last executing test programs: 2.757336942s ago: executing program 4 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x24000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x4c480, 0x0) ioctl$int_in(r0, 0x5421, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2000000b}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000000240)) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x181000) sendto$inet6(r1, 0x0, 0x1e, 0x0, 0x0, 0x0) 2.721853082s ago: executing program 0 (id=7): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="14"], &(0x7f00000004c0), 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000600)={0x43, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x801018, &(0x7f0000000380)=ANY=[], 0x1, 0x392, &(0x7f0000001000)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 2.621403535s ago: executing program 4 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) flock(r0, 0x1) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/4\x00') pread64(r2, &(0x7f0000000140)=""/17, 0x11, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) socket$inet_sctp(0x2, 0x1, 0x84) 2.620512505s ago: executing program 1 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 2.580518236s ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x29, 0x0, 0x5000) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 2.483449598s ago: executing program 3 (id=9): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x6001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x5c100, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000015) timerfd_create(0x1, 0x80000) setns(0xc9, 0x0) r1 = socket$kcm(0x21, 0x0, 0xa) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xfc00) r2 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x2, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x3a, 0x0, @private1, @private1}}}}}}}, 0x0) bind$rds(r2, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 2.279837033s ago: executing program 0 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.258302604s ago: executing program 3 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?*', 0x2}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.02878978s ago: executing program 1 (id=12): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x400) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ac0), 0x48000) read(r1, &(0x7f0000000b00)=""/186, 0xba) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f0000000bc0)={0x80, 0x2, {0x1, 0x3, 0x8b2c, 0x3, 0x2c3}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000c40)={0x3ff, 0x1, {0x2, 0x0, 0x207b, 0x2, 0x9}, 0x100}) tkill(r0, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./rpc_pipe\x00', 0x1ff) 1.971374431s ago: executing program 3 (id=13): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x3, 0x3, 0x10001, 0x2, 0x1}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218dc4513"}, 0x28) 1.895698063s ago: executing program 0 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0x0, 0x1, 0xffffffff, 0x3, 0x1004, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x7f, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000011c0)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.831114825s ago: executing program 1 (id=15): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0x7, 0x40000) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8c, 0x9}, 0x80, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getpid() remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x4, 0x800) r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$getflags(r0, 0x401) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.804233505s ago: executing program 1 (id=16): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.692273668s ago: executing program 2 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001680)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000016c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000017c0)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000001980)=ANY=[@ANYBLOB="12030800030016000c0045f50028006500000411"], 0x32) 1.446015544s ago: executing program 3 (id=18): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.407241955s ago: executing program 3 (id=19): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 1.353391357s ago: executing program 0 (id=20): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x26020480) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000980), 0x1, 0x490, &(0x7f00000009c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x2000000, 0x61, 0x11, 0x7c}, [@initr0]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000e80)='.\x00', 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={0x0}}, 0x40) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x20000040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000580)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000ec0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000f00)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38) 1.301203648s ago: executing program 3 (id=21): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4fd6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 1.181820691s ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000ec0)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001040)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001080), 0x56) sendmsg$kcm(r5, &(0x7f00000010c0)={&(0x7f0000001100)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000001180)=[{&(0x7f00000011c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001200)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) 1.075050613s ago: executing program 4 (id=23): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x5c9}], 0x1}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f00000009c0), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x803, 0xfffffffe, 0xffffffed, 0x1}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 863.218129ms ago: executing program 2 (id=24): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000002c0)=0xcbb9, 0x2, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(0x0, 0xb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) shmctl$SHM_UNLOCK(0x0, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) umount2(&(0x7f0000000400)='./proc/net/netfilter/nfnetlink_queue\x00', 0x4) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000000c0), 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) 778.492351ms ago: executing program 0 (id=25): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000900)="2e552f5d9f", 0x5, 0x12, 0x0, 0x0) 771.563821ms ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x0, 0x45833af92e4b38ff, 0x0) 83.024948ms ago: executing program 4 (id=27): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x5, 0x4) 0s ago: executing program 4 (id=28): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/4096, 0x1000}, 0x100}], 0x1, 0x40000083, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 29.580233][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 29.580248][ T29] audit: type=1400 audit(1792673233.488:117): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.580471][ T29] audit: type=1400 audit(1792673233.488:118): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.580911][ T3289] cgroup: Unknown subsys name 'net' [ 29.581216][ T29] audit: type=1400 audit(1792673233.488:119): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.750281][ T3289] cgroup: Unknown subsys name 'cpuset' [ 29.756396][ T3289] cgroup: Unknown subsys name 'rlimit' [ 29.835364][ T29] audit: type=1400 audit(1792673233.738:120): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.836191][ T29] audit: type=1400 audit(1792673233.738:121): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.836335][ T29] audit: type=1400 audit(1792673233.738:122): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.836542][ T29] audit: type=1400 audit(1792673233.738:123): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.841558][ T29] audit: type=1400 audit(1792673233.748:124): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.841620][ T29] audit: type=1400 audit(1792673233.748:125): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.873374][ T29] audit: type=1400 audit(1792673233.768:126): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.891381][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.974763][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.707895][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.708349][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.708563][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.729793][ T3300] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.769063][ T3301] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.778512][ T3308] infiniband rxe0: set active [ 31.778530][ T3308] infiniband rxe0: added rxe_eth0 [ 31.788175][ T913] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.796343][ T3301] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.806500][ T3304] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.814557][ T3306] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.826687][ T3308] RDS/IB: rxe0: added [ 31.826710][ T3308] smc: adding ib device rxe0 with port count 1 [ 31.826724][ T3308] smc: ib device rxe0 port 1 has no pnetid [ 31.826750][ T913] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.868435][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.904749][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.951746][ T3306] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.980048][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.980084][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.980172][ T3300] bridge_slave_0: entered allmulticast mode [ 31.980747][ T3300] bridge_slave_0: entered promiscuous mode [ 31.990204][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.990235][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.990295][ T3300] bridge_slave_1: entered allmulticast mode [ 31.990867][ T3300] bridge_slave_1: entered promiscuous mode [ 32.017622][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.024207][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.054446][ T3300] team0: Port device team_slave_0 added [ 32.070118][ T3300] team0: Port device team_slave_1 added [ 32.095313][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.095327][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.095432][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.095986][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.095998][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.096033][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.097477][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.106310][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.106339][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.106455][ T3301] bridge_slave_0: entered allmulticast mode [ 32.106886][ T3301] bridge_slave_0: entered promiscuous mode [ 32.121800][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.121850][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.121970][ T3301] bridge_slave_1: entered allmulticast mode [ 32.122659][ T3301] bridge_slave_1: entered promiscuous mode [ 32.152474][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.172282][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.199786][ T3300] hsr_slave_0: entered promiscuous mode [ 32.200216][ T3300] hsr_slave_1: entered promiscuous mode [ 32.205255][ T3301] team0: Port device team_slave_0 added [ 32.244739][ T3301] team0: Port device team_slave_1 added [ 32.292174][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.292189][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.292285][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.314245][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.314259][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.314287][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.329206][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.329237][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.329288][ T3304] bridge_slave_0: entered allmulticast mode [ 32.329747][ T3304] bridge_slave_0: entered promiscuous mode [ 32.355470][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.355501][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.355557][ T3304] bridge_slave_1: entered allmulticast mode [ 32.355954][ T3304] bridge_slave_1: entered promiscuous mode [ 32.392770][ T3301] hsr_slave_0: entered promiscuous mode [ 32.393037][ T3301] hsr_slave_1: entered promiscuous mode [ 32.393323][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.393336][ T3301] Cannot create hsr debugfs directory [ 32.414267][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.428355][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.480726][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.480758][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.480809][ T3306] bridge_slave_0: entered allmulticast mode [ 32.481444][ T3306] bridge_slave_0: entered promiscuous mode [ 32.495607][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.495639][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.495720][ T3306] bridge_slave_1: entered allmulticast mode [ 32.496116][ T3306] bridge_slave_1: entered promiscuous mode [ 32.497068][ T3304] team0: Port device team_slave_0 added [ 32.498468][ T3304] team0: Port device team_slave_1 added [ 32.527987][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.528959][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.533949][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.541679][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.545137][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.545149][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.545191][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.545803][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.545814][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.545843][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.554552][ T3306] team0: Port device team_slave_0 added [ 32.558433][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.567496][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.568778][ T3306] team0: Port device team_slave_1 added [ 32.581009][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.586999][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.610651][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.612824][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.621380][ T3304] hsr_slave_0: entered promiscuous mode [ 32.621697][ T3304] hsr_slave_1: entered promiscuous mode [ 32.621937][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.621950][ T3304] Cannot create hsr debugfs directory [ 32.622436][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.622447][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.622475][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.623083][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.623095][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.623123][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.690836][ T3306] hsr_slave_0: entered promiscuous mode [ 32.691290][ T3306] hsr_slave_1: entered promiscuous mode [ 32.691562][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.691575][ T3306] Cannot create hsr debugfs directory [ 32.696675][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.696707][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.696757][ T3308] bridge_slave_0: entered allmulticast mode [ 32.697311][ T3308] bridge_slave_0: entered promiscuous mode [ 32.717825][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.717859][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.717922][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.717971][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.719348][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.719374][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.719476][ T3308] bridge_slave_1: entered allmulticast mode [ 32.720528][ T3308] bridge_slave_1: entered promiscuous mode [ 32.771662][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.772766][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.791541][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.820278][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.842203][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.847765][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.848473][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.853109][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.859140][ T3308] team0: Port device team_slave_0 added [ 32.865858][ T3308] team0: Port device team_slave_1 added [ 32.873636][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.879454][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.892965][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.892978][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.893006][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.898546][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.898559][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.898588][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.910506][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.932065][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.941090][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.146518][ T3308] hsr_slave_0: entered promiscuous mode [ 33.146932][ T3308] hsr_slave_1: entered promiscuous mode [ 33.147055][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 33.147068][ T3308] Cannot create hsr debugfs directory [ 33.191927][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.193304][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.193875][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.195626][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.196947][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.214884][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.223633][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.234782][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.234820][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.237919][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.244252][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.248635][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.248666][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.295248][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.297171][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.297667][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.299602][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.315825][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.323905][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.333963][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.337107][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.367900][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.370574][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.372526][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.378854][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.384735][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.392844][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.398377][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.407154][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.410513][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.423702][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.438175][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.438207][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.445253][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.445299][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.475075][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.500644][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.517558][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.530894][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.530946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.543993][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.544027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.579011][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.594378][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.601899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.601931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.603174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.603203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.652555][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.653683][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.662804][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.662839][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.675903][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.675935][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.687582][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.805439][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.860650][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.877766][ T3300] veth0_vlan: entered promiscuous mode [ 33.886495][ T3300] veth1_vlan: entered promiscuous mode [ 33.914421][ T3300] veth0_macvtap: entered promiscuous mode [ 33.920205][ T3300] veth1_macvtap: entered promiscuous mode [ 33.942090][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.943509][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.968026][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.999988][ T32] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.000209][ T32] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.000354][ T32] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.000519][ T32] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.053481][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.077271][ T3304] veth0_vlan: entered promiscuous mode [ 34.084948][ T3304] veth1_vlan: entered promiscuous mode [ 34.102041][ T3300] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.123678][ T3301] veth0_vlan: entered promiscuous mode [ 34.129940][ T3301] veth1_vlan: entered promiscuous mode [ 34.133728][ T3304] veth0_macvtap: entered promiscuous mode [ 34.137425][ T3304] veth1_macvtap: entered promiscuous mode [ 34.161940][ T3301] veth0_macvtap: entered promiscuous mode [ 34.166284][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.170753][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.185213][ T3301] veth1_macvtap: entered promiscuous mode [ 34.218662][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.228607][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.230076][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.230162][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.230260][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.230298][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.246888][ T3306] veth0_vlan: entered promiscuous mode [ 34.257644][ T3306] veth1_vlan: entered promiscuous mode [ 34.280543][ T337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.283953][ T337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.284100][ T337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.284191][ T337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.311075][ T3306] veth0_macvtap: entered promiscuous mode [ 34.322094][ T3306] veth1_macvtap: entered promiscuous mode [ 34.338038][ T3308] veth0_vlan: entered promiscuous mode [ 34.352522][ T3308] veth1_vlan: entered promiscuous mode [ 34.355539][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.361876][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.385763][ T3521] Zero length message leads to an empty skb [ 34.432522][ T3308] veth0_macvtap: entered promiscuous mode [ 34.443468][ T3308] veth1_macvtap: entered promiscuous mode [ 34.451558][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.451663][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.451699][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.451733][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.458683][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.468856][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.491336][ T117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.491448][ T117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.491633][ T117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.550005][ T337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.590181][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 34.590198][ T29] audit: type=1326 audit(1792673238.498:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.637263][ T29] audit: type=1326 audit(1792673238.538:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.637371][ T29] audit: type=1326 audit(1792673238.538:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.639374][ T29] audit: type=1326 audit(1792673238.538:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.639501][ T29] audit: type=1326 audit(1792673238.538:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.643179][ T29] audit: type=1326 audit(1792673238.548:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.643209][ T29] audit: type=1400 audit(1792673238.548:182): avc: denied { write } for pid=3531 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.643291][ T29] audit: type=1326 audit(1792673238.548:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.643372][ T29] audit: type=1326 audit(1792673238.548:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.647411][ T29] audit: type=1326 audit(1792673238.548:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.4.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50727df559 code=0x7ffc0000 [ 34.732764][ T3539] syzkaller1: entered promiscuous mode [ 34.732786][ T3539] syzkaller1: entered allmulticast mode [ 34.752666][ T3528] loop0: detected capacity change from 0 to 512 [ 34.916767][ T3543] syzkaller0: entered promiscuous mode [ 34.916790][ T3543] syzkaller0: entered allmulticast mode [ 34.918037][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 34.933123][ T3543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 35.286319][ T3557] syzkaller0: entered promiscuous mode [ 35.286332][ T3557] syzkaller0: entered allmulticast mode [ 35.288552][ T3557] tipc: Started in network mode [ 35.288647][ T3557] tipc: Node identity 427b2aeb9f93, cluster identity 4711 [ 35.288683][ T3557] tipc: Enabled bearer , priority 0 [ 35.289184][ T3556] tipc: Resetting bearer [ 35.296147][ T3556] tipc: Disabling bearer [ 35.347825][ T3560] mmap: syz.1.15 (3560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.505581][ T3565] 0: reclassify loop, rule prio 0, protocol 03 [ 35.732926][ T3567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 35.737085][ T3567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 35.877548][ T3571] loop0: detected capacity change from 0 to 512 [ 35.910941][ T3571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.912164][ T3571] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.986473][ T3571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.014216][ T3583] syzkaller0: entered promiscuous mode [ 36.014237][ T3583] syzkaller0: entered allmulticast mode [ 36.028564][ T3583] 0: reclassify loop, rule prio 0, protocol 800 [ 36.241447][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 37.148010][ T3573] ================================================================== [ 37.148042][ T3573] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 37.148077][ T3573] [ 37.148084][ T3573] read-write to 0xffff88811a32f864 of 4 bytes by task 3579 on cpu 1: [ 37.148103][ T3573] fifo_open+0x179/0x5b0 [ 37.148132][ T3573] do_dentry_open+0x496/0xa40 [ 37.148160][ T3573] vfs_open_consume+0x46/0x1f0 [ 37.148185][ T3573] path_openat+0xc16/0x11c0 [ 37.148201][ T3573] do_file_open+0x16c/0x290 [ 37.148217][ T3573] do_sys_openat2+0xa1/0x140 [ 37.148242][ T3573] __x64_sys_openat+0xf2/0x120 [ 37.148272][ T3573] x64_sys_call+0x1f72/0x2550 [ 37.148302][ T3573] do_syscall_64+0x112/0x360 [ 37.148337][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.148361][ T3573] [ 37.148367][ T3573] read to 0xffff88811a32f864 of 4 bytes by task 3573 on cpu 0: [ 37.148389][ T3573] wait_for_partner+0x11b/0x210 [ 37.148414][ T3573] fifo_open+0x443/0x5b0 [ 37.148437][ T3573] do_dentry_open+0x496/0xa40 [ 37.148466][ T3573] vfs_open_consume+0x46/0x1f0 [ 37.148493][ T3573] path_openat+0xc16/0x11c0 [ 37.148515][ T3573] do_file_open+0x16c/0x290 [ 37.148533][ T3573] do_sys_openat2+0xa1/0x140 [ 37.148563][ T3573] __se_sys_openat2+0x193/0x1f0 [ 37.148600][ T3573] __x64_sys_openat2+0x55/0x70 [ 37.148629][ T3573] x64_sys_call+0x196c/0x2550 [ 37.148656][ T3573] do_syscall_64+0x112/0x360 [ 37.148689][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.148712][ T3573] [ 37.148717][ T3573] value changed: 0x00000002 -> 0x00000001 [ 37.148728][ T3573] [ 37.148732][ T3573] Reported by Kernel Concurrency Sanitizer on: [ 37.148762][ T3573] CPU: 0 UID: 0 PID: 3573 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.148787][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.148800][ T3573] ================================================================== [ 41.769488][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.779274][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 41.779290][ T29] audit: type=1400 audit(1792673245.678:702): avc: denied { read } for pid=3611 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.779340][ T29] audit: type=1400 audit(1792673245.678:703): avc: denied { read open } for pid=3611 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.779369][ T29] audit: type=1400 audit(1792673245.678:704): avc: denied { getattr } for pid=3611 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.856351][ T29] audit: type=1400 audit(1792673245.758:705): avc: denied { write } for pid=3610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.856470][ T29] audit: type=1400 audit(1792673245.758:706): avc: denied { add_name } for pid=3610 comm="dhcpcd-run-hook" name="resolv.conf.rxe_eth0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.875488][ T29] audit: type=1400 audit(1792673245.778:707): avc: denied { write } for pid=3621 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.875524][ T29] audit: type=1400 audit(1792673245.778:708): avc: denied { remove_name } for pid=3621 comm="rm" name="resolv.conf.rxe_eth0.ipv4ll" dev="tmpfs" ino=583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1