last executing test programs: 1.050688703s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x735}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d53441083a96adf497e1bd0d6de6e69be0fa427c197aaca97c59520677fd48b17953393d3ce96fd3b4dc411283ac9e1f523b3d0ae63469e1f819d0473f6e5640ab099fc5cd3e77e2cbc4c3926a622d39f31fa43843435cb1d70f71dbaf8183f9023e6a6963620c5477f58ad041b7667b32110480264efddd3269f9d706e3a29cfe4a2a48ce653d6ff0a3d2355cc", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,\x00']) timerfd_create(0x0, 0x0) mremap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0xffffffffffdfffff, 0x3, &(0x7f000082a000/0x400000)=nil) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x160, 0x80}, {0x7, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x4, 0x0, 0x0, 0x0, 0x3}, [@srcaddr={0x14, 0xd, @in6=@mcast2}]}, 0xcc}}, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08ca51acfc4c9c004500003000000020b20290780000001cc60003000307907800070001451d66d100660fff02060005e00000010a010102"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe80000000000000000000aeb0a100000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 1.041844574s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x4}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 759.985268ms ago: executing program 1 (id=2): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10012, &(0x7f0000002340)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r2, &(0x7f0000000480)="7eeb99b6f78ca44054798fa8d0e9", 0xe, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) 757.380158ms ago: executing program 4 (id=5): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r5}, &(0x7f0000001080), &(0x7f00000001c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 727.942769ms ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r4}, &(0x7f0000001080), &(0x7f00000001c0)=r5}, 0x20) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[], 0x0) 619.53497ms ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 528.179742ms ago: executing program 2 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 466.665012ms ago: executing program 2 (id=8): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x0, 0xced4, '\x00', 0x0, r4, 0x2, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) perf_event_open$cgroup(&(0x7f00000004c0)={0x5, 0x80, 0x8, 0x9, 0x4, 0x2, 0x0, 0xfff, 0xa4f6e35545c750fa, 0x18, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xbd5a, 0x4, @perf_config_ext={0x8, 0x400}, 0x100, 0x0, 0x1, 0x9, 0x5, 0x2, 0xe03d, 0x0, 0x3, 0x0, 0x10000}, 0xffffffffffffffff, 0xb, r2, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r7, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd8, 0x7, 0xe, 0x9, 0x0, 0x200, 0x22ba3, 0xf, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x2}, 0x100, 0x8, 0xfffffff9, 0x0, 0x9, 0x2, 0x8000, 0x0, 0x48a6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r6, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) 224.641596ms ago: executing program 2 (id=9): syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800010000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000010000000000000000000000000000000a28000000000a01015e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fff924000480200001800d00010073796e70726f7879000000000c00028005000200020000000900010073797a300000000009000200737900010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40480e0}, 0x20008014) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = io_uring_setup(0x60ad, &(0x7f0000000600)={0x0, 0xb1b2, 0x1000, 0x2, 0x3e0}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r9}, 0x10) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) 172.864527ms ago: executing program 0 (id=10): syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800010000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000010000000000000000000000000000000a28000000000a01015e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = io_uring_setup(0x60ad, &(0x7f0000000600)={0x0, 0xb1b2, 0x1000, 0x2, 0x3e0}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r9}, 0x10) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r10, @ANYRESOCT=r9, @ANYRESDEC, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) 0s ago: executing program 2 (id=11): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000300)={0x8000000, 0x20, 0x4, 0x20, 0x3f}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r6, &(0x7f00000000c0)=@known='security.apparmor\x00') accept$nfc_llcp(r3, 0x0, &(0x7f0000001900)) openat$zero(0xffffffffffffff9c, &(0x7f0000001a00), 0x200000, 0x0) io_submit(0x0, 0x9, &(0x7f0000001a80)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x4, 0x0, 0xcbe4257a8fa69d1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x6, 0xa440, r3, &(0x7f0000001100)="dba307b1d0488817d9e60717a75c99dbb5e2174012a38e3b218acd230e5b08afb478217d7dbad2bdc493f8f1ba9207b62bd03c754228afbcfd882c603843b1f7a1459ac86030ed7e9d7896901e2ec1e4f4a83e171d8ee87219656fe1acbb3044051d31d5c53db147901560495ef8e44498dcc5bf78ba3578e3de51c6e46b44a1709f2f88df0b00ac8d5eb06daf0f3a974b619abd16e55f9136d1a045610a1965052e7764a568f79e76c2078c765a577c31bbab00989d8b794ec01ae5168c6e672cfd0fee", 0xc4}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f0000001240)="44493db274760e07e520a8a0f73d206276302adb285c67b6660dcb2dd8f91b51fe33ac2e23f3cb557b901a8e5b67c4ac87daf40d782c33f7e60b95fe2eecd4cc22ded3fd07f86fe39bea923a3eacc06397e461a6f57d25665c9e724c9646683b1f106f5f31bab44286b7ea8890daef416a19bbaf1d700156b20057cdab4a1f62bb25ccae65f6b13d5713d9e852ca1ce1ee8970a1e58abb5a08c608fdf03c5b41dddf2f158e60f13f1e16b5c5f3a9f29c5f8b9c9505614602d1fca5c09b8ef98043b723698ccadb7c72424c94c7937ab99512e4cebf07044b51f63530dc28620a3f9017df7b0f10c0b6ea546deb142c84a83b1504", 0xf4, 0xff, 0x0, 0x2}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x6, 0x49c6, 0xffffffffffffffff, &(0x7f0000001380)="6d86c9a19afb21d7d63355e754bd92", 0xf, 0x1965}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000001480)="dbb0af9c03428f93ad607180fdf0642d2a86a7343bd4c26513cf3f026177e207e8c6b39665ff874169558f92ef36174270172e7c63dd182fba11e696ade5c20d9b819027cdb5c7319d3076c4fa7869bc79219027b7d4fab99f4f0434626c3f83ba8d4d808aaea05d2060e417da01fddb2dfee8676fa9fbb142aff49325dcf4c4188df729669cccc3c30c2cae13bb7928eeaad4b94f1b3f99a0c1ea00fb4ac49933b776ad4fd0f2bd84f55bdedc35ae17a476db71e9", 0xb5, 0x80000001, 0x0, 0x3, r4}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001580)="b32ba25b1687374badc48b8bc80d0359efa8613ff40626db3af881c12bc0d9c718da8fc8d322643e6e8aa160b8a0e30b82688544c177bf55d2cf0a1434a61a716de86b53a095de4e166c5f8c2906a4", 0x4f, 0x401}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x5, 0x81, r4, &(0x7f0000001640)="738f28064ab88ccae6fb3856730e39887d37b069bfeb3390068c68ec02e3f3c5fef922fe373ae1a6190ee120c2a1193ab1438986884bde036c7ccf950d9d5b05b0957c2befbe9c140829cd338dec584cc39dbbcdf5026572ac4bf0170174be68a4cde9496293157fe42a8f3cc7eb7661f3b5eee4092e24296dfc5544f4020f9fd8c416150404f0828440d20e3cd8e9d58c6d9714a5ce29491e0c76daaf34cbd3231d64274bf928d0f744c50bd021b3d12f9c76ba3a8a0d714bee488995d73519671a612c39072ac7f52a1ead9571663621a835d172f0b88c", 0xd8, 0x1e7, 0x0, 0x1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0xf, r2, &(0x7f0000001780)="c6dfff0940c7603d3fef96bc89a40d1c7ebae84904cc112d8ad3ee56b6bb6c6f9c33efbcbb0e9586ac216983edcf462ef05c07bf5884d6487faba5d3d455a8168d1f746db3d8d1b110ffa2058950a526392f5fe43971d81a901e0d0d112ac8f62be4e83082f3f9640d0aaab388a23d866f7804fee46207d64f43311c199f660deebdb738e50cd6c17c0bfe614a", 0x8d, 0x7, 0x0, 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x5, 0x8000, r3, &(0x7f0000001880)="ae11d17f", 0x4, 0x9, 0x0, 0x2, r6}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.36' (ED25519) to the list of known hosts. [ 27.406344][ T29] audit: type=1400 audit(1751435926.663:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.407518][ T3291] cgroup: Unknown subsys name 'net' [ 27.429101][ T29] audit: type=1400 audit(1751435926.663:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.456625][ T29] audit: type=1400 audit(1751435926.693:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.595275][ T3291] cgroup: Unknown subsys name 'cpuset' [ 27.601616][ T3291] cgroup: Unknown subsys name 'rlimit' [ 27.732901][ T29] audit: type=1400 audit(1751435926.983:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.756217][ T29] audit: type=1400 audit(1751435926.983:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.776770][ T29] audit: type=1400 audit(1751435926.993:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.791008][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.797201][ T29] audit: type=1400 audit(1751435926.993:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.826032][ T29] audit: type=1400 audit(1751435926.993:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.851004][ T29] audit: type=1400 audit(1751435926.993:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.866478][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.874332][ T29] audit: type=1400 audit(1751435927.063:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.086074][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.131319][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.142837][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 29.203201][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.210355][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.217639][ T3304] bridge_slave_0: entered allmulticast mode [ 29.224050][ T3304] bridge_slave_0: entered promiscuous mode [ 29.232969][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.240088][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.247546][ T3304] bridge_slave_1: entered allmulticast mode [ 29.254005][ T3304] bridge_slave_1: entered promiscuous mode [ 29.299743][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.313293][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.323903][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.331042][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.338227][ T3303] bridge_slave_0: entered allmulticast mode [ 29.344681][ T3303] bridge_slave_0: entered promiscuous mode [ 29.352183][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.386996][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.394084][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.401551][ T3303] bridge_slave_1: entered allmulticast mode [ 29.408333][ T3303] bridge_slave_1: entered promiscuous mode [ 29.426256][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.433414][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.440672][ T3310] bridge_slave_0: entered allmulticast mode [ 29.447307][ T3310] bridge_slave_0: entered promiscuous mode [ 29.464667][ T3304] team0: Port device team_slave_0 added [ 29.472827][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.481586][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.488725][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.495989][ T3310] bridge_slave_1: entered allmulticast mode [ 29.502531][ T3310] bridge_slave_1: entered promiscuous mode [ 29.509767][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.524003][ T3304] team0: Port device team_slave_1 added [ 29.538137][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.572199][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.586492][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.593460][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.619479][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.648210][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.657757][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.664838][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.690783][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.701577][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.708696][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.716019][ T3309] bridge_slave_0: entered allmulticast mode [ 29.722494][ T3309] bridge_slave_0: entered promiscuous mode [ 29.729670][ T3303] team0: Port device team_slave_0 added [ 29.736377][ T3303] team0: Port device team_slave_1 added [ 29.756872][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.764004][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.771140][ T3309] bridge_slave_1: entered allmulticast mode [ 29.777664][ T3309] bridge_slave_1: entered promiscuous mode [ 29.799668][ T3310] team0: Port device team_slave_0 added [ 29.820977][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.828184][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.835309][ T3305] bridge_slave_0: entered allmulticast mode [ 29.841768][ T3305] bridge_slave_0: entered promiscuous mode [ 29.848579][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.855691][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.862895][ T3305] bridge_slave_1: entered allmulticast mode [ 29.870290][ T3305] bridge_slave_1: entered promiscuous mode [ 29.877231][ T3310] team0: Port device team_slave_1 added [ 29.893087][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.900071][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.926099][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.953537][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.962897][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.969922][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.995863][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.008767][ T3304] hsr_slave_0: entered promiscuous mode [ 30.014868][ T3304] hsr_slave_1: entered promiscuous mode [ 30.027414][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.037578][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.059894][ T3309] team0: Port device team_slave_0 added [ 30.065975][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.072940][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.098997][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.110709][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.127926][ T3309] team0: Port device team_slave_1 added [ 30.141351][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.148377][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.174331][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.207695][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.214869][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.240977][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.269829][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.276874][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.303151][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.318675][ T3303] hsr_slave_0: entered promiscuous mode [ 30.324855][ T3303] hsr_slave_1: entered promiscuous mode [ 30.330647][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.338286][ T3303] Cannot create hsr debugfs directory [ 30.344458][ T3305] team0: Port device team_slave_0 added [ 30.371744][ T3305] team0: Port device team_slave_1 added [ 30.412026][ T3310] hsr_slave_0: entered promiscuous mode [ 30.418287][ T3310] hsr_slave_1: entered promiscuous mode [ 30.424216][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.431952][ T3310] Cannot create hsr debugfs directory [ 30.439894][ T3309] hsr_slave_0: entered promiscuous mode [ 30.446118][ T3309] hsr_slave_1: entered promiscuous mode [ 30.451968][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.459647][ T3309] Cannot create hsr debugfs directory [ 30.470160][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.477172][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.503222][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.514546][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.521576][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.547525][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.617466][ T3305] hsr_slave_0: entered promiscuous mode [ 30.623505][ T3305] hsr_slave_1: entered promiscuous mode [ 30.629432][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.637057][ T3305] Cannot create hsr debugfs directory [ 30.749328][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.764407][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.775879][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.786829][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.821871][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.830754][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.846108][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.864738][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.882193][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.891064][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.904891][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.918651][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.942700][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.951797][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.960815][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.977720][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.992181][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.008272][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.017070][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.026305][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.035644][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.064086][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.086981][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.094065][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.115182][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.122330][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.153226][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.170763][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.189009][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.200850][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.208001][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.227729][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.234936][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.264536][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.282006][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.290339][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.304809][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.315336][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.322492][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.334615][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.341786][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.366797][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.374025][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.386326][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.399365][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.406486][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.416924][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.424038][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.435469][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.442592][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.461998][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.478143][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.503150][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.513639][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.536461][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.547080][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.582889][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.614680][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.689905][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.725315][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.757499][ T3303] veth0_vlan: entered promiscuous mode [ 31.776784][ T3303] veth1_vlan: entered promiscuous mode [ 31.811924][ T3304] veth0_vlan: entered promiscuous mode [ 31.825046][ T3303] veth0_macvtap: entered promiscuous mode [ 31.838259][ T3304] veth1_vlan: entered promiscuous mode [ 31.847330][ T3303] veth1_macvtap: entered promiscuous mode [ 31.873403][ T3304] veth0_macvtap: entered promiscuous mode [ 31.888973][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.900856][ T3304] veth1_macvtap: entered promiscuous mode [ 31.908132][ T3310] veth0_vlan: entered promiscuous mode [ 31.919191][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.930651][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.945463][ T3310] veth1_vlan: entered promiscuous mode [ 31.953081][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962010][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.970818][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.979642][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.998625][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.012241][ T3309] veth0_vlan: entered promiscuous mode [ 32.024767][ T3309] veth1_vlan: entered promiscuous mode [ 32.033524][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.042427][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.051324][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.060100][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.079631][ T3305] veth0_vlan: entered promiscuous mode [ 32.096259][ T3305] veth1_vlan: entered promiscuous mode [ 32.116085][ T3310] veth0_macvtap: entered promiscuous mode [ 32.123655][ T3310] veth1_macvtap: entered promiscuous mode [ 32.134046][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.143558][ T3305] veth0_macvtap: entered promiscuous mode [ 32.165616][ T3309] veth0_macvtap: entered promiscuous mode [ 32.177873][ T3305] veth1_macvtap: entered promiscuous mode [ 32.188386][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.208934][ T3309] veth1_macvtap: entered promiscuous mode [ 32.228025][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.238038][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.248472][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.260314][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.268365][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.277233][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.286030][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.294854][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.309224][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.314719][ T3480] 9pnet_fd: Insufficient options for proto=fd [ 32.317987][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.331476][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.340320][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.349136][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.363900][ T3480] syz_tun: entered allmulticast mode [ 32.371916][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.380852][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.389683][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.398593][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493734][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 32.493792][ T29] audit: type=1400 audit(1751435931.743:104): avc: denied { map_read map_write } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.552390][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.596196][ T29] audit: type=1400 audit(1751435931.783:105): avc: denied { prog_run } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.614993][ T29] audit: type=1400 audit(1751435931.803:106): avc: denied { create } for pid=3488 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.634664][ T29] audit: type=1400 audit(1751435931.833:107): avc: denied { write } for pid=3488 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.747277][ T29] audit: type=1400 audit(1751435932.003:108): avc: denied { create } for pid=3493 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.787988][ T29] audit: type=1400 audit(1751435932.003:109): avc: denied { write } for pid=3493 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.879587][ C0] hrtimer: interrupt took 28059 ns [ 33.001598][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.038907][ T3475] syz_tun: left allmulticast mode [ 33.155172][ T3503] syz.2.9 (3503) used greatest stack depth: 10872 bytes left [ 33.314536][ T29] audit: type=1400 audit(1751435932.073:110): avc: denied { create } for pid=3496 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.333727][ T29] audit: type=1400 audit(1751435932.123:111): avc: denied { create } for pid=3485 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.353874][ T29] audit: type=1400 audit(1751435932.123:112): avc: denied { ioctl } for pid=3485 comm="syz.4.5" path="socket:[4776]" dev="sockfs" ino=4776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.379342][ T29] audit: type=1400 audit(1751435932.133:113): avc: denied { open } for pid=3496 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.465367][ T9] ================================================================== [ 33.473482][ T9] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 33.480512][ T9] [ 33.482841][ T9] read-write to 0xffff888237d29d24 of 4 bytes by task 36 on cpu 1: [ 33.490735][ T9] wq_worker_running+0x95/0x120 [ 33.495591][ T9] schedule_timeout+0xb7/0x170 [ 33.500385][ T9] msleep+0x50/0x90 [ 33.504202][ T9] nsim_fib_event_work+0x1ebc/0x21a0 [ 33.509493][ T9] process_scheduled_works+0x4cb/0x9d0 [ 33.514968][ T9] worker_thread+0x582/0x770 [ 33.519577][ T9] kthread+0x489/0x510 [ 33.523650][ T9] ret_from_fork+0xda/0x150 [ 33.528157][ T9] ret_from_fork_asm+0x1a/0x30 [ 33.532926][ T9] [ 33.535249][ T9] read to 0xffff888237d29d24 of 4 bytes by task 9 on cpu 0: [ 33.542528][ T9] kick_pool+0x49/0x2d0 [ 33.546683][ T9] __queue_work+0x8d6/0xb60 [ 33.551184][ T9] queue_work_on+0xd1/0x160 [ 33.555688][ T9] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 33.561608][ T9] wg_packet_encrypt_worker+0x9e1/0xb80 [ 33.567180][ T9] process_scheduled_works+0x4cb/0x9d0 [ 33.572658][ T9] worker_thread+0x582/0x770 [ 33.577265][ T9] kthread+0x489/0x510 [ 33.581335][ T9] ret_from_fork+0xda/0x150 [ 33.585853][ T9] ret_from_fork_asm+0x1a/0x30 [ 33.590632][ T9] [ 33.592954][ T9] value changed: 0x00000000 -> 0x00000001 [ 33.598674][ T9] [ 33.601005][ T9] Reported by Kernel Concurrency Sanitizer on: [ 33.607180][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 33.619531][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.629589][ T9] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 33.636118][ T9] ================================================================== [ 34.164797][ T3508] kexec: Could not allocate control_code_buffer