+0x365/0x6c0 [ 172.991043][T11350] audit_seccomp+0x48/0x100 [ 172.991068][T11350] ? __seccomp_filter+0x68c/0x10d0 [ 172.991091][T11350] __seccomp_filter+0x69d/0x10d0 [ 172.991149][T11350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.991247][T11350] ? vfs_write+0x75e/0x8e0 [ 172.991276][T11350] ? __rcu_read_unlock+0x4f/0x70 [ 172.991297][T11350] ? __fget_files+0x184/0x1c0 [ 172.991347][T11350] __secure_computing+0x82/0x150 [ 172.991443][T11350] syscall_trace_enter+0xcf/0x1e0 [ 172.991466][T11350] do_syscall_64+0xac/0x200 [ 172.991556][T11350] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.991635][T11350] ? clear_bhb_loop+0x40/0x90 [ 172.991724][T11350] ? clear_bhb_loop+0x40/0x90 [ 172.991744][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.991766][T11350] RIP: 0033:0x7f7cfdf6e929 [ 172.991782][T11350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.991800][T11350] RSP: 002b:00007f7cfc5d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 172.991818][T11350] RAX: ffffffffffffffda RBX: 00007f7cfe195fa0 RCX: 00007f7cfdf6e929 [ 172.991830][T11350] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: ffffffffffffffff [ 172.991876][T11350] RBP: 00007f7cfc5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.991889][T11350] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.991901][T11350] R13: 0000000000000000 R14: 00007f7cfe195fa0 R15: 00007fff45ff3858 [ 172.991918][T11350] [ 173.067692][T11353] SELinux: failed to load policy [ 173.241642][T11361] __nla_validate_parse: 4 callbacks suppressed [ 173.241656][T11361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2628'. [ 173.280217][ T8123] usb usb8-port1: attempt power cycle [ 173.323443][T11375] netlink: 'syz.1.2635': attribute type 39 has an invalid length. [ 173.394829][T11383] xt_CT: No such helper "pptp" [ 173.403698][T11381] xt_CT: No such helper "pptp" [ 173.449022][T11389] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2639'. [ 173.560472][T11407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2646'. [ 173.600960][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'. [ 173.615896][T11417] loop2: detected capacity change from 0 to 256 [ 173.801109][T11428] loop0: detected capacity change from 0 to 1024 [ 173.810468][T11428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.820825][T11428] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.833437][T11428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 173.844936][T11428] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.2652: lblock 2 mapped to illegal pblock 2 (length 1) [ 173.862277][T11428] EXT4-fs (loop0): Remounting filesystem read-only [ 173.870672][T11428] EXT4-fs (loop0): 1 orphan inode deleted [ 173.878020][T11428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.894184][T11428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.975617][T11434] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 174.082171][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.131802][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.172669][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.184008][T11438] lo speed is unknown, defaulting to 1000 [ 174.242297][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.254078][T11438] chnl_net:caif_netlink_parms(): no params data found [ 174.350791][ T37] team0: Port device geneve1 removed [ 174.386617][T11453] SELinux: ebitmap: truncated map [ 174.394584][T11453] SELinux: failed to load policy [ 174.463407][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.482192][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.496382][T11457] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2659'. [ 174.518842][ T37] bond0 (unregistering): Released all slaves [ 174.534427][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.544321][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.562419][T11463] xt_CT: No such helper "pptp" [ 174.568946][T11438] bridge_slave_0: entered allmulticast mode [ 174.577364][T11438] bridge_slave_0: entered promiscuous mode [ 174.586093][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.594257][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.604986][T11438] bridge_slave_1: entered allmulticast mode [ 174.613993][T11438] bridge_slave_1: entered promiscuous mode [ 174.632798][T11468] loop2: detected capacity change from 0 to 1024 [ 174.640589][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.652246][ T37] hsr_slave_0: left promiscuous mode [ 174.654954][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 174.660122][T11468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.670311][T11471] random: crng reseeded on system resumption [ 174.676772][ T37] hsr_slave_1: left promiscuous mode [ 174.683959][T11468] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.689389][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.712132][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.715356][T11468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 174.731587][T11468] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.2663: lblock 2 mapped to illegal pblock 2 (length 1) [ 174.749786][T11468] EXT4-fs (loop2): Remounting filesystem read-only [ 174.757251][T11468] EXT4-fs (loop2): 1 orphan inode deleted [ 174.763584][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.770531][T11468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.771914][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.798732][T11468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.811489][ T37] veth1_vlan: left promiscuous mode [ 174.870863][ T37] team0 (unregistering): Port device team_slave_1 removed [ 174.882104][ T37] team0 (unregistering): Port device team_slave_0 removed [ 174.910392][ T37] team0 (unregistering): Port device dummy0 removed [ 174.930416][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.966013][T11438] team0: Port device team_slave_0 added [ 174.977289][T11438] team0: Port device team_slave_1 added [ 174.997114][T11438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.004535][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.031792][T11438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.044603][T11438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.052436][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.080249][T11438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.100179][ T8123] usb usb8-port1: unable to enumerate USB device [ 175.118391][T11438] hsr_slave_0: entered promiscuous mode [ 175.125886][T11438] hsr_slave_1: entered promiscuous mode [ 175.137724][T11438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.146188][T11438] Cannot create hsr debugfs directory [ 175.146239][T11489] loop3: detected capacity change from 0 to 256 [ 175.282790][T11496] xt_CT: No such helper "pptp" [ 175.332500][T11501] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2670'. [ 175.439777][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2676'. [ 175.494389][T11438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.508268][T11513] FAULT_INJECTION: forcing a failure. [ 175.508268][T11513] name failslab, interval 1, probability 0, space 0, times 0 [ 175.521794][T11513] CPU: 1 UID: 0 PID: 11513 Comm: syz.1.2678 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 175.521865][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.521878][T11513] Call Trace: [ 175.521887][T11513] [ 175.521894][T11513] __dump_stack+0x1d/0x30 [ 175.521913][T11513] dump_stack_lvl+0xe8/0x140 [ 175.521931][T11513] dump_stack+0x15/0x1b [ 175.521945][T11513] should_fail_ex+0x265/0x280 [ 175.521989][T11513] should_failslab+0x8c/0xb0 [ 175.522012][T11513] kmem_cache_alloc_noprof+0x50/0x310 [ 175.522038][T11513] ? io_submit_one+0xb8/0x11d0 [ 175.522059][T11513] io_submit_one+0xb8/0x11d0 [ 175.522105][T11513] __se_sys_io_submit+0xfb/0x280 [ 175.522182][T11513] __x64_sys_io_submit+0x43/0x50 [ 175.522209][T11513] x64_sys_call+0xfc4/0x2fb0 [ 175.522237][T11438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.522348][T11513] do_syscall_64+0xd2/0x200 [ 175.522388][T11513] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.522426][T11513] ? clear_bhb_loop+0x40/0x90 [ 175.522448][T11513] ? clear_bhb_loop+0x40/0x90 [ 175.522469][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.522490][T11513] RIP: 0033:0x7fcd5a71e929 [ 175.522506][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.522588][T11513] RSP: 002b:00007fcd58d87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 175.522606][T11513] RAX: ffffffffffffffda RBX: 00007fcd5a945fa0 RCX: 00007fcd5a71e929 [ 175.522617][T11513] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fcd5b480000 [ 175.522630][T11513] RBP: 00007fcd58d87090 R08: 0000000000000000 R09: 0000000000000000 [ 175.522642][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.522676][T11513] R13: 0000000000000000 R14: 00007fcd5a945fa0 R15: 00007ffee8565968 [ 175.522694][T11513] [ 175.735068][T11438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.788399][T11438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.830544][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.863227][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.893293][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.900794][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.926334][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.936238][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.959601][T11438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.970416][T11438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.004237][T11526] SELinux: ebitmap: truncated map [ 176.013081][T11526] SELinux: failed to load policy [ 176.047938][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 176.077424][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.086610][T11535] loop2: detected capacity change from 0 to 1024 [ 176.106519][T11535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.119608][T11535] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.141878][T11535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 176.159108][T11438] veth0_vlan: entered promiscuous mode [ 176.167775][T11535] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.2683: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.183433][T11535] EXT4-fs (loop2): Remounting filesystem read-only [ 176.190490][T11535] EXT4-fs (loop2): 1 orphan inode deleted [ 176.196934][T11535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.198754][T11438] veth1_vlan: entered promiscuous mode [ 176.214911][T11535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.221536][T11438] veth0_macvtap: entered promiscuous mode [ 176.231632][T11438] veth1_macvtap: entered promiscuous mode [ 176.245357][T11438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.256296][T11438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.266707][T11438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.275927][T11438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.285843][T11438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.294951][T11438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.308688][T11545] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 176.482114][T11555] netlink: 'syz.0.2687': attribute type 39 has an invalid length. [ 176.657000][T11560] loop3: detected capacity change from 0 to 512 [ 176.664023][T11560] EXT4-fs: Ignoring removed bh option [ 176.671357][T11559] vhci_hcd: invalid port number 96 [ 176.677059][T11559] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 176.750418][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 176.964501][T11560] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.973775][T11560] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 176.983802][T11560] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 176.984494][T11567] loop2: detected capacity change from 0 to 256 [ 177.001802][T11560] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 177.011935][T11560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.042892][T11573] vhci_hcd: invalid port number 96 [ 177.048768][T11573] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 177.284781][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.344083][T11582] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 177.375677][ T29] kauditd_printk_skb: 1238 callbacks suppressed [ 177.375751][ T29] audit: type=1400 audit(2000000060.080:34487): avc: granted { setsecparam } for pid=11581 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 177.415587][ T29] audit: type=1326 audit(2000000060.120:34488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34ba1e929 code=0x7ffc0000 [ 177.442141][ T29] audit: type=1326 audit(2000000060.120:34489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb34ba1e929 code=0x7ffc0000 [ 177.468057][ T29] audit: type=1326 audit(2000000060.120:34490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34ba1e929 code=0x7ffc0000 [ 177.501112][ T29] audit: type=1326 audit(2000000060.120:34491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb34ba1e929 code=0x7ffc0000 [ 177.529154][ T29] audit: type=1326 audit(2000000060.120:34492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11581 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34ba1e929 code=0x7ffc0000 [ 177.707897][T11593] SELinux: ebitmap: truncated map [ 177.714728][T11593] SELinux: failed to load policy [ 177.812188][T11602] SELinux: failed to load policy [ 177.842919][ T29] audit: type=1326 audit(2000000060.550:34493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5a71e929 code=0x7ffc0000 [ 177.868869][ T29] audit: type=1326 audit(2000000060.550:34494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcd5a71e929 code=0x7ffc0000 [ 177.895784][ T29] audit: type=1326 audit(2000000060.550:34495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5a71e929 code=0x7ffc0000 [ 177.920910][ T29] audit: type=1326 audit(2000000060.550:34496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11603 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fcd5a71e929 code=0x7ffc0000 [ 178.111896][T11619] xt_CT: No such helper "pptp" [ 178.238573][T11628] vlan1: entered allmulticast mode [ 178.293725][T11637] vhci_hcd: invalid port number 96 [ 178.299033][T11637] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 178.356554][T11639] SELinux: failed to load policy [ 178.468711][T11648] __nla_validate_parse: 1 callbacks suppressed [ 178.468722][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2720'. [ 178.494141][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'. [ 178.604833][T11658] SELinux: ebitmap: truncated map [ 178.610844][T11658] SELinux: failed to load policy [ 178.631991][T11660] vhci_hcd: invalid port number 96 [ 178.637155][T11660] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 178.822410][T11663] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 178.941329][T11671] xt_CT: No such helper "pptp" [ 178.948924][T11673] netlink: '+}[@': attribute type 4 has an invalid length. [ 179.085795][T11689] vhci_hcd: invalid port number 96 [ 179.092101][T11689] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 179.114915][T11683] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 179.188974][T11692] netlink: 'syz.4.2739': attribute type 39 has an invalid length. [ 179.272355][T11694] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 179.532638][T11706] netlink: '+}[@': attribute type 4 has an invalid length. [ 179.552806][T11711] loop4: detected capacity change from 0 to 512 [ 179.559705][T11711] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.591872][T11711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.638472][T11721] netlink: 'syz.1.2751': attribute type 39 has an invalid length. [ 179.657061][T11711] EXT4-fs (loop4): 1 truncate cleaned up [ 179.684909][T11711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.770342][T11726] usb usb8: usbfs: process 11726 (syz.0.2753) did not claim interface 0 before use [ 179.865320][T11749] vhci_hcd: invalid port number 96 [ 179.871924][T11749] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 179.887919][T11750] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.898039][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2752'. [ 179.928912][ T3346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.946085][T11751] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 179.956498][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2762'. [ 179.969663][T11750] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.012665][T11750] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.060857][T11755] xt_CT: No such helper "pptp" [ 180.071344][T11750] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.134106][T11750] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.145291][T11760] loop3: detected capacity change from 0 to 2048 [ 180.148532][T11750] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.166116][T11750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.177871][T11750] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.182789][T11760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.225065][T11764] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2766'. [ 180.267373][T11770] FAULT_INJECTION: forcing a failure. [ 180.267373][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 180.281130][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.4.2769 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 180.281227][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.281239][T11770] Call Trace: [ 180.281244][T11770] [ 180.281250][T11770] __dump_stack+0x1d/0x30 [ 180.281283][T11770] dump_stack_lvl+0xe8/0x140 [ 180.281300][T11770] dump_stack+0x15/0x1b [ 180.281315][T11770] should_fail_ex+0x265/0x280 [ 180.281342][T11770] should_failslab+0x8c/0xb0 [ 180.281364][T11770] kmem_cache_alloc_noprof+0x50/0x310 [ 180.281461][T11770] ? skb_clone+0x151/0x1f0 [ 180.281482][T11770] skb_clone+0x151/0x1f0 [ 180.281524][T11770] __netlink_deliver_tap+0x2c9/0x500 [ 180.281557][T11770] netlink_unicast+0x64c/0x670 [ 180.281589][T11770] netlink_sendmsg+0x58b/0x6b0 [ 180.281606][T11770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.281626][T11770] __sock_sendmsg+0x145/0x180 [ 180.281649][T11770] ____sys_sendmsg+0x31e/0x4e0 [ 180.281717][T11770] ___sys_sendmsg+0x17b/0x1d0 [ 180.281828][T11770] __x64_sys_sendmsg+0xd4/0x160 [ 180.281864][T11770] x64_sys_call+0x2999/0x2fb0 [ 180.281898][T11770] do_syscall_64+0xd2/0x200 [ 180.281914][T11770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.281936][T11770] ? clear_bhb_loop+0x40/0x90 [ 180.281958][T11770] ? clear_bhb_loop+0x40/0x90 [ 180.281978][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.282074][T11770] RIP: 0033:0x7f904ccbe929 [ 180.282089][T11770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.282108][T11770] RSP: 002b:00007f904b327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.282171][T11770] RAX: ffffffffffffffda RBX: 00007f904cee5fa0 RCX: 00007f904ccbe929 [ 180.282183][T11770] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 180.282201][T11770] RBP: 00007f904b327090 R08: 0000000000000000 R09: 0000000000000000 [ 180.282212][T11770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.282229][T11770] R13: 0000000000000000 R14: 00007f904cee5fa0 R15: 00007ffd2daf6928 [ 180.282248][T11770] [ 180.356637][T11770] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 180.402857][T11775] vhci_hcd: invalid port number 96 [ 180.523127][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.529365][T11775] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 180.613173][T11784] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 180.747177][T11798] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2780'. [ 180.801690][T11807] vhci_hcd: invalid port number 96 [ 180.808000][T11807] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 180.821758][T11801] vlan1: entered allmulticast mode [ 181.014548][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 181.024566][T11812] FAULT_INJECTION: forcing a failure. [ 181.024566][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 181.038515][T11812] CPU: 0 UID: 0 PID: 11812 Comm: syz.2.2785 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 181.038534][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.038678][T11812] Call Trace: [ 181.038684][T11812] [ 181.038689][T11812] __dump_stack+0x1d/0x30 [ 181.038709][T11812] dump_stack_lvl+0xe8/0x140 [ 181.038719][T11812] dump_stack+0x15/0x1b [ 181.038728][T11812] should_fail_ex+0x265/0x280 [ 181.038811][T11812] should_failslab+0x8c/0xb0 [ 181.038824][T11812] kmem_cache_alloc_node_noprof+0x57/0x320 [ 181.038927][T11812] ? __alloc_skb+0x101/0x320 [ 181.038945][T11812] __alloc_skb+0x101/0x320 [ 181.038960][T11812] netlink_ack+0xfd/0x500 [ 181.038992][T11812] netlink_rcv_skb+0x192/0x220 [ 181.039008][T11812] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 181.039051][T11812] nfnetlink_rcv+0x16b/0x1690 [ 181.039065][T11812] ? __kfree_skb+0x109/0x150 [ 181.039080][T11812] ? nlmon_xmit+0x4f/0x60 [ 181.039092][T11812] ? consume_skb+0x49/0x150 [ 181.039164][T11812] ? nlmon_xmit+0x4f/0x60 [ 181.039222][T11812] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 181.039253][T11812] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 181.039319][T11812] ? __dev_queue_xmit+0x182/0x1fb0 [ 181.039350][T11812] ? __account_obj_stock+0x211/0x350 [ 181.039372][T11812] ? ref_tracker_free+0x37d/0x3e0 [ 181.039483][T11812] ? __netlink_deliver_tap+0x4dc/0x500 [ 181.039516][T11812] netlink_unicast+0x5a1/0x670 [ 181.039589][T11812] netlink_sendmsg+0x58b/0x6b0 [ 181.039672][T11812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.039689][T11812] __sock_sendmsg+0x145/0x180 [ 181.039761][T11812] ____sys_sendmsg+0x31e/0x4e0 [ 181.039817][T11812] ___sys_sendmsg+0x17b/0x1d0 [ 181.039859][T11812] __x64_sys_sendmsg+0xd4/0x160 [ 181.039901][T11812] x64_sys_call+0x2999/0x2fb0 [ 181.039923][T11812] do_syscall_64+0xd2/0x200 [ 181.039941][T11812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.040000][T11812] ? clear_bhb_loop+0x40/0x90 [ 181.040021][T11812] ? clear_bhb_loop+0x40/0x90 [ 181.040039][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.040074][T11812] RIP: 0033:0x7f4eb39ae929 [ 181.040090][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.040179][T11812] RSP: 002b:00007f4eb2017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.040194][T11812] RAX: ffffffffffffffda RBX: 00007f4eb3bd5fa0 RCX: 00007f4eb39ae929 [ 181.040230][T11812] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 181.040237][T11812] RBP: 00007f4eb2017090 R08: 0000000000000000 R09: 0000000000000000 [ 181.040244][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.040251][T11812] R13: 0000000000000000 R14: 00007f4eb3bd5fa0 R15: 00007ffdb4e922c8 [ 181.040261][T11812] [ 181.377707][T11816] netlink: 'syz.2.2787': attribute type 39 has an invalid length. [ 181.456766][T11822] vhci_hcd: invalid port number 96 [ 181.463014][T11822] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 181.502567][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 181.548567][T11830] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2794'. [ 181.598327][T11832] xt_CT: No such helper "pptp" [ 181.709413][T11845] netlink: 'syz.3.2799': attribute type 39 has an invalid length. [ 181.820462][T11864] FAULT_INJECTION: forcing a failure. [ 181.820462][T11864] name failslab, interval 1, probability 0, space 0, times 0 [ 181.828825][ T1038] usb usb8-port1: attempt power cycle [ 181.835745][T11864] CPU: 1 UID: 0 PID: 11864 Comm: syz.3.2807 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 181.835790][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.835803][T11864] Call Trace: [ 181.835811][T11864] [ 181.835819][T11864] __dump_stack+0x1d/0x30 [ 181.835895][T11864] dump_stack_lvl+0xe8/0x140 [ 181.835914][T11864] dump_stack+0x15/0x1b [ 181.835931][T11864] should_fail_ex+0x265/0x280 [ 181.835962][T11864] should_failslab+0x8c/0xb0 [ 181.836053][T11864] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 181.836080][T11864] ? sock_alloc_inode+0x34/0xa0 [ 181.836172][T11864] ? __pfx_sock_alloc_inode+0x10/0x10 [ 181.836211][T11864] sock_alloc_inode+0x34/0xa0 [ 181.836233][T11864] alloc_inode+0x40/0x170 [ 181.836326][T11864] __sock_create+0x122/0x5b0 [ 181.836353][T11864] sock_create_kern+0x38/0x50 [ 181.836391][T11864] udp_sock_create4+0x66/0x2a0 [ 181.836418][T11864] rxrpc_lookup_local+0x824/0xc70 [ 181.836459][T11864] rxrpc_sendmsg+0x2f3/0x590 [ 181.836499][T11864] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 181.836538][T11864] __sock_sendmsg+0x145/0x180 [ 181.836600][T11864] ____sys_sendmsg+0x31e/0x4e0 [ 181.836669][T11864] ___sys_sendmsg+0x17b/0x1d0 [ 181.836713][T11864] __x64_sys_sendmsg+0xd4/0x160 [ 181.836798][T11864] x64_sys_call+0x2999/0x2fb0 [ 181.836819][T11864] do_syscall_64+0xd2/0x200 [ 181.836917][T11864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.837021][T11864] ? clear_bhb_loop+0x40/0x90 [ 181.837041][T11864] ? clear_bhb_loop+0x40/0x90 [ 181.837062][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.837083][T11864] RIP: 0033:0x7fb34ba1e929 [ 181.837159][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.837177][T11864] RSP: 002b:00007fb34a087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.837197][T11864] RAX: ffffffffffffffda RBX: 00007fb34bc45fa0 RCX: 00007fb34ba1e929 [ 181.837209][T11864] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000007 [ 181.837222][T11864] RBP: 00007fb34a087090 R08: 0000000000000000 R09: 0000000000000000 [ 181.837234][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.837280][T11864] R13: 0000000000000000 R14: 00007fb34bc45fa0 R15: 00007ffc95977758 [ 181.837304][T11864] [ 181.837318][T11864] socket: no more sockets [ 181.971739][T11867] xt_CT: No such helper "pptp" [ 182.213373][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 182.252768][T11878] SELinux: failed to load policy [ 182.268682][T11887] vhci_hcd: invalid port number 96 [ 182.273978][T11887] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 182.293418][T11889] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 182.305834][T11889] SELinux: failed to load policy [ 182.388440][T11893] SELinux: failed to load policy [ 182.394455][ T29] kauditd_printk_skb: 1205 callbacks suppressed [ 182.394525][ T29] audit: type=1326 audit(2000000065.100:35702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd5a7158e7 code=0x7ffc0000 [ 182.432530][ T29] audit: type=1326 audit(2000000065.110:35703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd5a6bab19 code=0x7ffc0000 [ 182.456923][ T29] audit: type=1326 audit(2000000065.110:35704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd5a7158e7 code=0x7ffc0000 [ 182.482393][ T29] audit: type=1326 audit(2000000065.110:35705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd5a6bab19 code=0x7ffc0000 [ 182.506076][ T29] audit: type=1326 audit(2000000065.110:35706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcd5a71e929 code=0x7ffc0000 [ 182.531105][ T29] audit: type=1326 audit(2000000065.110:35707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd5a7158e7 code=0x7ffc0000 [ 182.554965][ T29] audit: type=1326 audit(2000000065.110:35708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd5a6bab19 code=0x7ffc0000 [ 182.582921][ T29] audit: type=1326 audit(2000000065.110:35709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcd5a71e929 code=0x7ffc0000 [ 182.618349][ T29] audit: type=1326 audit(2000000065.130:35710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd5a7158e7 code=0x7ffc0000 [ 182.643642][ T29] audit: type=1326 audit(2000000065.130:35711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd5a6bab19 code=0x7ffc0000 [ 182.750723][ T3484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.871359][T11903] chnl_net:caif_netlink_parms(): no params data found [ 182.907943][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.915731][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.923294][T11903] bridge_slave_0: entered allmulticast mode [ 182.929687][T11903] bridge_slave_0: entered promiscuous mode [ 182.937896][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.945904][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.960520][T11903] bridge_slave_1: entered allmulticast mode [ 182.971249][T11903] bridge_slave_1: entered promiscuous mode [ 182.989651][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.004020][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.025536][T11903] team0: Port device team_slave_0 added [ 183.032272][T11903] team0: Port device team_slave_1 added [ 183.048826][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.057141][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.088875][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.103130][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.110516][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.140316][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.172436][T11903] hsr_slave_0: entered promiscuous mode [ 183.178898][T11903] hsr_slave_1: entered promiscuous mode [ 183.183343][T11919] vhci_hcd: invalid port number 96 [ 183.189015][T11903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.195102][T11919] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 183.206036][T11903] Cannot create hsr debugfs directory [ 183.376599][T11925] loop3: detected capacity change from 0 to 256 [ 183.451788][T11930] loop2: detected capacity change from 0 to 128 [ 183.474469][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2825'. [ 183.485658][T11930] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2825'. [ 183.509583][T11931] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2824'. [ 183.525530][T11903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.536348][T11903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.552760][T11903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.577319][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2826'. [ 183.579932][T11903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.621883][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.629526][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.636874][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.644102][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.681533][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.694417][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.702837][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.710865][T11946] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 183.727300][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.731979][T11946] SELinux: failed to load policy [ 183.742357][ T1696] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.750837][ T1696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.767011][ T1696] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.774577][ T1696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.795471][T11903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.806989][T11903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.865712][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.949352][T11957] vhci_hcd: invalid port number 96 [ 183.955722][T11957] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 183.976583][T11903] veth0_vlan: entered promiscuous mode [ 184.006578][T11903] veth1_vlan: entered promiscuous mode [ 184.041331][T11903] veth0_macvtap: entered promiscuous mode [ 184.059924][T11903] veth1_macvtap: entered promiscuous mode [ 184.070278][ T1038] usb usb8-port1: unable to enumerate USB device [ 184.093738][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'. [ 184.101688][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.103447][T11960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2830'. [ 184.135449][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.153337][T11903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.162374][T11903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.171259][T11903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.180571][T11903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.257781][T11966] vhci_hcd: invalid port number 96 [ 184.265680][T11966] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 184.275783][T11965] vhci_hcd: invalid port number 96 [ 184.283786][T11965] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 184.516671][T11974] vlan2: entered allmulticast mode [ 184.576902][T11983] loop2: detected capacity change from 0 to 2048 [ 184.612852][T11986] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 184.625716][T11983] loop2: p1 p2 < > p3 < p5 p6 > p4 [ 184.626854][T11986] SELinux: failed to load policy [ 184.631638][T11983] loop2: partition table partially beyond EOD, truncated [ 184.631776][T11983] loop2: p1 size 67108992 extends beyond EOD, truncated [ 184.654961][T11983] loop2: p2 start 65536 is beyond EOD, truncated [ 184.662998][T11983] loop2: p4 size 8192 extends beyond EOD, truncated [ 184.672931][T11983] loop2: p5 size 67108992 extends beyond EOD, truncated [ 184.681571][T11983] loop2: p6 size 8192 extends beyond EOD, truncated [ 184.685698][T11990] loop0: detected capacity change from 0 to 256 [ 184.858199][T12008] loop2: detected capacity change from 0 to 512 [ 184.870126][T12009] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2840'. [ 184.871714][T12008] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 184.894503][T12008] EXT4-fs (loop2): orphan cleanup on readonly fs [ 184.903439][T12008] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2845: Block bitmap for bg 0 marked uninitialized [ 184.920933][T12008] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 184.935317][T12008] EXT4-fs (loop2): 1 orphan inode deleted [ 184.943727][T12008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 184.977270][T12008] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 184.989684][T12008] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 185.091120][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.119206][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.168496][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.313905][T12017] xt_CT: No such helper "pptp" [ 185.447133][T12027] loop4: detected capacity change from 0 to 2048 [ 185.500088][T12027] loop4: p1 p2 < > p3 < p5 p6 > p4 [ 185.505957][T12027] loop4: partition table partially beyond EOD, truncated [ 185.523942][T12030] xt_CT: No such helper "pptp" [ 185.539959][T12027] loop4: p1 size 67108992 extends beyond EOD, truncated [ 185.547938][T12027] loop4: p2 start 65536 is beyond EOD, truncated [ 185.560455][T12027] loop4: p4 size 8192 extends beyond EOD, truncated [ 185.576210][T12027] loop4: p5 size 67108992 extends beyond EOD, truncated [ 185.594009][T12033] netlink: 'syz.0.2854': attribute type 39 has an invalid length. [ 185.602650][T12020] loop1: detected capacity change from 0 to 512 [ 185.611580][T12027] loop4: p6 size 8192 extends beyond EOD, truncated [ 185.622563][T12020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.643525][T12020] EXT4-fs (loop1): 1 truncate cleaned up [ 185.651312][T12020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.746101][T12020] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.2849: inode #86: comm syz.1.2849: iget: illegal inode # [ 185.762066][T12020] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2849: error while reading EA inode 86 err=-117 [ 185.790686][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2858'. [ 185.819754][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 185.978604][T11903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.010767][T12065] xt_CT: No such helper "pptp" [ 186.028273][T12068] loop1: detected capacity change from 0 to 256 [ 186.052868][T12068] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 186.066024][T12068] SELinux: failed to load policy [ 186.114434][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2871'. [ 186.146673][T12082] vhci_hcd: invalid port number 96 [ 186.152703][T12082] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 186.215045][T12083] xt_CT: No such helper "pptp" [ 186.278757][T12087] vhci_hcd: invalid port number 96 [ 186.284208][T12087] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 186.371354][T12093] loop4: detected capacity change from 0 to 512 [ 186.401507][T12093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.415539][T12093] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.443514][ T3346] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.532042][T12104] loop4: detected capacity change from 0 to 256 [ 186.541337][T12104] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 186.555509][T12104] SELinux: failed to load policy [ 186.594007][T12112] netlink: 'syz.1.2885': attribute type 39 has an invalid length. [ 186.642556][T12117] netlink: 'syz.2.2887': attribute type 39 has an invalid length. [ 186.647595][T12115] xt_CT: No such helper "pptp" [ 186.822944][T12130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12130 comm=syz.3.2892 [ 186.839707][T12130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=12130 comm=syz.3.2892 [ 186.899520][T12132] loop3: detected capacity change from 0 to 256 [ 186.911559][T12132] SELinux: policydb magic number 0x75622f2e does not match expected magic number 0xf97cff8c [ 186.925116][T12132] SELinux: failed to load policy [ 187.448591][ T29] kauditd_printk_skb: 1166 callbacks suppressed [ 187.448605][ T29] audit: type=1326 audit(2000000070.150:36878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.482479][ T29] audit: type=1326 audit(2000000070.150:36879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.508226][ T29] audit: type=1326 audit(2000000070.150:36880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.532946][ T29] audit: type=1326 audit(2000000070.150:36881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.545249][ T8122] usb usb8-port1: attempt power cycle [ 187.557164][ T29] audit: type=1326 audit(2000000070.150:36882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.587420][ T29] audit: type=1326 audit(2000000070.150:36883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.613082][ T29] audit: type=1326 audit(2000000070.150:36884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.637876][ T29] audit: type=1326 audit(2000000070.150:36885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.663172][ T29] audit: type=1326 audit(2000000070.150:36886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.687770][ T29] audit: type=1326 audit(2000000070.150:36887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.4.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 187.840541][T12146] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 187.902453][T12150] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.944332][T12151] netlink: 'syz.2.2900': attribute type 10 has an invalid length. [ 187.981667][T12153] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 188.001990][T12150] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.061392][T12155] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 188.092729][T12150] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.167269][T12158] xt_CT: No such helper "pptp" [ 188.182293][T12150] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.202968][T12161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12161 comm=syz.3.2904 [ 188.222660][T12161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=12161 comm=syz.3.2904 [ 188.260108][T12150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.273162][T12150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.285705][T12150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.300776][T12150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.486719][T12174] loop1: detected capacity change from 0 to 512 [ 188.501426][T12174] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.522659][T12174] EXT4-fs (loop1): mount failed [ 188.582316][T12181] __nla_validate_parse: 3 callbacks suppressed [ 188.582333][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 188.585693][T12179] vlan1: entered allmulticast mode [ 189.366737][T12196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12196 comm=syz.4.2916 [ 189.388236][T12196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=12196 comm=syz.4.2916 [ 189.418499][T12197] xt_CT: No such helper "pptp" [ 189.480144][ T8122] usb usb8-port1: unable to enumerate USB device [ 189.508164][T12036] usb usb8: usbfs: process 12036 (syz.0.2855) did not claim interface 0 before use [ 189.539762][T12204] SELinux: ebitmap: truncated map [ 189.551033][T12204] SELinux: failed to load policy [ 189.554260][T12208] vhci_hcd: invalid port number 96 [ 189.564602][T12208] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 189.646996][T12211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2922'. [ 189.694838][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2923'. [ 189.732626][T12223] loop1: detected capacity change from 0 to 512 [ 189.765084][T12223] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.789986][T12223] EXT4-fs (loop1): mount failed [ 189.859646][T12212] chnl_net:caif_netlink_parms(): no params data found [ 189.887151][ T56] team0: Port device geneve1 removed [ 189.913036][T12239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2928'. [ 189.928986][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.939939][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.949797][ T56] bond0 (unregistering): Released all slaves [ 189.996636][ T56] hsr_slave_0: left promiscuous mode [ 190.002612][ T56] hsr_slave_1: left promiscuous mode [ 190.008279][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.016943][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.065384][ T56] team0 (unregistering): Port device team_slave_1 removed [ 190.079882][ T56] team0 (unregistering): Port device team_slave_0 removed [ 190.112332][ T56] team0 (unregistering): Port device dummy0 removed [ 190.127815][T12212] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.135622][T12212] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.147078][T12212] bridge_slave_0: entered allmulticast mode [ 190.155796][T12212] bridge_slave_0: entered promiscuous mode [ 190.165176][T12212] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.173937][T12212] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.182463][T12249] xt_CT: No such helper "pptp" [ 190.183677][T12212] bridge_slave_1: entered allmulticast mode [ 190.200929][T12212] bridge_slave_1: entered promiscuous mode [ 190.232011][T12212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.244725][T12212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.268981][T12212] team0: Port device team_slave_0 added [ 190.277267][T12212] team0: Port device team_slave_1 added [ 190.282327][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'. [ 190.319989][T12212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.327172][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.355642][T12212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.368938][T12212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.376968][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.408107][T12212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.429437][T12263] loop2: detected capacity change from 0 to 512 [ 190.452952][T12266] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 190.487049][T12263] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.496335][T12212] hsr_slave_0: entered promiscuous mode [ 190.511351][T12212] hsr_slave_1: entered promiscuous mode [ 190.517411][T12212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.522065][T12263] EXT4-fs (loop2): mount failed [ 190.526329][T12212] Cannot create hsr debugfs directory [ 190.559983][T12275] netlink: 'syz.4.2939': attribute type 39 has an invalid length. [ 190.616196][T12277] loop0: detected capacity change from 0 to 512 [ 190.624205][T12277] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 190.649647][T12277] EXT4-fs: error: could not find journal device path [ 190.848461][T12283] vhci_hcd: invalid port number 96 [ 190.853884][T12283] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 191.105563][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 191.130871][T12293] loop4: detected capacity change from 0 to 256 [ 191.146678][T12212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.258555][T12212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.310017][T12212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.323431][T12305] loop0: detected capacity change from 0 to 512 [ 191.343450][T12212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.362441][T12308] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2945'. [ 191.375551][T12305] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.403351][T12305] EXT4-fs (loop0): mount failed [ 191.430284][T12212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.443349][T12212] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.452908][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.460975][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.486999][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.495426][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.527595][T12320] vlan2: entered allmulticast mode [ 191.554204][T12212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.567524][T12212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.638154][T12212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.724659][T12212] veth0_vlan: entered promiscuous mode [ 191.735211][T12212] veth1_vlan: entered promiscuous mode [ 191.758585][T12212] veth0_macvtap: entered promiscuous mode [ 191.769704][T12212] veth1_macvtap: entered promiscuous mode [ 191.784101][T12212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.797935][T12212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.812464][T12212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.822519][T12212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.832209][T12212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.844848][T12212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.961841][T12340] loop3: detected capacity change from 0 to 256 [ 192.001281][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2954'. [ 192.041355][T12345] loop4: detected capacity change from 0 to 512 [ 192.051284][T12345] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.068870][T12345] EXT4-fs (loop4): mount failed [ 192.094086][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'. [ 192.145183][T12355] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2953'. [ 192.163509][T12357] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.170977][T12357] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.270130][T12357] bridge0: entered allmulticast mode [ 192.292860][T12361] bridge_slave_1: left allmulticast mode [ 192.298755][T12361] bridge_slave_1: left promiscuous mode [ 192.305759][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.314920][T12367] capability: warning: `syz.2.2962' uses deprecated v2 capabilities in a way that may be insecure [ 192.343747][T12367] loop2: detected capacity change from 0 to 128 [ 192.354648][T12367] vfat: Unknown parameter '/dev/qrtr-tun' [ 192.398490][T12361] bridge_slave_0: left allmulticast mode [ 192.405795][T12361] bridge_slave_0: left promiscuous mode [ 192.411891][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.441252][T12374] loop1: detected capacity change from 0 to 256 [ 192.703487][ T29] kauditd_printk_skb: 1190 callbacks suppressed [ 192.703503][ T29] audit: type=1326 audit(2000000075.410:38073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.749922][ T29] audit: type=1326 audit(2000000075.410:38074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.777617][ T29] audit: type=1326 audit(2000000075.410:38075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.805782][ T29] audit: type=1326 audit(2000000075.410:38076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.830675][ T29] audit: type=1326 audit(2000000075.410:38077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.858024][ T29] audit: type=1326 audit(2000000075.410:38078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.883772][ T29] audit: type=1326 audit(2000000075.410:38079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.910727][ T29] audit: type=1326 audit(2000000075.410:38080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.952883][ T29] audit: type=1326 audit(2000000075.620:38081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 192.980834][ T29] audit: type=1326 audit(2000000075.620:38082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12379 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801aee929 code=0x7ffc0000 [ 193.123125][T12390] xt_CT: No such helper "pptp" [ 193.174719][T12392] vlan1: entered allmulticast mode [ 193.260613][T12395] netlink: '+}[@': attribute type 4 has an invalid length. [ 193.392244][T12402] vlan2: entered allmulticast mode [ 193.486997][T12413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.533484][T12413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.559716][T12414] netlink: 'syz.1.2978': attribute type 10 has an invalid length. [ 193.575316][T12414] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 193.584686][T12414] team0: Failed to send options change via netlink (err -105) [ 193.592462][T12414] team0: Port device geneve1 added [ 193.613349][T12413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.663101][T12413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.706212][T12413] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.717620][T12413] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.728957][T12413] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.741309][T12413] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.902933][T12425] netlink: '+}[@': attribute type 4 has an invalid length. [ 193.980315][T12427] __nla_validate_parse: 4 callbacks suppressed [ 193.980371][T12427] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2984'. [ 194.110229][T12435] xt_CT: No such helper "pptp" [ 194.135762][T12442] netlink: 'syz.2.2989': attribute type 39 has an invalid length. [ 194.153306][T12444] loop1: detected capacity change from 0 to 512 [ 194.182280][T12444] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.198799][T12444] EXT4-fs (loop1): mount failed [ 194.210865][T12446] loop3: detected capacity change from 0 to 512 [ 194.231447][T12446] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.250798][T12446] EXT4-fs (loop3): mount failed [ 194.328781][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 194.503977][T12462] xt_CT: No such helper "pptp" [ 194.744427][T12470] vlan2: entered allmulticast mode [ 194.750694][T12470] bridge_slave_0: entered allmulticast mode [ 194.889058][T12473] vhci_hcd: invalid port number 96 [ 194.895267][T12473] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 195.195544][T12484] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 195.223320][T12488] vhci_hcd: invalid port number 96 [ 195.228591][T12488] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 195.266372][T12490] xt_CT: No such helper "pptp" [ 195.288478][T12489] vlan2: entered allmulticast mode [ 195.360823][T12494] vhci_hcd: invalid port number 96 [ 195.367333][T12494] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 195.584002][T12501] xt_CT: No such helper "pptp" [ 195.661749][T12508] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.692043][T12508] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.707355][T12514] xt_CT: No such helper "pptp" [ 195.714252][T12517] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 195.722487][T12517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3010'. [ 195.761438][T12508] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.789349][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3013'. [ 195.814538][T12521] vhci_hcd: invalid port number 96 [ 195.819981][T12521] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 195.833184][T12508] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.879639][T12508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.895211][T12508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.909201][T12508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.924371][T12508] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.998954][T12529] loop0: detected capacity change from 0 to 256 [ 196.036389][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.045378][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.073662][T12535] vhci_hcd: invalid port number 96 [ 196.079054][T12535] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 196.095971][T12532] bridge0: entered allmulticast mode [ 196.204506][T12536] bridge_slave_1: left allmulticast mode [ 196.211443][T12536] bridge_slave_1: left promiscuous mode [ 196.217689][T12536] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.241047][T12536] bridge_slave_0: left promiscuous mode [ 196.247879][T12536] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.279994][T12542] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3016'. [ 196.567059][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.576182][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.665253][T12562] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.703598][T12564] vhci_hcd: invalid port number 96 [ 196.710244][T12564] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 196.718954][T12565] netlink: 'syz.1.3026': attribute type 10 has an invalid length. [ 196.727589][T12565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3026'. [ 196.749449][T12562] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.771111][T12565] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 196.802303][T12562] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.851400][T12562] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.958079][T12572] loop0: detected capacity change from 0 to 512 [ 196.966097][T12572] EXT4-fs: Ignoring removed i_version option [ 196.968471][T12570] loop3: detected capacity change from 0 to 8192 [ 196.974577][T12572] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3029: bg 0: block 131: padding at end of block bitmap is not set [ 196.987356][T12570] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 196.995327][T12572] EXT4-fs (loop0): Remounting filesystem read-only [ 197.003744][T12570] FAT-fs (loop3): Filesystem has been set read-only [ 197.004072][T12570] FAULT_INJECTION: forcing a failure. [ 197.004072][T12570] name failslab, interval 1, probability 0, space 0, times 0 [ 197.012797][T12572] EXT4-fs (loop0): 1 truncate cleaned up [ 197.017759][T12570] CPU: 1 UID: 0 PID: 12570 Comm: syz.3.3028 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 197.017816][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.017829][T12570] Call Trace: [ 197.017837][T12570] [ 197.017846][T12570] __dump_stack+0x1d/0x30 [ 197.017868][T12570] dump_stack_lvl+0xe8/0x140 [ 197.017886][T12570] dump_stack+0x15/0x1b [ 197.017959][T12570] should_fail_ex+0x265/0x280 [ 197.017991][T12570] should_failslab+0x8c/0xb0 [ 197.018014][T12570] __kmalloc_noprof+0xa5/0x3e0 [ 197.018040][T12570] ? __d_alloc+0x90/0x350 [ 197.018100][T12570] __d_alloc+0x90/0x350 [ 197.018124][T12570] d_alloc_parallel+0x53/0xc40 [ 197.018182][T12570] ? __rcu_read_unlock+0x4f/0x70 [ 197.018204][T12570] ? __d_lookup+0x316/0x340 [ 197.018228][T12570] ? try_to_unlazy+0x25e/0x3a0 [ 197.018335][T12570] path_openat+0x6b5/0x2170 [ 197.018372][T12570] do_filp_open+0x109/0x230 [ 197.018458][T12570] do_sys_openat2+0xa6/0x110 [ 197.018485][T12570] __x64_sys_creat+0x65/0x90 [ 197.018512][T12570] x64_sys_call+0x114d/0x2fb0 [ 197.018544][T12570] do_syscall_64+0xd2/0x200 [ 197.018562][T12570] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.018588][T12570] ? clear_bhb_loop+0x40/0x90 [ 197.018683][T12570] ? clear_bhb_loop+0x40/0x90 [ 197.018745][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.018766][T12570] RIP: 0033:0x7fb45e4ae929 [ 197.018788][T12570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.018806][T12570] RSP: 002b:00007fb45cb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 197.018846][T12570] RAX: ffffffffffffffda RBX: 00007fb45e6d5fa0 RCX: 00007fb45e4ae929 [ 197.018962][T12570] RDX: 0000000000000000 RSI: 00000000000000ec RDI: 0000200000000e00 [ 197.018974][T12570] RBP: 00007fb45cb17090 R08: 0000000000000000 R09: 0000000000000000 [ 197.018986][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.018998][T12570] R13: 0000000000000000 R14: 00007fb45e6d5fa0 R15: 00007fff9e61a8e8 [ 197.019016][T12570] [ 197.134267][T12576] vhci_hcd: invalid port number 96 [ 197.137353][T12572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.141390][T12576] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 197.157362][T12572] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3029'. [ 197.322578][T12562] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.335098][T12562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.350636][T12562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.372944][T12562] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.385644][T11438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.429673][T12580] xt_CT: No such helper "pptp" [ 197.445198][T12585] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 197.452634][T12587] loop1: detected capacity change from 0 to 2048 [ 197.502688][T12587] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 197.508818][T12587] loop1: partition table partially beyond EOD, truncated [ 197.523857][T12587] loop1: p1 size 67108992 extends beyond EOD, truncated [ 197.568082][T12587] loop1: p2 start 65536 is beyond EOD, truncated [ 197.579655][T12587] loop1: p4 size 8192 extends beyond EOD, truncated [ 197.587903][T12587] loop1: p5 size 67108992 extends beyond EOD, truncated [ 197.596069][T12587] loop1: p6 size 8192 extends beyond EOD, truncated [ 197.603468][T12594] xt_CT: No such helper "pptp" [ 197.621666][T12596] xt_CT: No such helper "pptp" [ 197.707414][T12610] FAULT_INJECTION: forcing a failure. [ 197.707414][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 197.722291][T12610] CPU: 0 UID: 0 PID: 12610 Comm: syz.2.3042 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 197.722324][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.722337][T12610] Call Trace: [ 197.722381][T12610] [ 197.722390][T12610] __dump_stack+0x1d/0x30 [ 197.722414][T12610] dump_stack_lvl+0xe8/0x140 [ 197.722435][T12610] dump_stack+0x15/0x1b [ 197.722453][T12610] should_fail_ex+0x265/0x280 [ 197.722501][T12610] should_failslab+0x8c/0xb0 [ 197.722521][T12610] kmem_cache_alloc_node_noprof+0x57/0x320 [ 197.722612][T12610] ? __alloc_skb+0x101/0x320 [ 197.722638][T12610] __alloc_skb+0x101/0x320 [ 197.722664][T12610] netlink_ack+0xfd/0x500 [ 197.722763][T12610] netlink_rcv_skb+0x192/0x220 [ 197.722793][T12610] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 197.722821][T12610] nfnetlink_rcv+0x16b/0x1690 [ 197.722847][T12610] ? __kfree_skb+0x109/0x150 [ 197.722935][T12610] ? nlmon_xmit+0x4f/0x60 [ 197.722957][T12610] ? consume_skb+0x49/0x150 [ 197.722985][T12610] ? nlmon_xmit+0x4f/0x60 [ 197.723050][T12610] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 197.723086][T12610] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 197.723168][T12610] ? __dev_queue_xmit+0x182/0x1fb0 [ 197.723203][T12610] ? ref_tracker_free+0x37d/0x3e0 [ 197.723276][T12610] ? __netlink_deliver_tap+0x4dc/0x500 [ 197.723351][T12610] netlink_unicast+0x5a1/0x670 [ 197.723379][T12610] netlink_sendmsg+0x58b/0x6b0 [ 197.723401][T12610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.723421][T12610] __sock_sendmsg+0x145/0x180 [ 197.723465][T12610] ____sys_sendmsg+0x31e/0x4e0 [ 197.723642][T12610] ___sys_sendmsg+0x17b/0x1d0 [ 197.723832][T12610] __x64_sys_sendmsg+0xd4/0x160 [ 197.723907][T12610] x64_sys_call+0x2999/0x2fb0 [ 197.723927][T12610] do_syscall_64+0xd2/0x200 [ 197.723944][T12610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.724008][T12610] ? clear_bhb_loop+0x40/0x90 [ 197.724033][T12610] ? clear_bhb_loop+0x40/0x90 [ 197.724154][T12610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.724173][T12610] RIP: 0033:0x7f4eb39ae929 [ 197.724186][T12610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.724201][T12610] RSP: 002b:00007f4eb2017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.724327][T12610] RAX: ffffffffffffffda RBX: 00007f4eb3bd5fa0 RCX: 00007f4eb39ae929 [ 197.724340][T12610] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.724352][T12610] RBP: 00007f4eb2017090 R08: 0000000000000000 R09: 0000000000000000 [ 197.724364][T12610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.724376][T12610] R13: 0000000000000000 R14: 00007f4eb3bd5fa0 R15: 00007ffdb4e922c8 [ 197.724452][T12610] [ 198.029732][T12615] netlink: '+}[@': attribute type 4 has an invalid length. [ 198.030646][ T29] kauditd_printk_skb: 1615 callbacks suppressed [ 198.030660][ T29] audit: type=1400 audit(2000000080.740:39696): avc: denied { write } for pid=12612 comm="syz.0.3043" path="socket:[41007]" dev="sockfs" ino=41007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.134817][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.142075][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.159068][T12617] bridge0: entered allmulticast mode [ 198.201959][T12617] bridge_slave_1: left allmulticast mode [ 198.207799][T12623] FAULT_INJECTION: forcing a failure. [ 198.207799][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 198.208258][T12617] bridge_slave_1: left promiscuous mode [ 198.221347][T12623] CPU: 0 UID: 0 PID: 12623 Comm: syz.3.3048 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 198.221375][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.221392][T12623] Call Trace: [ 198.221398][T12623] [ 198.221406][T12623] __dump_stack+0x1d/0x30 [ 198.221425][T12623] dump_stack_lvl+0xe8/0x140 [ 198.221441][T12623] dump_stack+0x15/0x1b [ 198.221455][T12623] should_fail_ex+0x265/0x280 [ 198.221564][T12623] should_failslab+0x8c/0xb0 [ 198.221588][T12623] kmem_cache_alloc_node_noprof+0x57/0x320 [ 198.221612][T12623] ? __alloc_skb+0x101/0x320 [ 198.221692][T12623] __alloc_skb+0x101/0x320 [ 198.221719][T12623] netlink_ack+0xfd/0x500 [ 198.221782][T12623] netlink_rcv_skb+0x192/0x220 [ 198.221811][T12623] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 198.221889][T12623] nfnetlink_rcv+0x16b/0x1690 [ 198.221913][T12623] ? __kfree_skb+0x109/0x150 [ 198.221948][T12623] ? nlmon_xmit+0x4f/0x60 [ 198.221969][T12623] ? consume_skb+0x49/0x150 [ 198.222066][T12623] ? nlmon_xmit+0x4f/0x60 [ 198.222085][T12623] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 198.222194][T12623] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 198.222224][T12623] ? __dev_queue_xmit+0x182/0x1fb0 [ 198.222319][T12623] ? __account_obj_stock+0x211/0x350 [ 198.222342][T12623] ? ref_tracker_free+0x37d/0x3e0 [ 198.222432][T12623] ? __netlink_deliver_tap+0x4dc/0x500 [ 198.222467][T12623] netlink_unicast+0x5a1/0x670 [ 198.222574][T12623] netlink_sendmsg+0x58b/0x6b0 [ 198.222599][T12623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.222618][T12623] __sock_sendmsg+0x145/0x180 [ 198.222698][T12623] ____sys_sendmsg+0x31e/0x4e0 [ 198.222763][T12623] ___sys_sendmsg+0x17b/0x1d0 [ 198.222844][T12623] __x64_sys_sendmsg+0xd4/0x160 [ 198.222879][T12623] x64_sys_call+0x2999/0x2fb0 [ 198.222947][T12623] do_syscall_64+0xd2/0x200 [ 198.222965][T12623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.222991][T12623] ? clear_bhb_loop+0x40/0x90 [ 198.223058][T12623] ? clear_bhb_loop+0x40/0x90 [ 198.223074][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.223164][T12623] RIP: 0033:0x7fb45e4ae929 [ 198.223180][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.223210][T12623] RSP: 002b:00007fb45cb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.223229][T12623] RAX: ffffffffffffffda RBX: 00007fb45e6d5fa0 RCX: 00007fb45e4ae929 [ 198.223242][T12623] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000003 [ 198.223347][T12623] RBP: 00007fb45cb17090 R08: 0000000000000000 R09: 0000000000000000 [ 198.223358][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.223368][T12623] R13: 0000000000000000 R14: 00007fb45e6d5fa0 R15: 00007fff9e61a8e8 [ 198.223471][T12623] [ 198.251456][T12626] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 198.252731][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.266063][T12625] xt_CT: No such helper "pptp" [ 198.268106][ T29] audit: type=1326 audit(2000000080.950:39697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.305536][T12629] loop3: detected capacity change from 0 to 2048 [ 198.308541][ T29] audit: type=1326 audit(2000000080.950:39698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.614858][ T29] audit: type=1326 audit(2000000080.950:39699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.640873][ T29] audit: type=1326 audit(2000000080.950:39700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.667185][ T29] audit: type=1326 audit(2000000080.950:39701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.691348][ T29] audit: type=1326 audit(2000000080.950:39702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.715652][ T29] audit: type=1326 audit(2000000080.950:39703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.741254][ T29] audit: type=1326 audit(2000000080.950:39704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.768655][ T29] audit: type=1326 audit(2000000080.950:39705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12624 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb45e4ae929 code=0x7ffc0000 [ 198.799030][T12617] bridge_slave_0: left promiscuous mode [ 198.804842][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.831616][T12629] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 198.836992][T12629] loop3: partition table partially beyond EOD, truncated [ 198.853310][T12629] loop3: p1 size 67108992 extends beyond EOD, truncated [ 198.865647][T12629] loop3: p2 start 65536 is beyond EOD, truncated [ 198.876099][T12629] loop3: p4 size 8192 extends beyond EOD, truncated [ 198.894774][T12629] loop3: p5 size 67108992 extends beyond EOD, truncated [ 198.912706][T12629] loop3: p6 size 8192 extends beyond EOD, truncated [ 198.942675][T12642] loop4: detected capacity change from 0 to 8192 [ 198.972436][T12648] SELinux: syz.3.3057 (12648) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 198.999685][T12648] wireguard0: entered promiscuous mode [ 199.006551][T12648] wireguard0: entered allmulticast mode [ 199.061362][T12642] loop4: p1 p2 p3 p4 [ 199.065868][T12642] loop4: p1 start 51379968 is beyond EOD, truncated [ 199.073068][T12642] loop4: p2 start 2936012800 is beyond EOD, truncated [ 199.080321][T12642] loop4: p3 size 100663552 extends beyond EOD, truncated [ 199.124239][T12653] FAULT_INJECTION: forcing a failure. [ 199.124239][T12653] name failslab, interval 1, probability 0, space 0, times 0 [ 199.128043][T12642] loop4: p4 size 656640 extends beyond EOD, [ 199.140376][T12653] CPU: 0 UID: 0 PID: 12653 Comm: syz.0.3060 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 199.140405][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.140416][T12653] Call Trace: [ 199.140422][T12653] [ 199.140429][T12653] __dump_stack+0x1d/0x30 [ 199.140462][T12653] dump_stack_lvl+0xe8/0x140 [ 199.140477][T12653] dump_stack+0x15/0x1b [ 199.140542][T12653] should_fail_ex+0x265/0x280 [ 199.140581][T12653] should_failslab+0x8c/0xb0 [ 199.140653][T12653] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 199.140681][T12653] ? sock_alloc_inode+0x34/0xa0 [ 199.140706][T12653] ? __pfx_sock_alloc_inode+0x10/0x10 [ 199.140729][T12653] sock_alloc_inode+0x34/0xa0 [ 199.140786][T12653] alloc_inode+0x40/0x170 [ 199.140816][T12653] __sock_create+0x122/0x5b0 [ 199.140852][T12653] sock_create_kern+0x38/0x50 [ 199.140876][T12653] udp_sock_create4+0x66/0x2a0 [ 199.140902][T12653] rxrpc_lookup_local+0x824/0xc70 [ 199.140941][T12653] rxrpc_sendmsg+0x2f3/0x590 [ 199.141009][T12653] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 199.141039][T12653] __sock_sendmsg+0x145/0x180 [ 199.141062][T12653] ____sys_sendmsg+0x31e/0x4e0 [ 199.141188][T12653] ___sys_sendmsg+0x17b/0x1d0 [ 199.141232][T12653] __x64_sys_sendmsg+0xd4/0x160 [ 199.141336][T12653] x64_sys_call+0x2999/0x2fb0 [ 199.141367][T12653] do_syscall_64+0xd2/0x200 [ 199.141385][T12653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.141519][T12653] ? clear_bhb_loop+0x40/0x90 [ 199.141539][T12653] ? clear_bhb_loop+0x40/0x90 [ 199.141592][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.141613][T12653] RIP: 0033:0x7f2801aee929 [ 199.141630][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.141652][T12653] RSP: 002b:00007f2800157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.141724][T12653] RAX: ffffffffffffffda RBX: 00007f2801d15fa0 RCX: 00007f2801aee929 [ 199.141736][T12653] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000006 [ 199.141749][T12653] RBP: 00007f2800157090 R08: 0000000000000000 R09: 0000000000000000 [ 199.141772][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.141784][T12653] R13: 0000000000000000 R14: 00007f2801d15fa0 R15: 00007ffdd39dcb68 [ 199.141802][T12653] [ 199.141811][T12653] socket: no more sockets [ 199.146485][T12642] truncated [ 199.466881][T12656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.516496][T12661] netlink: 'syz.0.3061': attribute type 10 has an invalid length. [ 199.524619][T12661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3061'. [ 199.567122][T12661] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 199.598459][T12661] team0: Failed to send options change via netlink (err -105) [ 199.608343][T12661] team0: Port device geneve1 added [ 199.629605][T12656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.733428][T12656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.785055][T12656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.896549][T12656] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.913791][T12656] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.931381][T12656] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.945788][T12656] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.177891][T12683] vlan2: entered allmulticast mode [ 200.696014][T12689] FAULT_INJECTION: forcing a failure. [ 200.696014][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 200.712016][T12689] CPU: 1 UID: 0 PID: 12689 Comm: syz.4.3072 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 200.712033][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.712047][T12689] Call Trace: [ 200.712052][T12689] [ 200.712058][T12689] __dump_stack+0x1d/0x30 [ 200.712071][T12689] dump_stack_lvl+0xe8/0x140 [ 200.712136][T12689] dump_stack+0x15/0x1b [ 200.712146][T12689] should_fail_ex+0x265/0x280 [ 200.712228][T12689] ? io_drain_req+0x67/0x350 [ 200.712255][T12689] should_failslab+0x8c/0xb0 [ 200.712268][T12689] __kmalloc_cache_noprof+0x4c/0x320 [ 200.712286][T12689] io_drain_req+0x67/0x350 [ 200.712342][T12689] ? io_queue_sqe_fallback+0xb3/0xc0 [ 200.712435][T12689] io_queue_sqe_fallback+0xbb/0xc0 [ 200.712453][T12689] io_submit_sqes+0xbad/0xfd0 [ 200.712544][T12689] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 200.712561][T12689] ? 0xffffffff81000000 [ 200.712568][T12689] ? __rcu_read_unlock+0x4f/0x70 [ 200.712587][T12689] ? get_pid_task+0x96/0xd0 [ 200.712598][T12689] ? proc_fail_nth_write+0x12d/0x160 [ 200.712609][T12689] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.712620][T12689] ? vfs_write+0x75e/0x8e0 [ 200.712704][T12689] ? __rcu_read_unlock+0x4f/0x70 [ 200.712716][T12689] ? __fget_files+0x184/0x1c0 [ 200.712728][T12689] ? fput+0x8f/0xc0 [ 200.712744][T12689] __x64_sys_io_uring_enter+0x78/0x90 [ 200.712760][T12689] x64_sys_call+0x28c8/0x2fb0 [ 200.712774][T12689] do_syscall_64+0xd2/0x200 [ 200.712801][T12689] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.712815][T12689] ? clear_bhb_loop+0x40/0x90 [ 200.712827][T12689] ? clear_bhb_loop+0x40/0x90 [ 200.712839][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.712897][T12689] RIP: 0033:0x7f904ccbe929 [ 200.712922][T12689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.712940][T12689] RSP: 002b:00007f904b327038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 200.713017][T12689] RAX: ffffffffffffffda RBX: 00007f904cee5fa0 RCX: 00007f904ccbe929 [ 200.713050][T12689] RDX: 00000000ffff4000 RSI: 0000000000000001 RDI: 0000000000000006 [ 200.713057][T12689] RBP: 00007f904b327090 R08: 0000000000000000 R09: 0000000000000000 [ 200.713063][T12689] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 200.713070][T12689] R13: 0000000000000000 R14: 00007f904cee5fa0 R15: 00007ffd2daf6928 [ 200.713103][T12689] [ 201.086035][T12698] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 201.178603][T12705] x_tables: duplicate underflow at hook 1 [ 202.060975][T12715] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.080629][T12716] xt_CT: No such helper "pptp" [ 202.105956][T12718] netlink: 'syz.0.3083': attribute type 10 has an invalid length. [ 202.113998][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3083'. [ 202.123951][T12718] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 202.141603][T12715] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.208530][T12723] netlink: '+}[@': attribute type 4 has an invalid length. [ 202.232499][T12725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3086'. [ 202.233347][T12715] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.286906][T12729] netlink: '+}[@': attribute type 4 has an invalid length. [ 202.314120][T12715] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.482961][T12747] vhci_hcd: invalid port number 96 [ 202.488119][T12747] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 202.577446][T12750] vhci_hcd: invalid port number 96 [ 202.582710][T12750] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 202.957827][T12759] xt_CT: No such helper "pptp" [ 203.233761][T12780] vhci_hcd: invalid port number 96 [ 203.238951][T12780] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 203.314040][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 203.314055][ T29] audit: type=1326 audit(2000000086.020:40373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 203.347398][ T29] audit: type=1326 audit(2000000086.020:40374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 203.434713][ T29] audit: type=1326 audit(2000000086.050:40375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f904ccbe929 code=0x0 [ 203.458037][ T29] audit: type=1326 audit(2000000086.080:40376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 203.481652][ T29] audit: type=1326 audit(2000000086.080:40377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 203.505515][ T29] audit: type=1326 audit(2000000086.080:40378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 203.530101][ T29] audit: type=1326 audit(2000000086.130:40379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f904ccbd290 code=0x7ffc0000 [ 203.554024][ T29] audit: type=1326 audit(2000000086.130:40380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f904ccc0157 code=0x7ffc0000 [ 203.579722][ T29] audit: type=1326 audit(2000000086.130:40381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f904ccbe929 code=0x7ffc0000 [ 203.583970][T12792] vhci_hcd: invalid port number 96 [ 203.605413][ T29] audit: type=1326 audit(2000000086.130:40382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f904ccc0157 code=0x7ffc0000 [ 203.610468][T12792] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 203.652041][T12790] xt_CT: No such helper "pptp" [ 203.663251][T12789] xt_CT: No such helper "pptp" [ 203.883980][T12801] xt_CT: No such helper "pptp" [ 204.043781][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.096702][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.131399][T12810] chnl_net:caif_netlink_parms(): no params data found [ 204.155450][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.186573][T12810] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.195297][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.200146][T12831] loop4: detected capacity change from 0 to 512 [ 204.203956][T12810] bridge_slave_0: entered allmulticast mode [ 204.216445][T12810] bridge_slave_0: entered promiscuous mode [ 204.225193][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.235756][T12810] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.242851][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.250580][T12810] bridge_slave_1: entered allmulticast mode [ 204.257165][T12810] bridge_slave_1: entered promiscuous mode [ 204.265399][T12831] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.297235][T12831] EXT4-fs (loop4): mount failed [ 204.302763][T12715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.334246][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.336737][T12845] vhci_hcd: invalid port number 96 [ 204.346456][T12715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.348458][T12845] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 204.359597][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.377002][T12847] loop3: detected capacity change from 0 to 512 [ 204.379496][T12715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.394341][T12847] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 204.414791][T12847] EXT4-fs (loop3): invalid journal inode [ 204.419422][T12715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.429968][T12847] EXT4-fs (loop3): can't get journal size [ 204.451476][T12847] EXT4-fs (loop3): 1 truncate cleaned up [ 204.457730][T12847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.518093][ T37] team0: Port device geneve1 removed [ 204.534213][ T37] bond0 (unregistering): Released all slaves [ 204.541027][ T1038] ================================================================== [ 204.549104][ T1038] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 204.556329][ T1038] [ 204.558651][ T1038] read-write to 0xffff888237d2b664 of 4 bytes by task 8123 on cpu 1: [ 204.567448][ T1038] wq_worker_running+0x95/0x120 [ 204.572567][ T1038] schedule_timeout+0xb7/0x170 [ 204.578022][ T1038] msleep+0x50/0x90 [ 204.582258][ T1038] nsim_fib_event_work+0x14a2/0x21a0 [ 204.588445][ T1038] process_scheduled_works+0x4ce/0x9d0 [ 204.594003][ T1038] worker_thread+0x582/0x770 [ 204.598604][ T1038] kthread+0x486/0x510 [ 204.602748][ T1038] ret_from_fork+0xdd/0x150 [ 204.607379][ T1038] ret_from_fork_asm+0x1a/0x30 [ 204.612515][ T1038] [ 204.614896][ T1038] read to 0xffff888237d2b664 of 4 bytes by task 1038 on cpu 0: [ 204.622600][ T1038] kick_pool+0x49/0x2d0 [ 204.627017][ T1038] __queue_work+0x8d6/0xb60 [ 204.631498][ T1038] queue_work_on+0xd1/0x160 [ 204.635977][ T1038] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 204.641856][ T1038] wg_packet_encrypt_worker+0x9e1/0xb80 [ 204.647389][ T1038] process_scheduled_works+0x4ce/0x9d0 [ 204.652939][ T1038] worker_thread+0x582/0x770 [ 204.657612][ T1038] kthread+0x486/0x510 [ 204.661684][ T1038] ret_from_fork+0xdd/0x150 [ 204.666199][ T1038] ret_from_fork_asm+0x1a/0x30 [ 204.670963][ T1038] [ 204.673281][ T1038] value changed: 0x00000000 -> 0x00000001 [ 204.679004][ T1038] [ 204.681332][ T1038] Reported by Kernel Concurrency Sanitizer on: [ 204.688156][ T1038] CPU: 0 UID: 0 PID: 1038 Comm: kworker/0:2 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 204.701318][ T1038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.711900][ T1038] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 204.718672][ T1038] ================================================================== [ 204.758616][T12810] team0: Port device team_slave_0 added [ 204.802894][ T37] hsr_slave_0: left promiscuous mode [ 204.809156][ T37] hsr_slave_1: left promiscuous mode [ 204.823256][ T37] veth0_macvtap: left allmulticast mode [ 204.829109][ T37] veth1_macvtap: left promiscuous mode [ 204.838356][ T37] veth0_macvtap: left promiscuous mode [ 204.845484][ T37] veth1_vlan: left promiscuous mode [ 204.874430][T12212] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.969303][ T37] team0 (unregistering): Port device dummy0 removed [ 204.981651][T12810] team0: Port device team_slave_1 added [ 204.998080][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.006059][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.034965][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.046786][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.054041][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.081746][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.106923][T12810] hsr_slave_0: entered promiscuous mode [ 205.113123][T12810] hsr_slave_1: entered promiscuous mode [ 205.119449][T12810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.127371][T12810] Cannot create hsr debugfs directory [ 205.343483][T12810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.353228][T12810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.362564][T12810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.371482][T12810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.402002][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.414913][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.425953][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.433045][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.445031][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.452276][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.468888][T12810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.479389][T12810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.524179][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.579607][T12810] veth0_vlan: entered promiscuous mode [ 205.587366][T12810] veth1_vlan: entered promiscuous mode [ 205.601513][T12810] veth0_macvtap: entered promiscuous mode [ 205.608864][T12810] veth1_macvtap: entered promiscuous mode [ 205.619754][T12810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.631497][T12810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.641152][T12810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.650213][T12810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.659051][T12810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.667916][T12810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0