last executing test programs: 4m25.719162024s ago: executing program 32 (id=1793): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) 3m56.467431153s ago: executing program 33 (id=2646): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x64, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m42.400548213s ago: executing program 34 (id=4644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) keyctl$link(0x8, r2, r3) 2m40.416840461s ago: executing program 35 (id=4691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m43.654213794s ago: executing program 1 (id=6461): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x265c, 0x1000, 0xffffffff, 0x35e}) syz_emit_ethernet(0x2e, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2711}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.613167485s ago: executing program 1 (id=6465): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 1m43.478691368s ago: executing program 1 (id=6474): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f00000004c0)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1m43.37636819s ago: executing program 8 (id=6479): socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x10) 1m43.287418842s ago: executing program 8 (id=6480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) 1m43.287083372s ago: executing program 8 (id=6482): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m43.200316343s ago: executing program 5 (id=6485): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 1m43.065613906s ago: executing program 5 (id=6487): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x2fe4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2fb4, 0x2, [@TCA_FLOW_ACT={0x2f74, 0x9, 0x0, 0x1, [@m_mpls={0xc4, 0x19, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x73e19}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x7, 0xffffffffffffffff, 0xa, 0x208}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6fd83}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf9}, @TCA_MPLS_BOS={0x5}]}, {0x3a, 0x6, "21284d0630074752f798a00cad888276ebd99705f56c003ef6c884f16c27431ec3fcd020ed6fb6981c509e7b19e994fe41d78286bd8d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_simple={0xec, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '&\xa0}.-^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x101, 0x6, 0x7, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0xda, 0x2, 0x8, 0x0, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x26, 0x5, 0x9, 0x4}}]}, {0x6a, 0x6, "45741dfe9dfaa8080589214491da60d2e3685d027853a3db337b747005483f2ad83f67a23626fccdfe1345def99f1e09271712528cea0e6592753a210e0de8fa65c65999092397bbeef071ccf93c882cd342d67e5e3b27920721675503057c90685b2840d3fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x1088, 0x7, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0xfffffffa}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x1, 0x2, 0x6, 0x3}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x12}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x61a}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x1a08, 0x10, 0x0, 0x0, {{0xb}, {0x18f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x800, 0x800, 0x0, 0x4dcb, 0x6, 0x4, 0x800, 0x8, 0x9, 0x1000, 0x5, 0x0, 0x2, 0x1000, 0x1, 0x0, 0x0, 0x4, 0x7ff, 0x1, 0x2, 0x5, 0x3, 0xe9, 0x6, 0xffffffff, 0x8, 0x5, 0x8, 0xd, 0x5, 0x2, 0x1, 0x81, 0x3a, 0x739, 0x1, 0x8, 0x21f, 0xffffff64, 0x400, 0xed9, 0x1, 0x8b72, 0x8, 0x81, 0x5, 0x1, 0x80000000, 0x9, 0x1, 0x1, 0x7ed, 0xde7, 0x8, 0x2, 0x3, 0xfffffffd, 0xe5, 0x5, 0x1, 0x1, 0xfffffffa, 0xfffffff2, 0x1, 0x3, 0x69, 0x3ff, 0x401, 0x81, 0x5, 0x7, 0xffffffff, 0x5, 0x5, 0xff, 0x3, 0xfffff000, 0x5, 0x7, 0x2, 0x6d47, 0xe, 0x1, 0x10000, 0x7, 0x0, 0x4, 0x0, 0x7f, 0x5, 0x3, 0xfffffff9, 0x0, 0x6, 0xfffffffa, 0x3, 0x4, 0x7, 0x8ab, 0x9, 0x4, 0x10001, 0x6, 0x4, 0x9, 0x2, 0x3, 0x7, 0xe, 0x1, 0x4, 0x0, 0x7f, 0xffffffff, 0xfffffff9, 0x7, 0x8, 0x4, 0x401, 0x9, 0x3, 0xfffffffd, 0x5, 0x5, 0x0, 0x8, 0x100, 0x5, 0xc, 0xa, 0x100, 0xb3, 0x9, 0x4, 0xd86, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x5, 0x8, 0x0, 0x10001, 0x542e, 0x7, 0x80000000, 0x0, 0x7, 0x92f, 0x9, 0x8, 0x7, 0x46, 0x9, 0x5, 0xffffff5c, 0x3, 0x974c, 0x2, 0x40, 0x2, 0x8, 0x400, 0x9, 0x6f, 0x4b, 0x0, 0x356, 0x9, 0x4, 0xe, 0x4, 0x2, 0xcdb, 0xffffff80, 0x5, 0xd6, 0x3, 0xffffffff, 0xc1, 0x6, 0x1, 0x3, 0x83a, 0x7, 0x9, 0x7eef, 0x9, 0x4b, 0xff, 0x2, 0x6, 0x4, 0x1ff, 0x2, 0xa, 0xb2a9, 0x7, 0x40, 0x5, 0x1, 0x4, 0x0, 0x5875, 0x8, 0x2, 0x0, 0x5, 0x12b, 0x3, 0x76, 0xbb, 0x40, 0xfffffffd, 0x6, 0x1, 0x10000, 0x2, 0x2, 0x2, 0x8001, 0x1b, 0x400, 0x4c9e, 0x8, 0x800, 0x2748c45e, 0xffff, 0x2, 0x4, 0xa0, 0x8, 0x1, 0x874, 0x6, 0x2, 0xe, 0x3, 0xa, 0x8ed2, 0x5, 0x6, 0x1, 0xd4, 0x2, 0xfffffffc, 0x5, 0x2, 0x9, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x7fff, 0x1769, 0x40, {0x6, 0x0, 0x7, 0x3, 0x4, 0x2}, {0x7f, 0x2, 0x3, 0xa, 0xcc0, 0xb}, 0x8, 0x101, 0x10}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0xb7, 0x80000001, 0x4, 0x801, 0xf, 0x3, 0x1, 0x0, 0x2, 0x5, 0x5ec, 0x0, 0x395, 0x8c0d, 0xffff, 0xa, 0x9, 0x200, 0xa, 0x8, 0x51, 0x2, 0xf84, 0x8fbe, 0x7fffffff, 0x10, 0x2, 0xfff, 0x0, 0x7ff, 0x1, 0x7c5f, 0xffffffff, 0x5, 0x1, 0x5d, 0x2, 0xfffffff7, 0x3ff, 0x0, 0x11f7, 0x6, 0x2, 0x7, 0x10000, 0x3, 0x1ff, 0x6, 0x5, 0x4, 0x5, 0x7fffffff, 0xe8c2, 0xffffffff, 0x6, 0x0, 0x1, 0x80000000, 0x9, 0xdaef, 0x80000001, 0x4, 0x9, 0x100, 0x8, 0x6, 0xa0000, 0x80000000, 0x5, 0x401, 0x1, 0xd, 0x5ff2f08e, 0xfffffff8, 0x10000, 0x3, 0xbe, 0x0, 0x2000000, 0x1, 0x6, 0x7ff, 0x5b, 0x7c0000, 0x1ff, 0x75, 0x2, 0x4760121d, 0x0, 0xe, 0xdf, 0xfffffff2, 0x7, 0x3, 0x9b3, 0x7fff, 0x0, 0xfff, 0x46, 0xdafa, 0x5, 0x0, 0x4000, 0x1, 0x6, 0x0, 0x5, 0x307, 0x4, 0x6, 0x7ff, 0x1, 0x3, 0x9, 0x9, 0x9, 0xffffffff, 0x3, 0x101, 0x0, 0xd, 0x3, 0xffff, 0x9, 0x7, 0x2ee, 0x401, 0x6, 0x5dbb4844, 0x1, 0x1000, 0x80, 0x7, 0x6, 0x5, 0x7, 0x6, 0x6, 0x1, 0x5, 0x57, 0x1000, 0x2, 0x40, 0x40, 0x7, 0xfffffff9, 0x7, 0x5, 0x6, 0x8, 0xd, 0x38, 0x0, 0x4, 0x3, 0x9, 0x340, 0x2, 0xfffff55b, 0x78, 0x5, 0x4, 0x100, 0x686, 0x1, 0xd70, 0x7, 0x9, 0x2f, 0x8, 0x10000, 0x1000, 0x2, 0x8, 0xac50, 0x8, 0x22, 0x6, 0x8000, 0x4, 0xffff, 0x4, 0xb8, 0x4ad, 0x7, 0x0, 0x108a46f7, 0x8000, 0x6, 0x4, 0x1, 0x8, 0x3, 0xf, 0x7fff, 0xdc99, 0x3, 0x3, 0x200, 0x4e, 0x401, 0x6, 0x7, 0x7, 0xf666, 0x7, 0x7f6, 0x15c, 0x5, 0x2, 0x8, 0x19a4, 0x401, 0x4, 0x100, 0x3, 0x1800, 0x0, 0x8, 0x6, 0x8, 0x8adf, 0x7f, 0x5, 0x1, 0x8, 0x5, 0x0, 0x1cfb, 0x7ff, 0x371, 0x9, 0x0, 0xfff, 0x5, 0x0, 0x3f, 0xffff1d20, 0x728728bf, 0x1, 0x1ff, 0x8, 0xffffffff, 0x6, 0x9d, 0xfffffffa, 0x409, 0x8000, 0x2, 0x7, 0x0, 0x7, 0x6, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff56}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff1a4b}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x35, 0x1, 0x2, 0x8000, 0x400, {0x7, 0x1, 0x5, 0xe, 0x6b, 0x400}, {0x8, 0x1, 0x0, 0x482, 0xfff6, 0x9}, 0x8001, 0x2d, 0x80}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x62}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1000, 0x7f, 0x2, 0x5, 0x2, 0x8, 0x200, 0xe, 0x1, 0xff, 0x67520355, 0x0, 0x9, 0x9bf, 0x5, 0x1, 0xffff8001, 0xfffffffc, 0x4, 0x3, 0x6, 0x8, 0x8, 0xa4d, 0x10, 0x2, 0x10001, 0x6, 0x20cdc5a8, 0x1, 0x9, 0xa, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1ff, 0xd, 0x33de, 0xeebb, 0x51, 0x1, 0x8, 0x2, 0xa, 0x6, 0x4, 0x5, 0x9, 0x8, 0xc, 0x2, 0x5, 0x0, 0x8, 0xa64d, 0x7, 0x2, 0x1, 0x5, 0x2, 0x7ff, 0x4da4, 0x1, 0x79f00000, 0x9, 0x3, 0x10001, 0x4, 0xc, 0xffff4030, 0x6d0b4e74, 0x7, 0x54, 0x8, 0x9, 0x10000, 0x0, 0x6, 0x1, 0x2, 0x4, 0x9, 0x4, 0xf, 0x0, 0x81, 0x10, 0x10000, 0x7ff, 0x9, 0x4, 0x0, 0x4, 0x81, 0x3, 0x5, 0xfffffc01, 0xfffffc01, 0x7, 0xffff, 0x9, 0xe, 0x7, 0xb, 0x7fffffff, 0x7, 0x800, 0x9, 0x3, 0x2, 0x8, 0x32000000, 0x3ff, 0x7a1, 0x0, 0x81, 0x3, 0x7, 0x4000, 0x9, 0x74eb1bf8, 0x0, 0x3, 0x9, 0x2, 0x3, 0x9, 0x200, 0x4, 0x6, 0x6, 0x8, 0x7, 0x3, 0x2, 0x1ff, 0x1, 0x9, 0x1, 0x6, 0x7, 0x2, 0xc, 0x7, 0x2f44, 0x9, 0x7, 0x2, 0xcf0, 0x7399a8d4, 0x0, 0x6, 0x4, 0x60f0, 0x0, 0x5, 0x4, 0x4, 0x8, 0x3, 0x8, 0x1ff, 0x9, 0x3, 0x400, 0x9, 0xb0c, 0x1, 0x8, 0x2, 0x4, 0x9deb, 0x0, 0x7fffffff, 0x401, 0x5d, 0xcf, 0x1, 0x6, 0xbd5, 0x9, 0xe830, 0x3, 0x6, 0x8, 0x8, 0x8, 0x400, 0x4, 0xef5b, 0x9, 0xfa, 0x1, 0x400, 0x66c3, 0x7, 0xfffffffa, 0xb1, 0xffffffff, 0x4, 0x9, 0x7, 0x3, 0x4, 0x0, 0x20, 0x3, 0x9, 0x6, 0x6, 0x10000, 0x5, 0x2, 0x3, 0xc9c9, 0xa, 0x80000000, 0xfff, 0x7b, 0x10, 0x1ff, 0x8, 0x5128, 0x5, 0xfff, 0x9, 0x4, 0x6, 0x13c2, 0x2, 0x0, 0x6, 0x82, 0x0, 0x8, 0x0, 0x4, 0x3, 0x0, 0x7ff, 0x36f6, 0xdc9, 0x1, 0x5fa8, 0x2, 0x80000001, 0x6, 0x7, 0x7c, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x928, 0x8, 0x5, 0x4c, 0x7, 0xffffffff, 0x0, 0x40, 0x6, 0xfffffe00, 0x3ff, 0x7, 0x80, 0x8, 0xa02, 0x6c2, 0xe, 0x4, 0x6, 0x3, 0xf, 0x100, 0x3, 0x7, 0x72, 0x2, 0x7f, 0x1ab0, 0x8, 0x0, 0xb, 0x7fffffff, 0x7, 0x8, 0x6, 0x3, 0x2, 0x1, 0x5, 0x8, 0x49d, 0x4, 0x700, 0x51053f60, 0x2, 0x4, 0x2, 0x3, 0x3, 0xfffeffff, 0x5, 0x7a4, 0x8000, 0x2, 0x5, 0x8000, 0x80000001, 0x0, 0x4, 0x20bd, 0x80000001, 0x4, 0x38a8, 0xffff0001, 0xfffffff8, 0x0, 0x3, 0x6, 0xd5, 0x6, 0x555f3b84, 0x6, 0x6, 0x5, 0x4, 0x81, 0x558a, 0x3, 0x3, 0x3, 0x4, 0x101, 0xffff235a, 0x3, 0x6, 0x8000, 0x8000, 0x81, 0x2, 0x77, 0x200, 0x7, 0x7, 0x5, 0xffffffff, 0x1, 0xffff, 0xf4e, 0x80000000, 0x6, 0x7, 0x6, 0xffffffa8, 0xff, 0x3ff, 0x0, 0x9, 0x7, 0x13, 0x4, 0x4, 0x3435, 0x1, 0x8, 0x3, 0x8, 0x1, 0x7fffffff, 0x2, 0x3, 0xfffffff8, 0x5, 0x0, 0x6, 0xfffffff9, 0x9, 0x7, 0x2, 0x2ba, 0xd, 0x10, 0x2, 0x4, 0xee, 0x0, 0x1, 0x9, 0x9, 0xfffffff7, 0x5, 0xfffffffb, 0x1, 0x200, 0x9d3c, 0x400, 0x10, 0x10000, 0x7, 0x8, 0x4499e42d, 0x9, 0x7f, 0x6, 0x1ff, 0x7e, 0x4, 0x8, 0x3e7, 0x0, 0x8, 0x1c0, 0x14, 0x64de, 0x7f, 0x80, 0x7, 0xe30c, 0x70c, 0x2, 0x80000000, 0x4, 0x5, 0x7, 0x2, 0xfffffff7, 0x5, 0x3, 0x8, 0x7ff, 0x0, 0x9, 0x98, 0xffff7fff, 0x4f, 0x15c175dd, 0x1f, 0x1000, 0x4, 0x5, 0x1, 0xffffffff, 0xfffffff8, 0xb1e, 0x2, 0x9, 0x3, 0x6, 0x5, 0xbf7, 0xb7e8, 0x1, 0xa75, 0x100, 0x8, 0x10000, 0x3, 0xc24a58bb, 0x6345, 0x9, 0x3, 0x80000001, 0x7, 0x100, 0x81, 0x2, 0x7, 0x11, 0x100, 0x7, 0x7f, 0x3, 0x100, 0x3, 0x8001, 0xffffffff, 0x3, 0xae7, 0x9, 0xfffffff9, 0x439c, 0xfffffff8, 0x5, 0x40, 0x4, 0x8f86, 0xfffffff8, 0x0, 0xd, 0xfffffffe, 0x5, 0x27e, 0x2, 0x3e0, 0x1, 0x5, 0x2, 0x8, 0x1, 0x38c2, 0x2, 0x4, 0x7, 0xff, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80000000, 0x3, 0xc000000, 0xa5cf, 0xfff, 0x8, 0x9, 0x48d, 0x3, 0x0, 0x5, 0x2, 0x5, 0x40, 0x80000001, 0x1, 0x5, 0x2, 0x4, 0x2a97, 0x7fffffff, 0x639, 0xe, 0x9, 0x4027, 0x6, 0xadf2, 0x0, 0x200, 0x5, 0x9, 0xffff7fff, 0x7, 0xffffff80, 0xc0, 0x4, 0x4, 0x5, 0x3, 0x4, 0x9550, 0x311d, 0x7, 0x8, 0x7, 0x8, 0x8, 0x81, 0x7, 0x3, 0x3, 0xae7, 0xd, 0x2, 0x9, 0xffffff5e, 0xa, 0x81, 0x4, 0x9, 0x7f, 0x2, 0x8, 0x5, 0x3, 0x3, 0x6, 0x1, 0x4, 0xb4, 0x4e4, 0x3, 0x1000, 0x1, 0x9, 0x5, 0x7ff, 0x6, 0x0, 0x449c, 0x6bd, 0x3, 0xffffff2d, 0x1, 0x0, 0xfc8, 0x40, 0xff, 0xeae, 0x40, 0x0, 0x9, 0x8, 0x3, 0x7d56f0f0, 0x3, 0x4, 0x7, 0xd759, 0xbf1, 0xfffffff9, 0x400, 0x6, 0xfff, 0x8, 0x4, 0x1, 0x6, 0x8170, 0x3, 0x0, 0x2, 0x1e8b, 0x4, 0x7, 0x1, 0x3, 0x401, 0xe, 0x9, 0xe, 0x401, 0xe915, 0xfffffff5, 0x80, 0x4, 0x2, 0xfffffff7, 0x1, 0x1000, 0x4, 0x8000, 0x1, 0x1, 0x7f, 0x2, 0x0, 0x934, 0x1, 0xb3d1, 0x7, 0x0, 0xcc, 0x1, 0xd5d6, 0x6, 0x4, 0x0, 0xc35, 0x2f, 0x2, 0x2, 0x40, 0xfff, 0x4, 0x7, 0x7, 0x2a, 0xb, 0x7, 0x8001, 0x7e9f, 0x9, 0x65699c4f, 0xffff, 0x3c, 0x7, 0x1, 0x5bda, 0x400, 0x8, 0x7, 0x5a, 0x80000000, 0x60, 0x1, 0x8, 0x7, 0x9, 0x6, 0x5, 0x6, 0xb, 0x5, 0x6, 0xd2af, 0x0, 0x9, 0x3, 0x10, 0x4b, 0xf, 0x4, 0x3, 0x4, 0x0, 0x9, 0x5, 0x2, 0x9, 0xfffff574, 0x401, 0x3, 0x6, 0xfffffff2, 0x0, 0xd0, 0xfffffffa, 0x1, 0x9, 0x1, 0x1, 0x6, 0x4, 0xd88, 0x0, 0x9b, 0x1, 0xf0, 0x7, 0x0, 0x55, 0x7, 0x2, 0xfffffff8, 0x6d000000, 0x5, 0x94, 0x7f, 0x8c, 0x6, 0x82c, 0xe, 0x20000000, 0x7, 0x6, 0x0, 0x40, 0xe527, 0x81, 0x0, 0x1, 0x40, 0x40, 0x4e, 0x0, 0x2, 0x7, 0xbe, 0x8, 0x4, 0x9, 0x0, 0x8, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x80, 0x0, 0x9, 0x1, 0x836, 0xa27, 0xc45, 0xfffffffc, 0xb4, 0x10000, 0x36b5, 0x9, 0xa44, 0xba45, 0x0, 0x3, 0x5, 0x1, 0xc0, 0x6, 0x0, 0x101, 0x80, 0x76800000, 0x81, 0x1000, 0x8000, 0x1, 0x3, 0x1, 0x7, 0x1, 0xffffffee, 0x5, 0xf4b2, 0x70f1, 0x6, 0x3ca, 0x1, 0x9, 0xa9, 0x8, 0x2000, 0x9, 0x10000, 0x0, 0x6, 0xd, 0x2, 0x5, 0x7, 0x8001, 0x5, 0x8, 0x8, 0x9b6f, 0x7, 0x8, 0x4, 0x2, 0xfc, 0x3fb, 0xc39, 0x4, 0x7, 0x1, 0x5, 0x32bf, 0xda2e, 0xc0c, 0xfffffff9, 0x9, 0x9, 0x101, 0x7, 0x80000001, 0x10001, 0x9, 0x8e6, 0x6, 0x1, 0x6, 0xf, 0x8000, 0x8, 0x3, 0x4, 0x9, 0x7, 0x4, 0x2, 0x7, 0x3, 0x0, 0x3, 0x5, 0x10, 0x0, 0x8392, 0x6, 0x10001, 0x2, 0x9, 0x1ff, 0x1, 0x4, 0x9, 0x3, 0xde40, 0x78d1, 0x2, 0x9, 0x4, 0x6, 0xfffffff2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8000, 0xfff, 0x6, 0x0, 0x9, 0x5, 0x1, 0xda54, 0x5, 0x1000, 0xcc, 0x5a4, 0x6, 0x10, 0xa, 0x1, 0x6, 0x1, 0x4, 0x7f, 0x0, 0xe00, 0x8, 0xfffffff7, 0x10000, 0x1, 0x46c3a83a, 0x5, 0x10000, 0x101, 0x4, 0x210f985d, 0x10, 0x7, 0x6, 0x10000, 0xc5b, 0x5, 0x9f06, 0x1, 0x9, 0xb, 0x775088ff, 0x4, 0x9, 0x5, 0x2f09, 0x9, 0xe, 0x9, 0xe, 0x9, 0x80000000, 0xa, 0x4, 0x101, 0xfffffff3, 0x2, 0x1, 0x5, 0xff, 0xd76, 0xe, 0x7, 0x6, 0x8, 0xb47, 0x4, 0x3, 0x0, 0xcf, 0x7, 0x4, 0x101, 0xfffffffb, 0x5, 0xffff, 0x5, 0x0, 0x3, 0x8e, 0x2, 0x3, 0x9, 0xa, 0x2, 0x0, 0x1, 0x6, 0x9, 0x0, 0xe, 0x5, 0xffffff7b, 0x2, 0x9, 0xdb, 0x9, 0x5, 0x8, 0x9, 0x4, 0x1, 0x1, 0x5, 0x200, 0x4, 0x9, 0x1ff, 0x7, 0x62e, 0x1, 0x100, 0x3, 0x8, 0x100, 0xfffffffe, 0xffff, 0xff, 0x2, 0x4, 0x80000001, 0x8, 0x3, 0x7fff, 0x7fff, 0x8, 0xe, 0x3, 0x7ff, 0x8, 0x9, 0x7, 0x7ff, 0x7]}]]}, {0xe7, 0x6, "182a6d8dc63c9ff98439b9e6c019db9f9aa7671018f9f23b579225c5952fae37ad2822f9872d0e12860ca1dffb4d91d0c556574dac49835a28c81b83a16e7dd45c308b701e43cf9994c1cfd7e65e26818bee42f4adb92cc7cd8fed475cfb4f3a273375c5dec106261606acd14f3580e0431db14afdfd274594accc41ef2c7bacf4993bda1d604a1311926e8fc919717b4ca02ad6d55d6129f33c850ca76f16a4ee569acfc16484e992d9834837492cb58410e50fb54e41ed004d86f1135f616f0ffa3e4eff9055ee73c84702adf1464a1cf870add1aa1ddd13dcc1a7124595af46871d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0xc8, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x8, 0x2, 0x6, 0xffffffff}, 0x4}}]}, {0x7d, 0x6, "77127489476077c4f6b022701b5d4843e756857de6cfe6fd3b04655d66799eccc04599a7b9f3d9e8f8f624d654db104143bd07c3aae1ce8eef8d8521f2891ba0584b98bf2195f846e8036f95b3af500c6059961422bd74bf53f845a2edb323c04100e4b552f75fe73ea0fb606963bc2552a4d2b23d212921ab"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x134, 0x13, 0x0, 0x0, {{0xfffffcb0}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1d0}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0xf6, 0x6, "9b7184862c35362b944612751e9ea081bd22c2b8d201587dd724cf35fed784cb82c87b0161e06f4ed0b47bf97ad2fb9c358a2b720483ea556872692bcf7b9c9cec398a79d110f242c85c8f3de1170d9c16bd7be9dc57dc7623e282feec8efec9d93992968a23fba94d046d6dbba04021e7fa7f02c6b65028a21209145e11562b51e91755a0a594f79875b57c232f3fd9c8e07dc53e6d9a0e778eec47d908d077a187208732e949ae73fa6834597b31b8660d55a7a731b8993d0695c283fc3a1e5166400a579cc18a03b634bc0f0ad6b320ff6f266cea9cc8f7d92f3c728b22cf82a04d68c83ffbe70c2bbafa895d5806d753"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x134, 0xf, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}]}, {0xdc, 0x6, "3b4d72a89d78d61f93a56b8ec1033b68c7f9a4ce4134f6499e7a1b044d02df9e32b031d38a17a1c554e3b6c97ad342b3d9e6fcd9535f2fc3bc79c80200bc06c19dbf6641e03b48889909222cbfb73fcca22452835c2a54c60d6eabe93ec384a604cf7803ede09bb5ddf5ce13692da8efceb2a5ec7eeeac88156eb89410ed4d5519b05c322bfc8241faddfa0d596c65cac90edfec61fde1b762e24e4ef3dea5031d9c236e05da1b3ba8295070435f3000e2237ae5ef557b63bb280c10704c81bd4044774fa4f3e93a6e2821acece79c28e6d52f48b2b3b84a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x937}, @TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf584}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x0, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x7}, {0x3, 0x4, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}]}]}}]}, 0x2fe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) 1m42.911409979s ago: executing program 5 (id=6489): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[], 0x50) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) 1m42.86344039s ago: executing program 5 (id=6491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r2, 0x1b) 1m42.725406102s ago: executing program 8 (id=6494): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r2, 0x0, 0x1000000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m42.449257748s ago: executing program 1 (id=6498): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 1m42.266317721s ago: executing program 1 (id=6501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='t']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m42.163391604s ago: executing program 8 (id=6502): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m42.035947726s ago: executing program 1 (id=6503): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1m41.993869017s ago: executing program 36 (id=6503): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1m41.766947311s ago: executing program 8 (id=6505): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m41.766865921s ago: executing program 37 (id=6505): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m41.763633141s ago: executing program 5 (id=6515): pipe2$9p(&(0x7f0000000000), 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 1m41.396645008s ago: executing program 5 (id=6508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000014}, 0x4000054) close(r3) close(r2) 1m41.396445038s ago: executing program 38 (id=6508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000014}, 0x4000054) close(r3) close(r2) 36.858773033s ago: executing program 4 (id=8323): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 36.643312377s ago: executing program 4 (id=8327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) 36.548268159s ago: executing program 4 (id=8328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}}, 0x84) 36.248054225s ago: executing program 4 (id=8335): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c80, &(0x7f00000000c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}]}, 0x1, 0x79c, &(0x7f0000001cc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_clone3(&(0x7f0000000380)={0x44800000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') 35.592801388s ago: executing program 4 (id=8344): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2a88, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 35.295490553s ago: executing program 4 (id=8351): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2}, 0x64) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 35.278858104s ago: executing program 39 (id=8351): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2}, 0x64) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 32.139981195s ago: executing program 3 (id=8402): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e22, 0x400, 0x2, 0x0, 0x0, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0xffffffffffffffff, 0x73, 0x8}, {0x3, 0x0, 0x40000000000000, 0x9}, 0x2e61, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4, 0x6c}, 0x2, @in6=@private2, 0x0, 0x2, 0x0, 0x0, 0xf606}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 31.536172817s ago: executing program 3 (id=8412): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x6, 0x6, 0x3a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0x9, 0xffff3a61}}) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x1, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 29.686409542s ago: executing program 3 (id=8433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) socket$nl_route(0x10, 0x3, 0x0) 29.626289783s ago: executing program 3 (id=8435): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c80, &(0x7f00000000c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}]}, 0x1, 0x79c, &(0x7f0000001cc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_clone3(&(0x7f0000000380)={0x44800000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') 29.29911414s ago: executing program 3 (id=8441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 28.419323557s ago: executing program 3 (id=8458): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 28.304273199s ago: executing program 40 (id=8458): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 3.510951452s ago: executing program 0 (id=9036): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) getrandom(&(0x7f0000000000)=""/47, 0x2f, 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.143883539s ago: executing program 0 (id=9047): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bfffb60128876360"], 0xffdd) 3.001661381s ago: executing program 0 (id=9053): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.321840445s ago: executing program 2 (id=9065): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xff\xff\xff\x7f\x00') sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.933418982s ago: executing program 2 (id=9072): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1.50653038s ago: executing program 7 (id=9077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.425408032s ago: executing program 7 (id=9080): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 1.392518883s ago: executing program 7 (id=9081): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81, 0x20000009}]}}}}}}}, 0x0) 1.345931123s ago: executing program 7 (id=9083): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.263929245s ago: executing program 6 (id=9088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) io_setup(0x3, &(0x7f0000000340)) 1.127349647s ago: executing program 6 (id=9093): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x9, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x24040880) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.088759818s ago: executing program 0 (id=9094): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.00210858s ago: executing program 0 (id=9095): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 999.31401ms ago: executing program 2 (id=9096): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 997.05849ms ago: executing program 7 (id=9105): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='\x00H\xeb', 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) close(r0) 951.946141ms ago: executing program 7 (id=9097): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @random="4a26292432ca", @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "e0fef6", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x400, 0x0, 0x1, 0xe, 0x4, 0x0, 0x8, 0x600, 0x1, 0x4e20, 0x4e22}}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 947.784231ms ago: executing program 9 (id=9098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 936.011272ms ago: executing program 6 (id=9099): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 929.889541ms ago: executing program 2 (id=9100): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x3, 0x100000a, 0x8, 0x0, 0x0, 0x9f}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) capset(&(0x7f0000000bc0)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x0, 0x5}) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) 909.446792ms ago: executing program 9 (id=9101): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 866.072352ms ago: executing program 9 (id=9102): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) chmod(&(0x7f0000000080)='./file0\x00', 0x97) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 844.004763ms ago: executing program 9 (id=9103): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 835.647143ms ago: executing program 6 (id=9104): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000002480)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) 822.714184ms ago: executing program 2 (id=9106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x300, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 724.343125ms ago: executing program 2 (id=9107): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) 190.751726ms ago: executing program 0 (id=9108): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x54, 0x2000, 0x0, {0x0, 0xa}, {0x1, 0xb}, @period={0x59, 0xa, 0x1, 0x0, 0x400, {0x2, 0x1, 0x10, 0x5}, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 33.404099ms ago: executing program 9 (id=9109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 24.988369ms ago: executing program 6 (id=9110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 4.724899ms ago: executing program 9 (id=9111): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=9112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): @ is not valid (left unmapped). [ 293.399097][T22929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.410370][T22929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.436087][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7470'. [ 293.647033][T22953] netlink: 'syz.4.7476': attribute type 4 has an invalid length. [ 293.780795][T22958] bridge_slave_0: left allmulticast mode [ 293.786641][T22958] bridge_slave_0: left promiscuous mode [ 293.792503][T22958] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.816399][T22958] bridge_slave_1: left allmulticast mode [ 293.824609][T22958] bridge_slave_1: left promiscuous mode [ 293.830356][T22958] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.882225][T22958] bond0: (slave bond_slave_0): Releasing backup interface [ 293.907380][T22958] bond0: (slave bond_slave_1): Releasing backup interface [ 293.931504][T22958] team0: Port device team_slave_0 removed [ 293.944160][T22958] team0: Port device team_slave_1 removed [ 293.952743][T22958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.960250][T22958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.967673][T22974] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7483'. [ 293.979690][T22958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.987134][T22958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.374495][T23015] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7493'. [ 296.088659][T23131] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7540'. [ 296.119165][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7541'. [ 296.140988][T23135] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7542'. [ 296.152344][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7543'. [ 296.161960][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7543'. [ 296.807940][T23200] loop0: detected capacity change from 0 to 4096 [ 296.831033][T23200] loop0: detected capacity change from 0 to 512 [ 296.859180][T23200] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 296.867199][T23200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 296.891852][T23200] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 296.902910][T23200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 296.953300][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.047645][T23230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23230 comm=syz.9.7587 [ 297.072264][T23230] netlink: 'syz.9.7587': attribute type 1 has an invalid length. [ 297.123475][T23230] bond1: (slave bridge1): making interface the new active one [ 297.133731][T23230] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 297.385710][T23289] loop0: detected capacity change from 0 to 512 [ 297.434384][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 297.434403][ T29] audit: type=1400 audit(302.244:11398): avc: denied { ioctl } for pid=23288 comm="syz.0.7589" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 297.573747][ T29] audit: type=1326 audit(302.380:11399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.596812][ T29] audit: type=1326 audit(302.380:11400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.630715][ T29] audit: type=1326 audit(302.433:11401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.653839][ T29] audit: type=1326 audit(302.433:11402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.676880][ T29] audit: type=1326 audit(302.433:11403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.704862][ T29] audit: type=1326 audit(302.443:11404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.728026][ T29] audit: type=1326 audit(302.443:11405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.751066][ T29] audit: type=1326 audit(302.443:11406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.774127][ T29] audit: type=1326 audit(302.443:11407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23307 comm="syz.9.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 297.848424][T23317] netlink: 'syz.0.7600': attribute type 10 has an invalid length. [ 297.862187][T23317] team0: Port device dummy0 added [ 297.878133][T23317] netlink: 'syz.0.7600': attribute type 10 has an invalid length. [ 297.914812][T23317] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 297.994831][T23317] team0: Failed to send options change via netlink (err -105) [ 298.023757][T23317] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 298.043151][T23317] team0: Port device dummy0 removed [ 298.060936][T23317] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 298.120724][T23343] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 298.217363][T23361] loop3: detected capacity change from 0 to 512 [ 298.236274][T23361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.255897][T23361] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7627: corrupted inode contents [ 298.270121][T23361] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.7627: mark_inode_dirty error [ 298.283826][T23361] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7627: corrupted inode contents [ 298.297193][T23361] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7627: mark_inode_dirty error [ 298.318074][T23361] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7627: corrupted inode contents [ 298.334663][T23361] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.7627: mark_inode_dirty error [ 298.347944][T23361] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7627: corrupted inode contents [ 298.377347][T23361] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7627: corrupted inode contents [ 298.388193][T23380] __nla_validate_parse: 1 callbacks suppressed [ 298.388213][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7621'. [ 298.396739][T23361] EXT4-fs error (device loop3): add_dirent_to_buf:2153: inode #2: comm syz.3.7627: mark_inode_dirty error [ 298.423803][T23361] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7627: corrupted inode contents [ 298.477233][T20184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.068461][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7660'. [ 299.082867][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7650'. [ 299.092780][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7650'. [ 299.508193][T23496] batman_adv: batadv0: Adding interface: dummy0 [ 299.514605][T23496] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.540415][T23496] batman_adv: batadv0: Interface activated: dummy0 [ 299.550297][T23496] batadv0: mtu less than device minimum [ 299.556194][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.567087][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.577913][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.588767][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.599539][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.610424][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.621219][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.632025][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.642846][T23496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.662999][T23502] netlink: 1343 bytes leftover after parsing attributes in process `syz.4.7671'. [ 299.816018][T23525] vhci_hcd: invalid port number 96 [ 299.821182][T23525] vhci_hcd: default hub control req: 0300 vfbfa i0060 l0 [ 299.875576][T23532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.900325][T23532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.137252][T23550] loop0: detected capacity change from 0 to 128 [ 300.222129][T23559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.303128][T23559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.398839][T23567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.406370][T23567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.444536][T23575] loop0: detected capacity change from 0 to 128 [ 300.482452][T23567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.489890][T23567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.537981][T23559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.619687][T23559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.646962][T23575] loop0: detected capacity change from 0 to 512 [ 300.710123][ T4139] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.726195][ T4139] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.738702][ T4139] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.762502][ T4139] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.821256][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7709'. [ 300.882470][T23627] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 300.934245][T23641] netlink: 'syz.9.7716': attribute type 1 has an invalid length. [ 300.966649][T23641] bond2: entered promiscuous mode [ 300.973919][T23641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.986537][T23641] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7716'. [ 301.002464][T23641] batadv1: entered promiscuous mode [ 301.007908][T23641] batadv1: entered allmulticast mode [ 301.027706][T23641] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.036422][T23641] bond2: (slave batadv1): making interface the new active one [ 301.036530][T23680] netlink: 3 bytes leftover after parsing attributes in process `syz.9.7716'. [ 301.044839][T23641] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 301.086168][T23680] batadv2: entered promiscuous mode [ 301.091556][T23680] batadv2: entered allmulticast mode [ 301.100334][T23680] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 301.123503][T23680] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 301.219588][T23694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23694 comm=syz.4.7723 [ 301.362771][T23708] ref_ctr_offset mismatch. inode: 0x52c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1c00000000 [ 301.462378][T23714] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7742'. [ 302.062169][T23761] bond0: (slave dummy0): Releasing backup interface [ 302.080866][T23761] bridge_slave_0: left allmulticast mode [ 302.086708][T23761] bridge_slave_0: left promiscuous mode [ 302.092509][T23761] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.100573][T23761] bridge_slave_1: left allmulticast mode [ 302.106265][T23761] bridge_slave_1: left promiscuous mode [ 302.112121][T23761] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.121538][T23761] bond0: (slave bond_slave_0): Releasing backup interface [ 302.130254][T23761] bond0: (slave bond_slave_1): Releasing backup interface [ 302.140172][T23761] team0: Port device team_slave_0 removed [ 302.147024][T23761] team0: Port device team_slave_1 removed [ 302.154976][T23761] bond1: (slave bridge1): Releasing active interface [ 302.445528][T23783] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7755'. [ 302.468001][T23786] syz.0.7757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 302.482995][T23786] CPU: 0 UID: 0 PID: 23786 Comm: syz.0.7757 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.483023][T23786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 302.483115][T23786] Call Trace: [ 302.483123][T23786] [ 302.483130][T23786] __dump_stack+0x1d/0x30 [ 302.483210][T23786] dump_stack_lvl+0xe8/0x140 [ 302.483236][T23786] dump_stack+0x15/0x1b [ 302.483257][T23786] warn_alloc+0x12b/0x1a0 [ 302.483358][T23786] __vmalloc_node_range_noprof+0x9c/0xe00 [ 302.483453][T23786] ? __futex_wait+0x1ff/0x260 [ 302.483515][T23786] ? __pfx_futex_wake_mark+0x10/0x10 [ 302.483550][T23786] ? __rcu_read_unlock+0x4f/0x70 [ 302.483572][T23786] ? avc_has_perm_noaudit+0x1b1/0x200 [ 302.483681][T23786] ? should_fail_ex+0x30/0x280 [ 302.483706][T23786] ? xskq_create+0x36/0xe0 [ 302.483735][T23786] vmalloc_user_noprof+0x7d/0xb0 [ 302.483843][T23786] ? xskq_create+0x80/0xe0 [ 302.483867][T23786] xskq_create+0x80/0xe0 [ 302.483887][T23786] xsk_init_queue+0x95/0xf0 [ 302.483938][T23786] xsk_setsockopt+0x477/0x640 [ 302.483998][T23786] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.484107][T23786] __sys_setsockopt+0x184/0x200 [ 302.484212][T23786] __x64_sys_setsockopt+0x64/0x80 [ 302.484245][T23786] x64_sys_call+0x20ec/0x2ff0 [ 302.484342][T23786] do_syscall_64+0xd2/0x200 [ 302.484431][T23786] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.484463][T23786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.484502][T23786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.484592][T23786] RIP: 0033:0x7fc60a7beba9 [ 302.484606][T23786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.484623][T23786] RSP: 002b:00007fc60921f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.484640][T23786] RAX: ffffffffffffffda RBX: 00007fc60aa05fa0 RCX: 00007fc60a7beba9 [ 302.484652][T23786] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 302.484662][T23786] RBP: 00007fc60a841e19 R08: 0000000000000004 R09: 0000000000000000 [ 302.484751][T23786] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 302.484762][T23786] R13: 00007fc60aa06038 R14: 00007fc60aa05fa0 R15: 00007ffffbd05e68 [ 302.484841][T23786] [ 302.484848][T23786] Mem-Info: [ 302.708334][T23786] active_anon:41973 inactive_anon:151 isolated_anon:0 [ 302.708334][T23786] active_file:25250 inactive_file:2801 isolated_file:0 [ 302.708334][T23786] unevictable:0 dirty:211 writeback:0 [ 302.708334][T23786] slab_reclaimable:4029 slab_unreclaimable:106603 [ 302.708334][T23786] mapped:29799 shmem:33951 pagetables:1367 [ 302.708334][T23786] sec_pagetables:0 bounce:0 [ 302.708334][T23786] kernel_misc_reclaimable:0 [ 302.708334][T23786] free:1687935 free_pcp:53240 free_cma:0 [ 302.753813][T23786] Node 0 active_anon:167892kB inactive_anon:604kB active_file:101000kB inactive_file:11204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119196kB dirty:844kB writeback:0kB shmem:135804kB kernel_stack:5472kB pagetables:5468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.781582][T23786] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.810125][T23786] lowmem_reserve[]: 0 2883 7862 7862 [ 302.815431][T23786] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 302.845803][T23786] lowmem_reserve[]: 0 0 4978 4978 [ 302.850972][T23786] Node 0 Normal free:3787184kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:167892kB inactive_anon:604kB active_file:101000kB inactive_file:11204kB unevictable:0kB writepending:844kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:209328kB local_pcp:205404kB free_cma:0kB [ 302.883550][T23786] lowmem_reserve[]: 0 0 0 0 [ 302.888163][T23786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 302.900962][T23786] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 302.917397][T23786] Node 0 Normal: 162*4kB (UME) 61*8kB (UM) 240*16kB (M) 185*32kB (UM) 149*64kB (UM) 81*128kB (UME) 51*256kB (UM) 121*512kB (UME) 139*1024kB (UME) 74*2048kB (UME) 827*4096kB (UM) = 3787088kB [ 302.936532][T23786] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 302.945939][T23786] 61646 total pagecache pages [ 302.950645][T23786] 157 pages in swap cache [ 302.954984][T23786] Free swap = 124368kB [ 302.959171][T23786] Total swap = 124996kB [ 302.963392][T23786] 2097051 pages RAM [ 302.965609][T17713] hid_parser_main: 18 callbacks suppressed [ 302.965643][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 302.967283][T23786] 0 pages HighMem/MovableOnly [ 302.967306][T23786] 80444 pages reserved [ 302.973179][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 302.996821][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.012813][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.020385][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.027934][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.035443][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.042953][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.050526][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.058192][T17713] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.068953][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 303.068972][ T29] audit: type=1326 audit(308.154:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.098195][ T29] audit: type=1326 audit(308.154:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.121449][ T29] audit: type=1326 audit(308.154:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.145035][T17713] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz1 [ 303.154793][ T29] audit: type=1326 audit(308.154:11821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.177976][ T29] audit: type=1326 audit(308.154:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.201227][ T29] audit: type=1326 audit(308.154:11823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.224412][ T29] audit: type=1326 audit(308.154:11824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.247452][ T29] audit: type=1326 audit(308.154:11825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.270464][ T29] audit: type=1326 audit(308.154:11826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.293581][ T29] audit: type=1326 audit(308.154:11827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.9.7761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 303.317829][T23800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7762'. [ 303.326875][T23800] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7762'. [ 303.382411][T23811] loop3: detected capacity change from 0 to 256 [ 303.391119][T23811] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.403680][T23811] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.498802][T23826] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7771'. [ 303.546900][T23833] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7773'. [ 304.194238][T17713] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz1 [ 304.217364][T23853] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7778'. [ 304.488225][T23875] loop0: detected capacity change from 0 to 512 [ 304.752223][T23902] netlink: 'syz.0.7793': attribute type 1 has an invalid length. [ 304.775242][T23902] bond2: entered promiscuous mode [ 304.780666][T23902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.796975][T23902] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7793'. [ 304.815655][T23902] batadv0: entered promiscuous mode [ 304.820958][T23902] batadv0: entered allmulticast mode [ 304.829847][T23902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.839238][T23902] bond2: (slave batadv0): making interface the new active one [ 304.850808][T23902] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 304.861874][T23947] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7793'. [ 304.894662][T23947] batadv1: entered promiscuous mode [ 304.899920][T23947] batadv1: entered allmulticast mode [ 304.909342][T23947] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 304.917930][T23947] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 304.957939][T23953] netlink: 'syz.0.7797': attribute type 13 has an invalid length. [ 304.974989][T23953] gretap0: refused to change device tx_queue_len [ 304.983315][T23953] net_ratelimit: 11 callbacks suppressed [ 304.983332][T23953] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.988275][T23955] loop3: detected capacity change from 0 to 512 [ 305.012578][T23955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.022629][T23955] EXT4-fs (loop3): inodes count not valid: 24 vs 32 [ 305.191722][T23985] netlink: 'syz.3.7809': attribute type 1 has an invalid length. [ 305.224678][T23985] bond3: entered promiscuous mode [ 305.242685][T23985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.271158][T23985] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7809'. [ 305.283661][T23985] batadv0: entered promiscuous mode [ 305.288906][T23985] batadv0: entered allmulticast mode [ 305.295828][T23985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.304478][T23985] bond3: (slave batadv0): making interface the new active one [ 305.312777][T23985] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 305.321974][T24022] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7809'. [ 305.342494][T24022] batadv1: entered promiscuous mode [ 305.347805][T24022] batadv1: entered allmulticast mode [ 305.356234][T24022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 305.365044][T24022] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 305.722212][T24041] loop0: detected capacity change from 0 to 2048 [ 306.117793][T24043] Set syz1 is full, maxelem 65536 reached [ 306.173987][T24077] netlink: 'syz.3.7824': attribute type 83 has an invalid length. [ 306.262235][T24085] loop3: detected capacity change from 0 to 2048 [ 306.293982][T24085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.320368][T24099] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7834'. [ 306.377610][T20184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.463147][T24149] ip6gre1: entered allmulticast mode [ 306.957089][T24201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.013988][T24201] bond4 (unregistering): Released all slaves [ 307.304771][T24293] loop0: detected capacity change from 0 to 8192 [ 307.381635][T24310] loop3: detected capacity change from 0 to 512 [ 307.403868][T24310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.430400][T24310] EXT4-fs (loop3): 1 truncate cleaned up [ 307.442208][T24310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.495319][T20184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.496792][T24309] loop4: detected capacity change from 0 to 128 [ 307.582295][T24337] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.638538][T24337] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.683750][T24347] loop0: detected capacity change from 0 to 1024 [ 307.690830][T24347] EXT4-fs: Ignoring removed orlov option [ 307.701366][T24337] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.714503][T24347] EXT4-fs: Ignoring removed nobh option [ 307.720104][T24347] EXT4-fs: Ignoring removed bh option [ 307.755214][T24337] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.799506][T24360] syzkaller0: entered promiscuous mode [ 307.805016][T24360] syzkaller0: entered allmulticast mode [ 307.853101][ T4127] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.865309][ T4127] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.881364][ T4127] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.909968][ T4127] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.946598][T24397] loop0: detected capacity change from 0 to 2048 [ 308.014027][T24409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.058731][T24409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.088534][T24426] netlink: 'syz.4.7891': attribute type 1 has an invalid length. [ 308.137902][T24426] bond1: entered promiscuous mode [ 308.165183][T24426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.190572][T24463] __nla_validate_parse: 9 callbacks suppressed [ 308.190592][T24463] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7891'. [ 308.248167][T24409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.270029][T24426] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7891'. [ 308.285766][T24463] batadv0: entered promiscuous mode [ 308.291162][T24463] batadv0: entered allmulticast mode [ 308.299101][T24463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.311634][T24463] bond1: (slave batadv0): making interface the new active one [ 308.333839][T24463] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 308.345880][T24409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.358521][T24481] loop0: detected capacity change from 0 to 512 [ 308.367176][T24426] batadv1: entered promiscuous mode [ 308.372554][T24426] batadv1: entered allmulticast mode [ 308.388036][T24426] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 308.405160][T24426] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 308.429871][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 308.429942][ T29] audit: type=1326 audit(313.781:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.465136][ T29] audit: type=1326 audit(313.781:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.488170][ T29] audit: type=1326 audit(313.781:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.511390][ T29] audit: type=1326 audit(313.781:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.534539][ T29] audit: type=1326 audit(313.781:11973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.557498][ T29] audit: type=1326 audit(313.781:11974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.580758][ T29] audit: type=1326 audit(313.781:11975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.603798][ T29] audit: type=1326 audit(313.792:11976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.626909][ T29] audit: type=1326 audit(313.802:11977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.650004][ T29] audit: type=1326 audit(313.802:11978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24493 comm="syz.7.7901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 308.682904][T24502] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 308.691671][T24502] ref_ctr increment failed for inode: 0x59d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811aa91700 [ 308.776566][T24509] loop0: detected capacity change from 0 to 512 [ 309.206370][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7914'. [ 309.216398][T24536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7917'. [ 309.229812][T24536] netem: change failed [ 309.247149][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7914'. [ 309.334534][T24543] loop4: detected capacity change from 0 to 8192 [ 311.233378][ T4128] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.245283][ T4139] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.257012][ T4128] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.269139][ T4128] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.505785][T24593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24593 comm=syz.4.7935 [ 311.767421][T24608] ref_ctr_offset mismatch. inode: 0xd8e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 311.944254][T24613] loop4: detected capacity change from 0 to 1764 [ 312.002803][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7944'. [ 312.738315][T24708] tipc: Enabled bearer , priority 10 [ 312.765286][T24710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7976'. [ 313.300344][T24748] tipc: Enabled bearer , priority 0 [ 313.319805][T24748] tipc: Disabling bearer [ 313.338843][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 313.338858][ T29] audit: type=1326 audit(318.936:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.9.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.384008][ T29] audit: type=1326 audit(318.967:12078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.9.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.407165][ T29] audit: type=1326 audit(318.967:12079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.9.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.430216][ T29] audit: type=1326 audit(318.967:12080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24749 comm="syz.9.7989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.443462][T24740] bridge0: entered promiscuous mode [ 313.467111][T24740] macvtap1: entered allmulticast mode [ 313.472586][T24740] bridge0: entered allmulticast mode [ 313.478896][T24740] bridge0: port 1(macvtap1) entered blocking state [ 313.485549][T24740] bridge0: port 1(macvtap1) entered disabled state [ 313.523021][T17713] IPVS: starting estimator thread 0... [ 313.529610][T24740] bridge0: left allmulticast mode [ 313.534828][T24740] bridge0: left promiscuous mode [ 313.612254][T24765] IPVS: using max 1680 ests per chain, 84000 per kthread [ 313.737782][T24786] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 313.744742][T24786] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 313.760148][T24789] loop4: detected capacity change from 0 to 1024 [ 313.770103][ T29] audit: type=1326 audit(319.387:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.793312][ T29] audit: type=1326 audit(319.387:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.828293][T24786] 0ªî{X¹¦: entered promiscuous mode [ 313.835900][T24796] 0ªî{X¹¦: left promiscuous mode [ 313.841156][T24796] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 313.855202][ T29] audit: type=1326 audit(319.387:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.878352][ T29] audit: type=1326 audit(319.387:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.901425][ T29] audit: type=1326 audit(319.387:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.924539][ T29] audit: type=1326 audit(319.387:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 313.965713][T24789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.060661][T24789] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.8002: Allocating blocks 449-513 which overlap fs metadata [ 314.110633][T24788] EXT4-fs (loop4): pa ffff888107188cb0: logic 48, phys. 177, len 21 [ 314.118971][T24788] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 314.155151][T20178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.358964][ T1046] tipc: Node number set to 2689399243 [ 314.537308][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8018'. [ 314.892152][T24887] netlink: 'syz.7.8038': attribute type 1 has an invalid length. [ 314.899972][T24887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8038'. [ 314.928910][T24889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8039'. [ 314.957317][T24892] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8040'. [ 315.030869][T24910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24910 comm=syz.7.8043 [ 315.047370][T24910] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8043'. [ 315.107597][T24952] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8046'. [ 315.148017][T24959] tipc: Started in network mode [ 315.153026][T24959] tipc: Node identity ac141413, cluster identity 4711 [ 315.159984][T24959] tipc: Enabling of bearer rejected, failed to enable media [ 315.576221][T25004] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8068'. [ 315.781888][T25034] netlink: 'syz.9.8080': attribute type 30 has an invalid length. [ 315.794102][T25028] hub 6-0:1.0: USB hub found [ 315.799542][T25028] hub 6-0:1.0: 8 ports detected [ 316.023470][T25075] netlink: 'syz.7.8093': attribute type 21 has an invalid length. [ 316.034455][T25075] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8093'. [ 316.043671][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8093'. [ 316.053950][T25072] loop4: detected capacity change from 0 to 8192 [ 316.094795][T25072] loop4: p1 p2 p3 p4 [ 316.099491][T25072] loop4: p2 start 151000334 is beyond EOD, truncated [ 316.106403][T25072] loop4: p3 start 331777 is beyond EOD, truncated [ 316.112962][T25072] loop4: p4 size 263168 extends beyond EOD, truncated [ 316.470556][T25118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25118 comm=syz.3.8109 [ 316.665534][T25128] loop4: detected capacity change from 0 to 2048 [ 316.700414][T25128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.822833][T25128] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 316.882721][T25128] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 316.895096][T25128] EXT4-fs (loop4): This should not happen!! Data will be lost [ 316.895096][T25128] [ 316.904787][T25128] EXT4-fs (loop4): Total free blocks count 0 [ 316.910785][T25128] EXT4-fs (loop4): Free/Dirty block details [ 316.916754][T25128] EXT4-fs (loop4): free_blocks=66060288 [ 316.922319][T25128] EXT4-fs (loop4): dirty_blocks=32 [ 316.927646][T25128] EXT4-fs (loop4): Block reservation details [ 316.933715][T25128] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 317.221720][T25179] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8125'. [ 317.457776][T20178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.826623][T25215] loop3: detected capacity change from 0 to 1024 [ 317.841965][T25215] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 317.852257][T25215] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 317.882080][T25215] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 317.891923][T25215] EXT4-fs (loop3): orphan cleanup on readonly fs [ 317.899586][T25215] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.8140: Inode bitmap for bg 0 marked uninitialized [ 317.916369][T25215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.930733][T25215] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.076586][T25242] netlink: 'syz.3.8149': attribute type 21 has an invalid length. [ 318.193133][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 318.193158][ T29] audit: type=1326 audit(324.037:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.7.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 318.222703][ T29] audit: type=1326 audit(324.037:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.7.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 318.246083][ T29] audit: type=1326 audit(324.037:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.7.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 318.268996][ T29] audit: type=1326 audit(324.037:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.7.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 318.275650][T25269] netlink: 'syz.7.8159': attribute type 13 has an invalid length. [ 318.292357][ T29] audit: type=1326 audit(324.037:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25258 comm="syz.7.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 318.329720][T25269] 0ªî{X¹¦: left allmulticast mode [ 318.338267][T25269] 0ªî{X¹¦: refused to change device tx_queue_len [ 318.349094][T25269] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.474434][T25285] netlink: 'syz.0.8165': attribute type 21 has an invalid length. [ 318.523447][ T29] audit: type=1326 audit(324.373:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 318.546714][ T29] audit: type=1326 audit(324.373:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 318.569714][ T29] audit: type=1326 audit(324.373:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 318.592775][ T29] audit: type=1326 audit(324.373:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 318.615914][ T29] audit: type=1326 audit(324.373:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 318.643358][T25300] netlink: 'syz.3.8172': attribute type 4 has an invalid length. [ 319.650615][T25387] loop3: detected capacity change from 0 to 128 [ 319.793181][T25409] __nla_validate_parse: 9 callbacks suppressed [ 319.793196][T25409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8216'. [ 319.834034][T25414] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8217'. [ 319.868845][T25416] IPv6: Can't replace route, no match found [ 320.058534][T25436] ref_ctr_offset mismatch. inode: 0x69f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 320.260656][T25453] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.375034][T25453] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.531187][T25453] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.688503][T25453] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.854723][T25488] IPv6: Can't replace route, no match found [ 321.021392][ T4128] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.057810][ T4128] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.080011][ T4128] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.091567][ T4128] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.174080][T25515] tipc: Started in network mode [ 321.179023][T25515] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 321.201429][T25515] tipc: Enabled bearer , priority 10 [ 321.233159][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8260'. [ 321.404587][T25556] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 321.456612][T25567] tipc: Started in network mode [ 321.461556][T25567] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 321.470541][T25567] tipc: Enabling of bearer rejected, failed to enable media [ 321.557222][T25583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8277'. [ 321.605582][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8277'. [ 321.620905][T25583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.654154][T25623] bond2 (unregistering): Released all slaves [ 321.787540][T25668] netlink: 'syz.3.8287': attribute type 4 has an invalid length. [ 321.902744][T25680] tipc: Enabling of bearer rejected, failed to enable media [ 322.069706][T25692] bridge0: port 3(batadv0) entered blocking state [ 322.076280][T25692] bridge0: port 3(batadv0) entered disabled state [ 322.083250][T25692] batadv0: entered allmulticast mode [ 322.089170][T25692] batadv0: entered promiscuous mode [ 322.267201][T17717] tipc: Node number set to 4269801494 [ 322.307186][T25711] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.8304'. [ 322.563329][ T4177] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 322.572833][ T4177] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 322.893641][T25781] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8316'. [ 323.099222][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 323.099241][ T29] audit: type=1326 audit(329.181:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25787 comm="syz.3.8319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f00b9a0eba9 code=0x7ffc0000 [ 323.859446][T25798] loop0: detected capacity change from 0 to 1024 [ 323.979761][T25807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8327'. [ 324.078410][T25813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8329'. [ 324.126646][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8329'. [ 324.228328][T25824] VFS: Mount too revealing [ 324.291143][T25813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 324.333665][T25818] bond3 (unregistering): Released all slaves [ 324.404226][T25883] loop4: detected capacity change from 0 to 2048 [ 324.434520][T25883] EXT4-fs: Ignoring removed i_version option [ 324.480768][T25883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.593034][ T29] audit: type=1400 audit(330.756:12580): avc: denied { read } for pid=25864 comm="syz.4.8335" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 324.654026][T25916] loop0: detected capacity change from 0 to 1024 [ 324.727659][T25925] loop0: detected capacity change from 0 to 1024 [ 324.739074][T25925] EXT4-fs: Ignoring removed bh option [ 324.746159][T25925] EXT4-fs: inline encryption not supported [ 324.927371][T20178] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 324.973334][T20178] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 325.053078][T25974] $Hÿ: left promiscuous mode [ 325.057897][T25974] bond_slave_0: left promiscuous mode [ 325.063477][T25974] bond_slave_1: left promiscuous mode [ 325.076383][T25974] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 325.091169][T22220] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.100488][T25980] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8345'. [ 325.113382][T25974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.745604][ T3426] bond0 (unregistering): Released all slaves [ 325.876073][ T3426] tipc: Left network mode [ 326.078669][T26047] loop3: detected capacity change from 0 to 128 [ 326.357034][ T3426] IPVS: stop unused estimator thread 0... [ 326.606041][T26064] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.691924][T26026] chnl_net:caif_netlink_parms(): no params data found [ 326.768116][T26064] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.781610][T26191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8366'. [ 326.872416][T26064] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.887412][T26242] loop0: detected capacity change from 0 to 512 [ 326.963237][T26243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.980121][T26026] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.987283][T26026] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.013319][T26026] bridge_slave_0: entered allmulticast mode [ 327.020184][T26026] bridge_slave_0: entered promiscuous mode [ 327.027351][T26026] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.034701][T26026] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.043269][T26285] loop0: detected capacity change from 0 to 164 [ 327.051497][T26026] bridge_slave_1: entered allmulticast mode [ 327.058151][T26026] bridge_slave_1: entered promiscuous mode [ 327.078742][T26064] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.107882][T26292] loop0: detected capacity change from 0 to 2048 [ 327.114588][T26292] EXT4-fs: Ignoring removed i_version option [ 327.149953][T26026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.172653][T26026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.207739][T26329] syzkaller0: entered allmulticast mode [ 327.239080][T26329] syzkaller0 (unregistering): left allmulticast mode [ 327.289714][T26026] team0: Port device team_slave_0 added [ 327.303286][ T4177] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.312461][T26026] team0: Port device team_slave_1 added [ 327.336400][T26026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.343397][T26026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.369591][T26026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.393963][T26026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.400959][T26026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.427098][T26026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.444834][ T4150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.456130][T26401] netlink: 'syz.7.8380': attribute type 30 has an invalid length. [ 327.465906][ T4150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.505033][ T4150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.522789][T26026] hsr_slave_0: entered promiscuous mode [ 327.529861][T26026] hsr_slave_1: entered promiscuous mode [ 327.538427][T26026] debugfs: 'hsr0' already exists in 'hsr' [ 327.544568][T26026] Cannot create hsr debugfs directory [ 327.574521][T26431] veth0_to_team: entered promiscuous mode [ 327.739425][T26510] tipc: Enabled bearer , priority 0 [ 327.760523][T26510] tipc: Disabling bearer [ 327.819951][T26531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8391'. [ 328.008436][T26553] netlink: 'syz.3.8393': attribute type 30 has an invalid length. [ 328.160713][ T29] audit: type=1326 audit(334.493:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 328.188185][ T29] audit: type=1326 audit(334.493:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 328.211382][ T29] audit: type=1326 audit(334.493:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc60a7beba9 code=0x7ffc0000 [ 328.229529][T26590] loop0: detected capacity change from 0 to 128 [ 328.234369][ T29] audit: type=1326 audit(334.493:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc60a7bebe3 code=0x7ffc0000 [ 328.263530][ T29] audit: type=1326 audit(334.493:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc60a7bd65f code=0x7ffc0000 [ 328.286457][ T29] audit: type=1326 audit(334.493:12586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc60a7bec37 code=0x7ffc0000 [ 328.316657][ T29] audit: type=1326 audit(334.556:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc60a7bd510 code=0x7ffc0000 [ 328.339709][ T29] audit: type=1326 audit(334.556:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc60a7be7ab code=0x7ffc0000 [ 328.362751][ T29] audit: type=1326 audit(334.609:12589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc60a7bd80a code=0x7ffc0000 [ 328.385696][ T29] audit: type=1326 audit(334.609:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26589 comm="syz.0.8396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc60a7bd80a code=0x7ffc0000 [ 328.473643][T26626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8399'. [ 328.552765][T26026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.573825][T26026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.583134][T26026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.594110][T26026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.706026][T26026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.734017][T26026] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.748042][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.755208][ T4127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.768552][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.775628][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.806161][T26026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.856952][T26026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.923755][T26026] veth0_vlan: entered promiscuous mode [ 328.932392][T26026] veth1_vlan: entered promiscuous mode [ 328.949188][T26026] veth0_macvtap: entered promiscuous mode [ 328.957213][T26026] veth1_macvtap: entered promiscuous mode [ 328.968687][T26026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.977726][T26026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.991480][ T4128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.000525][ T4128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.009540][ T4128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.020548][ T4128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.069200][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8412'. [ 329.082878][T26711] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8414'. [ 329.110048][T26705] loop2: detected capacity change from 0 to 128 [ 329.146138][T26705] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 329.154281][T26705] FAT-fs (loop2): Filesystem has been set read-only [ 329.161077][T26705] bio_check_eod: 66 callbacks suppressed [ 329.161105][T26705] syz.2.8352: attempt to access beyond end of device [ 329.161105][T26705] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 329.181555][T26705] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 329.189454][T26705] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 329.197635][T26705] syz.2.8352: attempt to access beyond end of device [ 329.197635][T26705] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 329.214286][T26735] syz.2.8352: attempt to access beyond end of device [ 329.214286][T26735] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 329.227738][T26735] Buffer I/O error on dev loop2, logical block 2065, async page read [ 329.236546][T26735] syz.2.8352: attempt to access beyond end of device [ 329.236546][T26735] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 329.249817][T26735] Buffer I/O error on dev loop2, logical block 2066, async page read [ 329.258041][T26735] syz.2.8352: attempt to access beyond end of device [ 329.258041][T26735] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 329.271431][T26735] Buffer I/O error on dev loop2, logical block 2067, async page read [ 329.279803][T26735] syz.2.8352: attempt to access beyond end of device [ 329.279803][T26735] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 329.293077][T26735] Buffer I/O error on dev loop2, logical block 2068, async page read [ 329.301338][T26735] syz.2.8352: attempt to access beyond end of device [ 329.301338][T26735] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 329.314703][T26735] Buffer I/O error on dev loop2, logical block 2069, async page read [ 329.323508][T26735] syz.2.8352: attempt to access beyond end of device [ 329.323508][T26735] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 329.336850][T26735] Buffer I/O error on dev loop2, logical block 2070, async page read [ 329.345128][T26735] syz.2.8352: attempt to access beyond end of device [ 329.345128][T26735] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 329.358531][T26735] Buffer I/O error on dev loop2, logical block 2071, async page read [ 329.367050][T26735] syz.2.8352: attempt to access beyond end of device [ 329.367050][T26735] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 329.380345][T26735] Buffer I/O error on dev loop2, logical block 2072, async page read [ 329.388603][T26705] Buffer I/O error on dev loop2, logical block 2065, async page read [ 329.396754][T26705] Buffer I/O error on dev loop2, logical block 2066, async page read [ 329.979958][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8404'. [ 330.028706][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8404'. [ 330.056241][T26757] tipc: New replicast peer: 10.1.1.2 [ 330.061689][T26757] tipc: Enabled bearer , priority 10 [ 330.084095][T26761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.114177][T26764] bond4 (unregistering): Released all slaves [ 330.234924][T26849] loop0: detected capacity change from 0 to 512 [ 330.571545][T26885] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8423'. [ 330.836295][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8431'. [ 330.975123][T26915] tipc: Enabled bearer , priority 0 [ 330.997963][T26919] loop3: detected capacity change from 0 to 2048 [ 331.008215][T26919] EXT4-fs: Ignoring removed i_version option [ 331.028339][T26919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.040692][T26915] syzkaller0: entered promiscuous mode [ 331.046443][T26915] syzkaller0: entered allmulticast mode [ 331.052527][T26915] tipc: Resetting bearer [ 331.082767][T26921] tipc: Started in network mode [ 331.087787][T26921] tipc: Node identity f664565c8e28, cluster identity 4711 [ 331.095001][T26921] tipc: Enabled bearer , priority 0 [ 331.115615][T26914] tipc: Resetting bearer [ 331.144435][T26914] tipc: Disabling bearer [ 331.169462][T26921] tipc: Disabling bearer [ 331.297269][T26963] Invalid option length (1045626) for dns_resolver key [ 331.312427][T20184] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 331.351288][T20184] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 331.580859][ T3426] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.643369][ T3426] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.711027][T26989] tipc: Enabled bearer , priority 0 [ 331.737230][ T3426] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.778024][T26989] tipc: Disabling bearer [ 331.804641][ T3426] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.964686][ T3426] bridge_slave_1: left allmulticast mode [ 331.970428][ T3426] bridge_slave_1: left promiscuous mode [ 331.976166][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.984061][T27005] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.8457'. [ 331.993268][T27005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8457'. [ 332.021999][ T3426] bridge_slave_0: left allmulticast mode [ 332.027710][ T3426] bridge_slave_0: left promiscuous mode [ 332.033428][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.089893][T20184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.443104][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.467686][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.491792][ T3426] bond0 (unregistering): Released all slaves [ 332.511109][ T3426] bond1 (unregistering): Released all slaves [ 332.535132][ T3426] bond2 (unregistering): Released all slaves [ 332.555312][ T3426] bond3 (unregistering): (slave batadv0): Releasing active interface [ 332.575850][ T3426] bond3 (unregistering): (slave batadv1): Releasing active interface [ 332.594202][ T3426] bond3 (unregistering): Released all slaves [ 332.653547][ T3426] tipc: Disabling bearer [ 332.658842][ T3426] tipc: Left network mode [ 332.663768][T27035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8461'. [ 332.726313][T17713] tipc: Node number set to 4269801494 [ 332.746627][ T3426] hsr_slave_0: left promiscuous mode [ 332.763818][ T3426] hsr_slave_1: left promiscuous mode [ 332.782939][ T3426] veth1_macvtap: left promiscuous mode [ 332.797004][ T3426] veth0_macvtap: left promiscuous mode [ 332.955668][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 332.989299][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 333.113720][T27055] tipc: Enabling of bearer rejected, failed to enable media [ 333.242445][T27079] wireguard0: entered promiscuous mode [ 333.247971][T27079] wireguard0: entered allmulticast mode [ 333.367555][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 333.367614][ T29] audit: type=1326 audit(339.963:12925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.397083][ T29] audit: type=1326 audit(339.963:12926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.424784][T27109] syzkaller0: entered allmulticast mode [ 333.439200][ T29] audit: type=1326 audit(339.973:12927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.462271][ T29] audit: type=1326 audit(340.036:12928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.485951][ T29] audit: type=1326 audit(340.036:12929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.525710][T27109] syzkaller0 (unregistering): left allmulticast mode [ 333.533549][ T29] audit: type=1326 audit(340.120:12930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.556678][ T29] audit: type=1326 audit(340.120:12931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.579865][ T29] audit: type=1326 audit(340.120:12932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.602967][ T29] audit: type=1326 audit(340.120:12933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.626141][ T29] audit: type=1326 audit(340.120:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27114 comm="syz.2.8482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 333.674208][ T3426] IPVS: stop unused estimator thread 0... [ 333.701288][T27025] chnl_net:caif_netlink_parms(): no params data found [ 333.731403][T27202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8485'. [ 333.798121][T27202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8485'. [ 333.864455][T27207] loop0: detected capacity change from 0 to 8192 [ 333.875537][T27025] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.882770][T27025] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.891626][T27025] bridge_slave_0: entered allmulticast mode [ 333.898490][T27025] bridge_slave_0: entered promiscuous mode [ 333.905176][T27252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8488'. [ 333.915284][T27025] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.922531][T27025] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.941084][T27207] loop0: p1 p2 p3 p4 [ 333.945152][T27207] loop0: p1 start 51379968 is beyond EOD, truncated [ 333.956736][T27207] loop0: p3 size 15991040 extends beyond EOD, truncated [ 333.964097][T27025] bridge_slave_1: entered allmulticast mode [ 333.970287][T27207] loop0: p4 start 16711680 is beyond EOD, truncated [ 333.992361][T27025] bridge_slave_1: entered promiscuous mode [ 334.008580][T27207] batman_adv: batadv0: adding TT local entry f2:f3:64:da:20:5f to non-existent VLAN 649 [ 334.037295][T27025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.073702][T27025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.126688][T27025] team0: Port device team_slave_0 added [ 334.147329][T27025] team0: Port device team_slave_1 added [ 334.157300][T27331] netlink: '¬í': attribute type 10 has an invalid length. [ 334.197683][T27025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.204706][T27025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.230903][T27025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.246309][T27025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.253314][T27025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.279669][T27025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.352082][T27025] hsr_slave_0: entered promiscuous mode [ 334.369253][T27025] hsr_slave_1: entered promiscuous mode [ 334.377554][T27025] debugfs: 'hsr0' already exists in 'hsr' [ 334.383295][T27025] Cannot create hsr debugfs directory [ 334.753842][T27025] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.770383][T27025] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.791548][T27025] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.807812][T27025] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.889903][T27025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.910892][T27025] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.928667][ T4127] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.935803][ T4127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.955671][T27501] loop0: detected capacity change from 0 to 512 [ 334.972601][ T4127] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.979772][ T4127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.106664][T27025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.427165][T27545] __nla_validate_parse: 5 callbacks suppressed [ 335.427183][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8514'. [ 335.428965][T27025] veth0_vlan: entered promiscuous mode [ 335.479420][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8514'. [ 335.480660][T27025] veth1_vlan: entered promiscuous mode [ 335.567337][T27025] veth0_macvtap: entered promiscuous mode [ 335.590186][T27552] wg2: left promiscuous mode [ 335.595031][T27552] wg2: left allmulticast mode [ 335.603880][T27025] veth1_macvtap: entered promiscuous mode [ 335.616767][T27025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.631375][T27025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.641693][T27552] wg2: entered promiscuous mode [ 335.646686][T27552] wg2: entered allmulticast mode [ 335.667841][ T4139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.695529][ T4139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.714143][ T4139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.723679][T27561] netlink: 'syz.2.8521': attribute type 13 has an invalid length. [ 335.735826][ T4139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.790173][T27567] netlink: 'syz.6.8459': attribute type 10 has an invalid length. [ 335.798869][T27571] loop2: detected capacity change from 0 to 512 [ 335.816415][T27567] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8459'. [ 335.839443][T27561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.856471][T27571] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8521: error while reading EA inode 32 err=-116 [ 335.871020][T27569] wg2: left promiscuous mode [ 335.876116][T27569] wg2: left allmulticast mode [ 335.881333][T27571] EXT4-fs (loop2): Remounting filesystem read-only [ 335.887880][T27571] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 335.898617][T27571] EXT4-fs (loop2): 1 orphan inode deleted [ 335.911926][T27571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.926570][T27567] dummy0: entered promiscuous mode [ 335.944583][T27567] bridge0: port 3(dummy0) entered blocking state [ 335.945794][T27571] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.952028][T27567] bridge0: port 3(dummy0) entered disabled state [ 335.993163][T27567] dummy0: entered allmulticast mode [ 336.011693][T27567] bridge0: port 3(dummy0) entered blocking state [ 336.018662][T27567] bridge0: port 3(dummy0) entered forwarding state [ 336.046634][T27572] wg2: entered promiscuous mode [ 336.051864][T27572] wg2: entered allmulticast mode [ 336.063981][T27584] wireguard0: entered promiscuous mode [ 336.069472][T27584] wireguard0: entered allmulticast mode [ 336.081456][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8536'. [ 336.185480][T27603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8532'. [ 336.197573][T27603] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8532'. [ 336.240873][T27607] loop0: detected capacity change from 0 to 1024 [ 336.249627][T27610] netlink: 'syz.7.8537': attribute type 13 has an invalid length. [ 336.336597][T27610] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 336.447769][T27610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.602098][T27623] netlink: 'syz.9.8540': attribute type 10 has an invalid length. [ 336.610757][T27623] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8540'. [ 336.632385][T27623] dummy0: entered promiscuous mode [ 336.650891][T27623] batman_adv: batadv0: Interface deactivated: dummy0 [ 336.658244][T27623] batman_adv: batadv0: Removing interface: dummy0 [ 336.724588][T27623] bridge0: port 3(dummy0) entered blocking state [ 336.737628][T27623] bridge0: port 3(dummy0) entered disabled state [ 336.751132][T27623] dummy0: entered allmulticast mode [ 336.771215][T27623] bridge0: port 3(dummy0) entered blocking state [ 336.778967][T27623] bridge0: port 3(dummy0) entered forwarding state [ 336.835372][T27639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8547'. [ 336.846206][T27641] loop2: detected capacity change from 0 to 512 [ 336.855568][T27639] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8547'. [ 336.871838][T27641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.896826][T27647] loop6: detected capacity change from 0 to 128 [ 336.959764][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.037313][T27629] bio_check_eod: 60624 callbacks suppressed [ 337.037331][T27629] syz.6.8543: attempt to access beyond end of device [ 337.037331][T27629] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 337.064002][T27629] syz.6.8543: attempt to access beyond end of device [ 337.064002][T27629] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 337.078027][T27629] syz.6.8543: attempt to access beyond end of device [ 337.078027][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.091345][T27629] syz.6.8543: attempt to access beyond end of device [ 337.091345][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.104607][T27629] syz.6.8543: attempt to access beyond end of device [ 337.104607][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.118618][T27629] syz.6.8543: attempt to access beyond end of device [ 337.118618][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.132137][T27629] syz.6.8543: attempt to access beyond end of device [ 337.132137][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.145609][T27629] syz.6.8543: attempt to access beyond end of device [ 337.145609][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.159149][T27629] syz.6.8543: attempt to access beyond end of device [ 337.159149][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.172898][T27629] syz.6.8543: attempt to access beyond end of device [ 337.172898][T27629] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 337.196019][T27659] loop2: detected capacity change from 0 to 128 [ 337.207082][T27663] netlink: 'syz.0.8552': attribute type 13 has an invalid length. [ 337.219300][T27659] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 337.227218][T27659] FAT-fs (loop2): Filesystem has been set read-only [ 337.253793][T27663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.267517][T27659] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 337.275423][T27659] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 337.287822][T27667] buffer_io_error: 60622 callbacks suppressed [ 337.287854][T27667] Buffer I/O error on dev loop2, logical block 2065, async page read [ 337.293158][T27663] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.302598][T27668] loop0: detected capacity change from 0 to 512 [ 337.315207][T27667] Buffer I/O error on dev loop2, logical block 2066, async page read [ 337.327935][T27663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.345873][T27667] Buffer I/O error on dev loop2, logical block 2067, async page read [ 337.370378][T27667] Buffer I/O error on dev loop2, logical block 2068, async page read [ 337.379649][T27667] Buffer I/O error on dev loop2, logical block 2069, async page read [ 337.388014][T27667] Buffer I/O error on dev loop2, logical block 2070, async page read [ 337.396732][T27667] Buffer I/O error on dev loop2, logical block 2071, async page read [ 337.404972][T27667] Buffer I/O error on dev loop2, logical block 2072, async page read [ 337.413545][T27659] Buffer I/O error on dev loop2, logical block 2065, async page read [ 337.421668][T27659] Buffer I/O error on dev loop2, logical block 2066, async page read [ 337.551861][T17714] hid_parser_main: 46 callbacks suppressed [ 337.551879][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.565226][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.572730][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.580196][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.587784][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.595219][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.602631][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.610134][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.617656][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.625077][T17714] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 337.634189][T17714] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 337.665128][T27675] netlink: 'syz.7.8557': attribute type 4 has an invalid length. [ 337.686088][T27690] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 337.767512][T27693] loop0: detected capacity change from 0 to 512 [ 337.787814][T27697] -1: renamed from syzkaller0 [ 338.536138][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8577'. [ 338.584941][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 338.584956][ T29] audit: type=1326 audit(345.443:13036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.0.8580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc60a7beba9 code=0x0 [ 338.706307][T27773] /dev/loop9: Can't lookup blockdev [ 339.720841][T27799] netlink: 'syz.9.8591': attribute type 13 has an invalid length. [ 339.788906][T27799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.855992][T27812] loop6: detected capacity change from 0 to 512 [ 339.885629][T27812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.927688][T27025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.973473][ T29] audit: type=1326 audit(346.891:13037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 339.996664][ T29] audit: type=1326 audit(346.891:13038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.042457][ T29] audit: type=1326 audit(346.944:13039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.065562][ T29] audit: type=1326 audit(346.944:13040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.088665][ T29] audit: type=1326 audit(346.944:13041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.111901][ T29] audit: type=1326 audit(346.944:13042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.134707][ T29] audit: type=1326 audit(346.944:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.157827][ T29] audit: type=1326 audit(346.944:13044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.180907][ T29] audit: type=1326 audit(346.944:13045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27821 comm="syz.9.8601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 340.192358][T27826] syzkaller0: entered promiscuous mode [ 340.209502][T27826] syzkaller0: entered allmulticast mode [ 340.240267][ T4127] syzkaller0: tun_net_xmit 48 [ 340.520428][T27848] netlink: 'syz.6.8616': attribute type 10 has an invalid length. [ 340.535686][T27848] team0 (unregistering): Port device team_slave_0 removed [ 340.546312][T27848] team0 (unregistering): Port device team_slave_1 removed [ 340.652847][T27887] loop0: detected capacity change from 0 to 2048 [ 340.752435][T27902] loop6: detected capacity change from 0 to 512 [ 340.763254][T27902] EXT4-fs: Ignoring removed nobh option [ 340.771025][T27902] EXT4-fs (loop6): failed to initialize system zone (-117) [ 340.781824][T27902] EXT4-fs (loop6): mount failed [ 340.853845][T27916] __nla_validate_parse: 4 callbacks suppressed [ 340.853865][T27916] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8618'. [ 340.879842][T27920] netlink: 'syz.0.8620': attribute type 10 has an invalid length. [ 340.881916][T27916] netem: change failed [ 340.991884][T27969] loop0: detected capacity change from 0 to 128 [ 341.173415][T27990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8632'. [ 341.217404][T27990] netem: change failed [ 341.227555][T27994] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.265652][T27997] tipc: Enabled bearer , priority 0 [ 341.277827][T28003] netlink: 'syz.2.8637': attribute type 10 has an invalid length. [ 341.292969][T28003] team0 (unregistering): Port device team_slave_0 removed [ 341.313247][T28003] team0 (unregistering): Port device team_slave_1 removed [ 341.346646][T27997] tipc: Disabling bearer [ 341.362733][T27994] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.427438][T28057] loop2: detected capacity change from 0 to 512 [ 341.440399][T27994] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.451288][T28057] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 341.476401][T28064] loop0: detected capacity change from 0 to 512 [ 341.476660][T28057] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.8644: invalid indirect mapped block 4294967295 (level 0) [ 341.497821][T28064] EXT4-fs: Ignoring removed nobh option [ 341.512519][T28057] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.8644: invalid indirect mapped block 4294967295 (level 1) [ 341.533628][T28057] EXT4-fs (loop2): 1 orphan inode deleted [ 341.539443][T28057] EXT4-fs (loop2): 1 truncate cleaned up [ 341.545691][T28057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.546538][T27994] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.593994][T28057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8644'. [ 341.603060][T28057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8644'. [ 341.628114][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.639573][T28080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8650'. [ 341.655061][ T3426] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.666116][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8648'. [ 341.683337][ T4127] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.699574][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8650'. [ 341.716516][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8648'. [ 341.726365][ T3426] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.775585][ T4150] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.970754][T28118] loop2: detected capacity change from 0 to 512 [ 341.994847][T28118] EXT4-fs: Ignoring removed nobh option [ 342.024420][T28118] EXT4-fs (loop2): failed to initialize system zone (-117) [ 342.042253][T28118] EXT4-fs (loop2): mount failed [ 342.087719][T28133] loop0: detected capacity change from 0 to 2048 [ 342.203133][T28159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28159 comm=syz.0.8669 [ 342.223888][T28168] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 342.319710][T28179] ref_ctr increment failed for inode: 0x1152 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811a846780 [ 342.346223][T28179] ref_ctr increment failed for inode: 0x1152 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a846780 [ 342.379526][T28178] uprobe: syz.7.8673:28178 failed to unregister, leaking uprobe [ 342.461931][T28178] uprobe: syz.7.8673:28178 failed to unregister, leaking uprobe [ 342.722951][T28198] loop0: detected capacity change from 0 to 512 [ 342.737016][T28198] EXT4-fs: Ignoring removed nobh option [ 342.823441][T28206] netlink: 'syz.6.8683': attribute type 1 has an invalid length. [ 342.895333][T28206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.927552][T28243] vlan2: entered allmulticast mode [ 342.932768][T28243] bond1: entered allmulticast mode [ 343.365201][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 343.365219][ T29] audit: type=1400 audit(350.450:13276): avc: denied { write } for pid=28289 comm="syz.7.8704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.393812][T28294] tipc: Enabling of bearer rejected, failed to enable media [ 343.403174][ T29] audit: type=1400 audit(350.450:13277): avc: denied { read } for pid=28289 comm="syz.7.8704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.440292][ T29] audit: type=1400 audit(350.534:13278): avc: denied { read } for pid=28298 comm="syz.0.8705" dev="nsfs" ino=4026533056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 343.461150][ T29] audit: type=1400 audit(350.534:13279): avc: denied { open } for pid=28298 comm="syz.0.8705" path="net:[4026533056]" dev="nsfs" ino=4026533056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 343.518467][ T29] audit: type=1400 audit(350.618:13280): avc: denied { create } for pid=28301 comm="syz.6.8707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 343.540657][ T29] audit: type=1400 audit(350.650:13281): avc: denied { write } for pid=28301 comm="syz.6.8707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 343.562414][ T29] audit: type=1326 audit(350.671:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28300 comm="syz.7.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 343.585513][ T29] audit: type=1326 audit(350.671:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28300 comm="syz.7.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 343.608592][ T29] audit: type=1326 audit(350.671:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28300 comm="syz.7.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 343.631885][ T29] audit: type=1326 audit(350.671:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28300 comm="syz.7.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968aeeeba9 code=0x7ffc0000 [ 343.723542][T28315] loop6: detected capacity change from 0 to 512 [ 343.731295][T28315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 343.770831][T28315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.872702][T27025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.922136][T28332] loop0: detected capacity change from 0 to 1024 [ 344.071687][T28351] loop6: detected capacity change from 0 to 2048 [ 344.140007][T28351] Alternate GPT is invalid, using primary GPT. [ 344.146323][T28351] loop6: p1 p2 p3 [ 344.174111][T28357] loop0: detected capacity change from 0 to 8192 [ 344.274011][T28370] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8738'. [ 344.287194][T28370] netlink: 'syz.0.8738': attribute type 9 has an invalid length. [ 344.294998][T28370] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8738'. [ 344.304742][T28372] tipc: Enabled bearer , priority 0 [ 344.324343][T28372] tipc: Disabling bearer [ 344.411025][T28382] tipc: New replicast peer: 255.255.255.255 [ 344.417167][T28382] tipc: Enabled bearer , priority 10 [ 345.030098][T28412] IPv4: Oversized IP packet from 127.202.26.0 [ 345.390477][T28438] loop2: detected capacity change from 0 to 512 [ 345.499973][T13061] tipc: Node number set to 2018268764 [ 345.642604][T28464] __nla_validate_parse: 3 callbacks suppressed [ 345.642620][T28464] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.8759'. [ 346.359218][T28504] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.428273][T28504] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.513375][T28504] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.550369][T28524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8777'. [ 346.587572][T28504] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.676124][ T4150] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.708055][ T4150] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.729669][ T4150] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.820522][ T4128] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.863803][T28555] loop6: detected capacity change from 0 to 512 [ 347.122205][T28563] netlink: 332 bytes leftover after parsing attributes in process `syz.2.8785'. [ 347.144735][T28563] netlink: 'syz.2.8785': attribute type 9 has an invalid length. [ 347.152570][T28563] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8785'. [ 347.161770][T28563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8785'. [ 347.334688][T28606] netlink: 'syz.7.8792': attribute type 1 has an invalid length. [ 347.436401][T28606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.498904][T28611] vlan2: entered allmulticast mode [ 347.504147][T28611] bond2: entered allmulticast mode [ 347.826669][T28678] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 348.001322][T28695] netlink: 'syz.7.8812': attribute type 10 has an invalid length. [ 348.009266][T28695] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8812'. [ 348.021792][T28692] bridge0: port 3(dummy0) entered disabled state [ 348.028291][T28692] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.035535][T28692] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.093757][T28692] wg2: left promiscuous mode [ 348.098480][T28692] wg2: left allmulticast mode [ 348.126182][T28692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.140386][T28692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.201234][T28692] bond2: left promiscuous mode [ 348.210053][T28692] batadv1: left promiscuous mode [ 348.215166][T28692] batadv1: left allmulticast mode [ 348.230943][T28692] batadv2: left promiscuous mode [ 348.236083][T28692] batadv2: left allmulticast mode [ 348.262218][T28692] ip6gre1: left allmulticast mode [ 348.289864][T28695] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 348.322401][ T4128] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.335387][ T4128] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.353810][ T4128] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.377057][ T4128] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.644731][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 348.644749][ T29] audit: type=1400 audit(356.004:13513): avc: denied { mount } for pid=28718 comm="syz.9.8821" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 348.804772][ T29] audit: type=1400 audit(356.161:13514): avc: denied { getopt } for pid=28729 comm="syz.2.8826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 348.860305][ T29] audit: type=1400 audit(356.224:13515): avc: denied { write } for pid=28734 comm="syz.2.8827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.979401][ T29] audit: type=1400 audit(356.350:13516): avc: denied { create } for pid=28745 comm="syz.2.8831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 348.998698][T28738] loop0: detected capacity change from 0 to 2048 [ 349.024979][ T29] audit: type=1400 audit(356.392:13517): avc: denied { write } for pid=28745 comm="syz.2.8831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 349.050959][T28738] Alternate GPT is invalid, using primary GPT. [ 349.057382][T28738] loop0: p1 p2 p3 [ 349.167740][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8835'. [ 349.213074][ T29] audit: type=1400 audit(356.581:13518): avc: denied { name_bind } for pid=28794 comm="syz.9.8846" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 349.289448][T28799] tipc: Started in network mode [ 349.292927][ T29] audit: type=1400 audit(356.654:13519): avc: denied { mounton } for pid=28800 comm="syz.0.8836" path="/proc/1070/cgroup" dev="proc" ino=87025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 349.294497][T28799] tipc: Node identity aea180f60c11, cluster identity 4711 [ 349.324592][T28799] tipc: Enabled bearer , priority 0 [ 349.388441][T28807] tipc: Disabling bearer [ 349.527473][ T29] audit: type=1400 audit(356.927:13520): avc: denied { setopt } for pid=28817 comm="syz.6.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 349.620673][ T29] audit: type=1400 audit(357.022:13521): avc: denied { create } for pid=28831 comm="syz.2.8847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 349.665364][ T29] audit: type=1400 audit(357.053:13522): avc: denied { mounton } for pid=28831 comm="syz.2.8847" path="/proc/197/task" dev="proc" ino=89108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 349.931132][T28853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8850'. [ 350.050311][T28858] netlink: 'syz.0.8852': attribute type 10 has an invalid length. [ 350.058207][T28858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8852'. [ 350.085240][T28858] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 350.173030][T28860] loop0: detected capacity change from 0 to 1024 [ 350.184344][T28860] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 350.194159][T28860] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 350.208258][T28860] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 350.223122][T28860] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #32: comm syz.0.8853: iget: special inode unallocated [ 350.235977][T28860] EXT4-fs (loop0): no journal found [ 350.241239][T28860] EXT4-fs (loop0): can't get journal size [ 350.253372][T28860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.296174][T28860] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.0.8853: path /467/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 350.347874][T20176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.574978][T28883] wg2: left promiscuous mode [ 350.579794][T28883] wg2: left allmulticast mode [ 350.589576][T28883] veth11: left promiscuous mode [ 350.595019][T28883] ip6gre1: left allmulticast mode [ 351.772936][T28951] netlink: 'syz.6.8887': attribute type 10 has an invalid length. [ 351.793804][T28952] loop0: detected capacity change from 0 to 2048 [ 351.867159][T28952] loop0: p1 < > p4 [ 351.872445][T28952] loop0: p4 size 8388608 extends beyond EOD, truncated [ 352.599266][T28995] loop2: detected capacity change from 0 to 1024 [ 352.627107][T28995] EXT4-fs: Ignoring removed bh option [ 352.644184][T28995] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 352.691766][T28995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.906406][T29053] netlink: 'syz.6.8913': attribute type 27 has an invalid length. [ 353.003944][T29053] bridge0: port 3(dummy0) entered disabled state [ 353.010396][T29053] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.017591][T29053] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.024955][T29063] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8916'. [ 353.099893][T29053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.126268][T29053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.136295][T29068] netlink: 'syz.9.8917': attribute type 1 has an invalid length. [ 353.184680][T29059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.193599][T29069] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8917'. [ 353.195239][T29059] bridge0: port 3(dummy0) entered blocking state [ 353.208935][T29059] bridge0: port 3(dummy0) entered forwarding state [ 353.230477][T29059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.262419][T29063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.307771][T29065] macvlan2: entered promiscuous mode [ 353.313421][T29065] macvlan2: entered allmulticast mode [ 353.321289][T29065] bond3: entered promiscuous mode [ 353.326697][T29065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 353.337069][T29065] bond3: left promiscuous mode [ 353.376515][T29068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.412934][ T4126] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.428238][T29069] bond4 (unregistering): Released all slaves [ 353.464620][ T4126] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.483194][ T4126] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.505830][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.518482][ T4126] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.585830][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 353.585846][ T29] audit: type=1326 audit(361.179:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.614838][ T29] audit: type=1326 audit(361.190:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.637389][ T29] audit: type=1326 audit(361.190:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.659945][ T29] audit: type=1326 audit(361.190:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.682372][ T29] audit: type=1326 audit(361.190:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.704989][ T29] audit: type=1326 audit(361.190:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.727448][ T29] audit: type=1326 audit(361.190:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.750108][ T29] audit: type=1326 audit(361.190:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.772604][ T29] audit: type=1326 audit(361.190:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.795283][ T29] audit: type=1326 audit(361.190:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2773f0eba9 code=0x7ffc0000 [ 353.952062][T29227] loop2: detected capacity change from 0 to 1024 [ 353.976140][T29227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.005182][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.015996][T29221] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 354.028208][T29221] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 354.107703][T29248] loop6: detected capacity change from 0 to 128 [ 354.121324][T29248] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 354.149800][T29248] tipc: New replicast peer: 255.255.255.255 [ 354.155928][T29248] tipc: Enabled bearer , priority 10 [ 354.198098][T29257] loop2: detected capacity change from 0 to 1024 [ 354.208421][T29261] bridge: RTM_NEWNEIGH with invalid ether address [ 354.216729][T29257] EXT4-fs: Ignoring removed bh option [ 354.225276][T29257] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.248649][T29267] netlink: 'syz.0.8949': attribute type 21 has an invalid length. [ 354.264932][T29257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 354.274105][T29267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8949'. [ 354.283371][T29267] netlink: 'syz.0.8949': attribute type 1 has an invalid length. [ 354.297270][T29257] System zones: 0-1, 3-12 [ 354.306378][T29257] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.8946: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.311362][T29277] random: crng reseeded on system resumption [ 354.329088][T29257] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8946: Failed to acquire dquot type 0 [ 354.352870][T29257] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.8946: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.368204][T29257] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.8946: Invalid inode bitmap blk 0 in block_group 0 [ 354.382326][ T4136] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.384093][T29257] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 354.401309][ T4136] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:23: Failed to release dquot type 0 [ 354.405447][T29257] EXT4-fs (loop2): 1 orphan inode deleted [ 354.423506][T29257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.442018][T29257] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 354.468907][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.513648][T29287] loop2: detected capacity change from 0 to 128 [ 354.523175][T29287] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 354.544765][T29292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8955'. [ 354.563968][T29292] netem: change failed [ 354.575171][T29287] bio_check_eod: 38508 callbacks suppressed [ 354.575257][T29287] syz.2.8953: attempt to access beyond end of device [ 354.575257][T29287] loop2: rw=34817, sector=97, nr_sectors = 120 limit=128 [ 354.600145][T29295] loop0: detected capacity change from 0 to 128 [ 354.612319][T29295] binfmt_misc: register: failed to install interpreter file ./file2 [ 354.640756][ T4139] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 354.653928][ T4139] kworker/u8:26: attempt to access beyond end of device [ 354.653928][ T4139] loop2: rw=1, sector=217, nr_sectors = 824 limit=128 [ 354.671527][T29305] loop0: detected capacity change from 0 to 128 [ 354.688752][T29305] tipc: New replicast peer: 255.255.255.255 [ 354.694908][T29305] tipc: Enabled bearer , priority 10 [ 354.815652][T29333] syzkaller0: entered promiscuous mode [ 354.821377][T29333] syzkaller0: entered allmulticast mode [ 354.878695][T29348] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.904019][T17717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.986980][T29376] loop2: detected capacity change from 0 to 128 [ 354.994710][T29376] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 355.026637][T29376] tipc: Enabling of bearer rejected, already enabled [ 355.064127][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8978'. [ 355.112795][T29385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.123133][T29394] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 355.133798][T29394] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 355.148652][T29427] macvlan2: entered promiscuous mode [ 355.154246][T29427] macvlan2: entered allmulticast mode [ 355.164527][T29427] bond5: entered promiscuous mode [ 355.171227][T29427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.187194][T17717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.196279][T29427] bond5: left promiscuous mode [ 355.216550][T17716] tipc: Node number set to 2729476342 [ 355.391046][T29452] netlink: 'syz.2.8989': attribute type 1 has an invalid length. [ 355.415634][T29454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8991'. [ 355.434745][T29452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.441812][T29492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8989'. [ 355.451546][T29454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.459717][T29454] IPv6: NLM_F_CREATE should be set when creating new route [ 355.468828][T29454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.476666][T29454] IPv6: NLM_F_CREATE should be set when creating new route [ 355.514973][T29492] bond1 (unregistering): Released all slaves [ 355.523880][T29499] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8995'. [ 355.548566][T29499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.565882][T29499] macvlan2: entered promiscuous mode [ 355.571274][T29499] macvlan2: entered allmulticast mode [ 355.582546][T29499] bond4: entered promiscuous mode [ 355.589578][T29499] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.601288][T29499] bond4: left promiscuous mode [ 355.922336][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9005'. [ 355.958511][T29610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.966777][T29610] IPv6: NLM_F_CREATE should be set when creating new route [ 355.983500][T29610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.992255][T29610] IPv6: NLM_F_CREATE should be set when creating new route [ 356.263004][T29618] netlink: 'syz.6.9007': attribute type 1 has an invalid length. [ 356.854960][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9026'. [ 356.910333][T29668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.126984][T29695] loop2: detected capacity change from 0 to 512 [ 357.142762][T29695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 357.160158][T29695] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.9039: EA inode hash validation failed [ 357.182457][T29702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.191439][T29695] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 357.223239][T29702] macvlan2: entered promiscuous mode [ 357.225385][T29695] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.9039: corrupted inode contents [ 357.228972][T29702] macvlan2: entered allmulticast mode [ 357.247543][T29702] bond2: entered promiscuous mode [ 357.252954][T29702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 357.264277][T29695] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.9039: mark_inode_dirty error [ 357.283517][T29702] bond2: left promiscuous mode [ 357.292622][T29695] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.9039: corrupted inode contents [ 357.316291][T29695] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.9039: mark_inode_dirty error [ 357.388468][T29695] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.9039: mark inode dirty (error -117) [ 357.432074][T29695] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 357.460780][T29695] EXT4-fs (loop2): 1 orphan inode deleted [ 357.467774][T29749] syzkaller0: entered promiscuous mode [ 357.470949][T29695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 357.473330][T29749] syzkaller0: entered allmulticast mode [ 357.531692][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.544696][T29755] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.616420][T29761] loop2: detected capacity change from 0 to 512 [ 357.657541][T29761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.812449][T29793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.937002][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.982015][T29809] loop6: detected capacity change from 0 to 512 [ 358.009031][T29809] EXT4-fs: Ignoring removed nobh option [ 358.048832][T29809] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.9061: corrupted inode contents [ 358.070200][T29809] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.9061: mark_inode_dirty error [ 358.078573][T29829] pim6reg1: entered allmulticast mode [ 358.102237][T29809] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.9061: corrupted inode contents [ 358.133830][T29809] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.9061: mark_inode_dirty error [ 358.157927][T29809] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.9061: Failed to acquire dquot type 0 [ 358.173692][T29809] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.9061: corrupted inode contents [ 358.185919][T29809] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.9061: mark_inode_dirty error [ 358.198223][T29809] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.9061: corrupted inode contents [ 358.231300][T29809] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.9061: mark_inode_dirty error [ 358.251190][T29809] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.9061: corrupted inode contents [ 358.267411][T29809] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 358.300290][T29809] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.9061: corrupted inode contents [ 358.322774][T29847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.333995][T29809] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.9061: mark_inode_dirty error [ 358.346400][T29809] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 358.357038][T29809] EXT4-fs (loop6): 1 truncate cleaned up [ 358.363551][T29809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.381705][T29809] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.391977][T29847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.468240][T29847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.515880][T29847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.569909][ T4123] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.586075][ T4123] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.603157][ T4123] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.614860][ T4123] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.662483][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 358.662502][ T29] audit: type=1326 audit(366.512:13765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.691921][ T29] audit: type=1326 audit(366.512:13766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.715276][ T29] audit: type=1326 audit(366.512:13767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.738320][ T29] audit: type=1326 audit(366.512:13768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.761400][ T29] audit: type=1326 audit(366.512:13769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.784373][ T29] audit: type=1326 audit(366.512:13770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.807406][ T29] audit: type=1326 audit(366.512:13771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.830513][ T29] audit: type=1326 audit(366.512:13772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.853674][ T29] audit: type=1326 audit(366.512:13773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.876976][ T29] audit: type=1326 audit(366.512:13774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.2.9072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76493aeba9 code=0x7ffc0000 [ 358.877630][T29923] __nla_validate_parse: 5 callbacks suppressed [ 358.877648][T29923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9073'. [ 359.138237][T29955] 9pnet: p9_errstr2errno: server reported unknown error [ 359.172952][T29963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29963 comm=syz.7.9080 [ 359.521825][T30035] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9092'. [ 359.545278][T30035] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9092'. [ 359.554279][T30035] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9092'. [ 359.670007][T30047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9097'. [ 359.685354][T30051] loop2: detected capacity change from 0 to 1024 [ 359.692222][T30051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 359.700837][T30051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 359.709261][T30051] System zones: 0-1, 3-36 [ 359.717691][T30051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.767208][T26026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.835228][T30072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9106'. [ 359.844212][T30072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9106'. [ 360.451779][T30083] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.9108'. [ 360.461192][T30083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9108'. [ 360.647399][T30089] ================================================================== [ 360.655527][T30089] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 360.664169][T30089] [ 360.666514][T30089] write to 0xffff888171e199a8 of 8 bytes by task 30094 on cpu 0: [ 360.674246][T30089] shmem_file_splice_read+0x470/0x600 [ 360.679651][T30089] splice_direct_to_actor+0x26f/0x680 [ 360.685049][T30089] do_splice_direct+0xda/0x150 [ 360.689841][T30089] do_sendfile+0x380/0x650 [ 360.694292][T30089] __x64_sys_sendfile64+0x105/0x150 [ 360.699598][T30089] x64_sys_call+0x2bb0/0x2ff0 [ 360.704294][T30089] do_syscall_64+0xd2/0x200 [ 360.708839][T30089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.714786][T30089] [ 360.717130][T30089] write to 0xffff888171e199a8 of 8 bytes by task 30089 on cpu 1: [ 360.724860][T30089] shmem_file_splice_read+0x470/0x600 [ 360.730255][T30089] splice_direct_to_actor+0x26f/0x680 [ 360.735635][T30089] do_splice_direct+0xda/0x150 [ 360.740407][T30089] do_sendfile+0x380/0x650 [ 360.744856][T30089] __x64_sys_sendfile64+0x105/0x150 [ 360.750072][T30089] x64_sys_call+0x2bb0/0x2ff0 [ 360.754762][T30089] do_syscall_64+0xd2/0x200 [ 360.759290][T30089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.765192][T30089] [ 360.767532][T30089] value changed: 0x0000000000000cd7 -> 0x0000000000000cdc [ 360.774682][T30089] [ 360.777008][T30089] Reported by Kernel Concurrency Sanitizer on: [ 360.783161][T30089] CPU: 1 UID: 0 PID: 30089 Comm: syz.9.9111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 360.792976][T30089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.803041][T30089] ================================================================== [ 364.617902][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!