last executing test programs: 2.825842522s ago: executing program 1 (id=236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.264946213s ago: executing program 1 (id=247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1.968767525s ago: executing program 1 (id=252): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80800000, 0x0, 0x0) 1.260056847s ago: executing program 2 (id=270): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.039245703s ago: executing program 1 (id=276): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000f80)=[{&(0x7f0000000a40)="18", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) close(r1) 1.020886055s ago: executing program 1 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="2706", 0x2}], 0x1, 0x0, 0x0, 0x20008040}, 0x1) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 973.933508ms ago: executing program 4 (id=278): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 928.950181ms ago: executing program 4 (id=279): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x0) 906.232374ms ago: executing program 4 (id=280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x160c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 868.555666ms ago: executing program 4 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 846.248288ms ago: executing program 4 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x5f40, &(0x7f0000000080)={0x0, 0x8feb0, 0x400, 0x1, 0xd}) r2 = epoll_create(0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000003100)={0x9000000c}) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 818.50683ms ago: executing program 4 (id=285): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 525.644142ms ago: executing program 3 (id=292): pread64(0xffffffffffffffff, 0x0, 0x0, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 482.411254ms ago: executing program 3 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988cafbe882cac5050093517d176c709a6db9", 0x1e}, {&(0x7f0000000140)="e3d537fb43aa9f898264fd20", 0xc}], 0x2) 422.256299ms ago: executing program 0 (id=295): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x19, 0x3, 0xb, 0x4, 0x7, 0xd}) 410.55463ms ago: executing program 2 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r1, 0x3) 362.301783ms ago: executing program 2 (id=297): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 250.841282ms ago: executing program 0 (id=298): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0', [{0x20, 'eX\x00\x00\x00I\xc0\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\x1f\x11F\xfd\xbc\xd5\xa7\xd2\xd6\xbb*\xa6\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x8ca\\|J6\xde\x17\x01\t\xeb\x7fK\x8d\xb0G\\Hx\x12G'}, {0x20, ':@J\xb2,D\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xfb\xea\x16\x01^z\xb0\xb04z\xafE\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9cH\x9az\xbfE=)|\x18f6\xd8G\x99o\x02\x12\xd4\x9d\xfd\xb2\xe8\x8f\x06\x00\xc3N\xe3\xb3\xc8\r\xdb\x86\xdd\xd8J\x12&7\r\xf1\xc7a\f\x18n~\xc5\xd7\xc3\x06\x1d\xd5\xa8\x92F\x18\x9a\xb7]\x16\xa2j\xd8#92\x00\x00\x00\x00E\xc9r\x97\x9a\xd9\xd5\xb0\x85\xeb\x81\xe7\xcc\xe1\x01\xc0\x18\xb7\xff\x1f\xba\xb3\x86E39\x9e\x12G\x93\xda\xf2\xa9\xfd\xc7\xc9!A3&\xbf\xe6)\x06\x9e\xe8\x15\x19\x94CF\x16\xdb\xbc\xfe)\x85\xa6\xec\xea\xd7\xa8\xca,\x8a\xe7\x04\xf4\xa3\xfc@j7\xc1f\x1c\v?\x116viRwi\x06\x11\xc0\xb9\xa6\xe8\a\x04X\xfd\x9d\x9d\xf9\xc8|\x9f\xe8|\xd3\xb5D\xa3\x97M|):\xfc>\x93#\xb3/\x98(\xea\x1c\xd3\x1f\x8a5\xe5D\xafGX\x92\t^\xf7I\x9b\x9d\x02\x00\x00\x00\x00'}, {0x20, 'trusted./verlay.y\xc6per~\v\x17\xd7\x01d.O\xecTU\xa5\x011\xae\xcc\xf7{i8\xbe\x8b\x04\xb8mG\xea\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfeEO\xf2\x82f\xf1<\xe8*\xe8\x01/\xec\xd5\x91\xf3\xfb(|\x9f[\x04\xd3#@\x1e\x7f\xa6(\x9c\x17X\xc4\xc6@\"9\xd7\xe6\x91\xba\x03\xcd\xbaW9#\x15x\xf2\xf2>\x1fR\xcda\x8f<\xa8\xeaL\xc7\x18\xec\x0e\x8f\xd9\xdax\xf8\x81bm-b\x87D?\xa5\tQ\xdc\t\x8fT\xf0\xca\x0e2\xdf'}], 0xa, "98ff288c2c364aaca89c267b553864080076b2b41b014891ae518e3479ba3ddb672050faced143a22399a575e2f50ff2388b285e3779368d88a0be938144c48e94c179d2c68e1f208966cf2b40f3641701fb414cd8987df26f6c142ec80a0b05db2f33161bf65ee26eb4"}, 0x26f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda15a08769bcd5107053eaafa98740f8cb9694c01f00", 0x1c) write$qrtrtun(r0, &(0x7f00000016c0)="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", 0x1d4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 241.010022ms ago: executing program 2 (id=299): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 220.076534ms ago: executing program 3 (id=300): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 191.814376ms ago: executing program 0 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) 168.834217ms ago: executing program 2 (id=302): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="643c87cf08d21d994efea03321af0c6c7715a604", 0x14}], 0x1}}, {{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001340)=ANY=[], 0xf8}}], 0x2, 0x0) 156.287689ms ago: executing program 0 (id=303): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, r3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x5, 0x2, 0x2}) 116.269402ms ago: executing program 0 (id=304): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 108.262442ms ago: executing program 3 (id=305): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) 98.751013ms ago: executing program 2 (id=306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 81.757194ms ago: executing program 1 (id=307): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 62.648396ms ago: executing program 3 (id=308): fsopen(&(0x7f0000000400)='autofs\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00'}, 0x18) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000001d00)=ANY=[@ANYBLOB='a *:* w'], 0x8) 58.635256ms ago: executing program 0 (id=309): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0x7fff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 0s ago: executing program 3 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 22.024503][ T29] audit: type=1400 audit(1739595045.193:81): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.39' (ED25519) to the list of known hosts. [ 26.789018][ T29] audit: type=1400 audit(1739595049.953:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.790086][ T3287] cgroup: Unknown subsys name 'net' [ 26.811765][ T29] audit: type=1400 audit(1739595049.953:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.839193][ T29] audit: type=1400 audit(1739595049.973:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.978818][ T3287] cgroup: Unknown subsys name 'cpuset' [ 26.985046][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.087264][ T29] audit: type=1400 audit(1739595050.243:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.110739][ T29] audit: type=1400 audit(1739595050.243:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.131251][ T29] audit: type=1400 audit(1739595050.243:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.151695][ T29] audit: type=1400 audit(1739595050.243:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.172140][ T29] audit: type=1400 audit(1739595050.243:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.174598][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.197020][ T29] audit: type=1400 audit(1739595050.243:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.228961][ T29] audit: type=1400 audit(1739595050.373:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.257336][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.348025][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.407227][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.455520][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.462657][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.470120][ T3302] bridge_slave_0: entered allmulticast mode [ 28.476599][ T3302] bridge_slave_0: entered promiscuous mode [ 28.485279][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.492498][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.499757][ T3302] bridge_slave_1: entered allmulticast mode [ 28.506147][ T3302] bridge_slave_1: entered promiscuous mode [ 28.532713][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.547906][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.560755][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.597810][ T3302] team0: Port device team_slave_0 added [ 28.608933][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.620622][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.635003][ T3302] team0: Port device team_slave_1 added [ 28.655647][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.662844][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.670249][ T3299] bridge_slave_0: entered allmulticast mode [ 28.676597][ T3299] bridge_slave_0: entered promiscuous mode [ 28.701304][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.708406][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.715503][ T3299] bridge_slave_1: entered allmulticast mode [ 28.722016][ T3299] bridge_slave_1: entered promiscuous mode [ 28.728387][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.735337][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.761275][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.793562][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.800558][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.827364][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.855357][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.862469][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.869782][ T3298] bridge_slave_0: entered allmulticast mode [ 28.876175][ T3298] bridge_slave_0: entered promiscuous mode [ 28.882953][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.890166][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.897442][ T3298] bridge_slave_1: entered allmulticast mode [ 28.903977][ T3298] bridge_slave_1: entered promiscuous mode [ 28.911302][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.933652][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.967527][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.978068][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.012477][ T3302] hsr_slave_0: entered promiscuous mode [ 29.018671][ T3302] hsr_slave_1: entered promiscuous mode [ 29.024629][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.031766][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.038990][ T3301] bridge_slave_0: entered allmulticast mode [ 29.045425][ T3301] bridge_slave_0: entered promiscuous mode [ 29.051819][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.058981][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.066157][ T3309] bridge_slave_0: entered allmulticast mode [ 29.072760][ T3309] bridge_slave_0: entered promiscuous mode [ 29.079769][ T3299] team0: Port device team_slave_0 added [ 29.090710][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.097858][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.105040][ T3301] bridge_slave_1: entered allmulticast mode [ 29.111484][ T3301] bridge_slave_1: entered promiscuous mode [ 29.122345][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.129495][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.136671][ T3309] bridge_slave_1: entered allmulticast mode [ 29.143199][ T3309] bridge_slave_1: entered promiscuous mode [ 29.149996][ T3299] team0: Port device team_slave_1 added [ 29.161782][ T3298] team0: Port device team_slave_0 added [ 29.185986][ T3298] team0: Port device team_slave_1 added [ 29.197112][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.204120][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.230201][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.241921][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.265536][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.272556][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.298511][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.312891][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.328226][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.340419][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.347376][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.373378][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.384646][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.391699][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.417708][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.435795][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.466344][ T3301] team0: Port device team_slave_0 added [ 29.474999][ T3301] team0: Port device team_slave_1 added [ 29.486488][ T3309] team0: Port device team_slave_0 added [ 29.501577][ T3299] hsr_slave_0: entered promiscuous mode [ 29.507517][ T3299] hsr_slave_1: entered promiscuous mode [ 29.513931][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.521524][ T3299] Cannot create hsr debugfs directory [ 29.537099][ T3309] team0: Port device team_slave_1 added [ 29.555729][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.562739][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.588710][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.599920][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.606857][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.632786][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.661678][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.668668][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.694688][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.705735][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.712743][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.738746][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.753865][ T3298] hsr_slave_0: entered promiscuous mode [ 29.760036][ T3298] hsr_slave_1: entered promiscuous mode [ 29.765839][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.773493][ T3298] Cannot create hsr debugfs directory [ 29.830812][ T3309] hsr_slave_0: entered promiscuous mode [ 29.836718][ T3309] hsr_slave_1: entered promiscuous mode [ 29.842713][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.850338][ T3309] Cannot create hsr debugfs directory [ 29.877430][ T3301] hsr_slave_0: entered promiscuous mode [ 29.883625][ T3301] hsr_slave_1: entered promiscuous mode [ 29.889555][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.897105][ T3301] Cannot create hsr debugfs directory [ 29.921285][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.929929][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.940731][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.967741][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.081299][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.100336][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.111334][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.123506][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.137044][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.146845][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.155915][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.164827][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.199566][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.218592][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.237016][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.245928][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.262375][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.272236][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.287087][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.294241][ T1794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.314323][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.321426][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.344433][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.363221][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.371214][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.381185][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.390406][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.423853][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.439521][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.460051][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.467184][ T1794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.476460][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.483585][ T1794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.500420][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.527156][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.543715][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.550846][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.559719][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.566802][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.579164][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.615916][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.623795][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.634281][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.654006][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.668685][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.675789][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.684783][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.691862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.723834][ T3302] veth0_vlan: entered promiscuous mode [ 30.745744][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.754877][ T3302] veth1_vlan: entered promiscuous mode [ 30.776768][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.784008][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.794892][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.802015][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.826516][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.859748][ T3302] veth0_macvtap: entered promiscuous mode [ 30.866887][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.884010][ T3302] veth1_macvtap: entered promiscuous mode [ 30.899102][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.918921][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.937296][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.976963][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.985765][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.994534][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.003269][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.037699][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.060237][ T3299] veth0_vlan: entered promiscuous mode [ 31.075431][ T3299] veth1_vlan: entered promiscuous mode [ 31.107530][ T3309] veth0_vlan: entered promiscuous mode [ 31.131210][ T3309] veth1_vlan: entered promiscuous mode [ 31.139272][ T3298] veth0_vlan: entered promiscuous mode [ 31.150403][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.162774][ T3309] veth0_macvtap: entered promiscuous mode [ 31.173904][ T3299] veth0_macvtap: entered promiscuous mode [ 31.184535][ T3309] veth1_macvtap: entered promiscuous mode [ 31.199142][ T3298] veth1_vlan: entered promiscuous mode [ 31.207062][ T3299] veth1_macvtap: entered promiscuous mode [ 31.223450][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.234132][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.251970][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.265849][ T3298] veth0_macvtap: entered promiscuous mode [ 31.282091][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.292699][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.304887][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.315713][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.326204][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.336204][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.346776][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.358282][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.366442][ T3298] veth1_macvtap: entered promiscuous mode [ 31.377808][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.388437][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.398278][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.408784][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.418740][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.429343][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.440803][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.454757][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.465326][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.475258][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.485775][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.496541][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.504701][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.515419][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.525363][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.535865][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.545759][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.556206][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.567736][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.575864][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.584805][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.593877][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.602838][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.626689][ T3301] veth0_vlan: entered promiscuous mode [ 31.634833][ T3299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.643670][ T3299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.645962][ T3446] loop1: detected capacity change from 0 to 8192 [ 31.652419][ T3299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667604][ T3299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.680762][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.689537][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.698260][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.707092][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.722060][ T3301] veth1_vlan: entered promiscuous mode [ 31.744293][ T3301] veth0_macvtap: entered promiscuous mode [ 31.770217][ T3301] veth1_macvtap: entered promiscuous mode [ 31.790432][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.800973][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.810931][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.821420][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.831372][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.841878][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.851790][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.862257][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.877390][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.894685][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.905237][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.915183][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.925622][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.935465][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.945930][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.955808][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.966244][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.976748][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.018794][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 32.018813][ T29] audit: type=1400 audit(1739595055.183:135): avc: denied { watch watch_reads } for pid=3451 comm="syz.3.4" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.020854][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.036497][ T29] audit: type=1326 audit(1739595055.193:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.048023][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.070480][ T29] audit: type=1326 audit(1739595055.233:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.079721][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.088367][ T29] audit: type=1326 audit(1739595055.233:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.111426][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.152192][ T29] audit: type=1326 audit(1739595055.233:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.175379][ T29] audit: type=1326 audit(1739595055.233:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.199102][ T29] audit: type=1326 audit(1739595055.233:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.222784][ T29] audit: type=1326 audit(1739595055.233:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.246076][ T29] audit: type=1326 audit(1739595055.233:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.271472][ T29] audit: type=1326 audit(1739595055.283:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f2ff5afcde9 code=0x7ffc0000 [ 32.291469][ T3462] ======================================================= [ 32.291469][ T3462] WARNING: The mand mount option has been deprecated and [ 32.291469][ T3462] and is ignored by this kernel. Remove the mand [ 32.291469][ T3462] option from the mount to silence this warning. [ 32.291469][ T3462] ======================================================= [ 32.628294][ T3487] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.21'. [ 32.637301][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 32.816128][ T3503] geneve0: entered allmulticast mode [ 32.909506][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 32.919123][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 32.936951][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 32.946168][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 32.997739][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 33.007202][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 33.400263][ T3487] syz.0.21 (3487) used greatest stack depth: 10792 bytes left [ 33.453466][ T3554] program syz.3.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.623435][ T3570] loop3: detected capacity change from 0 to 512 [ 33.631199][ T3570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.666809][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.680624][ T3570] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.716332][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.900164][ T3587] loop1: detected capacity change from 0 to 128 [ 33.972899][ T3593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'. [ 33.981129][ T3591] loop3: detected capacity change from 0 to 1024 [ 33.982527][ T3593] sch_tbf: burst 88 is lower than device bridge_slave_0 mtu (1514) ! [ 34.007070][ T3592] process 'syz.1.68' launched './file1' with NULL argv: empty string added [ 34.018956][ T3591] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 34.029837][ T3591] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 34.040160][ T3591] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.050320][ T3591] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 34.120433][ T3601] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 34.495327][ T3644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 34.738744][ T3678] mmap: syz.0.93 (3678) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.854322][ T3693] loop0: detected capacity change from 0 to 512 [ 34.861330][ T3693] EXT4-fs: Ignoring removed bh option [ 34.867234][ T3693] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.880417][ T3693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.892450][ T3693] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.907367][ T3693] EXT4-fs (loop0): 1 truncate cleaned up [ 34.913939][ T3693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.954111][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.146785][ T3729] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 35.186408][ T3733] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.203141][ T3733] wireguard0: entered promiscuous mode [ 35.208771][ T3733] wireguard0: entered allmulticast mode [ 35.304186][ T3750] Driver unsupported XDP return value 0 on prog (id 115) dev N/A, expect packet loss! [ 35.362231][ T3757] ip6gre1: entered allmulticast mode [ 35.455543][ T3768] loop2: detected capacity change from 0 to 2048 [ 35.489793][ T3772] pim6reg1: entered promiscuous mode [ 35.495229][ T3772] pim6reg1: entered allmulticast mode [ 35.502679][ T3768] loop2: p1 < > p4 [ 35.507304][ T3768] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.609700][ T3783] vlan2: entered allmulticast mode [ 35.617349][ T3783] bond0: entered allmulticast mode [ 35.622537][ T3783] bond_slave_0: entered allmulticast mode [ 35.628374][ T3783] bond_slave_1: entered allmulticast mode [ 35.646970][ T3787] syz.2.144 uses obsolete (PF_INET,SOCK_PACKET) [ 35.656737][ T3783] bond0: left allmulticast mode [ 35.661674][ T3783] bond_slave_0: left allmulticast mode [ 35.667205][ T3783] bond_slave_1: left allmulticast mode [ 35.919828][ T3793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.928440][ T3793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.013215][ T3815] loop4: detected capacity change from 0 to 1024 [ 36.021152][ T3815] EXT4-fs: Ignoring removed orlov option [ 36.045569][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.934404][ T3868] Zero length message leads to an empty skb [ 36.954768][ T3868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3868 comm=syz.0.178 [ 36.967559][ T3815] syz.4.156 (3815) used greatest stack depth: 10656 bytes left [ 36.982320][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.016390][ T3874] bridge: RTM_NEWNEIGH with invalid ether address [ 37.105260][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 37.105276][ T29] audit: type=1400 audit(1739595060.319:417): avc: denied { write } for pid=3890 comm="syz.0.189" path="socket:[5107]" dev="sockfs" ino=5107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.140068][ T3887] loop1: detected capacity change from 0 to 2048 [ 37.160335][ T3895] loop0: detected capacity change from 0 to 1024 [ 37.161162][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.180966][ T3895] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.192460][ T3895] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 37.209450][ T29] audit: type=1400 audit(1739595060.429:418): avc: denied { read write } for pid=3886 comm="syz.1.187" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.234500][ T3895] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 37.245581][ T3887] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.262430][ T3887] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 1 with error 28 [ 37.275207][ T3887] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.275207][ T3887] [ 37.285159][ T3887] EXT4-fs (loop1): Total free blocks count 0 [ 37.290263][ T3895] EXT4-fs (loop0): invalid journal inode [ 37.291243][ T3887] EXT4-fs (loop1): Free/Dirty block details [ 37.302919][ T3887] EXT4-fs (loop1): free_blocks=2415919104 [ 37.308757][ T3887] EXT4-fs (loop1): dirty_blocks=32 [ 37.313891][ T3887] EXT4-fs (loop1): Block reservation details [ 37.319961][ T3887] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 37.326074][ T29] audit: type=1400 audit(1739595060.449:419): avc: denied { open } for pid=3886 comm="syz.1.187" path="/36/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.458109][ T3887] syz.1.187 (3887) used greatest stack depth: 9704 bytes left [ 37.466923][ T362] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.507249][ T3910] loop1: detected capacity change from 0 to 512 [ 37.518659][ T3910] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.195: corrupted in-inode xattr: invalid ea_ino [ 37.533470][ T3910] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.195: couldn't read orphan inode 15 (err -117) [ 37.546370][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.562671][ T29] audit: type=1400 audit(1739595060.779:420): avc: denied { setattr } for pid=3909 comm="syz.1.195" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.590514][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=3914 comm=syz.0.196 [ 37.639503][ T29] audit: type=1400 audit(1739595060.849:421): avc: denied { read write } for pid=3917 comm="syz.4.197" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.662785][ T29] audit: type=1400 audit(1739595060.849:422): avc: denied { open } for pid=3917 comm="syz.4.197" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.686719][ T29] audit: type=1400 audit(1739595060.849:423): avc: denied { ioctl } for pid=3917 comm="syz.4.197" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.702335][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.716226][ T29] audit: type=1326 audit(1739595060.939:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e1afcde9 code=0x7ffc0000 [ 37.743469][ T29] audit: type=1326 audit(1739595060.939:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e1afcde9 code=0x7ffc0000 [ 37.767385][ T29] audit: type=1326 audit(1739595060.989:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64e1afcde9 code=0x7ffc0000 [ 37.830396][ T3926] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 37.844072][ T3926] bond1: entered allmulticast mode [ 37.857831][ T3926] bond1: (slave ip6erspan0): making interface the new active one [ 37.865668][ T3926] ip6erspan0: entered allmulticast mode [ 37.871855][ T3926] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 37.952978][ T9] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 37.960507][ T9] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 37.993743][ T3941] loop4: detected capacity change from 0 to 512 [ 38.002836][ T9] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.015676][ T3941] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.209: corrupted in-inode xattr: invalid ea_ino [ 38.040947][ T3941] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.209: couldn't read orphan inode 15 (err -117) [ 38.054803][ T3944] ALSA: seq fatal error: cannot create timer (-19) [ 38.055069][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.136117][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.203043][ T3961] loop2: detected capacity change from 0 to 512 [ 38.217228][ T3960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3960 comm=syz.0.217 [ 38.229768][ T3960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3960 comm=syz.0.217 [ 38.267853][ T3963] loop1: detected capacity change from 0 to 512 [ 38.279007][ T3961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.292200][ T3963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.301311][ T3961] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.318887][ T3963] EXT4-fs (loop1): 1 truncate cleaned up [ 38.329558][ T3963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.390402][ T3978] loop0: detected capacity change from 0 to 164 [ 38.405961][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.417765][ T3978] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.424213][ T3963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.429636][ T3978] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.791923][ T4015] loop4: detected capacity change from 0 to 164 [ 38.831213][ T4018] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 39.010059][ T4018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.070189][ T4022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.088684][ T4022] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 39.120245][ T4022] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 39.276222][ T4037] loop2: detected capacity change from 0 to 2048 [ 39.314264][ T4037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.336247][ T4037] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.346806][ T4042] loop4: detected capacity change from 0 to 4096 [ 39.410289][ T4042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.533222][ T4051] loop0: detected capacity change from 0 to 1024 [ 39.540456][ T4051] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 39.551500][ T4051] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 39.566308][ T4051] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.602816][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.614142][ T4051] EXT4-fs (loop0): invalid journal inode [ 39.621230][ T4051] EXT4-fs (loop0): can't get journal size [ 39.638124][ T4051] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.253: blocks 2-2 from inode overlap system zone [ 39.657247][ T4051] EXT4-fs (loop0): failed to initialize system zone (-117) [ 39.666157][ T4051] EXT4-fs (loop0): mount failed [ 39.694182][ T4046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.248: bg 0: block 345: padding at end of block bitmap is not set [ 39.720717][ T4046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 39.733356][ T4046] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.733356][ T4046] [ 39.770967][ T4046] syz.2.248 (4046) used greatest stack depth: 9152 bytes left [ 39.799488][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 39.812238][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.812238][ T11] [ 39.871881][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 39.884802][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.884802][ T11] [ 39.894515][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 39.900551][ T11] EXT4-fs (loop2): Free/Dirty block details [ 39.906462][ T11] EXT4-fs (loop2): free_blocks=0 [ 40.184473][ T4092] loop0: detected capacity change from 0 to 1024 [ 40.200055][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.227721][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.272284][ T4101] __nla_validate_parse: 2 callbacks suppressed [ 40.272300][ T4101] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.270'. [ 40.287801][ T4101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 40.369762][ T4105] loop0: detected capacity change from 0 to 4096 [ 40.379540][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.406192][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.506555][ T4115] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 40.514297][ T4115] netlink: 'syz.4.278': attribute type 4 has an invalid length. [ 40.522037][ T4115] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.278'. [ 40.575599][ T4119] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 40.584581][ T4119] SELinux: failed to load policy [ 40.681541][ T4131] loop0: detected capacity change from 0 to 256 [ 40.688178][ T4131] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 40.767756][ T4134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.287'. [ 40.780635][ T4134] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.789551][ T4134] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.798617][ T4134] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.807420][ T4134] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.819577][ T4134] geneve2: entered promiscuous mode [ 40.824828][ T4134] geneve2: entered allmulticast mode [ 41.010579][ T4150] tipc: Started in network mode [ 41.015588][ T4150] tipc: Node identity 06badf7a9a24, cluster identity 4711 [ 41.022803][ T4150] tipc: Enabled bearer , priority 0 [ 41.071498][ T4150] syzkaller0: entered promiscuous mode [ 41.077022][ T4150] syzkaller0: entered allmulticast mode [ 41.086243][ T4150] tipc: Resetting bearer [ 41.096354][ T4155] loop0: detected capacity change from 0 to 128 [ 41.117550][ T4149] tipc: Resetting bearer [ 41.127620][ T4155] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.143626][ T4155] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.150833][ T4149] tipc: Disabling bearer [ 41.179132][ T4155] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 41.210573][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.328817][ T4171] raw_sendmsg: syz.2.302 forgot to set AF_INET. Fix it! [ 41.382622][ T4182] SELinux: policydb version -4 does not match my version range 15-34 [ 41.393107][ T4182] SELinux: failed to load policy [ 41.495531][ C1] ================================================================== [ 41.503672][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 41.510366][ C1] [ 41.512705][ C1] read-write to 0xffff888106d87908 of 8 bytes by interrupt on cpu 0: [ 41.520789][ C1] can_receive+0x4e/0x1f0 [ 41.525129][ C1] canfd_rcv+0xe7/0x180 [ 41.529295][ C1] __netif_receive_skb+0x123/0x280 [ 41.534416][ C1] process_backlog+0x22e/0x440 [ 41.539192][ C1] __napi_poll+0x63/0x3c0 [ 41.543527][ C1] net_rx_action+0x3a1/0x7f0 [ 41.548129][ C1] handle_softirqs+0xbf/0x280 [ 41.552819][ C1] run_ksoftirqd+0x1c/0x30 [ 41.557249][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 41.562202][ C1] kthread+0x4ae/0x520 [ 41.566293][ C1] ret_from_fork+0x4b/0x60 [ 41.570718][ C1] ret_from_fork_asm+0x1a/0x30 [ 41.575498][ C1] [ 41.577835][ C1] read-write to 0xffff888106d87908 of 8 bytes by interrupt on cpu 1: [ 41.585916][ C1] can_receive+0x4e/0x1f0 [ 41.590269][ C1] canfd_rcv+0xe7/0x180 [ 41.594427][ C1] __netif_receive_skb+0x123/0x280 [ 41.599591][ C1] process_backlog+0x22e/0x440 [ 41.604375][ C1] __napi_poll+0x63/0x3c0 [ 41.608716][ C1] net_rx_action+0x3a1/0x7f0 [ 41.613321][ C1] handle_softirqs+0xbf/0x280 [ 41.618010][ C1] do_softirq+0x5e/0x90 [ 41.622174][ C1] __local_bh_enable_ip+0x6e/0x70 [ 41.627209][ C1] copy_fpstate_to_sigframe+0x31d/0x7e0 [ 41.632762][ C1] get_sigframe+0x2f3/0x430 [ 41.637280][ C1] x64_setup_rt_frame+0xad/0x590 [ 41.642224][ C1] arch_do_signal_or_restart+0x287/0x4b0 [ 41.647869][ C1] syscall_exit_to_user_mode+0x62/0x120 [ 41.653429][ C1] do_syscall_64+0xd6/0x1c0 [ 41.657950][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.663860][ C1] [ 41.666183][ C1] value changed: 0x0000000000001207 -> 0x0000000000001208 [ 41.673299][ C1] [ 41.675621][ C1] Reported by Kernel Concurrency Sanitizer on: [ 41.681787][ C1] CPU: 1 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 41.692675][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.702735][ C1] ================================================================== [ 41.731775][ C1] ================================================================== [ 41.739913][ C1] BUG: KCSAN: data-race in can_send / can_send [ 41.746126][ C1] [ 41.748463][ C1] read-write to 0xffff888106d87910 of 8 bytes by interrupt on cpu 0: [ 41.756544][ C1] can_send+0x5a2/0x6d0 [ 41.760737][ C1] bcm_can_tx+0x314/0x420 [ 41.765092][ C1] bcm_tx_timeout_handler+0xea/0x280 [ 41.770421][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 41.775733][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 41.780778][ C1] handle_softirqs+0xbf/0x280 [ 41.785477][ C1] run_ksoftirqd+0x1c/0x30 [ 41.789919][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 41.794879][ C1] kthread+0x4ae/0x520 [ 41.798982][ C1] ret_from_fork+0x4b/0x60 [ 41.803424][ C1] ret_from_fork_asm+0x1a/0x30 [ 41.808222][ C1] [ 41.810599][ C1] read-write to 0xffff888106d87910 of 8 bytes by interrupt on cpu 1: [ 41.818686][ C1] can_send+0x5a2/0x6d0 [ 41.822879][ C1] bcm_can_tx+0x314/0x420 [ 41.827228][ C1] bcm_tx_timeout_handler+0xea/0x280 [ 41.832552][ C1] __hrtimer_run_queues+0x20d/0x5e0 [ 41.837782][ C1] hrtimer_run_softirq+0xe4/0x2c0 [ 41.842834][ C1] handle_softirqs+0xbf/0x280 [ 41.847542][ C1] do_softirq+0x5e/0x90 [ 41.851728][ C1] __local_bh_enable_ip+0x6e/0x70 [ 41.856868][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 41.861848][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 41.867503][ C1] process_scheduled_works+0x4db/0xa20 [ 41.872988][ C1] worker_thread+0x51d/0x6f0 [ 41.877609][ C1] kthread+0x4ae/0x520 [ 41.881712][ C1] ret_from_fork+0x4b/0x60 [ 41.886157][ C1] ret_from_fork_asm+0x1a/0x30 [ 41.891034][ C1] [ 41.893367][ C1] value changed: 0x00000000000010aa -> 0x00000000000010ab [ 41.900483][ C1] [ 41.902816][ C1] Reported by Kernel Concurrency Sanitizer on: [ 41.908980][ C1] CPU: 1 UID: 0 PID: 1794 Comm: kworker/u8:7 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 41.919861][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.929983][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 41.936782][ C1] ================================================================== [ 41.946869][ C0] ================================================================== [ 41.954987][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 41.961672][ C0] [ 41.964016][ C0] read-write to 0xffff888106d87968 of 8 bytes by interrupt on cpu 1: [ 41.972083][ C0] can_receive+0x62/0x1f0 [ 41.976418][ C0] canfd_rcv+0xe7/0x180 [ 41.980577][ C0] __netif_receive_skb+0x123/0x280 [ 41.985699][ C0] process_backlog+0x22e/0x440 [ 41.990477][ C0] __napi_poll+0x63/0x3c0 [ 41.994814][ C0] net_rx_action+0x3a1/0x7f0 [ 41.999412][ C0] handle_softirqs+0xbf/0x280 [ 42.004099][ C0] do_softirq+0x5e/0x90 [ 42.008261][ C0] __local_bh_enable_ip+0x6e/0x70 [ 42.013294][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 42.018248][ C0] wg_packet_encrypt_worker+0x180/0xb80 [ 42.023813][ C0] process_scheduled_works+0x4db/0xa20 [ 42.029280][ C0] worker_thread+0x51d/0x6f0 [ 42.033879][ C0] kthread+0x4ae/0x520 [ 42.037957][ C0] ret_from_fork+0x4b/0x60 [ 42.042389][ C0] ret_from_fork_asm+0x1a/0x30 [ 42.047164][ C0] [ 42.049485][ C0] read-write to 0xffff888106d87968 of 8 bytes by interrupt on cpu 0: [ 42.057548][ C0] can_receive+0x62/0x1f0 [ 42.061893][ C0] canfd_rcv+0xe7/0x180 [ 42.066088][ C0] __netif_receive_skb+0x123/0x280 [ 42.071220][ C0] process_backlog+0x22e/0x440 [ 42.076037][ C0] __napi_poll+0x63/0x3c0 [ 42.080376][ C0] net_rx_action+0x3a1/0x7f0 [ 42.084976][ C0] handle_softirqs+0xbf/0x280 [ 42.089660][ C0] do_softirq+0x5e/0x90 [ 42.093822][ C0] __local_bh_enable_ip+0x6e/0x70 [ 42.098859][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 42.103816][ C0] lock_sock_nested+0x10f/0x140 [ 42.108682][ C0] tcp_close+0x1b/0xd0 [ 42.112754][ C0] inet_release+0xce/0xf0 [ 42.117092][ C0] inet6_release+0x3e/0x60 [ 42.121516][ C0] sock_close+0x68/0x150 [ 42.125771][ C0] __fput+0x2ac/0x640 [ 42.129762][ C0] __fput_sync+0x96/0xc0 [ 42.134008][ C0] __x64_sys_close+0x55/0xe0 [ 42.138622][ C0] x64_sys_call+0x266c/0x2dc0 [ 42.143312][ C0] do_syscall_64+0xc9/0x1c0 [ 42.147834][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.153739][ C0] [ 42.156060][ C0] value changed: 0x0000000000001f53 -> 0x0000000000001f55 [ 42.163164][ C0] [ 42.165488][ C0] Reported by Kernel Concurrency Sanitizer on: [ 42.171639][ C0] CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 42.182489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.192549][ C0] ================================================================== [ 42.211518][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 42.211535][ T29] audit: type=1400 audit(1739595065.429:541): avc: denied { setopt } for pid=4191 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1