last executing test programs: 17.113579755s ago: executing program 1 (id=3977): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010"], 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x40, 0x4, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x80, 0x40, 0x7, 0x3}}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000001080)={0x20, r10, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 13.735513511s ago: executing program 4 (id=3979): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) r1 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x2a, 0x1, 0x1, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0xfffffffffffffffd, 0x33f8, 0x3, 0x8, 0x20007, 0x7f, 0x0, 0x0, 0x0, 0xf5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) creat(0x0, 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) poll(0x0, 0x0, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="1201040f3fd7b5b4fa43ee0609646f60f66c0003020000082505a1a4400001020301090262000201cf20074904000001020d0000052406000105240007000d240f010d0000000000000b0206241a000817062407f8ffff0905810300000409040904010000020d00000904010102020d00000905"], 0x0) creat(0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)}], 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 13.628001784s ago: executing program 1 (id=3980): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003800), 0x20000, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000000200)={&(0x7f00000001c0)=""/39, 0x27}) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/dev/ttyS3\x00') setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d000100000014000700"/52], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) clock_getres(0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13.277546975s ago: executing program 1 (id=3983): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003704faffffffefdbdf2500000000", @ANYRES32=r5, @ANYBLOB="c30407001b14bf261800128008000100736974000c00028008000200ac14141c08001f0070000000"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r3, 0x0, 0x0, 0x4880) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000500)=""/26, &(0x7f0000000080)=0x1a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, r7, 0xc730c779156eaf0f, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4004010) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r9 = msgget$private(0x0, 0x4fd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x102260, 0x10000, 0x0, 0x1, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x1e90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e10, 0x3, 0x0, 0x1, [{0x1e0c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x1de8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc04, 0x1, "700c8099d0406fa372c944d17fd0844ae5c743a270994c672b8227fa09af837f71eff6037a108468da9195ab1ac36017e6307f05e6b1bb87a242396c0ab2baab9e50157430ffa30d8b54d5a4f4726417f9b34ac499c0a2d097a4ebcec797ef5e868357cb9181c7099c0fbc278edfb3bf43e99d06464120abdb4de6bb5692b105b5b188a17533757ba40140a2e7744d311e7decc3d7424e1cecba20b7a185722af75bd688e96a1d66ba87187a08e524091ec2e5438baf59776f9bc2ecb1045593b78f6250d315becb47a9d49c638a083b0425dd7e7eb907d751aedc3d617be30bfceb96ea6f5048c014a4b92df0bf5a478769dd5937153a89638db886096deb87407a7f947d73a1b8cbfa8516320e5af740739b9ec4c5feaa2564af00c8427c523b45d1016ae7d2380e029ab11b8a91ec804d8ff7267b405491be9c95d8e36406d60d52dcf147b38969b0aab1b4fa193fb362b55f9753b3f2d9d315b3b6de953bf500a6278e46249f62d53d4482b187f1a18c13cd1557fe346911ff99d42b6b6aec81fe8fd799c93b119e71908ffbf8f408202cc7079b7b21efd3c2e77c6ed890fa10d9520c16034ca18f09bd6b941da35a3a1d2e52047480bbddfe6ed1fb7100653ebc67996c0a9d368cf94588c47be68b8d5b3c99130a15fe789ac01991e7be0c39baea5853eb8d64efbb2d84d79405d046663b66a8470de0216c87fd077f8f4ec0595c84c53545098e6904ae7a06da52df734c71bd3d871463b3ba3675823b4a0b4b45191a008328f16c22b6bfaf27363fac757a5d109cd29974e8ddbea78a0beedeec688014432147db90e91113fcc411bc316ddb0e292e3b5909dacfaa8a4c33fb869f07f625bb1ea594843a287b0238a216c0daae50228acf46f40530f8e1988f8ede9ac0d8c5febd1a5d3543519a6c87e54093206b7d4b0a7b424aa796441e955dc7aba90675c478b659e085d24345d47312afe69bf08c5ed0545bf2a427b106afaf190d119078048d4d84bbb5ea024403a8b917e6ea1d484fd739c93097142ed0700e8fae163f1b813566c3053bf9fc922da76fd84885a65cb2f7028c61a7cf4fa6830f0294f89c746c22119e523303e50bde3ca4e1cb7b1a08040dbe69b530466230888530e80017453fb18760288acaff20f25232052fce9e9acbab12cd2a1cc5c31e25418bc764a837062ef3e9481601a30a78d0dacde5fed498547643a63aa40e94d923b3528c1734c7eafde7d1c04b9db11c8a6b1e6dd6008d63c0d43a0dfe9312bc53bd3bead186f2b145708fb5091fee5197629495fdc23c195fed48792cf31c8a1c28fdbe765c8a5af9f97d2db07a9e82da8b772e95ef1b7ad2ea6c62b9374e49702dd1e082db4c94303b7f1c07ae4e76238f12d9b9b9efa736e9921b9c72f529845badd74bd02dd251c4db366ceb307e82d82697ef0df7bd15154b09a830f41068514212f1d09b5dc77fd621541b04cbdf93666d6fde2376dc0e9a9c52167b7331da1003df83ea994bc5f1c95a6c4587fdcba919a82cfebec01b12e31debae5741ee32b4a633a09cf1790890c50dd0ff46ad12c46c28c754ef4d45cddb36e914063ade7c6005aeeb34ea8f17f7e296a83dd76e89029a7011f6492deadb4c21da0df68dd52d8627c3a36d49b56b0f30e456c7a618a97810fea0245cf8361e62109972f37da711be002b1c1eb6553a1c4bc67631d78d20e6d68df5801c34a7a059a17f20fb69bd6a1eb375012d3c678770d33f74c5e6b3d32d2dbfca5db6c7861375e0aa6f0efc0b8914beced2afbdde73758ed7ef21f26671f0e721a3e115f2a643fa8f807774df3b02e9885eb88fcbe49dc622966de474c30ecd2f863b612d9443e320b4f22b930d79201243566afc6590792ae83ca9b482ad799661d8e91a5cc6184ddf806b313ab7bcad408a8dc4f6dce74be5aba9bf0144c0c9ae14d50f65f7e2217fe77dc61987f33351ab18dbcae08155e6806dc318a06431f1488067c6913deeb3c9b321d03981142d0bcd9e53df3dc52b6ff9313a90cd8a0f788a3571701d2c4e50b0a704e7e83a5d9b419633ea6758f15240663543d156c3c4e91440ff1902490c540be4be5fb5cbbae6c32ac5bfedf7fcf7212bf2ee8200c04f23da2d0e2a464bd864199ebc75d47da4191d750976a7314b156a765c37fbc6cb47fa9b724c4d4bac4d606b6d14d11d7f98cc31bb29247093efb2256f4b419506d83b126fa7a472b978a4ff8ee9363489d7502455bcd96de1d2caf70b3cafb54c9380c13d5075b86a7b064789b0034d08689c35edaf3ced7829464f03c656707e9e2d481ffa3cb5460686811ae21dca19a0eef95e50915d0af4a22822908567268b0ca4f185346a6b070fde912e8b5d8e0765923b5797e0c771e1ec4c643219b924df4112f16b5f0f9523b4995e4f1c49897c1e83e29876170497512db5169484569d6dc8e3b8f7012b9a1fd3e84ea55b9151186da204e47c66012eec499117dbc0d12152951b7d23bac4983ca3ee10f13479a2d326d4bf5bd6043efab4acf2dfb5b29069871eb9f04b408795128c35e3170e70cd49da6d3282da55eb8a4978bed9394c52b693e2dbb2a327269c88a91d77ab7b87348d5845e7a664c9ec9ffdbb9d4d31cfc5cbd6786ae688c5deeb6c93bf080f982d72681fdc6ced682c91193faeab97c46d27b1ccb32c30d8617ee53c633cf36bb667202a091553b0a01d7ff7aee3d21a1242bcf1186ec33b66e6f0648c1b86ced9c2dd1eeeb48975f2067578eacd7edf1ad8031101299e998defbfdeb001c78cf79c141e11d9e37d4872242caf805e4002c9163d318c8a857f612e704e361fc2af6426ba1acbff50c431ce0d22238f06216bb8054da083421a555fb62fa00ee67e0514ae5e4b92224b1c784562a597ce2276846660beed785850ee89129f19e85ad95e1f258f11dd58d7754a2416277317562f781740390bb7452f3ce89ef93949b38a0306a491aa275dd8ccf8a5baa6cd8066bc5f8562da9d694417d81257a876f717ece3e143c0c0a5b7b48e5b7a5ce6791eb57f48da023a4a11b10ce066c1e9ddbba17fd89b7c1af785be7776ab9b10282099cf08a33de6d5a75747d2398ff380248fbb0f7affea1b3283e54e59d744922c5924353d39783f0fdd151fbb2e1c07502c58512c64f0fd6e5e0bf920c1c9ade31ba493f4c69b128bc51ba8deaed160d30be05aaf1a0be688ba7df327a4f619d02dcaf95c2ddc22c0d572b45ee79e01332ae739ede874340e839670b2ff52dd15a9d112e5f072686501c181287967998e89feb1eca38fedd544277f68fda152db89b94563fa2bfe32079c3c83c977fbd2967a452d839dcf20f00d09f18e54c6d745c89ee03498374e0c469a79e17a8cdb3cc09d8017869048f9c9697cdec630e7632d6a76564df689cec2fe28c43753aca190d533654bb308eaeb58321d54ccb96d44a7ff3704c315fd6af3fee028686e083f33d28fdde49044a479a1ff5bcaf88e7544d459ea56aff28cf4e68749adb109c5129e6acb917fbd89ace42856ced40358882a8ee2d539d29bff65d629e9d7ec30f84395e31a0939a8edc2f1f18e51eb79a3951500fb4b14d503c20166d438bfe2536e4f34529baaa3f19479bfa113355386d37ad73412bf855dfda99c67fc2683b5902d639794148220c12b427dd6bf1688376b04bd5d247a46421762c80df554b996282cfa0b552b2b43a53530012036fd8747d8fc854f911bf07094687535905ac12c50107cb1b1dd699c57fff33cfbae16d86874195a99e352d7b8244f0df23f48cf2ec341ade4e9723f1a66ccc3e2cae1ebaa7beff189e4917bd0decfbf12d5512695dd900da22499cb608e25cd8ea20e6ff822fc6957fb2118f672b6dc70b90595fea20a3e4d0750cc01686231519f14d8b4dc438b9eef6dce06126f53dcf30544866894b149479a75fe4a83a7f5d3362a6a8b71510ce27cb671151d0dfaf4a37f31337f30622fda0793932d5df4208de78f432fb0ca5e1fb08010cd6b8680eac37846931eb9a51fc6577f82a1b9777b2c3fee5cb0bc60ce938b1589b71ac5a242528c77da17a2eb383133f5d7eeb1e7724aeccf7e098a12e1a7695ae95a24e5fc7be77f1bc0431b424ea9124748764a3394b6123d32da57d035e688f1eee751a5c53db840da01e1f42993ad0953553974ce61cbdde968b3ea3bedfc47080f4e7ebaca6cfcfb7a73e642a724975ef30ae95de3e9d7a81c0514583ccbe56b0eba94ff411cc5d2d3dae748ded5e346e70f528c8770cd3d76cc8820ad09f3078504608bbdc62ee4d00dc29abf80b3fadb2b0a089b65fea54728c3de6c52c2dbc7"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "a492624e82a148abafbe057577a59849e2059a203938a06b28b1cfa5939bd8594f7cd4cc0fc008e9561685524a18f483ab20be262eabbc072bc9769a2aeceb5fc7b57b1798e06a130ed9ce25ba585c07018b793e22665d94685cbb679b51feb771e5579edcbf4265bb700d4ba734945c27b2d71acb04f9e5352b07fe85885a5ffb304d38e6057dd32ededd84f1383db8977719a9a536942b03d4da6fca2d2ecbb0cb0403d8e685c3385edb5d77e2c658b3ec911813d50b72d794d04f54e6c9e3f5911e4d4fde4d71306adc90eb7b06e5dc1add9599e8a08ea88d46194bcfb11150fd25d2a61300628272dcbdebf0974debe06d8f"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1f14}}, 0x0) msgrcv(r9, &(0x7f00000012c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x8, 0x800) 12.737935482s ago: executing program 4 (id=3986): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000000000a140069ea00000000000000000000000000000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r5 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xf0, 0xc0, 0x9, 0x0, 0x0, 0x10, 0x102, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x100, 0x101, 0x10000, 0x7, 0x10000, 0x3, 0x7, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0xcc) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvfrom$inet_nvme(r7, 0x0, 0x0, 0x40000002, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x5411, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 12.676392284s ago: executing program 3 (id=3987): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f0000000880)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@i_version}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@acl}]}, 0xfc, 0x44e, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7, 0x10, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x8f, 0x40240) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, 0x0, 0xfe33) recvmsg(r6, 0x0, 0x2000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"], 0x38}}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe8800000000000000d1000000000001ff02000000000000000000000000000102009078000000006000641a00008900ff010000000000000000000000000001ff0100000000000000000000008000011e520b4c951ee12e6fdc21b2281553d68afcb585db1a17bdb73db7855eb6c1"], 0x0) 12.662830245s ago: executing program 2 (id=3989): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)=""/31, &(0x7f00000000c0)=0x1f) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0xf4) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000000100"/47], 0x0, 0x3f}, 0x28) setns(0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xc2ad}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 12.089789802s ago: executing program 4 (id=3991): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010"], 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x40, 0x4, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x80, 0x40, 0x7, 0x3}}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000001080)={0x20, r10, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 12.066146173s ago: executing program 3 (id=3992): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x4, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 12.042738204s ago: executing program 0 (id=3993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10800, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x1000}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x41, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@authinfo={0x18}], 0x18, 0x4040010}, 0x4000000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000400)) setns(r4, 0x66020000) socket$kcm(0x10, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7, 0x3, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x5, 0x9}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="13080000000000000000110000003c0009"], 0x84}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 11.622986837s ago: executing program 2 (id=3994): io_setup(0x0, &(0x7f0000000040)) clock_gettime(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES64=r4, @ANYBLOB="9af66f1b49b01ba5a35e1354dcb5b7d94c9ea5fe4936200478478890b2604de4c46ba7b32bfb8fa4cf9ee189973380aa16700c", @ANYRESOCT], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r8) socket$inet(0x2, 0x2, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r9, 0x6, 0x0) 11.622183557s ago: executing program 0 (id=4004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000440)={r0, 0x0, 0x8000, &(0x7f00000001c0)={@_ha_fsid={[0x80000001, 0x3]}, {0x80, 0x9, 0x77d}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0xffffffff}) ioctl$TIOCCBRK(r3, 0x5428) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="30ef3900", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf251b0000000400cc0008009a0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000040)={0x30000004}) socket$unix(0x1, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) io_setup(0x8, &(0x7f0000000600)=0x0) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r11, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f00000000c0)="01", 0x24}]) epoll_pwait(r8, &(0x7f0000000000)=[{}], 0x1, 0x7c12, 0x0, 0x0) 9.607414149s ago: executing program 1 (id=3995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="290000001400000000000000", @ANYRES32=r1, @ANYBLOB="7f8c6ba3be17743227e4e41afb2f659e1fc79e1f4896b536b613fbdb1a3a2f75f845b518331502465201898da610df3083aab9c29d7216b774135d57ac7c801ce75acdffc8219c73e2962df1b427fc0d61a0a2adde894463f0f91c99c5190365711654bf34d2b887f4855167b418be146dca3a6cc5e4f1baa07b98d0fa555bcf76b50d5d2752667be7c6", @ANYRES64=0x0], 0x20) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xbf, 0x9f, &(0x7f0000000340)="ebf9b5074c79a38788b3b1cc6c3efb70de235258fa93da42571499e2e5bd2d25935d8e7d3d36a0545aa289d96d9e75a63e2497bb504295d7ed4914400533b9aa57cea2051510fc54b6977b5ffad4b43c3f9b202ea2bf90be0c2b29cea43bab5f64ab6b7be66eda09ac240862316edc688d1ef5d62ab38798cc0c21c6a8e45fbf17ad263f757949822b809ce12a144b5e834e04058591eb9cc58f91ffa611b78080045ceefb9f7c0d7357d82c976daec1acdcce800ede4486c13d21f9ea6b3e", &(0x7f00000005c0)=""/159, 0x8, 0x0, 0x2, 0x91, &(0x7f0000000040)="1ea3", &(0x7f0000000680)="1fdc9d0e0a73444e70b5b708f8256a021f42d72fd4ccbeafe706f1c349e69db6dafb1d5c5396302ccd7b68d9fac1fc1c9086b7afb7c777e0dae498b0574bce67dccddc4c65727b81e97274ba846107c8a4e4598375463ac90a761a7e4217d4354ecad9b48f3c3f7bf90e4e967a0cd255353ab0d80c2571888b5d299a40c1b9e5b4c4ed54e54864367f0e073dda6495db8b", 0x0, 0x0, 0x5}, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x14083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x5e, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) 9.303152539s ago: executing program 3 (id=3996): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)=""/31, &(0x7f00000000c0)=0x1f) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000000100"/47], 0x0, 0x3f}, 0x28) setns(0xffffffffffffffff, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xc2ad}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 8.757183936s ago: executing program 2 (id=3997): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) r1 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x2a, 0x1, 0x1, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0xfffffffffffffffd, 0x33f8, 0x3, 0x8, 0x20007, 0x7f, 0x0, 0x0, 0x0, 0xf5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) creat(0x0, 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) poll(0x0, 0x0, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="1201040f3fd7b5b4fa43ee0609646f60f66c0003020000082505a1a4400001020301090262000201cf20074904000001020d0000052406000105240007000d240f010d0000000000000b0206241a000817062407f8ffff0905810300000409040904010000020d00000904010102020d00000905"], 0x0) creat(0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r3, &(0x7f0000000d40)=""/43, 0x2b) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)}], 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 8.695467228s ago: executing program 0 (id=3998): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003800), 0x20000, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000000200)={&(0x7f00000001c0)=""/39, 0x27}) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/dev/ttyS3\x00') setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d000100000014000700"/52], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) clock_getres(0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.688563548s ago: executing program 1 (id=3999): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x400, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000008}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) r6 = socket(0x2a, 0x2, 0x803) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1b) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005a7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r7, 0x8ae, 0x6931, 0x17, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000300)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrjquota, 0x2e}, {@usrjquota_path={'usrjquota', 0x3d, './mnt'}}, {@test_dummy_encryption_v1}, {@data_ordered}, {@noblock_validity}, {@acl}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FITRIM(r8, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007}) 8.609760811s ago: executing program 4 (id=4000): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x102}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x201400, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64=r5, @ANYRES32], 0x0, 0x2c4, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@quota}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x9}}, {@barrier}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 5.970760183s ago: executing program 3 (id=4001): socket$inet_sctp(0x2, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x20, 0x7f, 0x4, 0xfffff010}]}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x109}) 5.948329794s ago: executing program 2 (id=4002): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='nomand'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0x0, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0x8, 0x0, 0x313, 0x1, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00) close(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000002010102000000000000000002000009100002800c000280050001001100fdff0c0019800800020008000000d63d837f4b7aab07c22e78d4536eccba85114cec404a0c36fe68835d812144ffbbbd521cd8edc8dae3f1ddf5be9c6182cce4e57da9356f6780c62b642aca3f0295ac960ff85c06a16f16917c921d98b597d5c9bf5500a9a02473fb0cb47e5e155525a9fb618521c90ad9967452bf69ec122e38338e5fe782cd06cba97ecf2ab51501e6de"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) 5.796002708s ago: executing program 1 (id=4003): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e01, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$eJzs3c9rG8ceAPDvylKcX+/FgRBeHo9HIIempJFjuz9S6CE9ljY00PacGlsxwXIULDnEbqDJobn0UkKhlAZK7+29hx5CLz32rwi0gVCCaaG9qKy88o9ItmVZrp3o84G1Z3ZXmp2d/Q6zGokNoG+dTP/kIk5ExGdJxJFV2/KRbTy5tN/ik1sT6ZJEvf7eb0kk2brm/kn2/1CW+U9E/PhJxJlca7nV+YXp8XK5NJvlh2sz14er8wtnr86MT5WmStdGx8bOvzI2+vprr/asri9e+uPLdx+8df7TU4tffPfo6L0kLsThbNvqemzJ4Jrc7dWZk/V6dk4KceGpl410Vdjelez2AdCVgSzOCxFxonCk0Ix64Pn3cUTUgT6VbDH+B/UX8JxojgOa9/Zd3wc/ox6/uXQD1Fr//NJnI7G/cW90cDFZc2eU3u8O9aD8tIzvf71/L11iO59DAGzR7TsRcS6fb+3/kqz/6965DvZ5ugz9H/xzHqTjn5daxz+DkVse/0Sb8c+hNrHbjc3jP/eoB8WsKx3/vdF2/Ls8aTU0kOX+1RjzFZIrV8ultG/7d0ScjsJgmt9oPuf84sP6ettWj//SJS2/ORbMjuNRfu0cU0yO18a3U+fVHt+J+G/b8W+y3P5Jm/ZPz8cHHZZxvHT//+tt27z+O6v+TcQLbdt/ZUYr2Xh+crhxPQw3r4pWv989/vN65bev/08/7EBV20rb/+DG9R9KVs/XVrdextf7/yqtt63b639f8n4jvS9bd3O8VpsdidiXvNO6fnTltc18c/+0/qdPtY//ja7/AxHxYYf1v3vs2/91X/+dldZ/ckvtv/XEw7c/+mq98jtr/5cbqdPZmk76v04PcDvnDgAAAAAAAPaaXEQcjiRXjP1ZOpcrFpe+33EsDubKlWrtzJXK3LXJaPxWdigKueZM95FV34cYyb4P28yPPpUfi4ijEfH5wIFGvjhRKU/uduUBAAAAAAAAAAAAAAAAAABgjzi0/Pv/WPP7/9QvA7t9dMCOyy89/xvoQ5s+8r8XT3oC9qRN4x94bol/6F/iH/qX+Ie+1JjiE//Qv8Q/9C/xD/1L/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV3qi09uTaT5yRvzc9OVG2cnS9Xp4szcRHGiMnu9OFWpTJVLxYnKzGbvV65Uro+MxtzN4VqpWhuuzi9cnqnMXatdvjozPlW6XPKccQAAAAAAAAAAAAAAAAAAAGhVnV+YHi+XS7M9SBTK5VIuIjrZOaJHhT5ziT+3/T5pu93Od3aedyaRxMqa/J44qxK9Tux2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK/4OAAD//2HdMqs=") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') mq_unlink(&(0x7f0000000480)='*/\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x800) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000906010200000000c9a0fd516d46671f0900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001406401010124d5644523512c69c6afa0"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 4.351167494s ago: executing program 0 (id=4005): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)=""/31, &(0x7f00000000c0)=0x1f) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0xf4) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000000100"/47], 0x0, 0x3f}, 0x28) setns(0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xc2ad}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 3.989318265s ago: executing program 4 (id=4006): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010102}, 0x5b) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x2, {0x60, 0x0, 0x0, r9, {}, {0xfff1, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xc, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.545774639s ago: executing program 3 (id=4007): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x61df, &(0x7f0000000140)={0x0, 0x417b, 0x40, 0x8001002, 0x3d7}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xf21a5dc3ddee5620, @broadcast, @local, @local, @rand_addr=0x64010102}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@setlink={0x30, 0x13, 0x400, 0x2000000, 0x25dfdbfe, {}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xfff}]}, 0x30}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000200)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x24) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21041e, &(0x7f00000002c0), 0x1, 0x514, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvOL+cbLrJLnsABGxZFgqq6iTubrTaAywnhNBKiD2C1IbEiaLYcRQ7pQk9JP8DEpU4wZE/gHNP3LkguHEpByR+RKCmEgcjj8epm9hpIMHOxp+PNJqZN85833My73m+jv0CGFo3I2I/IsYj4n5EzGTlSbbER62l+bhnh4+Wjw4fLSfRaHzy9yQ93iyLjp9pei07Zz4ifvCdiB8np+PWdvc2lsrl0na2P1evbM3VdvfurFeW1kprpc1icXFhcf6Du+8XL62tb1fGs60vPv3d/jd+2qzWdFbS2Y7L1Gr62HGcyJ7z7/0/gg3ASESMZn8/mRuDrA//nVxEvBkR76TX/0yMpL9NAOA6azRmojHTuQ8AXHe5NAeW5ApZLmA6crlCoZXDeyumcuVqrX57tbqzudLKlc3GWG51vVyaz3KFszGWrK6XR9qvH7L9UjHdfrF/NyLeiIifTUym+4XlanllQK95AGDYvXZi/P/XRGv8BwCuufygKwAA9J3xHwCGj/EfAIaP8R8Ahs9Z43+j0ceKAAB94/4fAIaP8R8Ahsr3P/64uTSOsu+/Xnmwu7NRfXBnpVTbKFR2lgvL1e2twlq1upZ+Z0/lVecrV6tbC+/FzsPZb27V6nO13b17lerOZv1e+r3e90pjfWkVAHCWN95+8sckIvY/nEyX6JjLwVgN11tu0BUABmZk0BUABsZsXzC8LnCPLz0A10SXKXpfko+IyZOFjYZPB8Gn2K3Pyf/DsOrI//svYBgy8v8wvHpe/6du9oHrptFIzjvnf5z3gQDA1SbHD/R4///NbP3r7M2BH62cfMTjkwU+UQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDwaM//Wchm7piOXK5QiLgREbMxlqyul0vzEfF6RPxhYmyiub8w4DoDABeV+0uSzf91a+bd6XZpe17Ag+T5RHM9HhE/+cUnP3+4VK9v/z5iPPnHcXn9cVZeHFQbAICztMfpdN1xI//s8NFye+lnff767YjIt+IfHY7H0XH80RhN1/n0tcjUP5NsvyXpyF1cxP5BRHy2W/uTmE5zIK2ZT0/Gb8a+0df4uZfi59JjrXXzufjMJdQFhs2TZv/zUbfrLxc303X36z+f9lAXl/V/zVMtH6V94Iv47f5vpEf/d/O8Md777XdbW5Onjx1EfH40oh37qKP/acdPesR/9/TpuvrTF770Tq9jjV9G3Iru8TtjzdUrW3O13b0765WltdJaabNYXFxYnP/g7vvFuTRHPdd7NPjbh7df73Ws2f6pHvHzr2j/V89oc+cs2L/69/0ffvmM+F//Srf4uXjrjPjNMfFrZ8TstDT1m3yvejbjr/Ro/6t+/7d7nfSEp3/eOzVtOAAwOLXdvY2lcrm0beMKbbTfkbkS9TkY9LPRsdH8k70C1ei68a0+xZrILt3z/lSj8T/F6tVjXEbWDbgKji/6iHg+6MoAAAAAAAAAAAAAAABd9eMTS4NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfXfwIAAP//vwfOaA==") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c0002800800", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) unshare(0x64000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000db1154b5f1000000070100000700ffff9702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2200045, &(0x7f0000000340)=ANY=[], 0x0, 0x2c6, &(0x7f0000000840)="$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") fstatfs(r6, 0x0) 3.530251469s ago: executing program 0 (id=4008): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x7, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000005000000000000000000000000000f0001000000f6ffffff05000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x48820}, 0x24044084) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x7b, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3503, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}}) 2.411949645s ago: executing program 2 (id=4009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000440)={r0, 0x0, 0x8000, &(0x7f00000001c0)={@_ha_fsid={[0x80000001, 0x3]}, {0x80, 0x9, 0x77d}}, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0xffffffff}) ioctl$TIOCCBRK(r3, 0x5428) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="30ef3900", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf251b0000000400cc0008009a0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000040)={0x30000004}) socket$unix(0x1, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) io_setup(0x8, &(0x7f0000000600)=0x0) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r11, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f00000000c0)="01", 0x24}]) epoll_pwait(r8, &(0x7f0000000000)=[{}], 0x1, 0x7c12, 0x0, 0x0) 1.980266448s ago: executing program 0 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="290000001400000000000000", @ANYRES32=r1, @ANYBLOB="7f8c6ba3be17743227e4e41afb2f659e1fc79e1f4896b536b613fbdb1a3a2f75f845b518331502465201898da610df3083aab9c29d7216b774135d57ac7c801ce75acdffc8219c73e2962df1b427fc0d61a0a2adde894463f0f91c99c5190365711654bf34d2b887f4855167b418be146dca3a6cc5e4f1baa07b98d0fa555bcf76b50d5d2752667be7c6", @ANYRES64=0x0], 0x20) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xbf, 0x9f, &(0x7f0000000340)="ebf9b5074c79a38788b3b1cc6c3efb70de235258fa93da42571499e2e5bd2d25935d8e7d3d36a0545aa289d96d9e75a63e2497bb504295d7ed4914400533b9aa57cea2051510fc54b6977b5ffad4b43c3f9b202ea2bf90be0c2b29cea43bab5f64ab6b7be66eda09ac240862316edc688d1ef5d62ab38798cc0c21c6a8e45fbf17ad263f757949822b809ce12a144b5e834e04058591eb9cc58f91ffa611b78080045ceefb9f7c0d7357d82c976daec1acdcce800ede4486c13d21f9ea6b3e", &(0x7f00000005c0)=""/159, 0x8, 0x0, 0x2, 0x91, &(0x7f0000000040)="1ea3", &(0x7f0000000680)="1fdc9d0e0a73444e70b5b708f8256a021f42d72fd4ccbeafe706f1c349e69db6dafb1d5c5396302ccd7b68d9fac1fc1c9086b7afb7c777e0dae498b0574bce67dccddc4c65727b81e97274ba846107c8a4e4598375463ac90a761a7e4217d4354ecad9b48f3c3f7bf90e4e967a0cd255353ab0d80c2571888b5d299a40c1b9e5b4c4ed54e54864367f0e073dda6495db8b", 0x0, 0x0, 0x5}, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x14083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x5e, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) 651.015849ms ago: executing program 4 (id=4011): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b000000000005001000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x40, 0x4, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x80, 0x40, 0x7, 0x3}}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000001080)={0x20, r10, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 634.83082ms ago: executing program 2 (id=4012): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r3, 0x4000, r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) r7 = socket$inet6(0xa, 0x5, 0x7) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r8 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280000000000) recvfrom$inet6(r6, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x1f}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 0s ago: executing program 3 (id=4013): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)=""/31, &(0x7f00000000c0)=0x1f) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) creat(0x0, 0xf4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', 0x0, 0x2002010, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x2, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000000100"/47], 0x0, 0x3f}, 0x28) setns(0xffffffffffffffff, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xc2ad}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) kernel console output (not intermixed with test programs): atadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 892.246321][ T9] lo speed is unknown, defaulting to 1000 [ 892.456602][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 892.522295][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 892.536634][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 892.985752][T19889] openvswitch: netlink: Flow actions attr not present in new flow. [ 893.088340][ T9] sz1: Port: 1 Link DOWN [ 893.128223][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 893.144853][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 893.184708][T19886] tipc: Enabled bearer , priority 10 [ 893.192836][T19873] lo speed is unknown, defaulting to 1000 [ 893.296189][T19899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 893.752192][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 893.755479][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 893.774758][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 894.682388][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 896.090649][T19920] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 897.372120][ T7486] net_ratelimit: 9 callbacks suppressed [ 897.372136][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 897.392016][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 898.535878][T19925] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 898.592284][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 898.606926][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 899.122134][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 899.137261][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 900.143278][ T28] audit: type=1107 audit(1781659005.429:8638): pid=19933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 900.265813][ T28] audit: type=1326 audit(1781659005.449:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.0.3550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6e568ce59 code=0x0 [ 900.623612][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 900.638298][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 901.499558][T19952] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 901.534974][T14824] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 901.549498][T14824] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.073495][T19964] tipc: Resetting bearer [ 902.085461][T19964] tipc: Resetting bearer [ 902.096587][T19966] netlink: 'syz.2.3559': attribute type 16 has an invalid length. [ 902.120380][T19966] netlink: 'syz.2.3559': attribute type 17 has an invalid length. [ 902.285390][T19964] bridge0: port 1(vlan1) entered disabled state [ 902.649231][T19966] bridge0: port 1(vlan1) entered blocking state [ 902.655570][T19966] bridge0: port 1(vlan1) entered forwarding state [ 902.663254][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 902.752574][T14824] net_ratelimit: 2 callbacks suppressed [ 902.752591][T14824] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 902.772546][T14824] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.853393][T19873] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 902.881571][T19937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3550'. [ 902.908124][ T28] audit: type=1400 audit(1781659008.219:8640): avc: denied { write } for pid=19976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.989412][ T28] audit: type=1400 audit(1781659008.279:8641): avc: denied { write } for pid=19988 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.027184][T19937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=19937 comm=syz.0.3550 [ 903.070941][T19937] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3550'. [ 903.110793][T19993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3561'. [ 903.128681][T19993] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 903.147215][T19999] rdma_rxe: rxe_newlink: failed to add gre0 [ 903.292298][T19999] bridge0: port 1(vlan0) entered blocking state [ 903.298622][T19999] bridge0: port 1(vlan0) entered forwarding state [ 903.312895][T19868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 903.327645][T19999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 903.343720][T19966] tipc: Enabling of bearer rejected, already enabled [ 903.359096][T20011] sctp: [Deprecated]: syz.4.3564 (pid 20011) Use of int in max_burst socket option. [ 903.359096][T20011] Use struct sctp_assoc_value instead [ 903.383792][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 903.398198][ T7486] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.595747][T20018] veth1_macvtap: left promiscuous mode [ 903.607714][T20018] veth1_macvtap: entered promiscuous mode [ 903.615776][T20018] veth1_macvtap: entered allmulticast mode [ 903.634018][T20026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3565'. [ 903.643836][T20026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3565'. [ 903.742759][T20049] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 903.942329][T14817] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 903.957241][T14817] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 904.232529][T19869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 904.642118][T20097] netlink: 'syz.4.3570': attribute type 16 has an invalid length. [ 904.652230][T20097] netlink: 'syz.4.3570': attribute type 17 has an invalid length. [ 905.627078][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 905.641442][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 906.722985][T20107] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 907.799005][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 907.813483][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.837436][T20091] bridge0: port 4(batadv1) entered disabled state [ 908.829810][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 908.844320][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 909.752353][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 909.895573][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 909.909980][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 910.590809][T20097] bridge0: port 4(batadv1) entered blocking state [ 910.597390][T20097] bridge0: port 4(batadv1) entered forwarding state [ 910.630882][T20097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.642120][T19873] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 910.650826][T19873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 910.663832][T19873] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 910.672671][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 910.687449][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 910.787800][T20105] xfrm0 speed is unknown, defaulting to 1000 [ 911.146430][T20102] tipc: Enabling of bearer rejected, already enabled [ 911.243892][T20124] pim6reg: entered allmulticast mode [ 911.249471][T20125] pim6reg: left allmulticast mode [ 911.290216][T20105] lo speed is unknown, defaulting to 1000 [ 911.435782][ T3517] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 911.490102][T20134] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 911.545030][ T28] audit: type=1400 audit(1781659016.859:8642): avc: denied { relabelto } for pid=20132 comm="syz.3.3576" name="715" dev="tmpfs" ino=3893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 911.582994][T20142] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3576'. [ 911.599079][T19873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 911.605335][ T28] audit: type=1400 audit(1781659016.859:8643): avc: denied { associate } for pid=20132 comm="syz.3.3576" name="715" dev="tmpfs" ino=3893 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 911.608623][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 911.633953][ T28] audit: type=1400 audit(1781659016.889:8644): avc: denied { write } for pid=20132 comm="syz.3.3576" name="715" dev="tmpfs" ino=3893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 911.633986][ T28] audit: type=1400 audit(1781659016.889:8645): avc: denied { add_name } for pid=20132 comm="syz.3.3576" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 911.634014][ T28] audit: type=1400 audit(1781659016.889:8646): avc: denied { associate } for pid=20132 comm="syz.3.3576" name=E91F7189591E9233614B scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 911.652294][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 911.669223][ T28] audit: type=1400 audit(1781659016.889:8647): avc: denied { write } for pid=20132 comm="syz.3.3576" name="715" dev="tmpfs" ino=3893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 911.694654][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 911.778728][T19873] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 911.940225][ T28] audit: type=1400 audit(1781659017.249:8648): avc: denied { write } for pid=20141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.985683][ T28] audit: type=1400 audit(1781659017.299:8649): avc: denied { write } for pid=20158 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 912.035443][ T28] audit: type=1400 audit(1781659017.319:8650): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=3899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 912.071992][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3580'. [ 912.098788][ T28] audit: type=1400 audit(1781659017.319:8651): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=3899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 912.995933][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 913.010745][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.994122][T14817] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 914.008503][T14817] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 915.536484][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 915.550838][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 916.608920][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 916.623454][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.732367][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 917.732384][ T28] audit: type=1400 audit(1781659023.039:8655): avc: denied { write } for pid=20199 comm="syz.2.3591" name="/" dev="configfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 917.825067][T20197] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 917.907413][T20196] xfrm0 speed is unknown, defaulting to 1000 [ 918.123129][T20196] lo speed is unknown, defaulting to 1000 [ 918.179863][ T28] audit: type=1400 audit(1781659023.039:8656): avc: denied { add_name } for pid=20199 comm="syz.2.3591" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 918.720602][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 918.735391][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.199666][ T28] audit: type=1400 audit(1781659023.039:8657): avc: denied { create } for pid=20199 comm="syz.2.3591" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 920.222441][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 920.236972][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.602404][T20216] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3593'. [ 921.631644][T20223] netlink: 'syz.4.3587': attribute type 16 has an invalid length. [ 921.639827][ T28] audit: type=1326 audit(1781659026.939:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.692003][T20223] netlink: 'syz.4.3587': attribute type 17 has an invalid length. [ 921.693667][ T28] audit: type=1326 audit(1781659026.939:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.727227][ T28] audit: type=1326 audit(1781659026.939:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.744173][T20218] bridge0: port 4(batadv1) entered disabled state [ 921.760218][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 921.763342][ T28] audit: type=1326 audit(1781659026.939:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.774702][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.802404][ T28] audit: type=1326 audit(1781659026.939:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.854677][ T28] audit: type=1326 audit(1781659026.939:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.881961][ T28] audit: type=1326 audit(1781659026.939:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.2.3594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 921.988010][T20223] bridge0: port 4(batadv1) entered blocking state [ 921.994524][T20223] bridge0: port 4(batadv1) entered forwarding state [ 922.037394][T20232] tipc: Enabling of bearer rejected, already enabled [ 922.045378][T19870] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 922.349997][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 922.364518][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 922.602393][T19870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.611154][T19870] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 923.044432][T19870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.136103][T20247] syz.0.3597 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 923.150256][T20247] CPU: 0 UID: 0 PID: 20247 Comm: syz.0.3597 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 923.150348][T20247] Tainted: [W]=WARN [ 923.150356][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 923.150372][T20247] Call Trace: [ 923.150380][T20247] [ 923.150425][T20247] __dump_stack+0x1d/0x30 [ 923.150451][T20247] dump_stack_lvl+0x95/0xd0 [ 923.150491][T20247] dump_stack+0x15/0x1b [ 923.150514][T20247] dump_header+0x80/0x240 [ 923.150539][T20247] oom_kill_process+0x295/0x350 [ 923.150560][T20247] out_of_memory+0x981/0xbc0 [ 923.150659][T20247] try_charge_memcg+0x621/0xa00 [ 923.150708][T20247] __memcg_kmem_charge_page+0x199/0x3a0 [ 923.150756][T20247] __alloc_frozen_pages_noprof+0x18a/0x350 [ 923.150849][T20247] alloc_pages_bulk_noprof+0x4c8/0x550 [ 923.150888][T20247] ? policy_nodemask+0x417/0x5e0 [ 923.150994][T20247] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 923.151031][T20247] ? alloc_pages_mpol+0xd9/0x1d0 [ 923.151061][T20247] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 923.151170][T20247] __kvmalloc_node_noprof+0x3d4/0x640 [ 923.151201][T20247] ? futex_hash_allocate+0x192/0x920 [ 923.151294][T20247] ? futex_hash_allocate+0x192/0x920 [ 923.151317][T20247] futex_hash_allocate+0x192/0x920 [ 923.151339][T20247] ? cap_task_prctl+0x13f/0x6b0 [ 923.151438][T20247] futex_hash_prctl+0xd8/0xf0 [ 923.151460][T20247] __se_sys_prctl+0x4f4/0x13c0 [ 923.151510][T20247] __x64_sys_prctl+0x67/0x80 [ 923.151585][T20247] x64_sys_call+0x2533/0x3020 [ 923.151658][T20247] do_syscall_64+0x136/0x3c0 [ 923.151692][T20247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.151718][T20247] RIP: 0033:0x7fa6e568ce59 [ 923.151849][T20247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.151879][T20247] RSP: 002b:00007fa6e3c82028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 923.151904][T20247] RAX: ffffffffffffffda RBX: 00007fa6e5906270 RCX: 00007fa6e568ce59 [ 923.151922][T20247] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 923.151935][T20247] RBP: 00007fa6e5722d6f R08: 0000000000000000 R09: 0000000000000000 [ 923.151949][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.151966][T20247] R13: 00007fa6e5906308 R14: 00007fa6e5906270 R15: 00007fffbbafcbf8 [ 923.151994][T20247] [ 923.152001][T20247] memory: usage 307200kB, limit 307200kB, failcnt 245 [ 923.313276][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 923.398556][T20247] memory+swap: usage 355400kB, limit 9007199254740988kB, failcnt 0 [ 923.421858][T20247] kmem: usage 257920kB, limit 9007199254740988kB, failcnt 0 [ 923.429528][T20247] Memory cgroup stats for /syz0: [ 923.429717][T20247] cache 135168 [ 923.438050][T20247] rss 8192 [ 923.441161][T20247] shmem 0 [ 923.444116][T20247] mapped_file 135168 [ 923.448190][T20247] dirty 0 [ 923.451112][T20247] writeback 0 [ 923.454451][T20247] workingset_refault_anon 932 [ 923.459131][T20247] workingset_refault_file 439 [ 923.463840][T20247] swap 99336192 [ 923.467307][T20247] swapcached 103268352 [ 923.471388][T20247] pgpgin 1200882 [ 923.474972][T20247] pgpgout 1200819 [ 923.475457][T19865] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 923.486171][T20247] pgfault 1144626 [ 923.490004][T20247] pgmajfault 1126 [ 923.493727][T20247] inactive_anon 114688 [ 923.497807][T20247] active_anon 8192 [ 923.501640][T20247] inactive_file 135168 [ 923.505778][T20247] active_file 0 [ 923.509288][T20247] unevictable 0 [ 923.512922][T20247] hierarchical_memory_limit 314572800 [ 923.518408][T20247] hierarchical_memsw_limit 9223372036854771712 [ 923.524700][T20247] total_cache 135168 [ 923.535440][T20247] total_rss 8192 [ 923.539084][T20247] total_shmem 0 [ 923.542646][T20247] total_mapped_file 135168 [ 923.547062][T20247] total_dirty 0 [ 923.550547][T20247] total_writeback 0 [ 923.554437][T20247] total_workingset_refault_anon 932 [ 923.559630][T20247] total_workingset_refault_file 439 [ 923.565030][T20247] total_swap 99336192 [ 923.569074][T20247] total_swapcached 103268352 [ 923.573779][T20247] total_pgpgin 1200882 [ 923.577853][T20247] total_pgpgout 1200819 [ 923.583522][T20247] total_pgfault 1144626 [ 923.594792][T20247] total_pgmajfault 1126 [ 923.599002][T20247] total_inactive_anon 114688 [ 923.603674][T20247] total_active_anon 8192 [ 923.626656][T20247] total_inactive_file 135168 [ 923.631809][T20247] total_active_file 0 [ 923.636296][T20247] total_unevictable 0 [ 923.640834][T20247] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3218,pid=18449,uid=0 [ 923.655934][T20247] Memory cgroup out of memory: Killed process 18449 (syz.0.3218) total-vm:109056kB, anon-rss:1232kB, file-rss:33092kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 923.890595][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 923.904933][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.005329][T19865] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 925.112256][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 925.192633][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 925.207138][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 925.221998][T20253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.371379][T19873] page_pool_release_retry() stalled pool shutdown: id 43, 51 inflight 666 sec [ 927.308913][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 927.324338][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.355458][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 928.369955][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.686519][T20295] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 928.947961][T20304] netlink: 'syz.0.3608': attribute type 16 has an invalid length. [ 928.977750][T20304] netlink: 'syz.0.3608': attribute type 17 has an invalid length. [ 929.122110][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 929.136623][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.363312][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 929.363329][ T28] audit: type=1400 audit(1781659034.679:8742): avc: denied { write } for pid=20269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.399835][T20304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.456791][ T28] audit: type=1400 audit(1781659034.769:8743): avc: denied { write } for pid=20314 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.490259][T20304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 929.509314][T20304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 929.549904][T20304] veth1_vlan: left promiscuous mode [ 929.565331][T20304] veth0_vlan: left promiscuous mode [ 929.581477][T20304] veth0_vlan: entered promiscuous mode [ 929.592813][T20304] veth1_vlan: entered promiscuous mode [ 929.609105][T20304] veth1_macvtap: left promiscuous mode [ 929.622976][T20304] veth0_macvtap: left promiscuous mode [ 929.641001][T20304] veth0_macvtap: entered promiscuous mode [ 929.650198][T20304] veth1_macvtap: entered promiscuous mode [ 929.665717][T20304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 929.676079][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 929.690373][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.729512][T20304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 929.863751][T20304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 929.871947][T20304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 929.883082][T20304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.891996][T20304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 929.900286][T20304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 930.366833][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 930.381251][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.504771][T20072] tipc: Subscription rejected, illegal request [ 930.583505][T20310] tipc: Enabling of bearer rejected, already enabled [ 930.760842][T19865] lo speed is unknown, defaulting to 1000 [ 930.783355][T19865] sz1: Port: 1 Link ACTIVE [ 930.841926][T20076] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 930.860445][T20076] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 930.870494][T19861] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 930.884185][T19861] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 930.906142][ T28] audit: type=1326 audit(1781659036.219:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20325 comm="syz.1.3611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4947b3ce59 code=0x0 [ 930.942820][T19865] lo speed is unknown, defaulting to 1000 [ 930.952863][T20329] nfs4: Unknown parameter './file0/../file0' [ 931.022262][T14808] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 931.118020][ T28] audit: type=1400 audit(1781659036.429:8745): avc: denied { write } for pid=20332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.161730][ T28] audit: type=1400 audit(1781659036.469:8746): avc: denied { write } for pid=20347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.458814][T20354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3615'. [ 932.616084][T19863] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 932.624985][T20354] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 932.642456][T19863] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 932.645794][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 932.650433][T19863] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 932.664331][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.639918][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 934.135917][T20373] xt_hashlimit: max too large, truncated to 1048576 [ 934.644261][T20082] net_ratelimit: 1 callbacks suppressed [ 934.644352][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 934.651796][T20359] dvmrp0: entered allmulticast mode [ 934.664639][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.687550][T20376] lo speed is unknown, defaulting to 1000 [ 934.713706][T20376] lo speed is unknown, defaulting to 1000 [ 934.962146][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 935.352136][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.651629][T20376] lo speed is unknown, defaulting to 1000 [ 935.652857][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 935.660172][T20376] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 935.671761][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 935.981148][T20388] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 936.092776][T20376] lo speed is unknown, defaulting to 1000 [ 936.146533][T20376] lo speed is unknown, defaulting to 1000 [ 936.211199][T20396] netlink: 'syz.1.3622': attribute type 16 has an invalid length. [ 936.261912][T20392] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.305731][T20396] netlink: 'syz.1.3622': attribute type 17 has an invalid length. [ 936.520710][T20392] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.612302][T20403] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3623'. [ 936.649585][T19864] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 936.649599][T19864] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 936.670714][T20376] lo speed is unknown, defaulting to 1000 [ 936.676862][T20401] tipc: Enabling of bearer rejected, already enabled [ 936.755091][T20396] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.762358][T20396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.819047][T20396] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.826168][T20396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.908466][T20376] lo speed is unknown, defaulting to 1000 [ 936.928959][T20376] lo speed is unknown, defaulting to 1000 [ 936.959367][ T28] audit: type=1400 audit(1781659042.269:8747): avc: denied { read } for pid=20408 comm="syz.4.3625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 937.079258][T20411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3636'. [ 937.172202][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 937.186619][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.357997][T20429] tipc: Resetting bearer [ 937.364661][T20431] netlink: 'syz.2.3631': attribute type 16 has an invalid length. [ 937.373626][T20429] tipc: Resetting bearer [ 937.382511][T20431] netlink: 'syz.2.3631': attribute type 17 has an invalid length. [ 937.576328][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3632'. [ 937.596621][T20429] bridge0: port 1(vlan1) entered disabled state [ 937.605434][ T9] lo speed is unknown, defaulting to 1000 [ 937.649547][T20443] dvmrp0: entered allmulticast mode [ 937.749045][ T28] audit: type=1400 audit(1781659043.059:8748): avc: denied { write } for pid=20442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.800997][ T28] audit: type=1400 audit(1781659043.109:8749): avc: denied { write } for pid=20456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.802217][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 937.837811][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.928239][T20431] bridge0: port 1(vlan1) entered blocking state [ 937.934607][T20431] bridge0: port 1(vlan1) entered forwarding state [ 937.962426][T19864] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 937.985753][T20439] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 938.011341][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3635'. [ 938.058392][T20429] tipc: Enabling of bearer rejected, already enabled [ 938.110043][T20471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3640'. [ 938.183659][T19864] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 938.237068][T20469] netlink: 'syz.0.3639': attribute type 16 has an invalid length. [ 939.074738][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 939.114273][T20469] netlink: 'syz.0.3639': attribute type 17 has an invalid length. [ 939.272151][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 940.075209][T20076] net_ratelimit: 1 callbacks suppressed [ 940.075221][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 940.095254][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 940.472158][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 941.366232][T20486] xt_limit: Overflow, try lower: 7/0 [ 941.532829][T19873] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 941.609290][T20491] netlink: 'syz.4.3642': attribute type 16 has an invalid length. [ 941.612553][T19863] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 941.634778][T20491] netlink: 'syz.4.3642': attribute type 17 has an invalid length. [ 941.713225][T20488] bridge0: port 4(batadv1) entered disabled state [ 941.756106][T20482] tipc: Enabling of bearer rejected, already enabled [ 941.974599][T20491] bridge0: port 4(batadv1) entered blocking state [ 941.982088][T20491] bridge0: port 4(batadv1) entered forwarding state [ 942.002396][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 942.016860][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 942.294914][T19870] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 942.303387][T19870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.312823][T19870] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 942.392171][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 942.562450][T19863] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 942.772875][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 942.787286][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 942.802473][T19863] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 942.844949][T20488] tipc: Enabling of bearer rejected, already enabled [ 942.913701][T19863] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 942.942266][T19863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.946453][ T3517] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 943.032142][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 943.654730][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 943.669114][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 944.111777][T20542] netlink: 'syz.2.3655': attribute type 16 has an invalid length. [ 944.119811][T20542] netlink: 'syz.2.3655': attribute type 17 has an invalid length. [ 945.111344][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 945.126050][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.230427][ T28] audit: type=1400 audit(1781659050.539:8750): avc: denied { watch } for pid=20554 comm="syz.4.3657" path="/file0" dev="devtmpfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 945.389809][T20553] tipc: Enabling of bearer rejected, already enabled [ 945.605728][T20560] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 946.252601][T20560] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 946.370273][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 946.393726][T20076] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 946.696106][T20575] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.374750][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 947.389325][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 947.717587][T20578] netlink: 'syz.1.3663': attribute type 16 has an invalid length. [ 947.738728][T20575] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.369833][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 948.384352][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 948.405365][T20578] netlink: 'syz.1.3663': attribute type 17 has an invalid length. [ 949.378893][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 949.393427][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.889754][T20580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20580 comm=syz.3.3664 [ 950.118839][T20578] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.126832][T20578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.160790][T20578] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.167969][T20578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.300632][T20580] wg0: Caught tx_queue_len zero misconfig [ 950.306505][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 950.320876][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.403867][ T28] audit: type=1326 audit(1781659055.669:8751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.544218][ T28] audit: type=1326 audit(1781659055.669:8752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.569804][ T28] audit: type=1326 audit(1781659055.669:8753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.633593][ T28] audit: type=1326 audit(1781659055.669:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.687256][ T28] audit: type=1326 audit(1781659055.679:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.713432][ T28] audit: type=1326 audit(1781659055.679:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.752131][ T28] audit: type=1326 audit(1781659055.679:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.794641][ T28] audit: type=1326 audit(1781659055.679:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.820279][ T28] audit: type=1326 audit(1781659055.679:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.846352][ T28] audit: type=1326 audit(1781659055.679:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.4.3667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b4adce59 code=0x7ffc0000 [ 950.935576][T20612] netlink: 'syz.1.3679': attribute type 16 has an invalid length. [ 950.953579][T20612] netlink: 'syz.1.3679': attribute type 17 has an invalid length. [ 950.957168][T20606] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.021782][T20606] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.052592][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 951.067029][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.096162][T20626] netlink: 'syz.4.3671': attribute type 16 has an invalid length. [ 951.105095][T20626] netlink: 'syz.4.3671': attribute type 17 has an invalid length. [ 951.197172][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.204293][T20612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.230283][T20612] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.237939][T20612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.393995][T19864] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 951.394058][T19864] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 951.407885][T19864] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 951.415989][T19864] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 951.512568][T20632] tipc: Enabling of bearer rejected, already enabled [ 951.565057][T20633] bridge_slave_1: left allmulticast mode [ 951.571664][T20633] bridge_slave_1: left promiscuous mode [ 951.579134][T20633] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.592782][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 951.607135][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.628195][T20633] vlan0: left promiscuous mode [ 951.633915][T20633] geneve0: left promiscuous mode [ 951.639499][T20633] geneve0: entered promiscuous mode [ 951.656223][T20633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.663803][T20633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.692531][T20633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.700348][T20633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.716245][T20633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 951.733165][T20612] tipc: Enabling of bearer rejected, already enabled [ 951.741561][T20646] netlink: 'syz.4.3676': attribute type 1 has an invalid length. [ 951.775386][T20640] xfrm0 speed is unknown, defaulting to 1000 [ 951.853826][T20646] netlink: 'syz.4.3676': attribute type 2 has an invalid length. [ 951.925844][T20648] netlink: 'syz.0.3678': attribute type 4 has an invalid length. [ 951.982263][T19864] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 952.132206][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 952.146700][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 952.279852][T20640] lo speed is unknown, defaulting to 1000 [ 952.322139][T19864] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 952.337364][T19864] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 952.719174][T20640] lo speed is unknown, defaulting to 1000 [ 952.792317][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.373368][T20079] net_ratelimit: 5 callbacks suppressed [ 955.373386][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.393336][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.687650][T20687] netlink: 'syz.0.3688': attribute type 16 has an invalid length. [ 955.711456][T20687] netlink: 'syz.0.3688': attribute type 17 has an invalid length. [ 955.721206][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3689'. [ 955.950830][T20694] tipc: Enabling of bearer rejected, already enabled [ 955.972370][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.973456][T19864] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 955.986780][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.006360][T19864] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 956.085108][T20700] netlink: 'syz.4.3691': attribute type 16 has an invalid length. [ 956.093173][T20700] netlink: 'syz.4.3691': attribute type 17 has an invalid length. [ 956.132295][T19864] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 956.142366][T20698] bridge0: port 4(batadv1) entered disabled state [ 956.169919][T20714] netlink: 'syz.0.3703': attribute type 16 has an invalid length. [ 956.182116][T20714] netlink: 'syz.0.3703': attribute type 17 has an invalid length. [ 956.553196][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 956.567660][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.593668][T19868] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 956.770849][T20700] bridge0: port 4(batadv1) entered blocking state [ 956.778115][T20700] bridge0: port 4(batadv1) entered forwarding state [ 956.823907][ T3517] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 956.835113][ T3517] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 956.867025][ T3517] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 957.082517][ T3517] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 957.112227][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 957.126633][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 957.157529][T20722] tipc: Enabling of bearer rejected, already enabled [ 957.174172][ T3517] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 957.371341][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 957.446686][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 957.631624][ T3517] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 957.655889][ T3517] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 958.425526][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 958.440040][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 958.797056][T20698] tipc: Enabling of bearer rejected, already enabled [ 959.816159][T20777] xfrm0 speed is unknown, defaulting to 1000 [ 959.897056][T20777] lo speed is unknown, defaulting to 1000 [ 959.937209][T20777] lo speed is unknown, defaulting to 1000 [ 960.481535][T14794] net_ratelimit: 4 callbacks suppressed [ 960.481552][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 960.501487][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.976311][T20786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3708'. [ 961.034729][T20790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3710'. [ 961.145561][T20793] xt_hashlimit: max too large, truncated to 1048576 [ 961.604005][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 961.604061][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 961.850098][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 961.864601][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.936862][T20792] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3711'. [ 962.132185][T20796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3712'. [ 962.227846][T20798] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3713'. [ 962.252358][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3713'. [ 962.451338][T20802] tipc: Enabling of bearer rejected, already enabled [ 962.498293][T20802] tipc: Enabled bearer , priority 0 [ 962.623348][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 962.637981][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 962.797696][T20811] xfrm0 speed is unknown, defaulting to 1000 [ 963.162139][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 963.176755][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 964.413144][T20823] netlink: 'syz.3.3720': attribute type 21 has an invalid length. [ 964.422634][T20823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3720'. [ 964.969471][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 964.983948][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.001536][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 966.016176][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.377155][T20811] lo speed is unknown, defaulting to 1000 [ 967.057468][T20833] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 967.084988][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 967.099307][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.348770][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3723'. [ 967.388938][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 967.572293][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 967.584787][T20811] lo speed is unknown, defaulting to 1000 [ 967.720066][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 968.036346][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 968.050648][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 968.356644][T20857] xt_hashlimit: max too large, truncated to 1048576 [ 969.711078][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 969.726187][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.718785][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 970.734922][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.758868][T20870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3732'. [ 971.534978][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 971.551022][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.554764][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 972.569594][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.585058][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 973.599607][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 974.617075][T20889] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.626081][T20889] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.646092][T20889] batman_adv: batadv0: Interface deactivated: dummy0 [ 977.238895][T20889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.238707][T20889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.263532][T20889] veth0_vlan: left promiscuous mode [ 979.083183][T20920] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 979.817181][ T7488] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.858811][ T7488] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.984790][ T7488] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.013834][ T7488] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.694581][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 980.694596][ T28] audit: type=1400 audit(1781659086.009:8831): avc: denied { write } for pid=20928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.999680][ T28] audit: type=1400 audit(1781659086.289:8832): avc: denied { write } for pid=20952 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.177088][T20958] Invalid ELF header magic: != ELF [ 981.646686][ T28] audit: type=1400 audit(1781659086.959:8833): avc: denied { write } for pid=20961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.727086][ T28] audit: type=1400 audit(1781659087.009:8834): avc: denied { write } for pid=20977 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.873049][T20949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.316573][ T28] audit: type=1400 audit(1781659087.629:8835): avc: denied { write } for pid=20981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.501543][T21000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3754'. [ 982.535892][ T28] audit: type=1400 audit(1781659087.849:8836): avc: denied { write } for pid=20998 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.615571][T21029] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 984.901915][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 985.126018][T21024] netlink: 'syz.0.3758': attribute type 21 has an invalid length. [ 985.149793][T21024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3758'. [ 985.977320][T19873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 987.987570][T19871] page_pool_release_retry() stalled pool shutdown: id 43, 51 inflight 728 sec [ 988.579289][T21062] bridge0: port 1(vlan0) entered disabled state [ 989.895042][T21076] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3770'. [ 990.173637][T21076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3770'. [ 990.198103][T21076] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3770'. [ 990.922402][T21076] netlink: 'syz.0.3770': attribute type 2 has an invalid length. [ 990.943817][T21076] netlink: 'syz.0.3770': attribute type 3 has an invalid length. [ 991.032166][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 991.265398][T21076] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3770'. [ 991.672243][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 992.322257][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 992.968576][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 992.974993][T14810] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.988461][ T9] syz0: Port: 1 Link DOWN [ 993.443823][T14810] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.454946][T14810] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.464308][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 993.499472][T14810] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.684631][T21101] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 994.505209][T21104] tipc: Enabling of bearer rejected, already enabled [ 994.666095][T21104] tipc: Enabling of bearer rejected, failed to enable media [ 995.782101][ T28] audit: type=1326 audit(1781659101.079:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 995.863999][ T28] audit: type=1326 audit(1781659101.079:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 995.964545][ T28] audit: type=1326 audit(1781659101.079:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.057810][ T28] audit: type=1326 audit(1781659101.079:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.167104][ T28] audit: type=1326 audit(1781659101.079:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.281513][ T28] audit: type=1326 audit(1781659101.079:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.383828][ T28] audit: type=1326 audit(1781659101.089:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.501617][ T28] audit: type=1326 audit(1781659101.089:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.605323][ T28] audit: type=1326 audit(1781659101.089:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.697952][ T28] audit: type=1326 audit(1781659101.089:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.3.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316607ce59 code=0x7ffc0000 [ 996.786496][T21138] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=21138 comm=syz.1.3783 [ 996.912954][T21145] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 996.935777][T21143] 9p: Bad value for 'rfdno' [ 997.087465][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3786'. [ 997.127127][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3786'. [ 997.179587][T21147] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3786'. [ 997.545023][T21152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 997.710658][T21164] netlink: 'syz.0.3790': attribute type 16 has an invalid length. [ 997.739886][T21164] netlink: 'syz.0.3790': attribute type 17 has an invalid length. [ 997.796048][T21159] tipc: Resetting bearer [ 997.813918][T21159] tipc: Resetting bearer [ 997.935347][T21168] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 999.023514][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 999.083558][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 999.091728][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 999.124154][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 999.179942][T21170] xfrm0 speed is unknown, defaulting to 1000 [ 999.339362][T21170] lo speed is unknown, defaulting to 1000 [ 999.501303][T21170] lo speed is unknown, defaulting to 1000 [ 999.753577][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 999.817016][T21159] tipc: Enabling of bearer rejected, already enabled [ 1000.810640][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1002.601793][T21207] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 1002.625077][T21206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1003.273678][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1003.813317][T21209] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1005.441376][T21231] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1005.876179][T14794] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.810056][T21234] xfrm0 speed is unknown, defaulting to 1000 [ 1006.831144][T14794] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.081952][T14794] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.090942][T14794] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.152269][T21234] lo speed is unknown, defaulting to 1000 [ 1008.047845][T21234] lo speed is unknown, defaulting to 1000 [ 1010.050846][T21278] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1010.285852][T21271] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1010.398073][T21286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21286 comm=syz.0.3819 [ 1010.541319][T21271] geneve0: entered promiscuous mode [ 1010.600395][T21284] team_slave_1: Caught tx_queue_len zero misconfig [ 1010.681844][T21276] tipc: Enabling of bearer rejected, already enabled [ 1010.752665][T21296] tipc: Enabled bearer , priority 0 [ 1012.152244][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1013.892724][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1014.684983][T21343] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 1014.839413][T21345] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1014.944882][T21345] geneve2: entered promiscuous mode [ 1014.953211][T21348] netlink: 'syz.3.3836': attribute type 16 has an invalid length. [ 1014.970736][T21348] netlink: 'syz.3.3836': attribute type 17 has an invalid length. [ 1014.986202][T21337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21337 comm=syz.2.3835 [ 1015.024173][T21348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.097091][T21348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1015.162159][T21348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1015.194696][T21348] veth1_vlan: left promiscuous mode [ 1015.214084][T21348] veth0_vlan: left promiscuous mode [ 1015.242511][T21348] veth0_vlan: entered promiscuous mode [ 1015.263910][T21348] veth1_vlan: entered promiscuous mode [ 1015.276516][T21348] veth1_macvtap: left promiscuous mode [ 1015.296046][T21348] veth1_macvtap: entered promiscuous mode [ 1015.304030][T21348] geneve0: left promiscuous mode [ 1015.315317][T21348] geneve0: entered promiscuous mode [ 1015.330805][T21348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1015.350143][T21348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1015.367583][T21348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1015.386210][T21348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1015.408075][T21348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.427313][T21348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1015.437261][T21348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1015.467800][T21348] bridge0: port 1(vlan0) entered blocking state [ 1015.474116][T21348] bridge0: port 1(vlan0) entered forwarding state [ 1015.485074][T21348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1015.514626][T16232] xfrm0 speed is unknown, defaulting to 1000 [ 1015.520654][T20082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.529488][T20082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.538543][T16232] syz0: Port: 1 Link ACTIVE [ 1015.546362][T14810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1015.554487][T14810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1015.563701][T21348] tipc: Enabling of bearer rejected, already enabled [ 1015.571391][T16232] xfrm0 speed is unknown, defaulting to 1000 [ 1015.577450][T20082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.586611][T16232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1015.594568][T20082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.847633][T21361] netlink: 'syz.1.3847': attribute type 16 has an invalid length. [ 1015.864034][T21361] netlink: 'syz.1.3847': attribute type 17 has an invalid length. [ 1016.006355][T21361] batman_adv: batadv0: Interface activated: dummy0 [ 1016.028388][T21361] batadv0: mtu less than device minimum [ 1016.036393][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.042430][T19871] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1016.047621][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.065577][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.076654][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.083792][T19871] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1016.087624][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.107376][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.118488][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.129334][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.140410][T21361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.214843][T21361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.287711][T21361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.317070][T21361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.337970][T21361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1016.348855][T21361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.361576][T21361] veth1_vlan: left promiscuous mode [ 1016.367683][T21361] veth0_vlan: entered promiscuous mode [ 1016.375298][T21361] veth1_vlan: entered promiscuous mode [ 1016.386010][T21361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.395637][T21361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.404513][T21361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.412894][T21361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.422507][T21361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1016.441978][T21369] tipc: Enabling of bearer rejected, already enabled [ 1016.458051][T14810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.465151][T14810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.491032][T14810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.498223][T14810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.543561][T14794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.561162][T14794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.576958][T14794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.593479][T14794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.617196][T21368] tipc: Enabling of bearer rejected, already enabled [ 1016.661177][T21383] tipc: Resetting bearer [ 1016.675955][T21383] tipc: Resetting bearer [ 1016.688235][T21385] netlink: 'syz.2.3852': attribute type 16 has an invalid length. [ 1016.718026][T21385] netlink: 'syz.2.3852': attribute type 17 has an invalid length. [ 1016.861661][T21383] tipc: Resetting bearer [ 1016.878618][T21383] tipc: Resetting bearer [ 1016.971637][T21383] bridge0: port 1(vlan1) entered disabled state [ 1017.120088][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b5c9a00: rx timeout, send abort [ 1017.128473][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b5c9a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1017.216398][T21405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1017.234462][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 1017.234478][ T28] audit: type=1400 audit(1781659122.549:8941): avc: denied { write } for pid=21397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.284728][ T28] audit: type=1400 audit(1781659122.569:8942): avc: denied { write } for pid=21413 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.455078][T21385] bridge0: port 1(vlan1) entered blocking state [ 1017.461445][T21385] bridge0: port 1(vlan1) entered forwarding state [ 1017.468441][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1017.523093][T21385] geneve2: left promiscuous mode [ 1017.539214][T21401] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1017.877832][T21383] tipc: Enabling of bearer rejected, already enabled [ 1017.985464][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1018.089761][ T28] audit: type=1400 audit(1781659123.399:8943): avc: denied { write } for pid=21430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.108999][T21441] netlink: 'syz.1.3850': attribute type 39 has an invalid length. [ 1018.143442][T21445] netlink: 'syz.4.3851': attribute type 10 has an invalid length. [ 1018.160365][ T28] audit: type=1400 audit(1781659123.449:8944): avc: denied { write } for pid=21443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.188470][T21441] syz_tun (unregistering): left allmulticast mode [ 1018.877743][ T28] audit: type=1400 audit(1781659124.189:8945): avc: denied { write } for pid=21453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.934567][ T28] audit: type=1400 audit(1781659124.249:8946): avc: denied { write } for pid=21467 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.122885][T21476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1019.177723][T21481] netlink: 'syz.2.3856': attribute type 21 has an invalid length. [ 1019.207630][T21486] netlink: 'syz.3.3864': attribute type 16 has an invalid length. [ 1019.253257][T21480] bridge0: port 1(vlan0) entered disabled state [ 1019.274501][T21481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1019.335485][T21473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.377465][T21473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.512153][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.667366][T21486] bridge0: port 1(vlan0) entered blocking state [ 1019.673730][T21486] bridge0: port 1(vlan0) entered forwarding state [ 1019.673977][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.709532][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.716651][T21489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.743932][T21489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.751166][T21489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.816376][T21491] tipc: Enabling of bearer rejected, already enabled [ 1019.830797][T21500] tipc: Enabled bearer , priority 0 [ 1019.854381][T16232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.882962][T21473] tipc: Enabling of bearer rejected, already enabled [ 1020.119114][ T28] audit: type=1326 audit(1781659125.429:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21515 comm="syz.2.3858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 1020.181847][T21522] tipc: Resetting bearer [ 1020.189546][ T28] audit: type=1326 audit(1781659125.429:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21515 comm="syz.2.3858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 1020.195477][T21522] tipc: Resetting bearer [ 1020.241414][ T28] audit: type=1326 audit(1781659125.429:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21515 comm="syz.2.3858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 1020.254380][T21526] validate_nla: 3 callbacks suppressed [ 1020.254424][T21526] netlink: 'syz.0.3869': attribute type 16 has an invalid length. [ 1020.269105][ T28] audit: type=1326 audit(1781659125.459:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21515 comm="syz.2.3858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c44ecce59 code=0x7ffc0000 [ 1020.346255][T21526] netlink: 'syz.0.3869': attribute type 17 has an invalid length. [ 1020.491983][T21522] tipc: Resetting bearer [ 1020.499101][T21522] tipc: Resetting bearer [ 1020.735105][T21535] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1021.388207][ T7488] net_ratelimit: 65 callbacks suppressed [ 1021.388226][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1021.408513][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1021.667158][T21546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21546 comm=syz.3.3863 [ 1021.685626][T21555] 9p: Bad value for 'rfdno' [ 1021.882480][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1021.900862][T21526] geneve0: left promiscuous mode [ 1021.906773][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1021.915666][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1021.972183][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1021.986605][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1022.062591][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1022.095620][T21535] geneve2: entered promiscuous mode [ 1022.139877][T21560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3868'. [ 1022.362315][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1022.445076][T21565] netlink: 'syz.2.3870': attribute type 16 has an invalid length. [ 1022.545716][T21565] netlink: 'syz.2.3870': attribute type 17 has an invalid length. [ 1022.633546][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1022.648832][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1022.825464][T21562] tipc: Resetting bearer [ 1023.494704][T21562] tipc: Resetting bearer [ 1023.953738][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1023.968132][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.091277][T21562] tipc: Resetting bearer [ 1024.159697][T21562] tipc: Resetting bearer [ 1024.485283][T21562] bridge0: port 1(vlan1) entered disabled state [ 1024.502143][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1024.516440][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1024.951674][T21584] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1025.355372][T21565] bridge0: port 1(vlan1) entered blocking state [ 1025.361720][T21565] bridge0: port 1(vlan1) entered forwarding state [ 1025.373868][T19873] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1025.373883][T19873] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1025.409022][T21575] tipc: Enabling of bearer rejected, already enabled [ 1025.426894][T21578] tipc: Enabling of bearer rejected, already enabled [ 1026.439602][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1026.470854][T14808] net_ratelimit: 2 callbacks suppressed [ 1026.470870][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1026.491277][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1027.024405][T21610] bond0: entered promiscuous mode [ 1027.466655][T21610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.512474][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1028.492439][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1028.506801][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1029.476816][T21617] netlink: 'syz.4.3881': attribute type 21 has an invalid length. [ 1029.927559][T21617] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1030.144844][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 1030.144862][ T28] audit: type=1400 audit(1781659135.459:9087): avc: denied { write } for pid=21622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.163995][T21633] netlink: 'syz.2.3884': attribute type 16 has an invalid length. [ 1030.240999][T21637] xt_NFQUEUE: number of total queues is 0 [ 1030.332393][T21633] netlink: 'syz.2.3884': attribute type 17 has an invalid length. [ 1030.442316][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1030.456662][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1030.695680][ T28] audit: type=1400 audit(1781659135.999:9088): avc: denied { write } for pid=21639 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.723017][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1031.748764][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1031.763250][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1032.297004][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1032.420575][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1032.431341][T21665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1032.467248][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1032.505491][T21665] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1032.550923][ T28] audit: type=1400 audit(1781659137.859:9089): avc: denied { write } for pid=21661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.588029][T21665] netlink: 'syz.1.3890': attribute type 2 has an invalid length. [ 1032.665098][ T28] audit: type=1400 audit(1781659137.879:9090): avc: denied { write } for pid=21684 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.692282][T21665] netlink: 'syz.1.3890': attribute type 3 has an invalid length. [ 1032.701254][T21665] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1032.844995][T21691] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1032.989359][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1033.005502][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1033.127325][T21693] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1033.251768][T21696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21696 comm=syz.4.3894 [ 1033.471893][T21698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1033.529979][T21693] geneve3: entered promiscuous mode [ 1033.749217][T21710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3897'. [ 1033.783187][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1033.797524][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1033.930183][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3898'. [ 1033.954263][T21721] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3898'. [ 1034.034106][ T28] audit: type=1400 audit(1781659139.349:9091): avc: denied { setopt } for pid=21720 comm="syz.2.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1034.147682][ T28] audit: type=1400 audit(1781659139.459:9092): avc: denied { write } for pid=21705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.251272][ T28] audit: type=1400 audit(1781659139.559:9093): avc: denied { write } for pid=21739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.422688][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1034.436996][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1035.501481][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1035.515930][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1036.763310][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1036.779488][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1037.767411][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1037.782351][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1037.793004][T21768] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1037.803499][T21762] netlink: 'syz.2.3909': attribute type 16 has an invalid length. [ 1038.038395][T21762] netlink: 'syz.2.3909': attribute type 17 has an invalid length. [ 1038.072009][T21774] __nla_validate_parse: 1 callbacks suppressed [ 1038.105134][T21774] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1038.118353][T21776] tipc: Resetting bearer [ 1038.133389][T21779] netlink: 'syz.0.3921': attribute type 16 has an invalid length. [ 1038.156798][T21785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21785 comm=syz.1.3911 [ 1038.182796][T21776] tipc: Resetting bearer [ 1038.201765][T21779] netlink: 'syz.0.3921': attribute type 17 has an invalid length. [ 1038.412328][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1038.426808][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1038.456425][T21776] tipc: Resetting bearer [ 1038.481287][T21776] tipc: Resetting bearer [ 1038.972094][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1038.986408][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1038.992906][T16232] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1039.096799][T21774] geneve2: entered promiscuous mode [ 1039.238961][T21798] mmap: syz.4.3915 (21798): VmData 25014272 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1039.321517][T21779] bond0: left promiscuous mode [ 1039.331166][T19859] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1039.340404][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3915'. [ 1039.354069][T19859] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1039.354387][T19859] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1039.443278][T21786] tipc: Enabling of bearer rejected, already enabled [ 1039.465608][T19046] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1039.503147][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1039.517537][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1040.486164][T16232] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1040.605351][T19046] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1040.613801][T19046] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1041.426181][T21822] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1041.543381][T21820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3923'. [ 1042.232158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.470867][ T7488] net_ratelimit: 2 callbacks suppressed [ 1042.470882][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1042.491080][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1043.506501][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1043.521183][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1043.557359][T21830] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1043.574677][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1044.281316][T21840] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1044.587638][ T28] audit: type=1400 audit(1781659149.869:9094): avc: denied { lock } for pid=21845 comm="syz.1.3930" path="socket:[54399]" dev="sockfs" ino=54399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1044.846580][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1044.860986][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1044.878290][T21851] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1044.888655][T21847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21847 comm=syz.2.3928 [ 1044.907739][T21850] netlink: 'syz.4.3931': attribute type 16 has an invalid length. [ 1044.918167][T21846] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1044.929393][T21850] netlink: 'syz.4.3931': attribute type 17 has an invalid length. [ 1045.022026][T21851] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1045.264097][T19046] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1045.297741][T19046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1045.413568][T21850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1045.420816][T19860] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1045.445857][T21850] geneve3: left promiscuous mode [ 1045.495534][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1045.509926][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1045.616291][T19860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1045.634173][T19860] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1045.661261][T21872] SET target dimension over the limit! [ 1045.674009][T21872] siw: device registration error -23 [ 1045.681471][T21872] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1045.752192][T19859] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1045.840147][T20072] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.871750][T20072] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.907588][T21876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1045.967724][T20072] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.049373][T20072] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.193737][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1046.209850][T21877] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1046.220037][T21873] xfrm0 speed is unknown, defaulting to 1000 [ 1046.246702][ T28] audit: type=1400 audit(1781659151.559:9095): avc: denied { sys_admin } for pid=21875 comm="syz.2.3937" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1046.316965][T21877] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1046.415171][T21873] lo speed is unknown, defaulting to 1000 [ 1046.525112][T21885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3939'. [ 1046.547024][T21873] lo speed is unknown, defaulting to 1000 [ 1046.853580][T21853] tipc: Enabling of bearer rejected, already enabled [ 1047.121590][T21896] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1047.634248][T21907] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1047.702308][T21907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21907 comm=/dev/ttyS3 [ 1047.802770][T20072] net_ratelimit: 5 callbacks suppressed [ 1047.802907][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1047.822899][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1048.633021][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1048.647856][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1048.763153][T21922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1048.970386][T16232] page_pool_release_retry() stalled pool shutdown: id 43, 51 inflight 789 sec [ 1049.742659][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1049.757351][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1050.424141][T21925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1051.141514][T21937] xt_hashlimit: max too large, truncated to 1048576 [ 1051.190540][T14794] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.205330][T14794] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.214287][T21942] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3954'. [ 1051.224350][T14794] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.233268][T14794] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.612111][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1051.626440][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1052.136583][T21938] xfrm0 speed is unknown, defaulting to 1000 [ 1052.144398][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1052.158939][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1052.397489][T21938] lo speed is unknown, defaulting to 1000 [ 1052.767171][T21951] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1052.961112][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1052.977289][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1053.112207][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1053.296519][T21951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21951 comm=/dev/ttyS3 [ 1053.987384][T21938] lo speed is unknown, defaulting to 1000 [ 1053.998856][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1054.013242][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1054.322898][ T28] audit: type=1326 audit(1781659159.629:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e568ce59 code=0x7ffc0000 [ 1054.982160][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1054.996500][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1055.152505][ T28] audit: type=1326 audit(1781659159.629:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e568ce59 code=0x7ffc0000 [ 1055.190168][ T28] audit: type=1326 audit(1781659159.629:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e568ce59 code=0x7ffc0000 [ 1055.225965][ T28] audit: type=1326 audit(1781659159.629:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e568ce59 code=0x7ffc0000 [ 1055.254087][ T28] audit: type=1326 audit(1781659159.729:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6e568ce59 code=0x7ffc0000 [ 1055.382800][ T28] audit: type=1326 audit(1781659159.729:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6e568cbc2 code=0x7ffc0000 [ 1055.408203][ T28] audit: type=1326 audit(1781659159.729:9102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6e564d68e code=0x7ffc0000 [ 1055.482927][ T28] audit: type=1326 audit(1781659159.749:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa6e568cc87 code=0x7ffc0000 [ 1056.471081][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1056.485797][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1057.139244][ T28] audit: type=1326 audit(1781659159.749:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6e564d68e code=0x7ffc0000 [ 1057.502320][ T28] audit: type=1326 audit(1781659159.749:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21959 comm="syz.0.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa6e564d68e code=0x7ffc0000 [ 1057.782932][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1057.798430][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1058.233196][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1058.895565][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1058.910084][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1059.635215][T22018] 9p: Bad value for 'wfdno' [ 1060.614673][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1060.629182][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1062.619943][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1062.634467][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1063.352328][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1063.602832][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1063.617519][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1064.423864][T22039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3974'. [ 1064.462376][T22048] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1064.657545][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1064.671938][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1065.423704][T22053] netlink: 'syz.1.3977': attribute type 16 has an invalid length. [ 1065.715302][T22053] netlink: 'syz.1.3977': attribute type 17 has an invalid length. [ 1066.736725][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1066.751230][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1066.879539][T22057] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1067.008598][T22057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1067.053752][T22053] geneve2: left promiscuous mode [ 1067.089466][T22057] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1067.211602][T22066] netlink: 8 bytes leftover after parsing attributes in process `/dev/ttyS3'. [ 1067.276308][T22066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22066 comm=/dev/ttyS3 [ 1067.294827][T22071] tipc: Enabling of bearer rejected, already enabled [ 1067.347487][T22071] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1067.443792][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1067.458216][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1067.926686][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3984'. [ 1068.023146][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1068.037581][ T7488] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1068.078952][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1068.105305][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1068.198427][T22088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=22088 comm=syz.4.3986 [ 1068.350722][T22097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3990'. [ 1068.366413][T22088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=22088 comm=syz.4.3986 [ 1068.452823][T22088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=22088 comm=syz.4.3986 [ 1068.472241][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1068.593244][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1068.607745][T14810] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1068.623495][T22098] batadv_slave_0: entered promiscuous mode [ 1068.824168][T22110] netlink: 'syz.4.3991': attribute type 16 has an invalid length. [ 1068.866384][T22110] netlink: 'syz.4.3991': attribute type 17 has an invalid length. [ 1069.010836][T22113] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1069.322567][T16232] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1069.466129][T16232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1070.166698][T14794] net_ratelimit: 2 callbacks suppressed [ 1070.166716][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1070.186562][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1070.448005][T16232] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1070.457399][T16232] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1070.472757][T22118] __nla_validate_parse: 3 callbacks suppressed [ 1070.472788][T22118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4004'. [ 1071.032208][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.446379][T16232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.570355][T16232] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1071.726599][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1071.732125][T16232] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1071.740913][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1071.748677][T16232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.869516][T22103] tipc: Enabling of bearer rejected, already enabled [ 1072.805582][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1072.819905][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1073.821446][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1073.835935][T20072] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1073.854774][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1075.191605][T22158] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1075.398559][T22147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22147 comm=syz.0.3998 [ 1075.678594][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1075.692908][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1077.411696][T22171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1077.793633][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1077.808136][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1078.831141][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1079.299071][T22190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1079.325316][T22190] xfrm0 speed is unknown, defaulting to 1000 [ 1079.391802][T22190] lo speed is unknown, defaulting to 1000 [ 1079.457114][T22190] lo speed is unknown, defaulting to 1000 [ 1079.863981][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1079.878635][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1080.704898][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1080.719337][T20079] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1080.734331][T22198] netlink: 'syz.4.4011': attribute type 16 has an invalid length. [ 1081.078064][T22198] netlink: 'syz.4.4011': attribute type 17 has an invalid length. [ 1081.319342][T22208] syz.2.4012 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1081.333359][T22208] CPU: 1 UID: 0 PID: 22208 Comm: syz.2.4012 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1081.333440][T22208] Tainted: [W]=WARN [ 1081.333448][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1081.333463][T22208] Call Trace: [ 1081.333472][T22208] [ 1081.333482][T22208] __dump_stack+0x1d/0x30 [ 1081.333509][T22208] dump_stack_lvl+0x95/0xd0 [ 1081.333531][T22208] dump_stack+0x15/0x1b [ 1081.333552][T22208] dump_header+0x80/0x240 [ 1081.333640][T22208] oom_kill_process+0x295/0x350 [ 1081.333664][T22208] out_of_memory+0x981/0xbc0 [ 1081.333706][T22208] try_charge_memcg+0x621/0xa00 [ 1081.333775][T22208] __memcg_kmem_charge_page+0x199/0x3a0 [ 1081.333807][T22208] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1081.333884][T22208] alloc_pages_mpol+0xa9/0x1d0 [ 1081.333951][T22208] alloc_pages_noprof+0x8f/0x140 [ 1081.333982][T22208] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1081.334024][T22208] __kvmalloc_node_noprof+0x3d4/0x640 [ 1081.334079][T22208] ? futex_hash_allocate+0x192/0x920 [ 1081.334101][T22208] ? futex_hash_allocate+0x192/0x920 [ 1081.334121][T22208] ? file_ioctl+0x14a/0x5b0 [ 1081.334191][T22208] futex_hash_allocate+0x192/0x920 [ 1081.334212][T22208] ? cap_task_prctl+0x13f/0x6b0 [ 1081.334250][T22208] futex_hash_prctl+0xd8/0xf0 [ 1081.334274][T22208] __se_sys_prctl+0x4f4/0x13c0 [ 1081.334345][T22208] __x64_sys_prctl+0x67/0x80 [ 1081.334375][T22208] x64_sys_call+0x2533/0x3020 [ 1081.334417][T22208] do_syscall_64+0x136/0x3c0 [ 1081.334441][T22208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.334463][T22208] RIP: 0033:0x7f1c44ecce59 [ 1081.334480][T22208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.334504][T22208] RSP: 002b:00007f1c42c74028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1081.334561][T22208] RAX: ffffffffffffffda RBX: 00007f1c45146450 RCX: 00007f1c44ecce59 [ 1081.334600][T22208] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1081.334613][T22208] RBP: 00007f1c44f62d6f R08: 0000000000000000 R09: 0000000000000000 [ 1081.334629][T22208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.334644][T22208] R13: 00007f1c451464e8 R14: 00007f1c45146450 R15: 00007ffe53033238 [ 1081.334667][T22208] [ 1081.334755][T22208] memory: usage 307200kB, limit 307200kB, failcnt 251 [ 1081.567537][T22208] memory+swap: usage 325344kB, limit 9007199254740988kB, failcnt 0 [ 1081.575489][T22208] kmem: usage 209356kB, limit 9007199254740988kB, failcnt 0 [ 1081.583059][T22208] Memory cgroup stats for /syz2: [ 1081.583365][T22208] cache 98291712 [ 1081.592102][T22208] rss 1810432 [ 1081.595410][T22208] shmem 98279424 [ 1081.599005][T22208] mapped_file 4210688 [ 1081.603031][T22208] dirty 4096 [ 1081.606329][T22208] writeback 12288 [ 1081.610055][T22208] workingset_refault_anon 2152 [ 1081.614919][T22208] workingset_refault_file 2686 [ 1081.619832][T22208] swap 18579456 [ 1081.623456][T22208] swapcached 50556928 [ 1081.627581][T22208] pgpgin 1300844 [ 1081.631202][T22208] pgpgout 1276383 [ 1081.634926][T22208] pgfault 1307357 [ 1081.638584][T22208] pgmajfault 310 [ 1081.642170][T22208] inactive_anon 37195776 [ 1081.646422][T22208] active_anon 62984192 [ 1081.650935][T22208] inactive_file 12288 [ 1081.655054][T22208] active_file 0 [ 1081.658557][T22208] unevictable 0 [ 1081.662047][T22208] hierarchical_memory_limit 314572800 [ 1081.667448][T22208] hierarchical_memsw_limit 9223372036854771712 [ 1081.673730][T22208] total_cache 98291712 [ 1081.677827][T22208] total_rss 1810432 [ 1081.681648][T22208] total_shmem 98279424 [ 1081.685763][T22208] total_mapped_file 4210688 [ 1081.690294][T22208] total_dirty 4096 [ 1081.694135][T22208] total_writeback 12288 [ 1081.698358][T22208] total_workingset_refault_anon 2152 [ 1081.703888][T22208] total_workingset_refault_file 2686 [ 1081.718416][T22208] total_swap 18579456 [ 1081.722440][T22208] total_swapcached 50556928 [ 1081.726995][T22208] total_pgpgin 1300844 [ 1081.731095][T22208] total_pgpgout 1276383 [ 1081.735277][T22208] total_pgfault 1307357 [ 1081.739425][T22208] total_pgmajfault 310 [ 1081.743677][T22208] total_inactive_anon 37195776 [ 1081.748438][T22208] total_active_anon 62984192 [ 1081.753197][T22208] total_inactive_file 12288 [ 1081.757701][T22208] total_active_file 0 [ 1081.761683][T22208] total_unevictable 0 [ 1081.765662][T22208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2119,pid=14035,uid=0 [ 1081.780409][T22208] Memory cgroup out of memory: Killed process 14035 (syz.2.2119) total-vm:94036kB, anon-rss:1416kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1082.032196][T22208] ================================================================== [ 1082.040347][T22208] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 1082.050183][T22208] [ 1082.052507][T22208] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 1082.060658][T22208] tick_do_update_jiffies64+0x113/0x1c0 [ 1082.066207][T22208] tick_nohz_handler+0x88/0x380 [ 1082.071055][T22208] __hrtimer_run_queues+0x1f8/0x510 [ 1082.076428][T22208] hrtimer_interrupt+0x257/0x810 [ 1082.081383][T22208] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1082.087301][T22208] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1082.092944][T22208] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1082.098939][T22208] kcsan_setup_watchpoint+0x3e8/0x450 [ 1082.104337][T22208] pid_vnr+0x3b/0x100 [ 1082.108346][T22208] __unix_dgram_recvmsg+0x5b6/0x860 [ 1082.113725][T22208] unix_dgram_recvmsg+0x7e/0x90 [ 1082.118599][T22208] sock_recvmsg_nosec+0xc2/0xf0 [ 1082.123448][T22208] ____sys_recvmsg+0x26f/0x280 [ 1082.128226][T22208] ___sys_recvmsg+0x11f/0x3a0 [ 1082.132918][T22208] do_recvmmsg+0x1e5/0x560 [ 1082.137347][T22208] __x64_sys_recvmmsg+0xe5/0x170 [ 1082.142327][T22208] x64_sys_call+0x80f/0x3020 [ 1082.146918][T22208] do_syscall_64+0x136/0x3c0 [ 1082.151511][T22208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.157417][T22208] [ 1082.159754][T22208] read to 0xffffffff86c07a00 of 8 bytes by task 22208 on cpu 1: [ 1082.167469][T22208] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 1082.173711][T22208] count_shadow_nodes+0x6a/0x250 [ 1082.178657][T22208] do_shrink_slab+0x61/0x650 [ 1082.183244][T22208] shrink_slab+0x53b/0x8e0 [ 1082.187678][T22208] shrink_node+0x6d4/0x2080 [ 1082.192274][T22208] do_try_to_free_pages+0x408/0xc90 [ 1082.197476][T22208] try_to_free_mem_cgroup_pages+0x201/0x420 [ 1082.203370][T22208] try_charge_memcg+0x375/0xa00 [ 1082.208235][T22208] __memcg_kmem_charge_page+0x199/0x3a0 [ 1082.213785][T22208] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1082.219597][T22208] alloc_pages_mpol+0xa9/0x1d0 [ 1082.224375][T22208] alloc_pages_noprof+0x8f/0x140 [ 1082.229324][T22208] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1082.235228][T22208] __kvmalloc_node_noprof+0x3d4/0x640 [ 1082.240605][T22208] futex_hash_allocate+0x192/0x920 [ 1082.245721][T22208] futex_hash_prctl+0xd8/0xf0 [ 1082.250407][T22208] __se_sys_prctl+0x4f4/0x13c0 [ 1082.255258][T22208] __x64_sys_prctl+0x67/0x80 [ 1082.259857][T22208] x64_sys_call+0x2533/0x3020 [ 1082.264542][T22208] do_syscall_64+0x136/0x3c0 [ 1082.269147][T22208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.275042][T22208] [ 1082.277354][T22208] value changed: 0x000000010001314b -> 0x000000010001314c [ 1082.284451][T22208] [ 1082.286767][T22208] Reported by Kernel Concurrency Sanitizer on: [ 1082.293016][T22208] CPU: 1 UID: 0 PID: 22208 Comm: syz.2.4012 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1082.294793][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1082.303968][T22208] Tainted: [W]=WARN [ 1082.303978][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1082.303991][T22208] ================================================================== [ 1082.340516][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1082.729878][T22208] syz.2.4012 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1082.744252][T22208] CPU: 1 UID: 0 PID: 22208 Comm: syz.2.4012 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1082.744358][T22208] Tainted: [W]=WARN [ 1082.744366][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1082.744446][T22208] Call Trace: [ 1082.744455][T22208] [ 1082.744466][T22208] __dump_stack+0x1d/0x30 [ 1082.744492][T22208] dump_stack_lvl+0x95/0xd0 [ 1082.744581][T22208] dump_stack+0x15/0x1b [ 1082.744606][T22208] dump_header+0x80/0x240 [ 1082.744633][T22208] oom_kill_process+0x295/0x350 [ 1082.744658][T22208] out_of_memory+0x981/0xbc0 [ 1082.744764][T22208] try_charge_memcg+0x621/0xa00 [ 1082.744864][T22208] __memcg_kmem_charge_page+0x199/0x3a0 [ 1082.744894][T22208] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1082.744937][T22208] alloc_pages_mpol+0xa9/0x1d0 [ 1082.745041][T22208] alloc_pages_noprof+0x8f/0x140 [ 1082.745072][T22208] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1082.745115][T22208] __kvmalloc_node_noprof+0x3d4/0x640 [ 1082.745146][T22208] ? futex_hash_allocate+0x192/0x920 [ 1082.745176][T22208] ? futex_hash_allocate+0x192/0x920 [ 1082.745201][T22208] ? file_ioctl+0x14a/0x5b0 [ 1082.745235][T22208] futex_hash_allocate+0x192/0x920 [ 1082.745292][T22208] ? cap_task_prctl+0x13f/0x6b0 [ 1082.745326][T22208] futex_hash_prctl+0xd8/0xf0 [ 1082.745347][T22208] __se_sys_prctl+0x4f4/0x13c0 [ 1082.745425][T22208] __x64_sys_prctl+0x67/0x80 [ 1082.745451][T22208] x64_sys_call+0x2533/0x3020 [ 1082.745529][T22208] do_syscall_64+0x136/0x3c0 [ 1082.745565][T22208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.745589][T22208] RIP: 0033:0x7f1c44ecce59 [ 1082.745606][T22208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.745630][T22208] RSP: 002b:00007f1c42c74028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1082.745731][T22208] RAX: ffffffffffffffda RBX: 00007f1c45146450 RCX: 00007f1c44ecce59 [ 1082.745747][T22208] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1082.745761][T22208] RBP: 00007f1c44f62d6f R08: 0000000000000000 R09: 0000000000000000 [ 1082.745832][T22208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.745848][T22208] R13: 00007f1c451464e8 R14: 00007f1c45146450 R15: 00007ffe53033238 [ 1082.745871][T22208] [ 1082.745878][T22208] memory: usage 307200kB, limit 307200kB, failcnt 1999 [ 1082.842492][ T9] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1082.842507][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1082.846851][T22208] memory+swap: usage 325344kB, limit 9007199254740988kB, failcnt 0 [ 1082.866798][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1082.866863][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1082.892257][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1082.896576][T22208] kmem: usage 209436kB, limit 9007199254740988kB, failcnt 0 [ 1082.932277][T16232] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1082.937178][T22208] Memory cgroup stats for /syz2: [ 1083.040307][T22208] cache 98283520 [ 1083.049142][T22208] rss 1626112 [ 1083.052477][T22208] shmem 98279424 [ 1083.056064][T22208] mapped_file 4202496 [ 1083.060059][T22208] dirty 0 [ 1083.062929][T16232] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1083.064085][T22208] writeback 0 [ 1083.073137][T16232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1083.075923][T22208] workingset_refault_anon 2152 [ 1083.075935][T22208] workingset_refault_file 2686 [ 1083.075945][T22208] swap 18579456 [ 1083.088416][T16232] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1083.093113][T22208] swapcached 50556928 [ 1083.093124][T22208] pgpgin 1300844 [ 1083.093132][T22208] pgpgout 1276430 [ 1083.120890][T22208] pgfault 1307359 [ 1083.126637][T22208] pgmajfault 310 [ 1083.131238][T22208] inactive_anon 37007360 [ 1083.134311][T22212] tipc: Enabling of bearer rejected, already enabled [ 1083.136651][T22208] active_anon 62988288 [ 1083.149936][T22208] inactive_file 4096 [ 1083.153869][T22208] active_file 0 [ 1083.157331][T22208] unevictable 0 [ 1083.160801][T22208] hierarchical_memory_limit 314572800 [ 1083.166214][T22208] hierarchical_memsw_limit 9223372036854771712 [ 1083.172443][T22208] total_cache 98283520 [ 1083.176513][T22208] total_rss 1626112 [ 1083.180331][T22208] total_shmem 98279424 [ 1083.184429][T22208] total_mapped_file 4202496 [ 1083.188931][T22208] total_dirty 0 [ 1083.192790][T22208] total_writeback 0 [ 1083.196619][T22208] total_workingset_refault_anon 2152 [ 1083.201983][T22208] total_workingset_refault_file 2686 [ 1083.207330][T22208] total_swap 18579456 [ 1083.211303][T22208] total_swapcached 50556928 [ 1083.215878][T22208] total_pgpgin 1300844 [ 1083.220312][T22208] total_pgpgout 1276430 [ 1083.224621][T22208] total_pgfault 1307359 [ 1083.228783][T22208] total_pgmajfault 310 [ 1083.233020][T22208] total_inactive_anon 37007360 [ 1083.237860][T22208] total_active_anon 62988288 [ 1083.242635][T22208] total_inactive_file 4096 [ 1083.244667][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1083.247049][T22208] total_active_file 0 [ 1083.247060][T22208] total_unevictable 0 [ 1083.261507][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1083.284128][T22208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1032,pid=8977,uid=0 [ 1083.299866][T22208] Memory cgroup out of memory: Killed process 8977 (syz.2.1032) total-vm:96216kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1083.319692][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1083.422815][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1083.469054][T22158] Set syz1 is full, maxelem 65536 reached [ 1083.792259][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1083.807100][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1084.322158][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1085.862184][T14794] net_ratelimit: 5 callbacks suppressed [ 1085.862241][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1085.882093][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1086.402132][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1086.416475][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1086.932230][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1086.948089][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1087.482580][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1087.497441][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1088.022157][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1088.036624][T14808] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1091.112210][T14794] net_ratelimit: 10 callbacks suppressed [ 1091.112223][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1091.132156][T14794] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1091.652158][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1091.666510][T20082] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01