last executing test programs: 11m42.943980316s ago: executing program 32 (id=4277): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x5}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x9, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@ssrr={0x89, 0x1f, 0x5d, [@rand_addr=0x64010102, @private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @private=0x2400]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0x77, [@broadcast, @rand_addr=0x64010100]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0xf8, 0x1, 0x27, 0x0, 0x0, 0x80036, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x330, 0x2, 0x802, 0x3, 0x0, 0x3, 0x6, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@nodelalloc}]}, 0x2, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file2\x00', 0x2000800, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x1, 0x2a7, &(0x7f0000005c00)="$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") truncate(0x0, 0xeb42) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0xc10, 0x948, 0x168, 0x10, 0x948, 0xb, 0xb40, 0x250, 0x250, 0xb40, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x8e0, 0x948, 0x0, {0x0, 0x28e}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10000, 0x3}, {0x412, 0x1}, {0xe, 0x3}, {0x7fff}, {0x3, 0x2}, {0x7, 0x2}, {0x9, 0x1}, {0x8, 0x1}, {0x6021, 0x3}, {0x2, 0x464ed55f53542fa}, {0x3, 0x3}], [{0xff, 0x1}, {0x6, 0x6}, {0x41d, 0x4}, {0x758, 0x7fff}, {0x4, 0x5}, {0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x8000}, {0xfffffffe, 0x1b}], 0x6, 0x9}, {[{0x7, 0x3}, {0x60923fda, 0x1}, {0x7779}, {0x7fffffff}, {0x8, 0x2}, {0x7, 0x3}, {0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0xfff, 0x2}], [{0xffffff5e, 0x5}, {0x10, 0xc}, {0x662eafc6, 0xa698}, {0x8c5, 0x4d}, {0xb1, 0x29dd}, {0x1, 0x1}, {0x80, 0xffff74c0}, {0xcbc}, {0x7, 0x9}, {0x7}, {0x1, 0x8}], 0x2, 0x2}, {[{0x10}, {0x3}, {0xf855, 0x1}, {0xdf, 0x2}, {0x9, 0x1}, {0x8, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x9, 0x3}], [{0x670, 0x5}, {0x5, 0x20000001}, {0x5, 0xfffffe8b}, {0xffffffb1, 0xa7c}, {0xfff, 0x400}, {0x2}, {0x401, 0xd}, {0xd, 0x2}, {0x3, 0x6}, {0x4, 0x57b7}, {0x1, 0x1}], 0xb, 0x5}, {[{0x7}, {0x52b, 0x1}, {0x2, 0x2}, {0xffff6f44}, {0x27b42d8d}, {0x6, 0x1}, {0xb6e, 0x1}, {0x0, 0x2}, {0x40000000, 0x1}, {0x1, 0x1}, {0x8, 0x3}], [{0x4, 0x80000000}, {0x0, 0x2e8}, {0xb, 0x101}, {0x8, 0xffffffff}, {0x6, 0xa3ed}, {0x6b, 0x100}, {0x3, 0x3}, {0xfffffffc, 0x401}, {0x7, 0x7}, {0x8}, {0x9, 0x1}], 0x6, 0x5}, {[{0x8, 0x1}, {0xc8, 0x2}, {0x590, 0x2}, {0x7, 0x2}, {0xb04, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x8, 0x2}, {0x40}, {0x10, 0x3}], [{0x0, 0x3}, {0x9, 0x4}, {0x62, 0x8}, {0x2, 0x401}, {0x3, 0x4}, {0x382}, {0x2, 0x2}, {0x776, 0x4d46}, {0x9, 0xfffff800}, {0xfffffffe, 0x5}, {0x7, 0xbd}], 0x1, 0x2}, {[{0x10, 0x3}, {0x7fffffff, 0x2}, {0x0, 0x3}, {0xd, 0x2}, {0x81}, {0xe39}, {0x5}, {0x8d, 0x1}, {0x1, 0x2}, {0x80000003, 0x1}, {0x4, 0x2}], [{0xffff, 0x7}, {0x3, 0x3}, {0x9, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x9, 0x10000}, {0x8, 0x6}, {0x1000, 0x5}, {0x6, 0xff}, {0xffffffff}, {0x6, 0x8}], 0x9, 0x4}, {[{0x3, 0x2}, {0xf58, 0x1}, {0x2, 0x2}, {0x401, 0x3}, {0x8}, {0xfffffff9, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x1}], [{0x7f, 0x80000000}, {0x2, 0xd}, {0xa}, {0x8, 0x4}, {0x2, 0xfffffff7}, {0x2, 0x1}, {0x6, 0x9}, {0x6, 0x1}, {0xfffffffe, 0xd}, {0xf, 0xffffffff}, {0x8, 0x40000}], 0x9, 0x7}, {[{0x101, 0x3}, {0x10, 0x3}, {0x9, 0x1}, {0x7f}, {0x9, 0x1}, {0xffffffff}, {0x6, 0x2}, {0x1, 0x3}, {0xb, 0x2}, {0x8, 0x2}, {0x30000000}], [{0x40, 0xfffffe32}, {0x3, 0x1}, {0x7, 0x805a}, {0x7, 0x8}, {0x9, 0x80000000}, {0x800, 0xfffffffa}, {0xb, 0xc}, {0x9f89, 0x6}, {0x5, 0x8}, {0x80, 0x1}, {0x7, 0x55dd844b}], 0x5, 0x9}, {[{0xa, 0x2}, {0x5, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x401}, {0xa5, 0x3}, {0x6}, {0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x2cd1, 0x2}], [{0x3}, {0x9}, {0xfffffff0, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0xd2b}, {0x2, 0x6}, {0xe39, 0x8000}, {0x5b}, {0x800, 0x8}, {0x5, 0x1}], 0x1, 0xa}, {[{0xe, 0x1}, {0xffffff80, 0x3}, {}, {0x4, 0x2}, {0x6, 0x3}, {0x40, 0x1}, {0x6, 0x1}, {0x7fff, 0x1}, {0x16a, 0x1}, {0x5, 0x3}, {0x4}], [{0x3, 0x2}, {0xbc6f3d9b, 0x828}, {0x8000, 0x8}, {0x5, 0x2}, {0x0, 0x45d0}, {0x8, 0x9}, {0x5, 0x31}, {0x1, 0x670f}, {0xdc03, 0x3}, {0x100, 0x9}, {0xfffffffc, 0xff0}], 0x8, 0xfe}, {[{0x7fff}, {0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x3}, {0xffff}, {0x9}, {0x1}, {0x367d, 0x3}, {0x3, 0x2}, {0x0, 0x1}], [{0x59000000, 0x8}, {0x1, 0x9}, {0x7fff8, 0x1b0d}, {0xfffff371, 0x4}, {0x8, 0x2}, {0x7ff, 0x2}, {0x8, 0x7}, {0x44, 0xb}, {0x1, 0x6}, {0x400, 0x7}, {0x2, 0x5369}], 0xa, 0xa}], 0xff}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x80}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc70) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008055}, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 11m26.692381699s ago: executing program 33 (id=4539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800001}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m25.379329359s ago: executing program 34 (id=4554): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000180)='trans=rdma,\x8f\x02v\x84\x9c\t\xd7Q+$\xb8M\x06G4\x00\x98\r)YX|\xab#\xb3\xe1\xa7\x7f2\x10v\x9e\x82\xab\xb5\xf1:\x00m\x9f\x88W\x1c\xb6\x01<\xb3\x9e\tAGn\x00\x00\x00\x00') 11m23.97159482s ago: executing program 35 (id=4340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80008000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xb}, {0xa, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m18.222932189s ago: executing program 0 (id=4624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/177, 0xb1}, 0x8000}], 0x1, 0x0, 0x0) 11m17.372009168s ago: executing program 0 (id=4641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x7}, 0x8) 11m17.324721819s ago: executing program 0 (id=4642): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000040000000000000002d00000911179000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x402) syz_emit_ethernet(0x5a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0xfffd, 0x0, 0x0, {[@generic={0xfe, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x1, 0x1, 0xf4, 0x725b, 0x3ff}]}}}}}}}}, 0x0) 11m17.240454291s ago: executing program 0 (id=4644): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) fstat(0xffffffffffffffff, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x2010000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x4b6, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 11m17.232091171s ago: executing program 0 (id=4645): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0xfffc, 0xe652, 0x2, 0x14, 0x7, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) 11m16.701316503s ago: executing program 0 (id=4651): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x5}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x9, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@ssrr={0x89, 0x1f, 0x5d, [@rand_addr=0x64010102, @private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @private=0x2400]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0x77, [@broadcast, @rand_addr=0x64010100]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120003000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@nodelalloc}]}, 0x2, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file2\x00', 0x2000800, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x1, 0x2a7, &(0x7f0000005c00)="$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") truncate(0x0, 0xeb42) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x948, 0x168, 0x10, 0x948, 0xb, 0xb40, 0x250, 0x250, 0xb40, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x100, 0x168, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x80}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008055}, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000201"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 11m16.700919593s ago: executing program 36 (id=4651): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x5}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x9, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@ssrr={0x89, 0x1f, 0x5d, [@rand_addr=0x64010102, @private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @private=0x2400]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0x77, [@broadcast, @rand_addr=0x64010100]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120003000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@nodelalloc}]}, 0x2, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file2\x00', 0x2000800, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x1, 0x2a7, &(0x7f0000005c00)="$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") truncate(0x0, 0xeb42) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x948, 0x168, 0x10, 0x948, 0xb, 0xb40, 0x250, 0x250, 0xb40, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x100, 0x168, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x80}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008055}, 0x1000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000201"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 11m13.808770278s ago: executing program 2 (id=4696): syz_emit_ethernet(0x86, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 11m12.981317306s ago: executing program 2 (id=4703): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") semop(0x0, &(0x7f0000000080), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 11m12.496535777s ago: executing program 8 (id=4708): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000006584ad3146"], 0x78) 11m12.404587869s ago: executing program 8 (id=4711): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) 11m11.513320689s ago: executing program 8 (id=4724): syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) socket$inet6(0xa, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) 11m11.332560083s ago: executing program 8 (id=4725): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 11m11.324903243s ago: executing program 8 (id=4728): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11m11.008438141s ago: executing program 8 (id=4734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xa4, 0x8001, 0x3, 0xfff, 0x9, 0x10001, 0x2, 0x800, 0x1, 0x13, 0x22, 0x200, 0x4, 0x5, 0x8, 0x6, 0x3, 0x2db7, 0x8001, 0x1, 0x0, 0x4, 0x0, 0x8, 0x8, 0x4, 0x4, 0x8, 0x8, 0x3, 0x8, 0xad0a, 0x1, 0xfffff001, 0x0, 0xf7d, 0x2, 0x8, 0x27, 0x7, 0x7f, 0x0, 0x84dc, 0x7, 0x0, 0x6, 0xb, 0x5, 0x40, 0xf, 0x1, 0x100, 0x600, 0x6, 0xff, 0xfffffffb, 0x35, 0x7, 0x4, 0x6, 0x7fffffff, 0x2, 0xb485, 0x6c24, 0x3, 0x401, 0x2aea, 0x5, 0x10000, 0xfffffff8, 0x7, 0x6, 0x8, 0x5, 0x7, 0x5, 0xf, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x100, 0x1, 0x10001, 0x7, 0x582, 0x3, 0x7, 0xe, 0x992d, 0x7, 0x7, 0x1ff, 0x17e, 0x1, 0x1, 0x80, 0x2, 0x9db, 0x80000001, 0x3, 0x1800, 0x400, 0x5, 0x0, 0x1, 0x1, 0x1, 0x9, 0x9, 0xf72, 0x9, 0x70, 0x1, 0x4, 0x0, 0x7ff, 0x9, 0x80, 0x8, 0x0, 0x9, 0x6, 0x7fff, 0x8, 0x62, 0x500, 0x1, 0x7, 0x5, 0x3, 0x1a0000, 0xf7fe, 0xf, 0x2, 0x25, 0x9284, 0x2, 0x1, 0x4, 0x7f, 0x800, 0x1, 0x7fff, 0x732, 0x5, 0x400, 0x9, 0x800, 0x43e1, 0xff, 0x0, 0x652, 0x6, 0x18, 0x6, 0xfffffffc, 0x4, 0x80, 0x2, 0x8, 0x1, 0x6, 0x5, 0xfffffff8, 0x7fff, 0x2, 0x9, 0x3, 0x10000, 0x4, 0x7fffffff, 0x5, 0x7, 0xf, 0x7, 0x3, 0x5, 0x9, 0xf10, 0x3, 0x0, 0x5, 0xd, 0xd, 0x9, 0x8, 0x5, 0x1000, 0x3, 0x0, 0x9, 0x5, 0x6, 0xfffffff6, 0xd3b, 0x8, 0xfffffc00, 0x6, 0x2, 0x4, 0x8000, 0xfffffffc, 0x3c3, 0x5, 0xb, 0x4, 0x1, 0xfff, 0x1, 0x40, 0x6, 0x1ff, 0x7, 0x3, 0x7, 0x5, 0xfec, 0x2, 0x2, 0x5, 0x4, 0x6, 0x7, 0x6, 0x8, 0x6, 0xffffff66, 0xffff193d, 0x1, 0x8001, 0x9, 0x5, 0x7, 0xa, 0x1, 0x1, 0x2, 0x9, 0x6, 0x9, 0x9, 0x1, 0x1, 0x5, 0xc8ec, 0x7fff, 0xfff, 0x5a6e, 0x0, 0x0, 0x1000, 0x1, 0x1000, 0x0, 0x4904]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 11m11.00811525s ago: executing program 37 (id=4734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xa4, 0x8001, 0x3, 0xfff, 0x9, 0x10001, 0x2, 0x800, 0x1, 0x13, 0x22, 0x200, 0x4, 0x5, 0x8, 0x6, 0x3, 0x2db7, 0x8001, 0x1, 0x0, 0x4, 0x0, 0x8, 0x8, 0x4, 0x4, 0x8, 0x8, 0x3, 0x8, 0xad0a, 0x1, 0xfffff001, 0x0, 0xf7d, 0x2, 0x8, 0x27, 0x7, 0x7f, 0x0, 0x84dc, 0x7, 0x0, 0x6, 0xb, 0x5, 0x40, 0xf, 0x1, 0x100, 0x600, 0x6, 0xff, 0xfffffffb, 0x35, 0x7, 0x4, 0x6, 0x7fffffff, 0x2, 0xb485, 0x6c24, 0x3, 0x401, 0x2aea, 0x5, 0x10000, 0xfffffff8, 0x7, 0x6, 0x8, 0x5, 0x7, 0x5, 0xf, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x100, 0x1, 0x10001, 0x7, 0x582, 0x3, 0x7, 0xe, 0x992d, 0x7, 0x7, 0x1ff, 0x17e, 0x1, 0x1, 0x80, 0x2, 0x9db, 0x80000001, 0x3, 0x1800, 0x400, 0x5, 0x0, 0x1, 0x1, 0x1, 0x9, 0x9, 0xf72, 0x9, 0x70, 0x1, 0x4, 0x0, 0x7ff, 0x9, 0x80, 0x8, 0x0, 0x9, 0x6, 0x7fff, 0x8, 0x62, 0x500, 0x1, 0x7, 0x5, 0x3, 0x1a0000, 0xf7fe, 0xf, 0x2, 0x25, 0x9284, 0x2, 0x1, 0x4, 0x7f, 0x800, 0x1, 0x7fff, 0x732, 0x5, 0x400, 0x9, 0x800, 0x43e1, 0xff, 0x0, 0x652, 0x6, 0x18, 0x6, 0xfffffffc, 0x4, 0x80, 0x2, 0x8, 0x1, 0x6, 0x5, 0xfffffff8, 0x7fff, 0x2, 0x9, 0x3, 0x10000, 0x4, 0x7fffffff, 0x5, 0x7, 0xf, 0x7, 0x3, 0x5, 0x9, 0xf10, 0x3, 0x0, 0x5, 0xd, 0xd, 0x9, 0x8, 0x5, 0x1000, 0x3, 0x0, 0x9, 0x5, 0x6, 0xfffffff6, 0xd3b, 0x8, 0xfffffc00, 0x6, 0x2, 0x4, 0x8000, 0xfffffffc, 0x3c3, 0x5, 0xb, 0x4, 0x1, 0xfff, 0x1, 0x40, 0x6, 0x1ff, 0x7, 0x3, 0x7, 0x5, 0xfec, 0x2, 0x2, 0x5, 0x4, 0x6, 0x7, 0x6, 0x8, 0x6, 0xffffff66, 0xffff193d, 0x1, 0x8001, 0x9, 0x5, 0x7, 0xa, 0x1, 0x1, 0x2, 0x9, 0x6, 0x9, 0x9, 0x1, 0x1, 0x5, 0xc8ec, 0x7fff, 0xfff, 0x5a6e, 0x0, 0x0, 0x1000, 0x1, 0x1000, 0x0, 0x4904]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 11m10.55308846s ago: executing program 2 (id=4743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11m10.503601062s ago: executing program 2 (id=4744): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$eJzs3E1oXEUcAPD/2yRN0g8ba622Vk2tYrCYtGm1PQhSUfCgIFZQjyEfJTZtpEnBlipbkHqUonfx6NWDV/VSxJPgtR4FKRTppa0grrzdt5/d3aTJJmvs7webnXnz3puZnTcv82aSDeC+NZz+SErhaxGxPSJyjTsMl95u37w4eefmxcnIFwon/kyKh91K45nsNLEli4zkInKfJtWEGgvnL5yamJubPpvFxxZPfzi2cP7C87MD2ZZjx44cPnT0xfEX7r1STfJL63Vrzyfze3e//v6VNyd7y9vLudXWo1OGY7hZUYqe6XRmXbatJpz0ttqrPmHzWhaIZRnIWqWv2P+3R0+0bLyIyK9jyYC1VigUCv2tk/OFRpfu2gJsWEl0uwRAd5R/0afPv+VXs4HAptrI9o4OQbrqxvHSA1Ba79vZK+LJ4sbyPEhfw/NtJw1HxHv5v75KX7FG8xAAALV+OF6Z/qkf/w2VVkb+Pnf15fT9gWzYNxQRD0bEjoh4KCJ2RsTDEbErIh6JiEcbzt8TEYU2+Q83xCv5Vxahctc7UM2WbhwfjJeyta3q+K+uAEM9WWxbRHnAPH0w+0xGoq9/ZnZu+lCbPH589dfPW6XVjv/SV5p/eSyYleN6b8ME3dTE4sSKK9zgxqWIPb2N9U96I5LKSkASEbsjYs8yzvdF9j5Us232uW/2ViJ99fsvXf+iQtN1tHZLFctU+Dri2VL756Ou/as5JnXrk6cnTk6fnD4zXlmfHBuIuemDYzMtS/PzL5ffapW2ZP2/+73xkNeOfn8i61mrl7b/5prrP8rrt9X6DyURSWW9dqHZWQba5nH5t89aPtOs9PrflLxTDJefSz+aWFw8eyhiU/LG3dvHq8eW4+l75Ev1H9nfvP/vyI5JP4nHIiK9iB+PiCei9ISYln1fRDwVEfvb1P+nV57+YOX1X1tp/aca7n+llq9r/+p6fatAkq0NNknqObXv2p0WN4/ltf+RYmgk2zJ1tdmZkrpbRKuSluc90i3/rPKzAwAAgI0iFxFba+aStkYuNzpamgPaGZtzc/MLiwdm5s+dmUrTIoaiLzczO1ec/yzNB/cl5fnPoZr4eEP8cDZv/GXPYDE+Ojk/N9XVmgNbin0+yY1GvNtT0/9Tf3Rmihn4L+vAOhqwQbXr/+kgfteVdSwMsK6W//v/6sdrWhBg3dX0/1b/4Z9v+ndfwIbn+R+oWvqLftwzYOMr6MtwX7un/n/AlwDC/0lvvF0J57paEmC9Gf/DfWnJ/+tfVaDQ3zxpIO7eOQban7AnVlaMwSZ5dSWQjqy6kvvgSo4qf5tCy30id28n7I/OtOnMKj+N/NmFk7s6fvEXsr+V73QLfrsu/bRZoCu3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI77NwAA///sotgS") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 11m10.183528569s ago: executing program 2 (id=4748): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000600)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 11m8.252551812s ago: executing program 2 (id=4761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r2, r1, 0x0, 0x80004700) 11m8.233865603s ago: executing program 38 (id=4761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r2, r1, 0x0, 0x80004700) 11m5.175172001s ago: executing program 6 (id=4792): r0 = syz_clone(0x2000000, 0x0, 0x46, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x7, 0x2, {{0xa0d8, 0xa, 0x0, 0x0, 0xd99}, 0xa, 0x0, 0x3, 0x7fffffff, 0x0, 0x6, 0x1d, 0x11, 0x3, 0x6, {0x6, 0x81, 0x6, 0x80006, 0x6, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) 11m4.968795745s ago: executing program 6 (id=4793): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) io_setup(0x3ff, &(0x7f0000002840)=0x0) io_submit(r2, 0x1, &(0x7f0000004dc0)=[&(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x401, r1, &(0x7f0000002880)="ac", 0x1, 0x8}]) 11m4.715004661s ago: executing program 6 (id=4795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0xfd02, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 11m4.504916606s ago: executing program 6 (id=4799): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 11m4.484697646s ago: executing program 6 (id=4801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x14f5, 0x4) 11m3.968463128s ago: executing program 6 (id=4810): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000002680)=""/4094, 0xffe}], 0x2) 11m3.967804718s ago: executing program 39 (id=4810): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000002680)=""/4094, 0xffe}], 0x2) 9m41.077948342s ago: executing program 9 (id=6052): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x45a9, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x200000c4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 9m36.695230701s ago: executing program 9 (id=6098): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bind$xdp(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x100) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x1, 0x70bd29, 0x0, {{@in6=@private0, 0x200}, @in6=@mcast2, {@in6=@private0, @in=@remote, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x90}, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff, 0x9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x10}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1002, 0x9}}, 0x128}}, 0x40000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x400c800) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x1}, 0x1}) 9m34.709547015s ago: executing program 9 (id=6099): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timerfd_create(0x7, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100, 0x0, 0x0, 0x5, 0xfc1a, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) rt_sigpending(&(0x7f00000002c0), 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0xffffffeb, 0x40}, 0x8) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000040)) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000140)) 9m34.000819471s ago: executing program 9 (id=6111): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@user_xattr}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xf}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x3, 0x1, 0x0, 0x5, 0xffff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffbff}]) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x348}) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353") ptrace$getregset(0x4205, r0, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/pid\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000020) 9m33.677593558s ago: executing program 9 (id=6116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9m33.008546483s ago: executing program 9 (id=6124): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105c00e0000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 9m33.008135343s ago: executing program 40 (id=6124): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105c00e0000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2.671496402s ago: executing program 3 (id=10606): syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syslog(0xc, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x40200, 0x40) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x100c2, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fstat(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000017a6fe5b1"], 0x24, 0x0) mkdir(0x0, 0x0) 2.363246848s ago: executing program 7 (id=10614): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) setregid(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) syz_open_pts(0xffffffffffffffff, 0x141601) brk(0x200004ffc000) 2.309338119s ago: executing program 7 (id=10615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x266, 0x400000, 0x200, 0x0, 0x4, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1e, 0x1, 0x4000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, 0x0) close(r4) 2.000492836s ago: executing program 7 (id=10617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "d8cbba097ad5cf6a", "06b74c62d85164e4eaf2f237889223cc", "990db03f", "54ce5aaa100e1c1e"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "0001000000000100", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) write(r0, &(0x7f0000000440)="8e2e8cbc", 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.999447876s ago: executing program 7 (id=10618): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.987728916s ago: executing program 3 (id=10619): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x11, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2dbd7000fbdbdf250200000014000180080003007f0000010600010002"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 1.913804968s ago: executing program 3 (id=10620): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) fcntl$setown(r2, 0x8, r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) tkill(r0, 0x13) 1.670365503s ago: executing program 4 (id=10622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 1.536417746s ago: executing program 4 (id=10623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x7, 0x1, [0x2000]}, 0xa) 1.535975966s ago: executing program 4 (id=10624): syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) 1.480685868s ago: executing program 4 (id=10625): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x980}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040854) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) socket(0x2a, 0x6, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) 1.410122669s ago: executing program 4 (id=10627): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.225562733s ago: executing program 5 (id=10630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xf, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 1.029103707s ago: executing program 5 (id=10632): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000061be18710000", @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 1.028643898s ago: executing program 3 (id=10633): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = accept$packet(r0, 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000002c0), 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x896, &(0x7f0000000040)={0x0, 0xfa53, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 984.319688ms ago: executing program 5 (id=10635): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) unshare(0x26020480) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) socket$netlink(0x10, 0x3, 0x5) 922.542229ms ago: executing program 5 (id=10637): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0x2, 0x4f394f16079fe1f3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xb, 0x0, 0xd, 0xa, 0x2, 0xf, 0x5, 0xf, 0x2, 0x1, 0x1, 0xc, 0x4, 0x0, 0x2, 0x4], 0x1, [0x9, 0xfc5, 0x9, 0xfbac, 0x2, 0x336, 0x101, 0x0, 0x0, 0x0, 0x8, 0x9, 0x9cc, 0x5, 0xc636], [0xf001, 0x5, 0xff05, 0x6, 0x10, 0x9, 0x200, 0x4, 0xe495, 0x2, 0x75, 0x7, 0x5, 0x4, 0xb, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 854.498811ms ago: executing program 5 (id=10639): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) 819.282322ms ago: executing program 1 (id=10640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) gettid() sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 732.337704ms ago: executing program 3 (id=10641): openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sync() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) close(0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 702.978164ms ago: executing program 1 (id=10642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x3, 0x8f, 0x8000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x13}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="691e243e3a6328ceb31c80645b76", 0xe}], 0x1}, 0x20008110) 620.947746ms ago: executing program 1 (id=10643): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500), 0x5}, 0x38) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 553.473838ms ago: executing program 7 (id=10644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 553.049768ms ago: executing program 1 (id=10645): socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(0x0, 0x8c, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x241c4000, 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0xfffc}}}}}}, 0x0) 552.732548ms ago: executing program 4 (id=10646): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) writev(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1, 0x0, 0xfffffffd}) 552.366608ms ago: executing program 3 (id=10647): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 476.40854ms ago: executing program 1 (id=10648): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 475.97109ms ago: executing program 7 (id=10649): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x24}}], 0x400000000000179, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 372.731482ms ago: executing program 1 (id=10650): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 0s ago: executing program 5 (id=10651): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) kernel console output (not intermixed with test programs): ); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 817.080947][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.644305][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 818.659612][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.909566][T28763] netlink: 'syz.4.8049': attribute type 3 has an invalid length. [ 818.918666][T28763] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8049'. [ 819.214946][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 819.214962][ T28] audit: type=1326 audit(2000000576.672:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.375948][T28772] syz.1.8061 (28772): attempted to duplicate a private mapping with mremap. This is not supported. [ 819.397272][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 819.411755][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 819.447382][ T28] audit: type=1326 audit(2000000576.832:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.488154][ T28] audit: type=1326 audit(2000000576.832:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.517966][ T28] audit: type=1326 audit(2000000576.832:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.546009][ T28] audit: type=1326 audit(2000000576.832:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.585015][ T28] audit: type=1326 audit(2000000576.892:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.616977][ T28] audit: type=1326 audit(2000000576.892:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.654134][ T28] audit: type=1326 audit(2000000576.892:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.744020][T28780] netlink: 'syz.5.8053': attribute type 3 has an invalid length. [ 819.752080][T28780] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8053'. [ 819.818656][ T28] audit: type=1326 audit(2000000576.892:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 819.846242][ T28] audit: type=1326 audit(2000000576.892:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.1.8061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 820.039403][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 820.053838][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 820.834432][T28796] netlink: 'syz.7.8055': attribute type 1 has an invalid length. [ 820.867819][T28796] bond6: (slave veth5): Enslaving as an active interface with a down link [ 820.881208][T28796] netlink: 'syz.7.8055': attribute type 10 has an invalid length. [ 820.889146][T28796] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8055'. [ 821.401516][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 821.416540][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 822.253551][T28807] lo speed is unknown, defaulting to 1000 [ 822.291875][T28807] xfrm0 speed is unknown, defaulting to 1000 [ 822.436822][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8058'. [ 822.442581][T28810] veth0_vlan: entered allmulticast mode [ 822.480517][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8060'. [ 822.789320][T28810] veth0_vlan (unregistering): left allmulticast mode [ 822.902020][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 822.917063][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.315439][T28834] netlink: 'syz.3.8067': attribute type 3 has an invalid length. [ 823.323824][T28834] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8067'. [ 823.376484][T28838] IPVS: length: 89 != 24 [ 823.556573][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 823.571040][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 824.630483][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 824.645515][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.057084][T28865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8077'. [ 825.156385][T28866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8078'. [ 825.215203][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 825.230254][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.275595][T28869] veth0_vlan: entered allmulticast mode [ 825.283757][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8079'. [ 825.386856][T28875] rdma_rxe: rxe_newlink: failed to add lo [ 825.946324][T28869] veth0_vlan (unregistering): left allmulticast mode [ 826.114388][T28884] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 826.636847][ T3425] net_ratelimit: 2 callbacks suppressed [ 826.636865][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 826.657560][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 826.741975][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 826.741994][ T28] audit: type=1400 audit(2000000584.192:3750): avc: denied { create } for pid=28890 comm="syz.5.8086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 826.782464][T28891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8084'. [ 826.914248][ T28] audit: type=1326 audit(2000000584.262:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 826.953450][ T28] audit: type=1326 audit(2000000584.302:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 827.143691][ T28] audit: type=1326 audit(2000000584.302:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 827.455177][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 827.469551][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 827.930533][ T28] audit: type=1326 audit(2000000584.302:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 827.956820][ T28] audit: type=1326 audit(2000000584.302:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 828.053733][ T28] audit: type=1326 audit(2000000584.302:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 828.105999][ T28] audit: type=1326 audit(2000000584.302:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 828.131652][ T28] audit: type=1326 audit(2000000584.302:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 828.202943][ T28] audit: type=1326 audit(2000000584.302:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.5.8086" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 828.242296][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8090'. [ 828.338477][T28910] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 828.360218][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8092'. [ 828.469583][T28913] bridge0: port 1(team0) entered blocking state [ 828.475877][T28913] bridge0: port 1(team0) entered disabled state [ 828.493377][T28913] team0: entered allmulticast mode [ 828.499163][T28913] team_slave_0: entered allmulticast mode [ 828.505842][T28913] team_slave_1: entered allmulticast mode [ 828.526501][T28913] team0: entered promiscuous mode [ 828.540157][T28913] team_slave_0: entered promiscuous mode [ 828.548585][T28913] team_slave_1: entered promiscuous mode [ 828.621580][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 828.636581][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 829.187484][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 829.202179][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 829.752719][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 829.767150][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 831.962821][ T6272] net_ratelimit: 4 callbacks suppressed [ 831.962839][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 831.982801][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 832.707645][T29082] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8109'. [ 832.718098][T29082] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8109'. [ 833.042762][T29086] netlink: 'syz.5.8110': attribute type 21 has an invalid length. [ 833.050783][T29086] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8110'. [ 833.680700][T29086] netlink: 'syz.5.8110': attribute type 5 has an invalid length. [ 833.688975][T29086] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8110'. [ 833.753606][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 833.768587][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 833.812034][T29078] netlink: 'syz.7.8105': attribute type 4 has an invalid length. [ 834.094065][T29079] xt_hashlimit: max too large, truncated to 1048576 [ 834.764958][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 834.779369][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 835.301862][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 835.316305][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 835.407966][ T28] kauditd_printk_skb: 228 callbacks suppressed [ 835.407983][ T28] audit: type=1326 audit(2000000592.862:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.464707][ T28] audit: type=1326 audit(2000000592.872:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.514921][ T28] audit: type=1326 audit(2000000592.872:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.581663][ T28] audit: type=1326 audit(2000000592.872:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.618331][ T28] audit: type=1326 audit(2000000592.872:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.645491][ T28] audit: type=1326 audit(2000000592.872:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.683408][T29108] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 835.703324][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8117'. [ 835.710496][T29112] netlink: 'syz.4.8119': attribute type 3 has an invalid length. [ 835.731228][ T28] audit: type=1326 audit(2000000592.872:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.735761][T29112] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8119'. [ 835.792846][T29118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8120'. [ 835.796605][ T28] audit: type=1326 audit(2000000592.872:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.828784][ T28] audit: type=1326 audit(2000000592.872:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.854953][ T28] audit: type=1326 audit(2000000592.872:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 835.881849][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 835.896424][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 837.047839][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 837.062826][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 838.049453][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 838.064615][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 838.338732][T29144] xt_hashlimit: size too large, truncated to 1048576 [ 838.353959][T29144] xt_hashlimit: overflow, try lower: 3/0 [ 839.575692][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 839.590137][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 839.689788][T29161] netlink: 'syz.1.8132': attribute type 3 has an invalid length. [ 839.772278][T29161] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8132'. [ 839.809726][T29168] rdma_rxe: rxe_newlink: failed to add lo [ 840.930285][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 840.944840][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 841.278974][T29180] 9pnet_fd: Insufficient options for proto=fd [ 841.869776][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 841.884181][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 842.341017][T29184] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 842.982256][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 842.996707][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 843.895869][T29193] netlink: 'syz.3.8137': attribute type 1 has an invalid length. [ 844.013098][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8137'. [ 844.078195][T29193] bond5: (slave dummy0): making interface the new active one [ 844.085983][T29193] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 844.504045][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 844.519175][ T6272] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 844.976922][T29211] veth0_vlan: entered allmulticast mode [ 844.985902][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 844.985919][ T28] audit: type=1400 audit(2000000602.436:4169): avc: denied { setattr } for pid=29207 comm="syz.3.8146" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 845.025296][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8144'. [ 845.044725][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 845.059135][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 845.100389][ T28] audit: type=1400 audit(2000000602.476:4170): avc: denied { write } for pid=29207 comm="syz.3.8146" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 845.193292][ T28] audit: type=1400 audit(2000000602.476:4171): avc: denied { add_name } for pid=29207 comm="syz.3.8146" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 845.236851][ T28] audit: type=1400 audit(2000000602.506:4172): avc: denied { create } for pid=29207 comm="syz.3.8146" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 845.293974][T29211] veth0_vlan (unregistering): left allmulticast mode [ 845.643016][T15213] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 845.657522][T15213] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 846.282985][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 846.297420][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 846.325884][T29284] netlink: 'syz.1.8150': attribute type 3 has an invalid length. [ 846.456019][T29284] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 847.164968][T29298] netlink: 'syz.5.8153': attribute type 4 has an invalid length. [ 847.507642][T29304] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8154'. [ 847.548187][T29304] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8154'. [ 848.462776][T16605] net_ratelimit: 4 callbacks suppressed [ 848.462792][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 848.482724][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 848.527257][T29316] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8159'. [ 849.400879][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 849.415269][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 850.018516][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 850.033495][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 850.658605][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 850.673638][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 851.188541][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8163'. [ 851.703224][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 851.717759][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 853.089585][T29351] netlink: 'syz.4.8167': attribute type 1 has an invalid length. [ 853.113839][T29353] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 853.169020][T29351] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 853.178651][T29355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8168'. [ 853.278059][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8167'. [ 853.404226][T29351] bond7 (unregistering): (slave ip6gretap2): Releasing backup interface [ 853.418596][T29361] netlink: 'syz.3.8170': attribute type 21 has an invalid length. [ 853.427009][T29361] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8170'. [ 853.439035][T29351] bond7 (unregistering): Released all slaves [ 853.495233][T29361] netlink: 'syz.3.8170': attribute type 5 has an invalid length. [ 853.504119][T29361] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8170'. [ 853.558650][T29367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8172'. [ 853.632771][T29367] netlink: 'syz.3.8172': attribute type 29 has an invalid length. [ 853.884715][ T12] net_ratelimit: 4 callbacks suppressed [ 853.884760][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 853.905388][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.952908][T29382] netlink: 'syz.3.8177': attribute type 29 has an invalid length. [ 855.921382][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 855.935765][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.978312][T29382] netlink: 'syz.3.8177': attribute type 29 has an invalid length. [ 856.469789][T29385] sctp: [Deprecated]: syz.1.8178 (pid 29385) Use of int in max_burst socket option. [ 856.469789][T29385] Use struct sctp_assoc_value instead [ 856.501748][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 856.516233][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 856.555577][T29382] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 856.717011][T29390] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8179'. [ 856.737153][T29390] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8179'. [ 856.775562][T29394] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 857.758208][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 857.772583][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.914848][T29407] netlink: 'syz.5.8184': attribute type 1 has an invalid length. [ 858.786818][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 858.807072][T29399] netlink: 'syz.1.8182': attribute type 21 has an invalid length. [ 858.815833][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8184'. [ 858.825315][T29399] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8182'. [ 858.850618][T29411] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 859.501185][T16605] net_ratelimit: 1 callbacks suppressed [ 859.501202][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 859.521391][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 859.582645][T29412] bond7 (unregistering): (slave ip6gretap2): Releasing backup interface [ 859.676206][T29412] bond7 (unregistering): Released all slaves [ 859.693043][T29399] netlink: 'syz.1.8182': attribute type 5 has an invalid length. [ 859.701816][T29399] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8182'. [ 859.813625][T29422] IPVS: Unknown mcast interface: batadv0 [ 860.820611][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 860.835622][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.648873][T29437] netlink: 'syz.1.8189': attribute type 1 has an invalid length. [ 861.662629][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 861.677089][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.093475][T29437] bond2: (slave veth3): Enslaving as an active interface with a down link [ 862.106834][T29441] batman_adv: batadv0: Removing interface: dummy0 [ 862.115399][T29441] bond2: (slave dummy0): making interface the new active one [ 862.123210][T29441] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 862.184372][T29449] sctp: [Deprecated]: syz.4.8194 (pid 29449) Use of int in max_burst socket option. [ 862.184372][T29449] Use struct sctp_assoc_value instead [ 862.203112][T29448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8193'. [ 862.218303][T16605] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.233503][ T28] audit: type=1400 audit(2000000619.666:4173): avc: denied { create } for pid=29446 comm="syz.3.8193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 862.254952][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 862.269415][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.284999][T16605] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.295466][T16605] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.304359][T16605] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.304459][ T28] audit: type=1400 audit(2000000619.756:4174): avc: denied { accept } for pid=29450 comm="syz.5.8195" path="socket:[86470]" dev="sockfs" ino=86470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 862.341688][T29451] batadv_slave_1: entered promiscuous mode [ 862.347627][T29451] macsec1: entered allmulticast mode [ 862.352959][T29451] batadv_slave_1: entered allmulticast mode [ 862.363305][T29451] batadv_slave_1: left allmulticast mode [ 862.369652][T29451] batadv_slave_1: left promiscuous mode [ 863.004416][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 863.019752][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 863.642876][T29490] veth0_to_team: entered promiscuous mode [ 864.642598][T29490] pimreg: entered allmulticast mode [ 864.666347][T29495] pimreg: left allmulticast mode [ 864.905641][T29493] xt_hashlimit: max too large, truncated to 1048576 [ 865.043265][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 865.058287][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.855305][T29507] lo speed is unknown, defaulting to 1000 [ 866.180530][T29507] xfrm0 speed is unknown, defaulting to 1000 [ 866.676019][ T361] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 866.690479][ T361] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.738470][ T28] audit: type=1326 audit(2000000624.195:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 866.988129][ T28] audit: type=1326 audit(2000000624.215:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.043598][ T28] audit: type=1326 audit(2000000624.225:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.117227][ T28] audit: type=1326 audit(2000000624.225:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.291323][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 867.305747][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 867.324260][T29512] sctp: [Deprecated]: syz.7.8209 (pid 29512) Use of int in max_burst socket option. [ 867.324260][T29512] Use struct sctp_assoc_value instead [ 867.495799][ T28] audit: type=1326 audit(2000000624.225:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.625390][ T28] audit: type=1326 audit(2000000624.225:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.817758][ T28] audit: type=1326 audit(2000000624.225:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.952681][ T28] audit: type=1326 audit(2000000624.225:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 867.994195][ T28] audit: type=1326 audit(2000000624.225:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 868.163998][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 868.178429][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.162933][ T28] audit: type=1326 audit(2000000624.225:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 869.191173][ T28] audit: type=1326 audit(2000000624.225:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 869.734202][ T28] audit: type=1326 audit(2000000624.225:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 869.784097][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 869.798649][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.833418][ T28] audit: type=1326 audit(2000000624.225:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 869.917918][ T28] audit: type=1326 audit(2000000624.225:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.5.8207" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d705de59 code=0x7ffc0000 [ 870.184879][T29536] sctp: [Deprecated]: syz.4.8226 (pid 29536) Use of int in maxseg socket option. [ 870.184879][T29536] Use struct sctp_assoc_value instead [ 870.402635][T29543] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8215'. [ 870.404603][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 870.426469][T15218] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.441630][T29543] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8215'. [ 871.408875][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 871.423311][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.409299][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 872.423705][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.497377][T29548] xt_hashlimit: max too large, truncated to 1048576 [ 873.513855][T29560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8221'. [ 873.710727][T29558] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8221'. [ 874.405045][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 874.419441][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.296874][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 875.311267][ T12] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.756479][T29563] netlink: 'syz.4.8222': attribute type 3 has an invalid length. [ 875.779031][T29563] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8222'. [ 875.789448][T29558] bond_slave_0: entered promiscuous mode [ 875.801112][T29558] bond_slave_0: entered allmulticast mode [ 875.839682][T29565] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 875.896478][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 875.896497][ T28] audit: type=1400 audit(2000000633.304:4245): avc: denied { relabelto } for pid=29562 comm="syz.3.8223" name="bus" dev="tmpfs" ino=3838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 875.953619][ T28] audit: type=1400 audit(2000000633.314:4246): avc: denied { associate } for pid=29562 comm="syz.3.8223" name="bus" dev="tmpfs" ino=3838 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 876.116084][T29581] netlink: 'syz.3.8228': attribute type 3 has an invalid length. [ 876.124202][T29581] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8228'. [ 876.323878][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 876.338345][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 877.613526][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 877.627984][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 878.687914][T29601] netlink: 'syz.3.8230': attribute type 19 has an invalid length. [ 878.741597][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8230'. [ 878.837227][T29601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=29601 comm=syz.3.8230 [ 878.850440][T29601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=29601 comm=syz.3.8230 [ 879.183863][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 879.198332][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 879.298856][T29623] futex_wake_op: syz.7.8232 tries to shift op by 144; fix this program [ 879.318509][ T28] audit: type=1400 audit(2000000636.554:4247): avc: denied { write } for pid=29577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.363380][T29624] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8233'. [ 879.374748][T29627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8232'. [ 879.543659][ T28] audit: type=1400 audit(2000000636.564:4248): avc: denied { write } for pid=29619 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.022371][ T28] audit: type=1400 audit(2000000637.473:4249): avc: denied { write } for pid=29629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.108978][ T28] audit: type=1400 audit(2000000637.513:4250): avc: denied { write } for pid=29658 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.136835][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 880.151348][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 880.901797][T29705] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 881.107018][T29703] netlink: 'syz.7.8239': attribute type 3 has an invalid length. [ 881.166450][T29703] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8239'. [ 881.237224][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 881.251627][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.580675][T29708] netlink: 'syz.7.8240': attribute type 3 has an invalid length. [ 881.589003][T29708] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8240'. [ 881.733655][T29710] netlink: 'syz.7.8241': attribute type 3 has an invalid length. [ 881.768728][T29710] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8241'. [ 882.038161][T29719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8243'. [ 882.066864][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 882.081937][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 882.386793][T29724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8244'. [ 882.658806][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 882.673218][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 883.578182][T24036] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 883.593279][T24036] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 883.625409][T29765] netlink: 'syz.5.8252': attribute type 3 has an invalid length. [ 883.637961][T29765] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8252'. [ 884.978537][ T361] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 884.992918][ T361] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.068368][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 886.082850][ T5740] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.844241][T29862] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 887.366394][T29872] netlink: 'syz.5.8260': attribute type 29 has an invalid length. [ 887.788376][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8261'. [ 888.215393][T29886] netlink: 'syz.5.8265': attribute type 3 has an invalid length. [ 888.239440][T29886] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8265'. [ 888.267552][T24048] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 888.281997][T24048] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 888.867588][T24034] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 888.882213][T24034] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 891.963790][T29949] xt_NFQUEUE: number of total queues is 0 [ 892.335800][T24041] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 892.350775][T24041] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 892.868399][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 892.882840][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 893.850696][T24044] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 893.865114][T24044] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 894.449606][T29973] lo speed is unknown, defaulting to 1000 [ 895.150829][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 895.165255][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 896.044561][T29973] xfrm0 speed is unknown, defaulting to 1000 [ 896.050639][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 896.065066][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 896.082518][ T28] audit: type=1400 audit(2000000653.452:4251): avc: denied { write } for pid=29968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.207773][ T28] audit: type=1400 audit(2000000653.582:4252): avc: denied { write } for pid=30000 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.670584][T30007] futex_wake_op: syz.3.8280 tries to shift op by 144; fix this program [ 896.738946][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8280'. [ 896.748650][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 896.763058][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 897.151525][T30023] netlink: 'syz.7.8279': attribute type 29 has an invalid length. [ 897.164178][T30023] netlink: 'syz.7.8279': attribute type 29 has an invalid length. [ 897.212041][T30017] lo speed is unknown, defaulting to 1000 [ 897.251945][T30017] xfrm0 speed is unknown, defaulting to 1000 [ 897.258457][T30023] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 897.411208][ T28] audit: type=1400 audit(2000000654.831:4253): avc: denied { setopt } for pid=30027 comm="syz.3.8285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 897.477786][T30038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=30038 comm=syz.4.8287 [ 897.490351][T24041] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 899.460667][ T3425] net_ratelimit: 5 callbacks suppressed [ 899.460682][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 899.480740][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 900.013811][T30057] pimreg: entered allmulticast mode [ 900.021382][T30057] pimreg: left allmulticast mode [ 900.300322][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 900.314729][ T3425] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 900.524746][T30074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.596115][ T28] audit: type=1326 audit(2000000658.041:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 900.622972][T30078] futex_wake_op: syz.4.8294 tries to shift op by 144; fix this program [ 900.712692][T30081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8294'. [ 900.852591][T24048] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 900.867008][T24048] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 900.903750][ T28] audit: type=1326 audit(2000000658.041:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.053432][ T28] audit: type=1326 audit(2000000658.041:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.079741][ T28] audit: type=1326 audit(2000000658.041:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.110316][ T28] audit: type=1326 audit(2000000658.041:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.140190][ T28] audit: type=1326 audit(2000000658.041:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.166170][ T28] audit: type=1326 audit(2000000658.041:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.192010][ T28] audit: type=1326 audit(2000000658.041:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.218263][ T28] audit: type=1326 audit(2000000658.041:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.247030][ T28] audit: type=1326 audit(2000000658.041:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.278117][ T28] audit: type=1326 audit(2000000658.041:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.308702][ T28] audit: type=1326 audit(2000000658.041:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.377779][ T28] audit: type=1326 audit(2000000658.041:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.404908][ T28] audit: type=1326 audit(2000000658.041:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30067 comm="syz.1.8293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 901.436449][T30098] team_slave_1: Caught tx_queue_len zero misconfig [ 901.556349][T30112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=30112 comm=syz.5.8305 [ 901.571176][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 901.586286][T28652] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.173975][T24041] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 902.189557][T24041] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 904.789669][T24052] net_ratelimit: 8 callbacks suppressed [ 904.789695][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 904.809711][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 904.996112][T30199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8317'. [ 905.115537][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8317'. [ 905.448084][T30227] netlink: 'syz.1.8329': attribute type 3 has an invalid length. [ 905.456174][T30227] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8329'. [ 905.582322][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 905.596722][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 905.916830][T30257] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 906.034680][T30264] netlink: 'syz.7.8344': attribute type 3 has an invalid length. [ 906.042672][T30264] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8344'. [ 906.136641][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8346'. [ 906.154651][T30272] netlink: 'syz.4.8346': attribute type 29 has an invalid length. [ 906.162927][ T361] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 906.177325][ T361] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 906.431771][T30302] netlink: 'syz.7.8360': attribute type 3 has an invalid length. [ 906.440194][T30302] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8360'. [ 906.819769][T28650] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 906.834293][T28650] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.516657][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 908.531159][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 910.964600][T24050] net_ratelimit: 2 callbacks suppressed [ 910.964619][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 910.985332][T24050] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.461594][T30391] batadv0: Caught tx_queue_len zero misconfig [ 912.729679][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 912.744163][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.758649][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 912.758663][ T28] audit: type=1400 audit(2000000670.180:4371): avc: denied { mount } for pid=30367 comm="syz.7.8388" name="/" dev="rpc_pipefs" ino=89262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 914.392889][T30435] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8388'. [ 915.763898][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 915.778395][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.199979][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 917.214414][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.338469][T30475] netlink: 'syz.7.8406': attribute type 1 has an invalid length. [ 917.393172][T30479] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8406'. [ 917.911663][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 917.926192][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.624471][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 919.639649][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.716383][T30504] Cannot find set identified by id 0 to match [ 920.234556][T30522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8427'. [ 920.244094][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 920.258512][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.031325][T30540] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.8430'. [ 921.041042][T30540] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 921.231875][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 922.238973][T15215] net_ratelimit: 1 callbacks suppressed [ 922.238992][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 922.259056][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 922.375563][T30558] xt_NFQUEUE: number of total queues is 0 [ 922.740131][T30579] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8445'. [ 923.792554][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 923.806934][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.487365][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 924.501830][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 925.071654][T30621] xt_NFQUEUE: number of total queues is 0 [ 925.132015][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 925.146474][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 926.155852][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 926.170273][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 927.449093][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 927.464275][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.444695][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 928.459696][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.210720][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 929.225125][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.306649][T30709] netlink: 'syz.5.8498': attribute type 3 has an invalid length. [ 929.314910][T30709] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8498'. [ 929.514462][T30713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8500'. [ 929.743537][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 929.757958][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.292641][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 930.307077][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.667239][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8548'. [ 930.685027][T30816] netlink: 'syz.7.8551': attribute type 3 has an invalid length. [ 930.693377][T30816] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8551'. [ 931.921993][T30858] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 932.676900][T30890] netlink: 'syz.4.8579': attribute type 3 has an invalid length. [ 932.685240][T30890] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8579'. [ 932.883460][T30915] netlink: 'syz.4.8593': attribute type 3 has an invalid length. [ 932.891401][T30915] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8593'. [ 932.902094][T24052] net_ratelimit: 8 callbacks suppressed [ 932.902109][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 932.922130][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.452930][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 933.467372][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.791812][T30924] netlink: 'syz.7.8595': attribute type 3 has an invalid length. [ 933.800124][T30924] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8595'. [ 933.960608][T30958] netlink: 'syz.5.8612': attribute type 3 has an invalid length. [ 933.975512][T30958] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8612'. [ 933.993085][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 934.007501][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.010488][T30962] netlink: 'syz.3.8615': attribute type 19 has an invalid length. [ 934.041059][T30962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8615'. [ 934.065054][T30966] futex_wake_op: syz.4.8614 tries to shift op by -1; fix this program [ 934.169365][T30978] netlink: 'syz.3.8621': attribute type 3 has an invalid length. [ 934.184726][T30978] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8621'. [ 934.278603][T31002] netlink: 'syz.5.8633': attribute type 3 has an invalid length. [ 934.410363][T31023] netlink: 'syz.4.8642': attribute type 3 has an invalid length. [ 934.419858][T31023] __nla_validate_parse: 1 callbacks suppressed [ 934.419881][T31023] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8642'. [ 934.514835][T31032] netlink: 'syz.7.8647': attribute type 3 has an invalid length. [ 934.530387][T31032] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8647'. [ 934.574132][T31046] netlink: 'syz.4.8653': attribute type 3 has an invalid length. [ 934.582173][T31046] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8653'. [ 934.596267][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 934.610745][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.887029][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8673'. [ 934.896925][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8673'. [ 934.996964][T31090] netlink: 'syz.1.8675': attribute type 3 has an invalid length. [ 935.004926][T31090] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8675'. [ 935.335834][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 935.350466][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 935.367446][T31088] netlink: 'syz.5.8674': attribute type 33 has an invalid length. [ 935.410734][T31083] netlink: 'syz.3.8670': attribute type 3 has an invalid length. [ 935.430170][T31083] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8670'. [ 935.642344][T31134] netlink: 'syz.7.8693': attribute type 3 has an invalid length. [ 935.650784][T31134] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8693'. [ 935.720345][T31113] pimreg: entered allmulticast mode [ 935.741653][T31142] netlink: 'syz.5.8697': attribute type 3 has an invalid length. [ 935.753031][T31113] pimreg: left allmulticast mode [ 935.758879][T31142] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8697'. [ 935.880739][T31163] netlink: 'syz.4.8706': attribute type 3 has an invalid length. [ 935.889063][T31163] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8706'. [ 936.037886][T31177] netlink: 'syz.7.8712': attribute type 3 has an invalid length. [ 936.861572][T31197] bond0 (unregistering): left promiscuous mode [ 936.867994][T31197] bond_slave_0: left promiscuous mode [ 936.873962][T31197] bond0 (unregistering): left allmulticast mode [ 936.880308][T31197] bond_slave_0: left allmulticast mode [ 936.891317][T31197] team0: Port device bond0 removed [ 936.973755][T31197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.985536][T31197] bond0 (unregistering): Released all slaves [ 937.121187][T31200] pimreg: entered allmulticast mode [ 937.135475][T31206] pimreg: left allmulticast mode [ 937.514229][T31216] lo speed is unknown, defaulting to 1000 [ 937.751091][T31216] xfrm0 speed is unknown, defaulting to 1000 [ 938.014060][T24052] net_ratelimit: 8 callbacks suppressed [ 938.014076][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 938.033998][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 938.596195][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 938.611285][T16603] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 938.729158][ T28] audit: type=1400 audit(2000000696.176:4372): avc: denied { getopt } for pid=31295 comm="syz.5.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 938.921791][ T28] audit: type=1326 audit(2000000696.366:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 938.973448][ T28] audit: type=1326 audit(2000000696.366:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.001889][ T28] audit: type=1326 audit(2000000696.366:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.068308][ T28] audit: type=1326 audit(2000000696.366:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.133712][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 939.148159][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.162829][ T28] audit: type=1326 audit(2000000696.396:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.219142][T31332] tmpfs: Bad value for 'mpol' [ 939.226935][ T28] audit: type=1326 audit(2000000696.406:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.313200][ T28] audit: type=1326 audit(2000000696.406:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.343506][ T28] audit: type=1326 audit(2000000696.406:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.446862][T31362] validate_nla: 8 callbacks suppressed [ 939.446877][T31362] netlink: 'syz.4.8794': attribute type 1 has an invalid length. [ 939.460805][T31362] __nla_validate_parse: 12 callbacks suppressed [ 939.460818][T31362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8794'. [ 939.500054][ T28] audit: type=1326 audit(2000000696.406:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31317 comm="syz.1.8773" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 939.535888][T31362] netlink: 'syz.4.8794': attribute type 1 has an invalid length. [ 939.616218][T31378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8802'. [ 939.689366][T31390] netlink: 'syz.5.8808': attribute type 3 has an invalid length. [ 939.698170][T31390] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8808'. [ 939.723905][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 939.738883][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.775104][T31400] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8812'. [ 939.795395][T31400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8812'. [ 940.276093][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 940.290512][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 941.110171][T31490] netlink: 'syz.5.8856': attribute type 3 has an invalid length. [ 941.118425][T31490] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8856'. [ 941.235028][T31513] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8865'. [ 941.252015][T31516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8868'. [ 941.287590][T31516] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8868'. [ 941.349050][T31535] tmpfs: Bad value for 'mpol' [ 941.354661][T31534] ./file0: Can't open blockdev [ 941.365959][T31537] netlink: 'syz.5.8878': attribute type 10 has an invalid length. [ 941.395288][T31537] bridge0: port 2(gretap0) entered disabled state [ 941.401817][T31537] bridge0: port 1(team0) entered disabled state [ 941.446995][T31537] team0: Device bridge0 is already an upper device of the team interface [ 941.545128][T31560] netlink: 'syz.4.8889': attribute type 3 has an invalid length. [ 941.553098][T31560] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8889'. [ 942.175864][T31681] netlink: 'syz.3.8934': attribute type 3 has an invalid length. [ 942.224645][T31687] netlink: 'syz.5.8935': attribute type 3 has an invalid length. [ 942.458203][T31738] netlink: 'syz.4.8953': attribute type 3 has an invalid length. [ 942.758891][T31798] netlink: 'syz.4.8966': attribute type 3 has an invalid length. [ 943.364483][T16605] net_ratelimit: 11 callbacks suppressed [ 943.364500][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 943.384513][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.908038][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 943.922477][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.948537][T31860] infiniband !yz!: RDMA CMA: cma_listen_on_dev, error -98 [ 944.182267][T31912] x_tables: duplicate underflow at hook 1 [ 944.248525][T31927] tmpfs: Bad value for 'mpol' [ 944.474787][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 944.489244][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 944.544739][T31989] validate_nla: 1 callbacks suppressed [ 944.544796][T31989] netlink: 'syz.3.9056': attribute type 3 has an invalid length. [ 944.559372][T31989] __nla_validate_parse: 6 callbacks suppressed [ 944.559409][T31989] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9056'. [ 944.723921][T32020] netlink: 'syz.4.9072': attribute type 3 has an invalid length. [ 944.734602][T32020] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9072'. [ 944.785990][T32035] tmpfs: Bad value for 'nr_inodes' [ 944.848662][T32047] netlink: 'syz.5.9083': attribute type 3 has an invalid length. [ 945.030068][T32084] netlink: 'syz.4.9096': attribute type 3 has an invalid length. [ 945.038118][T32084] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9096'. [ 945.048762][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 945.063135][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.148294][T32110] netlink: 'syz.7.9105': attribute type 1 has an invalid length. [ 945.237534][T32127] bond0: peer notification delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 945.264436][T32129] netlink: 'syz.3.9112': attribute type 3 has an invalid length. [ 945.272178][T32129] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9112'. [ 945.545038][T32190] netlink: 'syz.5.9133': attribute type 3 has an invalid length. [ 945.553207][T32190] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9133'. [ 945.595418][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 945.605140][T32198] netlink: 'syz.3.9135': attribute type 3 has an invalid length. [ 945.609809][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.617802][T32198] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9135'. [ 945.725496][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9137'. [ 945.875774][T32246] netlink: 'syz.4.9147': attribute type 3 has an invalid length. [ 945.883705][T32246] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9147'. [ 945.997666][T32255] netlink: 'syz.3.9153': attribute type 3 has an invalid length. [ 946.005818][T32255] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9153'. [ 946.875666][T32298] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9174'. [ 948.794726][ T132] net_ratelimit: 10 callbacks suppressed [ 948.794745][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 948.815367][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.334912][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 949.349370][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.875368][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 949.889785][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.425243][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 950.440327][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.485150][ T371] validate_nla: 12 callbacks suppressed [ 950.485174][ T371] netlink: 'syz.4.9403': attribute type 3 has an invalid length. [ 950.498705][ T371] __nla_validate_parse: 15 callbacks suppressed [ 950.498748][ T371] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9403'. [ 950.974973][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 950.989385][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.088584][ T373] netlink: 'syz.3.9404': attribute type 1 has an invalid length. [ 951.098777][ T373] netlink: 'syz.3.9404': attribute type 2 has an invalid length. [ 951.106787][ T373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9404'. [ 951.159494][ T386] netlink: 'syz.7.9411': attribute type 1 has an invalid length. [ 951.219510][ T393] netlink: 148 bytes leftover after parsing attributes in process `syz.7.9414'. [ 951.240333][ T393] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9414'. [ 951.251772][ T393] netlink: 'syz.7.9414': attribute type 1 has an invalid length. [ 951.312090][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 951.312104][ T28] audit: type=1400 audit(2000000708.755:4383): avc: denied { setopt } for pid=402 comm="syz.1.9420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 951.586186][ T464] netlink: 'syz.5.9448': attribute type 3 has an invalid length. [ 951.594096][ T464] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9448'. [ 951.685763][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9455'. [ 951.744629][ T486] netlink: 'syz.5.9460': attribute type 3 has an invalid length. [ 951.752671][ T486] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9460'. [ 951.786275][ T496] netlink: 'syz.1.9461': attribute type 3 has an invalid length. [ 951.797862][ T496] netlink: 'syz.1.9461': attribute type 8 has an invalid length. [ 951.806076][ T496] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.9461'. [ 951.832523][ T503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9464'. [ 952.069539][ T542] netlink: 'syz.1.9482': attribute type 3 has an invalid length. [ 952.077710][ T542] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9482'. [ 952.210441][ T570] xt_connbytes: Forcing CT accounting to be enabled [ 952.218126][ T570] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 952.339728][ T596] xt_hl: Unknown TTL match mode: 29 [ 952.529013][ T28] audit: type=1400 audit(2000000709.975:4384): avc: denied { read } for pid=625 comm="syz.1.9524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 952.784722][ T667] set match dimension is over the limit! [ 952.923298][ T695] tipc: Started in network mode [ 952.930271][ T695] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 952.946758][ T695] tipc: Enabling of bearer rejected, failed to enable media [ 954.095424][ T132] net_ratelimit: 10 callbacks suppressed [ 954.095442][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 954.116066][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.635412][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 954.649931][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.054748][ T808] IPv6: sit2: Disabled Multicast RS [ 955.064104][ T808] sit2: entered allmulticast mode [ 955.099621][ T810] lo speed is unknown, defaulting to 1000 [ 955.105559][ T810] lo speed is unknown, defaulting to 1000 [ 955.111632][ T810] lo speed is unknown, defaulting to 1000 [ 955.118932][ T810] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 955.129957][ T810] lo speed is unknown, defaulting to 1000 [ 955.141563][ T810] lo speed is unknown, defaulting to 1000 [ 955.149207][ T810] lo speed is unknown, defaulting to 1000 [ 955.155550][ T810] lo speed is unknown, defaulting to 1000 [ 955.162289][ T810] lo speed is unknown, defaulting to 1000 [ 955.176237][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.190677][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.244649][ T28] audit: type=1326 audit(2000000712.684:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.7.9619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 955.273647][ T28] audit: type=1326 audit(2000000712.684:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.7.9619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 955.359390][ T28] audit: type=1326 audit(2000000712.714:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.7.9619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 955.385034][ T28] audit: type=1326 audit(2000000712.714:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.7.9619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 955.412370][ T28] audit: type=1326 audit(2000000712.714:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=822 comm="syz.7.9619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 955.539061][ T855] raw_sendmsg: syz.7.9635 forgot to set AF_INET. Fix it! [ 955.681331][ T875] __nla_validate_parse: 19 callbacks suppressed [ 955.681351][ T875] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9646'. [ 955.714228][ T883] validate_nla: 11 callbacks suppressed [ 955.714243][ T883] netlink: 'syz.1.9649': attribute type 4 has an invalid length. [ 955.727729][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.728091][ T883] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9649'. [ 955.742875][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.915342][ T917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9664'. [ 955.944920][ T923] batadv0: mtu less than device minimum [ 955.952111][ T923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 955.993395][ T931] GUP no longer grows the stack in syz.4.9670 (931): 200000004000-200000007000 (200000001000) [ 956.004003][ T931] CPU: 0 UID: 0 PID: 931 Comm: syz.4.9670 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 956.004037][ T931] Tainted: [W]=WARN [ 956.004045][ T931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.004058][ T931] Call Trace: [ 956.004066][ T931] [ 956.004076][ T931] __dump_stack+0x1d/0x30 [ 956.004138][ T931] dump_stack_lvl+0x95/0xd0 [ 956.004160][ T931] dump_stack+0x15/0x1b [ 956.004179][ T931] __get_user_pages+0x1b27/0x1f10 [ 956.004215][ T931] ? rb_insert_color+0x6e/0x2a0 [ 956.004380][ T931] ? timerqueue_linked_add+0x1a9/0x1f0 [ 956.004469][ T931] ? __rcu_read_lock+0x36/0x50 [ 956.004522][ T931] ? try_grab_folio_fast+0x1fb/0x580 [ 956.004556][ T931] ? gup_fast_folio_allowed+0x107/0x190 [ 956.004651][ T931] ? __rcu_read_unlock+0x4e/0x70 [ 956.004682][ T931] __gup_longterm_locked+0x905/0xe30 [ 956.004760][ T931] gup_fast_fallback+0x312/0x5c0 [ 956.004835][ T931] get_user_pages_fast+0x5f/0x90 [ 956.004869][ T931] __iov_iter_get_pages_alloc+0x24c/0x640 [ 956.004911][ T931] iov_iter_get_pages2+0x5e/0xa0 [ 956.004936][ T931] __se_sys_vmsplice+0x523/0x1070 [ 956.005073][ T931] __x64_sys_vmsplice+0x55/0x70 [ 956.005099][ T931] x64_sys_call+0x28e9/0x3020 [ 956.005124][ T931] do_syscall_64+0x136/0x3c0 [ 956.005230][ T931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.005257][ T931] RIP: 0033:0x7f28bb99de59 [ 956.005303][ T931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.005326][ T931] RSP: 002b:00007f28ba3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 956.005375][ T931] RAX: ffffffffffffffda RBX: 00007f28bbc25fa0 RCX: 00007f28bb99de59 [ 956.005391][ T931] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 956.005406][ T931] RBP: 00007f28bba33e6f R08: 0000000000000000 R09: 0000000000000000 [ 956.005422][ T931] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 956.005438][ T931] R13: 00007f28bbc26038 R14: 00007f28bbc25fa0 R15: 00007ffed063f118 [ 956.005499][ T931] [ 956.098261][ T946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9678'. [ 956.221705][ T951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9678'. [ 956.230850][ T951] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9678'. [ 956.239933][ T946] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9678'. [ 956.274333][ T28] audit: type=1326 audit(2000000713.714:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.1.9685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x0 [ 956.415787][ T978] xt_hashlimit: size too large, truncated to 1048576 [ 956.460674][ T984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9695'. [ 956.767894][ T28] audit: type=1326 audit(2000000714.214:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.794244][ T28] audit: type=1326 audit(2000000714.214:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.820980][ T28] audit: type=1326 audit(2000000714.214:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.837997][ T1045] 9p: Bad value for 'rfdno' [ 956.848413][ T28] audit: type=1326 audit(2000000714.214:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.877331][ T28] audit: type=1326 audit(2000000714.214:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.884475][ T1047] netlink: 'syz.3.9724': attribute type 3 has an invalid length. [ 956.903099][ T28] audit: type=1326 audit(2000000714.214:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.903134][ T28] audit: type=1326 audit(2000000714.234:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 956.910929][ T1047] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9724'. [ 956.972977][ T28] audit: type=1326 audit(2000000714.424:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.7.9721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe51f50de59 code=0x7ffc0000 [ 957.037873][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9727'. [ 957.188316][ T1079] netlink: 'syz.1.9738': attribute type 12 has an invalid length. [ 957.260814][ T1085] netlink: 'syz.3.9742': attribute type 3 has an invalid length. [ 957.286599][ T1089] netlink: 'syz.4.9743': attribute type 3 has an invalid length. [ 957.297144][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.469756][ T1119] netlink: 'syz.4.9757': attribute type 1 has an invalid length. [ 957.549778][ T1126] 9p: Bad value for 'rfdno' [ 957.915919][ T1170] netlink: 'syz.7.9782': attribute type 1 has an invalid length. [ 957.930224][ T1144] lo speed is unknown, defaulting to 1000 [ 957.974611][ T28] audit: type=1400 audit(2000000715.414:4399): avc: denied { setattr } for pid=1175 comm="syz.4.9784" name="QIPCRTR" dev="sockfs" ino=95886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 958.011985][ T1170] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.448569][ T1144] xfrm0 speed is unknown, defaulting to 1000 [ 958.610234][ T1240] netlink: 'syz.3.9815': attribute type 3 has an invalid length. [ 958.653049][ T1144] lo speed is unknown, defaulting to 1000 [ 958.733242][ T1252] netlink: 'syz.3.9821': attribute type 19 has an invalid length. [ 958.829437][ T1263] netlink: 'syz.3.9826': attribute type 3 has an invalid length. [ 959.261816][ T28] audit: type=1400 audit(2000000716.704:4400): avc: denied { lock } for pid=1326 comm="syz.1.9851" path="socket:[96728]" dev="sockfs" ino=96728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 959.357391][T16601] net_ratelimit: 30 callbacks suppressed [ 959.357410][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 959.377892][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 959.926141][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 959.940286][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.469390][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 960.483519][T16601] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.664087][ T1434] IPv6: Can't replace route, no match found [ 960.688835][ T1434] IPv6: Can't replace route, no match found [ 960.819731][ T1456] validate_nla: 4 callbacks suppressed [ 960.819750][ T1456] netlink: 'syz.4.9892': attribute type 3 has an invalid length. [ 960.834595][ T1456] __nla_validate_parse: 15 callbacks suppressed [ 960.834623][ T1456] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9892'. [ 961.037168][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 961.051320][ T132] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.258237][ T1523] netlink: 'syz.5.9905': attribute type 2 has an invalid length. [ 961.266200][ T1523] netlink: 'syz.5.9905': attribute type 1 has an invalid length. [ 961.274027][ T1523] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.9905'. [ 961.340623][ T1534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9908'. [ 961.350686][ T1534] netlink: 'syz.1.9908': attribute type 7 has an invalid length. [ 961.358789][ T1534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9908'. [ 961.606325][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 961.620479][T24046] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 962.061774][ T1591] netlink: 'syz.4.9929': attribute type 3 has an invalid length. [ 962.069688][ T1591] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9929'. [ 962.398362][ T1621] lo speed is unknown, defaulting to 1000 [ 962.481267][ T1621] xfrm0 speed is unknown, defaulting to 1000 [ 962.539918][ T1621] lo speed is unknown, defaulting to 1000 [ 962.857765][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 962.857780][ T28] audit: type=1326 audit(2000000720.304:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1585 comm="syz.3.9927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7fc00000 [ 963.132394][ T1663] netlink: 'syz.7.9960': attribute type 178 has an invalid length. [ 963.222083][ T1679] netlink: 'syz.4.9968': attribute type 10 has an invalid length. [ 963.230853][ T1679] netlink: 'syz.4.9968': attribute type 10 has an invalid length. [ 963.275277][ T1685] netlink: 'syz.4.9971': attribute type 3 has an invalid length. [ 963.288490][ T1685] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9971'. [ 964.033194][ T1713] xt_NFQUEUE: number of total queues is 0 [ 964.549567][ T1778] dummy0: entered promiscuous mode [ 964.555035][ T1778] dummy0: left promiscuous mode [ 964.556149][ T1780] netlink: 'syz.1.10013': attribute type 9 has an invalid length. [ 964.688955][T16605] net_ratelimit: 10 callbacks suppressed [ 964.688973][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 964.708750][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 964.803140][ T1794] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10019'. [ 964.914367][ T1807] IPv6: sit1: Disabled Multicast RS [ 964.971340][ T1816] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10029'. [ 964.980720][ T1816] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10029'. [ 965.006691][ T1819] 9p: Bad value for 'rfdno' [ 965.051624][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10033'. [ 965.228096][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 965.242386][T16605] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 965.766818][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 965.781701][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.306935][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 966.321198][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.337606][ T1961] bridge_slave_0: default FDB implementation only supports local addresses [ 966.353407][ T1961] bridge_slave_0: default FDB implementation only supports local addresses [ 966.820725][ T2027] __nla_validate_parse: 2 callbacks suppressed [ 966.820742][ T2027] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10081'. [ 966.840612][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10081'. [ 966.850036][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 966.864223][T24052] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.527030][ T2147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10111'. [ 968.960515][ T2400] validate_nla: 3 callbacks suppressed [ 968.960532][ T2400] netlink: 'syz.7.10149': attribute type 39 has an invalid length. [ 969.012333][ T2402] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10150'. [ 969.526151][ T2438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10167'. [ 969.918230][ T28] audit: type=1326 audit(2000000727.353:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 969.944739][ T28] audit: type=1326 audit(2000000727.353:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 969.972458][ T28] audit: type=1326 audit(2000000727.363:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 969.977248][ T49] net_ratelimit: 10 callbacks suppressed [ 969.977262][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 970.018497][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.019787][ T28] audit: type=1326 audit(2000000727.363:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.071084][ T28] audit: type=1326 audit(2000000727.363:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.096623][ T28] audit: type=1326 audit(2000000727.363:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.139130][ T28] audit: type=1326 audit(2000000727.363:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.164818][ T28] audit: type=1326 audit(2000000727.393:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.190566][ T28] audit: type=1326 audit(2000000727.393:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.216337][ T28] audit: type=1326 audit(2000000727.393:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.3.10178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fcca32cde59 code=0x7ffc0000 [ 970.625505][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 970.646147][ T49] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.892787][ T2542] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10196'. [ 971.177401][T24031] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 971.192669][T24031] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.441374][ T2638] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 971.451619][ T2638] bridge1: entered promiscuous mode [ 971.719779][ T2672] all: renamed from bridge_slave_1 [ 971.733072][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 971.747204][T15215] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.093530][ T2712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 972.267688][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 972.281867][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.700259][ T2794] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 972.710467][ T2794] bridge3: entered promiscuous mode [ 973.157087][ T2829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10303'. [ 973.849389][ T2873] netlink: 'syz.1.10320': attribute type 3 has an invalid length. [ 973.857442][ T2873] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10320'. [ 974.449661][ T2925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.782508][ T2953] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10350'. [ 975.399059][ T68] net_ratelimit: 10 callbacks suppressed [ 975.399077][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 975.418959][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.968436][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 975.982661][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.042803][ T3069] lo speed is unknown, defaulting to 1000 [ 976.220096][ T3069] xfrm0 speed is unknown, defaulting to 1000 [ 976.405209][ T3069] lo speed is unknown, defaulting to 1000 [ 976.528721][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 976.542865][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.055222][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 977.055241][ T28] audit: type=1400 audit(2000000734.492:4437): avc: denied { map } for pid=3105 comm="syz.1.10403" path="socket:[99629]" dev="sockfs" ino=99629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 977.078279][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 977.099236][ T68] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.315834][ T3131] wg2: Caught tx_queue_len zero misconfig [ 977.658975][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 977.673756][ T39] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 978.264138][ T3203] lo speed is unknown, defaulting to 1000 [ 978.306653][ T3203] xfrm0 speed is unknown, defaulting to 1000 [ 978.352875][ T3203] lo speed is unknown, defaulting to 1000 [ 978.427206][ T3211] netlink: 'syz.1.10437': attribute type 6 has an invalid length. [ 978.436752][ T3211] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10437'. [ 978.746143][ T3221] batman_adv: batadv0: Interface deactivated: dummy0 [ 978.876873][ T3221] bond1: left promiscuous mode [ 978.882789][ T3221] bridge2: left promiscuous mode [ 978.893987][ T3221] bond1: left allmulticast mode [ 978.901746][ T3221] bridge2: left allmulticast mode [ 978.919067][ T3221] batman_adv: batadv0: Interface deactivated: gretap1 [ 978.934233][ T3221] bond5: left allmulticast mode [ 978.945708][ T3221] ip6gretap1: left allmulticast mode [ 978.958091][ T3221] bond5: left promiscuous mode [ 978.963777][ T3221] ip6gretap1: left promiscuous mode [ 978.973813][ T3221] vlan2: left promiscuous mode [ 978.979258][ T3221] bridge0: left promiscuous mode [ 978.985090][ T3221] bridge3: left promiscuous mode [ 978.991178][ T3221] bridge3: left allmulticast mode [ 979.004113][ T3221] bond6: left promiscuous mode [ 979.012037][ T3221] bond6: left allmulticast mode [ 979.035339][ T3248] tipc: Enabling of bearer rejected, failed to enable media [ 979.049217][T24034] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 979.057632][T24034] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.088730][T24034] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 979.116164][T24034] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 979.130513][T24034] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.142286][T24034] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 979.154840][T24034] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 979.166404][T24034] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.175607][T24034] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 979.255218][ T28] audit: type=1400 audit(2000000736.692:4438): avc: denied { write } for pid=3260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.288125][T24034] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 979.297914][T24034] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.306735][T24034] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 979.356930][ T28] audit: type=1400 audit(2000000736.792:4439): avc: denied { write } for pid=3289 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.401804][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10462'. [ 979.519295][ T3320] netlink: 'syz.7.10465': attribute type 4 has an invalid length. [ 979.556606][ T28] audit: type=1400 audit(2000000736.992:4440): avc: denied { write } for pid=3301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.582340][ T3331] netlink: 'syz.7.10465': attribute type 4 has an invalid length. [ 979.604180][ T28] audit: type=1400 audit(2000000737.042:4441): avc: denied { write } for pid=3332 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.647192][T26468] lo speed is unknown, defaulting to 1000 [ 979.653062][T26468] syz2: Port: 1 Link ACTIVE [ 979.739576][ T3353] netlink: 'syz.1.10470': attribute type 4 has an invalid length. [ 979.750956][ T3360] tunl0: Caught tx_queue_len zero misconfig [ 979.766285][ T28] audit: type=1400 audit(2000000737.202:4442): avc: denied { write } for pid=3339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.790920][ T3365] netlink: 'syz.1.10470': attribute type 4 has an invalid length. [ 979.828003][ T28] audit: type=1400 audit(2000000737.252:4443): avc: denied { write } for pid=3367 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.866920][ T3369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10475'. [ 980.223467][ T3406] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 980.929175][ T28] audit: type=1400 audit(2000000738.371:4444): avc: denied { lock } for pid=3447 comm="syz.1.10499" path="socket:[100778]" dev="sockfs" ino=100778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 980.963102][ T3448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 980.972661][ T3448] bridge0: port 4(bond3) entered blocking state [ 980.979769][ T3448] bridge0: port 4(bond3) entered disabled state [ 980.999072][ T3448] bond3: entered allmulticast mode [ 981.010682][ T3448] bond3: entered promiscuous mode [ 981.027771][ T3448] bridge0: port 4(bond3) entered blocking state [ 981.034164][ T3448] bridge0: port 4(bond3) entered forwarding state [ 981.066211][T24034] bridge0: port 4(bond3) entered disabled state [ 981.115050][ T3458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10502'. [ 981.127658][ T3458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10502'. [ 981.450524][ T3485] net_ratelimit: 5 callbacks suppressed [ 981.450542][ T3485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 981.774238][ T3494] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10516'. [ 982.000383][ T3514] netlink: 'syz.7.10523': attribute type 1 has an invalid length. [ 982.032447][ T3514] 8021q: adding VLAN 0 to HW filter on device bond9 [ 983.312271][ T3636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3636 comm=syz.7.10562 [ 984.117264][ T28] audit: type=1326 audit(2000000741.551:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3675 comm="syz.1.10574" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f159c3ade59 code=0x0 [ 984.421086][ T3685] netlink: 'syz.3.10578': attribute type 3 has an invalid length. [ 984.429136][ T3685] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10578'. [ 984.608117][ T3691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10580'. [ 984.642959][ T3691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3691 comm=syz.3.10580 [ 984.941551][ T3729] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 987.046142][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10621'. [ 987.338432][ T28] audit: type=1326 audit(2000000744.771:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.404680][ T28] audit: type=1326 audit(2000000744.771:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.456633][ T28] audit: type=1326 audit(2000000744.811:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.508438][ T28] audit: type=1326 audit(2000000744.811:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.564441][ T28] audit: type=1326 audit(2000000744.811:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.620039][ T28] audit: type=1326 audit(2000000744.811:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.680173][ T28] audit: type=1326 audit(2000000744.811:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.750735][ T28] audit: type=1326 audit(2000000744.811:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.808864][ T28] audit: type=1326 audit(2000000744.811:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3900 comm="syz.1.10626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159c3ade59 code=0x7ffc0000 [ 987.986942][ T3945] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 987.995516][ T3945] mroute: pending queue full, dropping entries [ 988.162563][ T3955] netlink: 'syz.1.10643': attribute type 4 has an invalid length. [ 988.290162][ T3973] netlink: 1320 bytes leftover after parsing attributes in process `syz.3.10647'. [ 988.935323][ T3980] ================================================================== [ 988.943435][ T3980] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 988.949963][ T3980] [ 988.952280][ T3980] write to 0xffff8881063edc10 of 8 bytes by task 3981 on cpu 1: [ 988.959901][ T3980] dentry_kill+0x139/0x500 [ 988.964318][ T3980] finish_dput+0x16/0x1d0 [ 988.968654][ T3980] dput+0x48/0x50 [ 988.972286][ T3980] path_openat+0xd29/0x2000 [ 988.976799][ T3980] do_file_open+0x16c/0x290 [ 988.981310][ T3980] do_sys_openat2+0xa0/0x130 [ 988.985910][ T3980] __x64_sys_openat+0xf2/0x120 [ 988.990685][ T3980] x64_sys_call+0x1e39/0x3020 [ 988.995362][ T3980] do_syscall_64+0x136/0x3c0 [ 988.999963][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.005857][ T3980] [ 989.008180][ T3980] read to 0xffff8881063edc10 of 8 bytes by task 3980 on cpu 0: [ 989.015718][ T3980] fast_dput+0x64/0x2e0 [ 989.019884][ T3980] dput+0x1f/0x50 [ 989.023523][ T3980] filename_mknodat+0x2cb/0x450 [ 989.028374][ T3980] __se_sys_mknodat+0x38/0xf0 [ 989.033049][ T3980] __x64_sys_mknodat+0x55/0x70 [ 989.037806][ T3980] x64_sys_call+0x312/0x3020 [ 989.042406][ T3980] do_syscall_64+0x136/0x3c0 [ 989.047008][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.052902][ T3980] [ 989.055215][ T3980] value changed: 0xffff88823773f620 -> 0x0000000000000000 [ 989.062313][ T3980] [ 989.064620][ T3980] Reported by Kernel Concurrency Sanitizer on: [ 989.070759][ T3980] CPU: 0 UID: 0 PID: 3980 Comm: syz.1.10650 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 989.081703][ T3980] Tainted: [W]=WARN [ 989.085492][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 989.095550][ T3980] ==================================================================