last executing test programs: 1.32419377s ago: executing program 0 (id=57): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000001380)) 1.198058142s ago: executing program 0 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 1.135794363s ago: executing program 0 (id=66): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 905.167626ms ago: executing program 1 (id=72): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x200000000200}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1f, 0x0, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35", 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000}, 0x50) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 788.411528ms ago: executing program 1 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 683.284659ms ago: executing program 1 (id=76): r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 660.776359ms ago: executing program 1 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 385.323164ms ago: executing program 3 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x1) 357.334174ms ago: executing program 3 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x800, 0xfffffffffffffffc}) 356.970274ms ago: executing program 4 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001bc0)=@newtaction={0x488, 0x30, 0x12f, 0x70bd2a, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xd7, 0x4, 0x7fffffff, 0xf, 0x8, 0x1, 0x1, 0x3, 0x0, 0x0, 0x2, 0x10001, 0x5, 0x72, 0x1, 0xaa, 0x4, 0x7ff, 0x4, 0xc7e7, 0x3, 0x6, 0x9, 0xdfe, 0x50a0, 0x7fff, 0x6, 0x10, 0x44e, 0x0, 0xffffffff, 0x1, 0x8, 0x0, 0xff, 0x3, 0x1, 0x2, 0x8, 0x9, 0x9, 0x4, 0x80000001, 0x0, 0x102, 0x5, 0x2, 0x7f, 0x3, 0x9, 0x7fffffff, 0x6, 0x10, 0x400, 0x5, 0x10000, 0xfffffff7, 0x4, 0x1, 0x3fc00, 0x6, 0x8, 0xeb36, 0x80, 0x9, 0x3, 0x3, 0x5, 0x1, 0x2, 0x9, 0xf04, 0x7, 0x7923e0c3, 0x10001, 0x7, 0x3, 0x8b, 0xd, 0xff, 0x4, 0x5, 0x1ff, 0x4000, 0x0, 0xf5b5, 0xc51, 0x0, 0x6, 0xa, 0xd9c1, 0x6a, 0x7, 0xfffffff7, 0x9, 0x4, 0xfffffffb, 0x10001, 0x200, 0x7, 0x8, 0xca1, 0x10, 0x0, 0x9, 0x6, 0x2, 0xa, 0x10001, 0x3, 0x8, 0x7, 0x2, 0x9, 0x7, 0x7, 0x6, 0x95, 0x1800, 0x1395, 0x2c, 0x0, 0x5, 0xffff, 0x3, 0xb, 0xa, 0x2, 0x8, 0x0, 0x4, 0xff, 0x6, 0x8001, 0xd, 0x3, 0x6, 0x7, 0xa, 0x7, 0x3, 0x9, 0x101, 0x48, 0xfffffffa, 0x9, 0xa, 0x7, 0xff, 0x7, 0x9, 0xfff, 0x2, 0x531, 0x91, 0x5, 0x5, 0x7aa, 0x3, 0x4, 0x7bf9, 0x3, 0x0, 0xfffd, 0x8, 0x0, 0xffff, 0x4, 0x2, 0x8, 0x2, 0x0, 0x3, 0xd0, 0x6, 0x80000001, 0x5, 0x0, 0x4, 0x8, 0x9, 0x4, 0x3, 0x8, 0x80, 0x401, 0x8002f, 0x1, 0x3, 0xc5, 0x8, 0x3, 0x7ff, 0x8, 0x7, 0x153, 0x2, 0x8, 0x9ea, 0x690, 0x3, 0x5, 0xc, 0x400, 0x6, 0xd, 0x8, 0x9, 0x4, 0x8000000, 0x6, 0x0, 0x0, 0x7, 0xfffff001, 0xb, 0x0, 0x3, 0x7, 0x1200000, 0x9, 0x4, 0x7, 0xed23, 0x1, 0x5, 0x0, 0x4, 0x4, 0x1, 0x746, 0x7b1, 0x7, 0x6, 0x800, 0x2, 0x40, 0x935, 0x0, 0xfffffffd, 0x1, 0x6, 0x4, 0x8, 0x9, 0x200, 0x4, 0xc, 0x1, 0x7f, 0x1, 0x1, 0x6556, 0x50000000, 0x1, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x8, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 337.827395ms ago: executing program 3 (id=93): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe2(&(0x7f0000001cc0), 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x8}, 0x0) 323.985535ms ago: executing program 4 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 309.898215ms ago: executing program 3 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 296.607405ms ago: executing program 2 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 278.957345ms ago: executing program 0 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 261.325906ms ago: executing program 4 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[]) 238.189596ms ago: executing program 2 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x42ab, 0x24d417d6, 0x3, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 231.228556ms ago: executing program 3 (id=100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x2002) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xf2) syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 213.925637ms ago: executing program 4 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x5) close(r3) writev(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)='h', 0x1}], 0x1) 201.538847ms ago: executing program 0 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 195.761737ms ago: executing program 3 (id=103): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 169.350417ms ago: executing program 0 (id=104): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x240, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 154.596187ms ago: executing program 2 (id=105): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/123, 0x7b}], 0x1, 0x114a, 0x0) 113.068908ms ago: executing program 2 (id=106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x55) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 63.758729ms ago: executing program 2 (id=107): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) 62.010319ms ago: executing program 1 (id=108): chdir(&(0x7f0000000480)='./cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 57.056079ms ago: executing program 4 (id=109): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 21.56221ms ago: executing program 4 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)) 12.015099ms ago: executing program 1 (id=111): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x2072800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) 0s ago: executing program 2 (id=112): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033300fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 33.939932][ T29] audit: type=1400 audit(1742641401.676:81): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.940909][ T3290] cgroup: Unknown subsys name 'net' [ 33.962681][ T29] audit: type=1400 audit(1742641401.676:82): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.990049][ T29] audit: type=1400 audit(1742641401.706:83): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.009949][ T29] audit: type=1400 audit(1742641401.706:84): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.125936][ T3290] cgroup: Unknown subsys name 'cpuset' [ 34.132093][ T3290] cgroup: Unknown subsys name 'rlimit' [ 34.243701][ T29] audit: type=1400 audit(1742641401.976:85): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.267027][ T29] audit: type=1400 audit(1742641401.976:86): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.287548][ T29] audit: type=1400 audit(1742641401.976:87): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.308048][ T29] audit: type=1400 audit(1742641401.976:88): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.315762][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.328335][ T29] audit: type=1400 audit(1742641401.976:89): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.361726][ T29] audit: type=1400 audit(1742641401.976:90): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.405831][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.520623][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.558205][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 35.566648][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.616929][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.640255][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.660434][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.667540][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.675404][ T3305] bridge_slave_0: entered allmulticast mode [ 35.681678][ T3305] bridge_slave_0: entered promiscuous mode [ 35.690693][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.697780][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.705021][ T3305] bridge_slave_1: entered allmulticast mode [ 35.711438][ T3305] bridge_slave_1: entered promiscuous mode [ 35.767207][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.783521][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.790639][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.797904][ T3306] bridge_slave_0: entered allmulticast mode [ 35.804191][ T3306] bridge_slave_0: entered promiscuous mode [ 35.816234][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.832487][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.839793][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.847065][ T3306] bridge_slave_1: entered allmulticast mode [ 35.853392][ T3306] bridge_slave_1: entered promiscuous mode [ 35.859593][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.866725][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.873832][ T3300] bridge_slave_0: entered allmulticast mode [ 35.880327][ T3300] bridge_slave_0: entered promiscuous mode [ 35.893313][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.900474][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.907604][ T3309] bridge_slave_0: entered allmulticast mode [ 35.913987][ T3309] bridge_slave_0: entered promiscuous mode [ 35.924957][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.932114][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.939380][ T3300] bridge_slave_1: entered allmulticast mode [ 35.945834][ T3300] bridge_slave_1: entered promiscuous mode [ 35.961843][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.969004][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.977217][ T3309] bridge_slave_1: entered allmulticast mode [ 35.983560][ T3309] bridge_slave_1: entered promiscuous mode [ 36.004741][ T3305] team0: Port device team_slave_0 added [ 36.011526][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.025666][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.032758][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.040173][ T3301] bridge_slave_0: entered allmulticast mode [ 36.046728][ T3301] bridge_slave_0: entered promiscuous mode [ 36.059222][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.073171][ T3305] team0: Port device team_slave_1 added [ 36.084537][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.099009][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.106137][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.113247][ T3301] bridge_slave_1: entered allmulticast mode [ 36.119875][ T3301] bridge_slave_1: entered promiscuous mode [ 36.126992][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.137229][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.165666][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.174953][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.182008][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.207958][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.219469][ T3300] team0: Port device team_slave_0 added [ 36.239163][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.246182][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.272089][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.283512][ T3300] team0: Port device team_slave_1 added [ 36.295694][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.305455][ T3306] team0: Port device team_slave_0 added [ 36.319116][ T3309] team0: Port device team_slave_0 added [ 36.330285][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.339645][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.346758][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.372671][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.384217][ T3306] team0: Port device team_slave_1 added [ 36.401735][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.408730][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.434707][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.446029][ T3309] team0: Port device team_slave_1 added [ 36.461413][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.468501][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.494521][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.506458][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.513417][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.539437][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.560556][ T3301] team0: Port device team_slave_0 added [ 36.569169][ T3301] team0: Port device team_slave_1 added [ 36.593479][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.600556][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.626534][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.649291][ T3305] hsr_slave_0: entered promiscuous mode [ 36.655387][ T3305] hsr_slave_1: entered promiscuous mode [ 36.662404][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.669415][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.695359][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.706531][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.713480][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.739454][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.768748][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.775755][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.801675][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.823828][ T3300] hsr_slave_0: entered promiscuous mode [ 36.830001][ T3300] hsr_slave_1: entered promiscuous mode [ 36.836093][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.843735][ T3300] Cannot create hsr debugfs directory [ 36.865532][ T3306] hsr_slave_0: entered promiscuous mode [ 36.871516][ T3306] hsr_slave_1: entered promiscuous mode [ 36.877456][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.885009][ T3306] Cannot create hsr debugfs directory [ 36.898167][ T3309] hsr_slave_0: entered promiscuous mode [ 36.904095][ T3309] hsr_slave_1: entered promiscuous mode [ 36.910041][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.917629][ T3309] Cannot create hsr debugfs directory [ 36.973041][ T3301] hsr_slave_0: entered promiscuous mode [ 36.979208][ T3301] hsr_slave_1: entered promiscuous mode [ 36.985024][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.992884][ T3301] Cannot create hsr debugfs directory [ 37.143467][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.153846][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.165174][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.176240][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.195818][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.212592][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.221572][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.233059][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.251708][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.260787][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.273522][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.282567][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.315671][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.334864][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.344418][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.353394][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.363696][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.373721][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.382710][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.394739][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.438455][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.472251][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.486475][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.493547][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.503036][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.510189][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.519813][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.536957][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.572891][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.583477][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.603444][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.610538][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.621988][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.629090][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.647450][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.655552][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.662765][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.673998][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.681140][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.710893][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.719925][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.735474][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.742540][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.759079][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.766242][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.776009][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.791041][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.804853][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.847248][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.854494][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.863302][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.870444][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.906868][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.955731][ T3305] veth0_vlan: entered promiscuous mode [ 37.966176][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.983161][ T3305] veth1_vlan: entered promiscuous mode [ 38.040812][ T3306] veth0_vlan: entered promiscuous mode [ 38.048655][ T3305] veth0_macvtap: entered promiscuous mode [ 38.061336][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.073022][ T3306] veth1_vlan: entered promiscuous mode [ 38.083807][ T3305] veth1_macvtap: entered promiscuous mode [ 38.113405][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.126463][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.136920][ T3306] veth0_macvtap: entered promiscuous mode [ 38.148875][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.165062][ T3306] veth1_macvtap: entered promiscuous mode [ 38.173017][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.181821][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.190630][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.199368][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.209887][ T3300] veth0_vlan: entered promiscuous mode [ 38.224433][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.234985][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.245925][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.254450][ T3300] veth1_vlan: entered promiscuous mode [ 38.269176][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.279691][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.290327][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.299150][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.308071][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316838][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.325602][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.344831][ T3300] veth0_macvtap: entered promiscuous mode [ 38.365886][ T3300] veth1_macvtap: entered promiscuous mode [ 38.405936][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.406589][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.416432][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.416448][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.451365][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.470408][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.478972][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.489485][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.499331][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.509809][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.520271][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.536951][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.545816][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.554515][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.563253][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.581376][ T3309] veth0_vlan: entered promiscuous mode [ 38.590886][ T3309] veth1_vlan: entered promiscuous mode [ 38.610907][ T3301] veth0_vlan: entered promiscuous mode [ 38.621912][ T3441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.639961][ T3301] veth1_vlan: entered promiscuous mode [ 38.646571][ T3309] veth0_macvtap: entered promiscuous mode [ 38.664219][ T3301] veth0_macvtap: entered promiscuous mode [ 38.682580][ T3301] veth1_macvtap: entered promiscuous mode [ 38.711587][ T3447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.732935][ T3309] veth1_macvtap: entered promiscuous mode [ 38.743497][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.754043][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.763896][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.774433][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.784319][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.794831][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.811116][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.839437][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.850025][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.859972][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.870425][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.880313][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.890804][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.902285][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.924815][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.935611][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.939202][ C0] hrtimer: interrupt took 35268 ns [ 38.945464][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.961044][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.970968][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.981429][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.991263][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.001734][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.014788][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 39.014845][ T29] audit: type=1400 audit(1742641406.746:128): avc: denied { create } for pid=3452 comm="syz.0.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.017740][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.021205][ T29] audit: type=1400 audit(1742641406.746:129): avc: denied { map } for pid=3452 comm="syz.0.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.072907][ T29] audit: type=1400 audit(1742641406.746:130): avc: denied { read write } for pid=3452 comm="syz.0.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.090404][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.106185][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.114981][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.123736][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.160592][ T3457] SELinux: security policydb version 17 (MLS) not backwards compatible [ 39.195361][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.205953][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.215810][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.226326][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.227231][ T3457] SELinux: failed to load policy [ 39.236210][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.236230][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.241518][ T29] audit: type=1400 audit(1742641406.896:131): avc: denied { load_policy } for pid=3456 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.251703][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.291845][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.302940][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.337403][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.346214][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.354939][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.363790][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.383206][ T29] audit: type=1400 audit(1742641407.116:132): avc: denied { create } for pid=3460 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.415051][ T3461] Zero length message leads to an empty skb [ 39.446461][ T29] audit: type=1400 audit(1742641407.186:133): avc: denied { create } for pid=3465 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.507248][ T29] audit: type=1400 audit(1742641407.246:134): avc: denied { ioctl } for pid=3465 comm="syz.1.12" path="socket:[3785]" dev="sockfs" ino=3785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.535050][ T29] audit: type=1400 audit(1742641407.266:135): avc: denied { bind } for pid=3465 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.554194][ T29] audit: type=1400 audit(1742641407.266:136): avc: denied { setopt } for pid=3465 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.573491][ T29] audit: type=1400 audit(1742641407.266:137): avc: denied { connect } for pid=3465 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.592224][ T3472] vlan2: entered allmulticast mode [ 39.601822][ T3472] bond0: entered allmulticast mode [ 39.607073][ T3472] bond_slave_0: entered allmulticast mode [ 39.612811][ T3472] bond_slave_1: entered allmulticast mode [ 39.648846][ T3472] bond0: left allmulticast mode [ 39.653788][ T3472] bond_slave_0: left allmulticast mode [ 39.659494][ T3472] bond_slave_1: left allmulticast mode [ 39.771808][ T3490] syz.4.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.995810][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 40.023897][ T3510] bridge0: port 3(batadv1) entered blocking state [ 40.030462][ T3510] bridge0: port 3(batadv1) entered disabled state [ 40.038914][ T3510] batadv1: entered allmulticast mode [ 40.057931][ T3510] batadv1: entered promiscuous mode [ 40.156343][ T3513] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 40.156343][ T3513] program syz.3.33 not setting count and/or reply_len properly [ 40.197984][ T3522] loop3: detected capacity change from 0 to 1024 [ 40.220787][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.237264][ T3522] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.36'. [ 40.258264][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.525345][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 40.534698][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 40.611486][ T3561] SELinux: policydb version 1633771873 does not match my version range 15-34 [ 40.633166][ T3561] SELinux: failed to load policy [ 40.932031][ T3591] loop3: detected capacity change from 0 to 128 [ 41.041011][ T3597] wg2: entered promiscuous mode [ 41.046043][ T3597] wg2: entered allmulticast mode [ 41.160575][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.160575][ T270] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 41.183832][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.183832][ T270] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 41.197592][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.197592][ T270] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 41.214846][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.214846][ T270] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 41.229130][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.229130][ T270] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 41.258250][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.258250][ T270] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 41.273427][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.273427][ T270] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 41.287416][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.287416][ T270] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 41.303084][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.303084][ T270] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 41.318218][ T270] kworker/u8:5: attempt to access beyond end of device [ 41.318218][ T270] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 41.352721][ T3613] process 'syz.3.71' launched './file1' with NULL argv: empty string added [ 41.361791][ T3611] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.391884][ T3611] syz.1.74 (3611) used greatest stack depth: 10296 bytes left [ 41.440830][ T3619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.449528][ T3619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.487002][ T3623] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 41.494701][ T3623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'. [ 41.553747][ T3631] netlink: 'syz.3.82': attribute type 3 has an invalid length. [ 41.708401][ T3645] uprobe: syz.2.88:3645 failed to unregister, leaking uprobe [ 41.759087][ T3655] all: renamed from bridge_slave_0 (while UP) [ 41.796640][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 41.840828][ T3663] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 41.935596][ T3677] loop0: detected capacity change from 0 to 128 [ 42.100766][ T3692] ALSA: seq fatal error: cannot create timer (-22) [ 42.128523][ T3677] ================================================================== [ 42.136662][ T3677] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 42.143996][ T3677] [ 42.146332][ T3677] read-write to 0xffff8881065a0238 of 8 bytes by task 3684 on cpu 1: [ 42.154414][ T3677] xas_clear_mark+0x90/0x180 [ 42.159029][ T3677] __folio_start_writeback+0x2f1/0x430 [ 42.164503][ T3677] __mpage_writepage+0xbed/0xe10 [ 42.169457][ T3677] write_cache_pages+0x62/0x100 [ 42.174320][ T3677] mpage_writepages+0x72/0xf0 [ 42.179011][ T3677] fat_writepages+0x24/0x30 [ 42.183524][ T3677] do_writepages+0x1d8/0x480 [ 42.188129][ T3677] filemap_write_and_wait_range+0x146/0x360 [ 42.194041][ T3677] filemap_invalidate_pages+0xa5/0x1a0 [ 42.199506][ T3677] generic_file_direct_write+0x9d/0x250 [ 42.205063][ T3677] __generic_file_write_iter+0xae/0x120 [ 42.210619][ T3677] generic_file_write_iter+0x8f/0x310 [ 42.215994][ T3677] aio_write+0x2f7/0x420 [ 42.220258][ T3677] io_submit_one+0xb0c/0x1230 [ 42.224948][ T3677] __se_sys_io_submit+0xf5/0x280 [ 42.229902][ T3677] __x64_sys_io_submit+0x43/0x50 [ 42.234851][ T3677] x64_sys_call+0x2c20/0x2dc0 [ 42.239546][ T3677] do_syscall_64+0xc9/0x1c0 [ 42.244068][ T3677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.249975][ T3677] [ 42.252312][ T3677] read to 0xffff8881065a0238 of 8 bytes by task 3677 on cpu 0: [ 42.259858][ T3677] xas_find_marked+0x217/0x650 [ 42.264657][ T3677] find_get_entry+0x54/0x390 [ 42.269250][ T3677] filemap_get_folios_tag+0x136/0x210 [ 42.274626][ T3677] writeback_iter+0x4b0/0x830 [ 42.279315][ T3677] write_cache_pages+0x4b/0x100 [ 42.284178][ T3677] mpage_writepages+0x72/0xf0 [ 42.288876][ T3677] fat_writepages+0x24/0x30 [ 42.293384][ T3677] do_writepages+0x1d8/0x480 [ 42.297988][ T3677] file_write_and_wait_range+0x168/0x2f0 [ 42.303665][ T3677] __generic_file_fsync+0x46/0x140 [ 42.308789][ T3677] fat_file_fsync+0x46/0x100 [ 42.313397][ T3677] vfs_fsync_range+0x116/0x130 [ 42.318171][ T3677] generic_file_write_iter+0x1c3/0x310 [ 42.323637][ T3677] vfs_write+0x77b/0x920 [ 42.327891][ T3677] ksys_write+0xe8/0x1b0 [ 42.332144][ T3677] __x64_sys_write+0x42/0x50 [ 42.336745][ T3677] x64_sys_call+0x287e/0x2dc0 [ 42.341431][ T3677] do_syscall_64+0xc9/0x1c0 [ 42.345949][ T3677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.351850][ T3677] [ 42.354177][ T3677] value changed: 0xfffffffffffffffc -> 0xfffffffffffffff0 [ 42.361280][ T3677] [ 42.363599][ T3677] Reported by Kernel Concurrency Sanitizer on: [ 42.369775][ T3677] CPU: 0 UID: 0 PID: 3677 Comm: syz.0.104 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 42.380375][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.390443][ T3677] ================================================================== [ 42.454898][ T3673] capability: warning: `syz.3.103' uses deprecated v2 capabilities in a way that may be insecure