last executing test programs: 1.439788663s ago: executing program 3 (id=20): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000005340)={0x0, 0x0, &(0x7f0000005300)={&(0x7f0000000840)=@deltfilter={0x27c4, 0x2d, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x15}, {0x7, 0xfff4}, {0x8, 0xfff1}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0x4}}, @f_rsvp={{0x9}, {0x7c, 0x2, [@TCA_RSVP_POLICE={0x50, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2d8, 0x0, 0x4, 0x2, 0x8, {0x7, 0x0, 0x4, 0x0, 0x6, 0x3}, {0x4, 0x4, 0xe, 0x10, 0x1ff, 0x562}, 0x9, 0x7, 0xe6ab}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010101}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}, @f_rsvp6={{0xa}, {0x58, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x10001, 0x4, 0x9f7}, {0x9, 0x1a6b, 0x491}, 0x2e, 0x94, 0xa}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x400, 0x8, 0x2b}, {0x0, 0x4, 0x1}, 0x73, 0x85, 0x2}}, @TCA_RSVP_SRC={0x14, 0x3, @remote}]}}, @f_rsvp6={{0xa}, {0x2680, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x4, 0x8}, {0xffffff7f, 0x7, 0x81}, 0x2, 0x5, 0xb}}, @TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3dc7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5394}]}, @TCA_RSVP_ACT={0x2644, 0x6, [@m_tunnel_key={0x9c, 0x1d, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x3d, 0x6, "94a28017b7cc66032b9176267dbd37217d3c74272277bd2c8aca1d2206e7f64d100e88d6a1e2f5e56514923163e5d884ce53fce2d4144c4e1c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x11e0, 0x1f, 0x0, 0x0, {{0x7}, {0x10e0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa5, 0x6, {0x5, 'raw\x00', 0xfe, 0xd, "ac27816eee8ce68d3379af4e5614487f89192adaa35b85baf25b3ddda6a8fa9c04dde2acbd160f8323358d3d1f1dd164c7c443b9d2ecb75c821b6fa85e3583ca2c39b8d47054fcc11451da5e9bba350d788f4cba6d50b1949c482ab8914dc32887995dea33abe0bc5956b23f76033df5e4ae89d7706adb1e42f0f9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x1029, 0x6, {0xfffc, 'mangle\x00', 0x49, 0x2, "8739189d39b7b62a9e5334a90ea06874a654b73f2c98130a246e7dd648963751e07393d65453398b77044471a1ea153d47e73d94d830e03b3042c41ebd40236fe80c43ea87fa636ce381643be969d7fe21e5480005f8afd447d7f130a5194e46ec6bca6b4e217c57392838d92c182d5dcb7d138b507888e72afbbe8968d5b3878b75689494b0d953c534305401095632d904f0c855e9d7119e2b62b4dc51b5df1e8c3ee304900aa8aa1d7ce4f4a5a6a37519f217ef0b6f652d8dae6d56d7332e992e6c9a6d1a5d3306aa4899c1362791db6b720c1151b7fa09a4088013a86dcf20aaaba2752f0842ac3a4c6981ca7fb0baeb27855e36f8a5676387fee5364a93d89342f3f9c43818eb6f8161d0901864abe179796114157ff263207f1c1cbc188ecbcd25efcb9acf927dc7262a50dbfe33d0ac22d45219b013fc808ad70eb87a10807cdf15f0e7ada1336d5595e3bde1a70989805eae1cdb2a0f0c2e580b6fbef56ef65688db9a92c92c3c06c2d77c331e713a1e6730f590a38844d2259514bbfe9f2732c46ad5e87aeefcd6f704b33d5314010b03f56135a10766b0aa4aced02d917d641e32bf90c72ff92bbac9c90dccaa45308d2e3c70297beba3bfc447f45e84959e3f707a5ef2131ae1e706258a42e1adf6b497f5008f8b643bf5ff14cd39d50777e9f3fe751118272cb5a0e68cedf10f7267b9e9da2f6497ce85f073dee63db554bf160a69f963249c4fc094e64e0ea0bb83467fa6689c031daafb49aab26e090112beff482ad2207ad5ce5c321bcbc0b1d479a20b3a6e9b0916248aff0942b22d359967cde3b2d4d6ee2b86659bea64df2fb6e2f8fa61e520a45d59451abfa7c33715d9bb2f5eb91bcec1801613acae23ef9ce5bf004603849df9285da6b1488e71a0bc6d95e7f9e5bc3ad35ba23c330062a4a5052b3f0cb9171b739b4996ff8805676244b606434f1a8149efb67591835dce060668b95f9f45080fb6799715935109857698615518bbed2212717210e617c757a459b19c82b79a8eb1ffab7641a68eebbb34bfe066454b31edd2299e5d61c1059ca073cc047d6b7f05192cd51303716193f8ab488c742c94e9f7d955a45f2e7c37f6a7d17b7383ee2e14baa80dd5e0798550b136c554d28c2415247b1b53c9b908ed32533323429e7cddc66e36e1dcbc4f4686d71cd496d544ea30c710632e3fcf306bb1b90d39be5ef8ddde5ea367cecd687bc3b5b1bdc10526943808d84d94cb1f4fddd5388ad90fe1e1d29eee8a6b783cc86d2dd478f75b2e53d41ce08b51cf691572d1f374b4e4dc1e1c48f14a5247389894a29dd4fc1aa5d3165d3722428d54c3349b5b89403e5eaccc195ff860cf33a4bf2276c23c2e27b3b67cc3479a28ffdc337aadd0a920b199a4d451edafd293568894866ad8e1c601b67a3707c38dc29a708ab1141c5e7f508ebc8f2052cdcc9a9f87cd46784cb05e5c62413fe18b0fe44e0850bb20f36e8d779414da8d6e4a1089b881980e3110c1b05ca5cbe10811b5ec2bc469a0c6fa1d9b650e513fca21155f09d409cf8c6eec39d5efcbb7ebb4de555d0d4874bb829f8487266d97383354070079a21f0c6c999862a4230d366a6c996eb1fa6773742f964ac7d896bf9e3fcab3a494bdf5dba293a6179195a5e7d7d284515f77019ee08009b6485834823deb61fc7ada4fcf41fe4bfed4434ca91eb939fff71a17da4d964e7310dd72eb0ddf025cdca054eb0dcfbcb545b7611636295d1c9f1fe3e07041271d80b52f10f8c1f0b5812c4c5de59a0779f7f2da119f109fb0fa062278c589bce19a4c7a9305ea8a0cfa04d2d410d4ec8a9627ba862b39e490ddfdf2e3c6f1ad6bc7b679ed65fc09f672ce92657e738f5b6c7fe720e7934152104a0ddc860357ea908616c8f11b3177f55673f0997afd2614eedf3eee19dc74540fe8b843ff3d47515faf96fc6ac989a2316b94d744e4b6a3a48ee004cf7a8468d033c715a76e431ea85ee7a131ee403d1f7d98ef4ae91480e183f2f172edf543119abc49d87483d3e1db2cbef4a71a26a3623166f1e337f517889f33f7f99abbd8d22cad9fa2b3cda2abc86cd36af7c1fc40ac12566f9b07dbfcc1c9e2178d36eb8135bdabbe4621bdf3298363fdd513fb4e36b48d22b36e4f1e4483cab5656965086b792e8b51cb3e2b73a641ad74ad15acf68f23c0de2427a03dc7a146144d39627fa12a33e4eb655a5e464db0a6cd0b24a69943b5f505f0b55621e0aad99f937f2c0a53c57c0b3e123da87c19ab2bf1100f93003b5fae1d48b1387ccc459354d6c37f550a1d78e2ba79de75e723eda0bf4714a5417c29dd6e94e405bb84aa959ff90c6b59be4311ef9f6abc51139299e1f478724c392427ba13d4ccf557e004199b3454593b534b029851fa47f7c4cf8086f51fc8403abe95b9811b01ef8ee12602b6ed1851cf2e4adda634719bb9c8456bc50f43c5c1040c1861da84655e347070425d1e4731c6793c8c7c87ab4a2bc724c864c250dcc7a5cbfc07b55c4d14992fb7bd436a0ba3d15c30e4c72f3fb9344a69c42d609418e8492ddf41a58ec4eff98cdd96d0bc9613ad1cc9fe23b4a1256f4f5de0789c4c7b9188a46950c6b0ec95e7c16035aa3500ae1711952c06ebf165c611cdbc6fe54fb24d482c13b14d69d5984fe2d5ab28b04e9bc388c7496629e6986be0a0443269e6b3c206c420e0848538c2110833a2cad490eefb2e523cfb1e6c9bc6c53d2a32d733ab0f615ea07667f8cf5ddcbf3aefac2f0644ebae53f4b316317b6e2a338af0b22d6f9b06ad88c3863367199fea5592234aa5a321fa76fd469aa3bbf55e0e4fad21b8d96ced905a133353616e1fecad494f1bc284dccd60bb2c729e28b5b86bae7972cabde4e710fc3de79632b8f363bfa322db00af46ff209bf5398194420454297e830812e6e2e90b77fa0240e0541d98d602a1cf710150fc799eacb958dc903456340f35d6e21b0ea401368f76fff585797d4b15e7a0220a74cf84c9798378cd76ff910e566a93526399fb9a59f6f4fbbcd9295e43f8f8592d07fd4c6678f0e2d7d601ace5cb11cb50cc069f91af346469d4d045861ec9eeb817f9e8f8ebb43bc89ac1d26805723218d2045067da534c573b536eaf0a67332f0bfa08eb2828fc4bd74084177308204ff350e4ad686699515c3cc6f49d69c8b090f60e7e3997dfce4f39c0f38269a059e6cde5fe790cff354b734de209cd5f6c77892833c07a3fa6fbc69e7701b41467c5ea2b4d0966f67036993d6bdd30c57d2155c771747fc093b0bd26b2fcec39ecc467cc71e938c5c5384c4e7eabf22dd038fe0e58422fa2fd3537113fb35f6e43aa6526f5e55817dfa160d6599f46dd5e80c8db5a7207aae2c792e5449e5e657480735626aa6840fdb6b8c658c02fc0b2f8b2e3e487d535a04b9e1857d0d68f2aea9e11fa8242ee058b77261c3429f144ec18823019539eb43084bcda6ee02a23624cf99610fc4a67ce86b2372f1740ee87b85402b52280600988bd4348594a09da33ab5787ebb1c3953d6a6bafdfe9c19326b9cb602b6d5e723cc14c2d607ad1e333c1e20f28920d218b34df601e30659711ffbc31251c6193ebe9b5dad92a3c2bb278d562c6be2b544fbb518d332f8391f9751bff37d59177e42200f11097de1d0caa5995bf2464b4ab3324f89690f5e223761b1e0af19e3125dca991de458f3f58eabca2914a6481110471fae0d10d6c601d91a45ecae19c8548e756dd2d749039bc3f19162986e377d9e4653a539ef514b55a7ad3e6c305c89ea842cba7bbb4399238021fac37421a0f1aa8cc4f2dd6a3f6ed8ab6982314c14e093742cdf37a7c8f81259fcd1bff456c5dfc7855faa82bc67d0ede7349f9dddd1dcb827bd9e922114af6b1df5a8967ccb63ca1875107279923476ac387c44223357c7a2fb5c732b869ffc495412eb7c2df151b1891cacb2bac974bf02dcef3f43a529236026ae779da107d7c57b4019bf31c0d083537349ea0fe5f12966cd9662e5aad8223d376a6de81988931cd3dd9bf6abac127d52b8be4f1748d739d759eb68d98f077c2c721ef281e403c117f07e676f04bbd18688bab36e238462b208806260f4797f797ad27f79acf017bdaf125171b5b4fc958aa31bfdaaad9430a29d5d19e261805c2859e933f991e1053464a9a6f9ce0b9c392d567a41ce26e5459c3791610fa92fd98dc45a2963a84eb1bed4f15a14ebb56d70288cf8295aee5890bbb62ecd56dff5270e54fdb2902bf359d4c8c35738bcd07981f2b522bf9a2bf9d8ccbcc71ef18211c6535704fffeb5e585e6dbe1cce4962d2bd9d79c5c6eb9230c03f3f7addc4613ca9e2b3beb4812b24529281bebabee92ffc90de86e07245e34d6717e369e28b268cb022a8d4d644150d446e15498d410709eef7fb6e8f8a061fe58ba45a970d9a0c8481afffd255ffd4befe8788c2835214447fd328fb34e2bfa02d776f903dee71f50d8d95e67116395692d9906db2ad5fcc2b46e59ddae336affa785b73b240f0e33f5f84772e226c6294083b7cdda4a984decb44ecfcd728dfffdb38a47f3466b2089ef373c554a44a237c5ab08e3c3a108433c0ccd272cb7d8932877895f119b155650c87caee450f01e2e92259cc44cc12e0f2a1677769f347e9ad1e0509b8cc63944509bc676adcf8a314e605acd3fe5984114df4959b2c6039985eca88728bb9790a32498fa91639e8a6a341701a1c2bac9b919ff7a6cd6b6be1cc08e0e0dcea68edad288185d5b81e0a0205d2904f38e7eaf80cc0903dfa364802f641cb9e3025b3316f9f223776556f8643a5e6fdb150a3f40ca7910bc0696e019c93d0919c34d5c3ef51efc7d664ab0d313b4d848c7966fb14ccc4bb796650364b3446e9fef984bf5c459df7d6d0a3e658a4b57d57ddd4232dbcbb5cd956d05c6b06c2e9c1f04a4bd273c8749c1743c44fb6169ff933bf7c79ec63ece11b1408d886d60911ff0db1f1ea8e26cd538b32a954ccc38b996f355d9c8d6b2707a46fc1ed0cddeb223438eb02e705d301ad3ff36dadd4afd1e89fcc367d7ad68aa0acc24b4e6a38dd702c3b44aa3c7b1c8f70605358f420685e933d05f195eba7e7f81427bff6462e6cd12feb84db41f738e964280c3207e30aad4ab54d5146a7362b1f6b08009f37d349506b2e4f59c97fabd4b3de4563f61146622fdf61b25419d1c3ec8799bb66d2cf185f3912ca7a2758309924af177ca61aa63db807aa40463634beeb702c614fab11221032d1c3f3913d55233de46d880ec57c2a289b3167b1816428372d57af2922027abae3611853af804a42bde9ec7e2e9214f5eb0ca881b2c1ac242d8e1a3093b342f5c57288c7b537530250f79de8942899899e28c73e7399380b2210109e57cafe2174638382146a72eaa82f0f311014e2e6e10ca52d735a20b673a345aef37180a1f7313b2ee9fc5bd29df8a9429f06c1346f039425617a05ad5a2cf028828214f377d5c941c558f4d2d739cfd44998dfcbc5ef163df21df56fc74decc714b49145f45b8d3bd7f2696285b085c7dfeb988f88f2274a33463f98be6e285ad50b45194959f85b41de09b34657f771c6bf2ca47eac462f3811750e170529ce9c2c127025b4434c09c40e235817595c6ca15f0a6919c5e9d209f35363989ef7aee7b3a17e0bb8ab576861da88d04bbcd1b40e3a235263b5e78012e67692acdbd01e59eb5a971adabc0045389d938a2ffd576fbc5b15a8d4fbfc2051fcd4b6fa2e311f7059420f1fe2291790e8f7343e5a"}}]}, {0xd9, 0x6, "5433dbf37be2a5d8887efe25d0f5e38afa19ea3220be9a565d62bc0c3a13b5c0066dd2abaa9b2c2d2c8e87fa363d7a2d3d9147ca624dc410ee3cfa1b458b2ed135dff50b71bbd6319db2cd722e0aaba0f2a441afecb9fd922f68d094084f86265ca23ff5ddc00b8a2813ac1862889e8b3b5f001c026560c7a131c031520c8301d450e1b229265d4a9b6e9cb695ab5744447df222b27483e97e58175be062b712c5ad5b2b61a9c79bf1b9d3e8c5999db14e574974de01278e4965f598dc7c98de011d405b9f641b0ac7d8b54aaa944e0b2f29631cac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x184, 0xf, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0x6, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x4, 0x2, 0x81}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x7, 0x8, 0x699}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x6, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x717b, 0x0, 0x5, 0x1, 0x4}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0xff, 0x6, 0x7, 0x7}, 0x3}}]}, {0xa9, 0x6, "92beeef31e5aa191477538cc662348af4585fc79e2a5c41a472e8dea48802bf94ab86eedd713a7ccc98af249ab3db117f35a45397aef1c729c9d5d7c916329f9d8c75a6c4bf9e5e4e9143353f20b4f10f05c9c467fef81b98fa3caa342c7cea4280ba5806384fbc84cbb3233600ae19aa8387d19ceeb6b5abe2b1b6ac170e336100ec76d1bd3ee432158d696c3cd3e9aaaa75f6c25304ad597d28be8e25b583716a48f6883"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x103c, 0x0, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x138, 0x14, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xde, 0x6, "f62c40ae29e8134bbe8322bbdf098de82e9f745e1a2ef23758ebdab0430b3f9f7d647d843f32b4e1396ec0f5f43e0d8972f39c152aa1c95808e0503c9e9ef18c7d90ad254a3521269264d4425875cd9ee0f0864719f8491a6ea4350b9d66b9af8ad8fd3add5602afaf263af84078df39db9839705d1f45ef6d63fb4adf2c3b77d477a77bc286adade760f8bde56ad52fb0107d656b07d69b79b6f0fe1c5aa2fe18950cd055f02c2e5788af30dfc819d248692146028a6dc62d5f7209359461db595e4a621cae285face48e424577091b1310c79140e48cfabcb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xcc, 0xd, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x59, 0x6, {0x80, 'mangle\x00', 0x4, 0xc53, "bd250127d573eee720daa76222a38965d195cae81d196aa71b60c08ea0a3d03806b0b0868c6b7da655fafa8f633869"}}]}, {0x45, 0x6, "1a6783224b912093a8fc381d31cd94f23fc589487f6b40b72ad83f0daf423d2aace517d4b9c55f529cf1641d25d68e6fa9ad8c88b1fc6c06fdf4221514208160f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x27c4}, 0x1, 0x0, 0x0, 0x4}, 0x20000005) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.364229439s ago: executing program 1 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r1) 1.285976846s ago: executing program 1 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1.259837878s ago: executing program 3 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.184221584s ago: executing program 3 (id=30): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) 1.11419784s ago: executing program 1 (id=34): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.11158075s ago: executing program 3 (id=35): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x50, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) 580.747683ms ago: executing program 4 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 520.975368ms ago: executing program 4 (id=56): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0, 0x4000}], 0x1}, 0xe7db}], 0x1, 0x40010121, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) 433.362895ms ago: executing program 0 (id=59): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 401.428637ms ago: executing program 2 (id=60): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xcd2}, 0x18) io_uring_enter(r0, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 395.364158ms ago: executing program 0 (id=61): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x2) 380.500389ms ago: executing program 4 (id=62): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40012100) 348.197491ms ago: executing program 2 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 342.182912ms ago: executing program 0 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 318.737324ms ago: executing program 2 (id=65): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0x8, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r2, r0}}, 0x18) 306.307605ms ago: executing program 0 (id=66): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 281.327017ms ago: executing program 2 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 279.059887ms ago: executing program 0 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) 237.638761ms ago: executing program 1 (id=69): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12141, 0x0) 209.000483ms ago: executing program 2 (id=70): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) 168.590276ms ago: executing program 3 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00008864bbbbbbbbbbbbaaaaaaaaaaaa8100040008004519001400f400004184"], 0x2a) 163.721116ms ago: executing program 1 (id=72): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 142.528538ms ago: executing program 4 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 127.926209ms ago: executing program 2 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) 68.233144ms ago: executing program 1 (id=75): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) 53.550885ms ago: executing program 0 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000104010100000000000000000dfc21040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x404}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) 51.590855ms ago: executing program 4 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x0, 0x0, 0x0) 1.154199ms ago: executing program 4 (id=78): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r1}, 0x10) tkill(r0, 0x12) 0s ago: executing program 3 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1, 0x0, 0x6}, 0x18) setitimer(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.264431][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 21.264449][ T29] audit: type=1400 audit(1756186471.189:57): avc: denied { transition } for pid=3179 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.300058][ T29] audit: type=1400 audit(1756186471.189:58): avc: denied { noatsecure } for pid=3179 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.327770][ T29] audit: type=1400 audit(1756186471.189:59): avc: denied { write } for pid=3179 comm="sh" path="pipe:[2443]" dev="pipefs" ino=2443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.356548][ T29] audit: type=1400 audit(1756186471.189:60): avc: denied { rlimitinh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.379343][ T29] audit: type=1400 audit(1756186471.189:61): avc: denied { siginh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 30.213779][ T29] audit: type=1400 audit(1756186480.129:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.215253][ T3290] cgroup: Unknown subsys name 'net' [ 30.240877][ T29] audit: type=1400 audit(1756186480.129:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.273429][ T29] audit: type=1400 audit(1756186480.169:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.435426][ T3290] cgroup: Unknown subsys name 'cpuset' [ 30.443882][ T3290] cgroup: Unknown subsys name 'rlimit' [ 30.592878][ T29] audit: type=1400 audit(1756186480.509:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.618522][ T29] audit: type=1400 audit(1756186480.509:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.639502][ T29] audit: type=1400 audit(1756186480.509:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.662299][ T29] audit: type=1400 audit(1756186480.509:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.683254][ T29] audit: type=1400 audit(1756186480.539:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.693017][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.710406][ T29] audit: type=1400 audit(1756186480.539:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.746213][ T29] audit: type=1400 audit(1756186480.639:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.782323][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.606248][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 32.617275][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 32.675721][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 32.695640][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 32.760690][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 32.783066][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.790695][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.798315][ T3310] bridge_slave_0: entered allmulticast mode [ 32.805013][ T3310] bridge_slave_0: entered promiscuous mode [ 32.824311][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.831496][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.839184][ T3306] bridge_slave_0: entered allmulticast mode [ 32.845988][ T3306] bridge_slave_0: entered promiscuous mode [ 32.857861][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.865521][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.872780][ T3310] bridge_slave_1: entered allmulticast mode [ 32.879620][ T3310] bridge_slave_1: entered promiscuous mode [ 32.902165][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.909612][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.917808][ T3306] bridge_slave_1: entered allmulticast mode [ 32.924610][ T3306] bridge_slave_1: entered promiscuous mode [ 32.941520][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.969331][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.981177][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.988335][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.996336][ T3302] bridge_slave_0: entered allmulticast mode [ 33.002957][ T3302] bridge_slave_0: entered promiscuous mode [ 33.016605][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.038382][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.045622][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.052878][ T3302] bridge_slave_1: entered allmulticast mode [ 33.059460][ T3302] bridge_slave_1: entered promiscuous mode [ 33.067156][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.076456][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.083570][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.091102][ T3301] bridge_slave_0: entered allmulticast mode [ 33.098116][ T3301] bridge_slave_0: entered promiscuous mode [ 33.130751][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.138523][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.145957][ T3301] bridge_slave_1: entered allmulticast mode [ 33.152554][ T3301] bridge_slave_1: entered promiscuous mode [ 33.159503][ T3310] team0: Port device team_slave_0 added [ 33.167956][ T3310] team0: Port device team_slave_1 added [ 33.173983][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.182391][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.191120][ T3312] bridge_slave_0: entered allmulticast mode [ 33.197784][ T3312] bridge_slave_0: entered promiscuous mode [ 33.211187][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.236813][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.245297][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.252744][ T3312] bridge_slave_1: entered allmulticast mode [ 33.259600][ T3312] bridge_slave_1: entered promiscuous mode [ 33.272471][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.287967][ T3306] team0: Port device team_slave_0 added [ 33.300555][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.327584][ T3306] team0: Port device team_slave_1 added [ 33.342633][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.352675][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.360014][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.387148][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.399489][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.409693][ T3302] team0: Port device team_slave_0 added [ 33.416852][ T3302] team0: Port device team_slave_1 added [ 33.433227][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.440654][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.471135][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.484502][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.501746][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.509545][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.541664][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.560069][ T3301] team0: Port device team_slave_0 added [ 33.583601][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.592187][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.627404][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.640670][ T3301] team0: Port device team_slave_1 added [ 33.664453][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.672240][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.705688][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.720989][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.728452][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.760270][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.774172][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.783691][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.814827][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.830860][ T3312] team0: Port device team_slave_0 added [ 33.867475][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.876470][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.911212][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.924652][ T3312] team0: Port device team_slave_1 added [ 33.953742][ T3306] hsr_slave_0: entered promiscuous mode [ 33.960092][ T3306] hsr_slave_1: entered promiscuous mode [ 33.969365][ T3310] hsr_slave_0: entered promiscuous mode [ 33.977043][ T3310] hsr_slave_1: entered promiscuous mode [ 33.983503][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 33.990356][ T3310] Cannot create hsr debugfs directory [ 34.016875][ T3302] hsr_slave_0: entered promiscuous mode [ 34.023913][ T3302] hsr_slave_1: entered promiscuous mode [ 34.031705][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.038264][ T3302] Cannot create hsr debugfs directory [ 34.044366][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.051528][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.084791][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.132310][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.141509][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.172712][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.189660][ T3301] hsr_slave_0: entered promiscuous mode [ 34.196021][ T3301] hsr_slave_1: entered promiscuous mode [ 34.201886][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.207867][ T3301] Cannot create hsr debugfs directory [ 34.290733][ T3312] hsr_slave_0: entered promiscuous mode [ 34.298398][ T3312] hsr_slave_1: entered promiscuous mode [ 34.305554][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 34.311687][ T3312] Cannot create hsr debugfs directory [ 34.452619][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.462157][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.476659][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.487850][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.517136][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.533035][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.542619][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.559233][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.578068][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.593441][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.603690][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.626980][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.657099][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.668258][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.680358][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.691432][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.745776][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.764809][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.776479][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.787596][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.800739][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.839901][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.851512][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.871893][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.880933][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.889758][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.906034][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.913419][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.932676][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.958599][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.966122][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.978012][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.992891][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.000212][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.014123][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.025621][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.042333][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.049778][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.061816][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.069649][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.085065][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.099698][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.136638][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.149576][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.160267][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.176349][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.183617][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.197983][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.210669][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.221186][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.238083][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.256639][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.264944][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.280457][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.287881][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.304480][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.314407][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.352967][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.366394][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.401686][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.553183][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.574161][ T3306] veth0_vlan: entered promiscuous mode [ 35.602619][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.613038][ T3306] veth1_vlan: entered promiscuous mode [ 35.621321][ T3310] veth0_vlan: entered promiscuous mode [ 35.637076][ T3310] veth1_vlan: entered promiscuous mode [ 35.675778][ T3306] veth0_macvtap: entered promiscuous mode [ 35.701096][ T3306] veth1_macvtap: entered promiscuous mode [ 35.719630][ T3310] veth0_macvtap: entered promiscuous mode [ 35.738806][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.751585][ T3310] veth1_macvtap: entered promiscuous mode [ 35.771083][ T3302] veth0_vlan: entered promiscuous mode [ 35.787204][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.821415][ T3302] veth1_vlan: entered promiscuous mode [ 35.830173][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.853652][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.863178][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.882609][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.892968][ T3312] veth0_vlan: entered promiscuous mode [ 35.900598][ T3301] veth0_vlan: entered promiscuous mode [ 35.911825][ T3301] veth1_vlan: entered promiscuous mode [ 35.927901][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.937450][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.959215][ T3312] veth1_vlan: entered promiscuous mode [ 35.970574][ T3302] veth0_macvtap: entered promiscuous mode [ 35.984180][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 35.984197][ T29] audit: type=1400 audit(1756186485.899:81): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.T0hVO7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.021055][ T1000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025556][ T29] audit: type=1400 audit(1756186485.909:82): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.057598][ T29] audit: type=1400 audit(1756186485.909:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.T0hVO7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.091490][ T29] audit: type=1400 audit(1756186485.909:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.120524][ T29] audit: type=1400 audit(1756186485.909:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.T0hVO7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.151901][ T29] audit: type=1400 audit(1756186485.909:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.T0hVO7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.183480][ T29] audit: type=1400 audit(1756186485.909:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.207114][ T29] audit: type=1400 audit(1756186485.949:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.233646][ T29] audit: type=1400 audit(1756186485.949:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.261326][ T3302] veth1_macvtap: entered promiscuous mode [ 36.271558][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.279465][ T3312] veth0_macvtap: entered promiscuous mode [ 36.297028][ T1000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.315838][ T3312] veth1_macvtap: entered promiscuous mode [ 36.323907][ T29] audit: type=1400 audit(1756186486.239:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.324629][ T3301] veth0_macvtap: entered promiscuous mode [ 36.358330][ T1000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.377589][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.393834][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.401509][ T1000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.417447][ T3301] veth1_macvtap: entered promiscuous mode [ 36.439109][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.451568][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.454215][ T3473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.473994][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.490641][ T1000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.550777][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.578228][ T1000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.628276][ T1000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.657797][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.700445][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.732536][ T3488] loop0: detected capacity change from 0 to 512 [ 36.755548][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.811826][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.834740][ T3488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 36.854399][ T3488] System zones: 0-2, 18-18, 34-35 [ 36.860575][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.875377][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.887493][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.899137][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.911188][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.921896][ T3488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.945434][ T3488] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.012112][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.090741][ T3511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.122235][ T3511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.146088][ T3515] loop3: detected capacity change from 0 to 128 [ 37.162342][ T3515] EXT4-fs: Ignoring removed nobh option [ 37.177055][ T3515] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.203442][ T3515] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.313766][ T3529] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 37.314082][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.404124][ T3538] random: crng reseeded on system resumption [ 37.425410][ T3538] Restarting kernel threads ... [ 37.452661][ T3538] Done restarting kernel threads. [ 37.481924][ T3544] loop0: detected capacity change from 0 to 1024 [ 37.501490][ T3544] EXT4-fs: Ignoring removed bh option [ 37.547460][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 37.621175][ T3559] syz.2.39 (3559) used greatest stack depth: 9872 bytes left [ 37.634030][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 37.671383][ T3561] sctp: [Deprecated]: syz.2.41 (pid 3561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 37.671383][ T3561] Use struct sctp_sack_info instead [ 37.766170][ T3565] vhci_hcd: invalid port number 96 [ 37.772331][ T3565] vhci_hcd: default hub control req: 0500 vfffc i0060 l0 [ 37.938281][ T3580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.50'. [ 38.062404][ T3594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.062868][ T3592] mmap: syz.0.55 (3592) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.148046][ T3600] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.341291][ T3620] loop0: detected capacity change from 0 to 1024 [ 38.386120][ T3620] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 38.417504][ T3620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.452751][ T3620] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.68: missing EA_INODE flag [ 38.475693][ T3620] EXT4-fs (loop0): Remounting filesystem read-only [ 38.482864][ T3620] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.527061][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.578508][ T3497] ================================================================== [ 38.589715][ T3497] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 38.599248][ T3497] [ 38.603186][ T3497] write to 0xffff888103557544 of 4 bytes by task 3295 on cpu 0: [ 38.617205][ T3497] shmem_mknod+0x137/0x180 [ 38.623150][ T3497] shmem_create+0x34/0x50 [ 38.628923][ T3497] path_openat+0x1105/0x2170 [ 38.639491][ T3497] do_filp_open+0x109/0x230 [ 38.645441][ T3497] do_sys_openat2+0xa6/0x110 [ 38.651130][ T3497] __x64_sys_openat+0xf2/0x120 [ 38.657188][ T3497] x64_sys_call+0x2e9c/0x2ff0 [ 38.664417][ T3497] do_syscall_64+0xd2/0x200 [ 38.670396][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.677210][ T3497] [ 38.679641][ T3497] read to 0xffff888103557544 of 4 bytes by task 3497 on cpu 1: [ 38.688716][ T3497] fill_mg_cmtime+0x5b/0x260 [ 38.694129][ T3497] generic_fillattr+0x24a/0x340 [ 38.699759][ T3497] shmem_getattr+0x181/0x200 [ 38.705386][ T3497] vfs_getattr_nosec+0x143/0x1e0 [ 38.712028][ T3497] vfs_statx+0x113/0x390 [ 38.717778][ T3497] vfs_fstatat+0x115/0x170 [ 38.724171][ T3497] __se_sys_newfstatat+0x55/0x260 [ 38.730626][ T3497] __x64_sys_newfstatat+0x55/0x70 [ 38.737438][ T3497] x64_sys_call+0x135a/0x2ff0 [ 38.745204][ T3497] do_syscall_64+0xd2/0x200 [ 38.751575][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.757774][ T3497] [ 38.760658][ T3497] value changed: 0x1e4372da -> 0x1e4926fd [ 38.767084][ T3497] [ 38.770380][ T3497] Reported by Kernel Concurrency Sanitizer on: [ 38.777433][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.788531][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.801128][ T3497] ================================================================== [ 38.846926][ T3644] syz.3.79 calls setitimer() with new_value NULL pointer. Misfeature support will be removed