last executing test programs: 12.101580017s ago: executing program 3 (id=148): sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x72661fa541cfba4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) 10.989099631s ago: executing program 3 (id=156): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x60000, 0x100) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0xf}]) 9.288150467s ago: executing program 0 (id=163): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1c3, 0x0, 0x0, 0x38, 0x16}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r2, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) 8.984492309s ago: executing program 3 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 8.604604496s ago: executing program 0 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 7.174506749s ago: executing program 0 (id=174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000740), 0x200000, 0x20402) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)) socket$inet_udp(0x2, 0x2, 0x0) 7.003553124s ago: executing program 3 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)="a9", 0x30}], 0x1}, 0x20008110) 7.002093811s ago: executing program 0 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 6.405439844s ago: executing program 2 (id=179): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) 6.319402024s ago: executing program 0 (id=180): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000001700008500000086000000b7080000000000007baaf8ff00000000b50800000000be007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000840000/0x2000)=nil) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) 6.027232233s ago: executing program 2 (id=182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x498, 0xffffffff, 0x1e0, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {}, 0x11, 0x1}, 0x0, 0xd8, 0x120, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connbytes={{0x38}, {[{0x6}, {0x1}], 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x88, {0x5}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], [0x0, 0x65, 0x3, 0xffff, 0x9, 0x8000, 0x800, 0x0, 0xfffffc00, 0x1a, 0x8, 0x2, 0x6, 0x8, 0x1, 0x4, 0x895, 0x1, 0x7, 0x8001, 0x4, 0x3, 0x7, 0x23b, 0x7fff, 0x2400, 0x10, 0x5, 0x7ff, 0xee, 0x7, 0x4, 0x6, 0x7, 0x1087, 0x3, 0x39d, 0xffffffff, 0x4, 0x5, 0x1, 0x0, 0x4, 0x200, 0x0, 0x5, 0xe6, 0x1, 0xffff, 0x1, 0x401, 0x7, 0x4, 0x1, 0x1, 0x76b, 0x8, 0x401, 0xa71c, 0x4000000, 0x8, 0x0, 0x1ff, 0x9], 0x1, [{0xfc, 0x1}, {0x8, 0x9, 0x29}, {0x2, 0x81, 0x7}, {0x8, 0x7}], 0x0, 0x1, 0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64=r3], 0x12c}, 0x1, 0x1000000, 0x0, 0x2400c821}, 0x0) ioctl$TCFLSH(r0, 0x80047437, 0xffffffffffffffff) 5.559160587s ago: executing program 2 (id=183): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffe7c, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x541b, 0x1f) r3 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.568854289s ago: executing program 1 (id=184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0xfffd, 0x4e20, 0x4e, 0x0, @opaque="fc69fe1f5cc79374d254ab9f365a7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2da7ec0e0ccb8c86b"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 4.4517103s ago: executing program 2 (id=185): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r1, 0x2b, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 4.202757314s ago: executing program 1 (id=186): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) flock(r1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) flock(r2, 0x1) close(0x3) 3.635004928s ago: executing program 4 (id=189): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000002940)=ANY=[@ANYBLOB="180200000009000000000000000000001800000001000000000000000a00000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) accept(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000800)=""/243, 0xf3}], 0x1}, 0x5}], 0x1, 0x0, 0x0) 2.979374309s ago: executing program 2 (id=190): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) 2.860912874s ago: executing program 1 (id=191): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) write(r2, &(0x7f0000000280)="0f", 0x1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000240)={0x5, 0x1e, 0xc, 0x1, 0x8, 0xfff, 0x9, 0x400000, 0xfffffff9}) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) 2.619449247s ago: executing program 4 (id=192): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x200, 0x5, 0xfab}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c0000000c0003800400050004000180180001801400020076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x48800) flock(0xffffffffffffffff, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) close(0x3) 1.703684206s ago: executing program 1 (id=193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.32668141s ago: executing program 2 (id=194): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 1.19304875s ago: executing program 0 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0xfb1, 0x4) sendto$inet6(r3, 0x0, 0x2a, 0x40, &(0x7f0000001080)={0xa, 0x4e21, 0x3c, @empty, 0x403}, 0x1c) 1.160820806s ago: executing program 4 (id=196): prlimit64(0x0, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in6=@private1, 0xa, 0x6, 0x10}}, @proto={0x5, 0x19, 0xff}]}, 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0x8}, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, 0x0, 0xe07e872420dfefca) 1.028002919s ago: executing program 3 (id=197): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 990.858528ms ago: executing program 4 (id=198): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 800.952166ms ago: executing program 1 (id=199): socket(0x1d, 0x2, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 481.245146ms ago: executing program 4 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) shutdown(r0, 0x0) 178.371059ms ago: executing program 1 (id=201): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 42.021456ms ago: executing program 4 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) 0s ago: executing program 3 (id=203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100), 0x800) timerfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) clock_adjtime(0x0, &(0x7f00000022c0)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000004, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x7, 0x400, 0x0, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 56.132315][ T30] audit: type=1400 audit(1779824587.807:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.155933][ T30] audit: type=1400 audit(1779824587.837:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.158470][ T5596] cgroup: Unknown subsys name 'net' [ 56.185864][ T30] audit: type=1400 audit(1779824587.867:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.347136][ T5596] cgroup: Unknown subsys name 'cpuset' [ 56.355366][ T5596] cgroup: Unknown subsys name 'rlimit' [ 56.493988][ T30] audit: type=1400 audit(1779824588.167:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.526526][ T30] audit: type=1400 audit(1779824588.167:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.548804][ T30] audit: type=1400 audit(1779824588.167:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.569915][ T30] audit: type=1400 audit(1779824588.167:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.590580][ T30] audit: type=1400 audit(1779824588.167:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.615658][ T30] audit: type=1400 audit(1779824588.167:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.644529][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.656094][ T30] audit: type=1400 audit(1779824588.337:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 57.574913][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.473099][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.480794][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.487901][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.488605][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.497685][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.505029][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.515965][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.518852][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.531342][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.531355][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.531683][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.539549][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.560130][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.568455][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.568887][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.582929][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.583031][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.599843][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.600042][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.607460][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.616582][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.631124][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.632826][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.638404][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.653995][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.874101][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.881338][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.888783][ T5611] bridge_slave_0: entered allmulticast mode [ 60.895588][ T5611] bridge_slave_0: entered promiscuous mode [ 60.933518][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.940791][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.948196][ T5611] bridge_slave_1: entered allmulticast mode [ 60.954966][ T5611] bridge_slave_1: entered promiscuous mode [ 60.978091][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.985187][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.992369][ T5610] bridge_slave_0: entered allmulticast mode [ 60.999387][ T5610] bridge_slave_0: entered promiscuous mode [ 61.037505][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.044683][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.051910][ T5610] bridge_slave_1: entered allmulticast mode [ 61.058774][ T5610] bridge_slave_1: entered promiscuous mode [ 61.077151][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.084242][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.091606][ T5612] bridge_slave_0: entered allmulticast mode [ 61.098429][ T5612] bridge_slave_0: entered promiscuous mode [ 61.125764][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.138643][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.145984][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.153099][ T5612] bridge_slave_1: entered allmulticast mode [ 61.159838][ T5612] bridge_slave_1: entered promiscuous mode [ 61.186225][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.205259][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.212419][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.219723][ T5609] bridge_slave_0: entered allmulticast mode [ 61.226602][ T5609] bridge_slave_0: entered promiscuous mode [ 61.236434][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.256990][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.266267][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.273391][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.280674][ T5609] bridge_slave_1: entered allmulticast mode [ 61.287387][ T5609] bridge_slave_1: entered promiscuous mode [ 61.295405][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.317597][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.340150][ T5611] team0: Port device team_slave_0 added [ 61.347454][ T5611] team0: Port device team_slave_1 added [ 61.384864][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.391954][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.399584][ T5608] bridge_slave_0: entered allmulticast mode [ 61.406446][ T5608] bridge_slave_0: entered promiscuous mode [ 61.421367][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.432101][ T5610] team0: Port device team_slave_0 added [ 61.444033][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.451616][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.458803][ T5608] bridge_slave_1: entered allmulticast mode [ 61.465664][ T5608] bridge_slave_1: entered promiscuous mode [ 61.474365][ T5612] team0: Port device team_slave_0 added [ 61.481854][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.492154][ T5610] team0: Port device team_slave_1 added [ 61.498494][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.505537][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.531599][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.550917][ T5612] team0: Port device team_slave_1 added [ 61.569248][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.576406][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.602464][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.647947][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.657422][ T5625] Bluetooth: hci4: command tx timeout [ 61.659848][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.679793][ T5609] team0: Port device team_slave_0 added [ 61.685980][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.692918][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.719081][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.731196][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.735856][ T4930] Bluetooth: hci0: command tx timeout [ 61.738701][ T5613] Bluetooth: hci2: command tx timeout [ 61.743881][ T5625] Bluetooth: hci1: command tx timeout [ 61.749532][ T5620] Bluetooth: hci3: command tx timeout [ 61.755574][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.786298][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.803179][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.810262][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.836450][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.848590][ T5609] team0: Port device team_slave_1 added [ 61.866959][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.873984][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.899939][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.931255][ T5608] team0: Port device team_slave_0 added [ 61.949222][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.956263][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.982441][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.997157][ T5611] hsr_slave_0: entered promiscuous mode [ 62.003300][ T5611] hsr_slave_1: entered promiscuous mode [ 62.011278][ T5608] team0: Port device team_slave_1 added [ 62.031138][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.038320][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.064319][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.112239][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.119439][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.145414][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.159884][ T5610] hsr_slave_0: entered promiscuous mode [ 62.166133][ T5610] hsr_slave_1: entered promiscuous mode [ 62.171999][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 62.177920][ T5610] Cannot create hsr debugfs directory [ 62.196815][ T5612] hsr_slave_0: entered promiscuous mode [ 62.202871][ T5612] hsr_slave_1: entered promiscuous mode [ 62.209117][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 62.215262][ T5612] Cannot create hsr debugfs directory [ 62.221512][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.228564][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.254471][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.296059][ T5609] hsr_slave_0: entered promiscuous mode [ 62.302090][ T5609] hsr_slave_1: entered promiscuous mode [ 62.308172][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 62.313885][ T5609] Cannot create hsr debugfs directory [ 62.376837][ T5608] hsr_slave_0: entered promiscuous mode [ 62.382876][ T5608] hsr_slave_1: entered promiscuous mode [ 62.389081][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 62.394853][ T5608] Cannot create hsr debugfs directory [ 62.702499][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.715619][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.727930][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.737814][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.745671][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.755726][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.763911][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.773694][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.826571][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.836296][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.845029][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.853924][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.861647][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.872041][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.889032][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.897483][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.956334][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.965916][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.973589][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.982742][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.991768][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.001067][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.009032][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.017984][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.103349][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.114442][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.130839][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.140048][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.149876][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.158665][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.166735][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.177541][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.235683][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.265481][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.273947][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.283569][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.293377][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.307791][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.317537][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.325411][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.334338][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.344509][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.364285][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.371709][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.388836][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.406367][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.413542][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.450805][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.460812][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.481429][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.488645][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.509057][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.516134][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.546711][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.566262][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.573356][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.599096][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.606226][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.723672][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.736960][ T5620] Bluetooth: hci4: command tx timeout [ 63.785043][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.819219][ T5620] Bluetooth: hci1: command tx timeout [ 63.825092][ T5620] Bluetooth: hci0: command tx timeout [ 63.830911][ T5613] Bluetooth: hci3: command tx timeout [ 63.831006][ T5625] Bluetooth: hci2: command tx timeout [ 63.839375][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.861786][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.868967][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.910523][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.932669][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.939833][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.981179][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.988346][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.021387][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.028582][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.535878][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.551533][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.588393][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.706906][ T5611] veth0_vlan: entered promiscuous mode [ 64.740999][ T5610] veth0_vlan: entered promiscuous mode [ 64.762557][ T5611] veth1_vlan: entered promiscuous mode [ 64.797114][ T5610] veth1_vlan: entered promiscuous mode [ 64.887767][ T5611] veth0_macvtap: entered promiscuous mode [ 64.903333][ T5611] veth1_macvtap: entered promiscuous mode [ 64.951636][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.962220][ T5610] veth0_macvtap: entered promiscuous mode [ 64.972897][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.994799][ T5610] veth1_macvtap: entered promiscuous mode [ 65.018051][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.038970][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.083616][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.093667][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.107448][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.116782][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.125975][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.145822][ T5609] veth0_vlan: entered promiscuous mode [ 65.156939][ T5608] veth0_vlan: entered promiscuous mode [ 65.166273][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.182695][ T5612] veth0_vlan: entered promiscuous mode [ 65.201153][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.210208][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.230527][ T5608] veth1_vlan: entered promiscuous mode [ 65.239054][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248925][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.258937][ T5609] veth1_vlan: entered promiscuous mode [ 65.268422][ T5612] veth1_vlan: entered promiscuous mode [ 65.372977][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.381331][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.397285][ T5608] veth0_macvtap: entered promiscuous mode [ 65.422758][ T5608] veth1_macvtap: entered promiscuous mode [ 65.431582][ T5609] veth0_macvtap: entered promiscuous mode [ 65.448850][ T5612] veth0_macvtap: entered promiscuous mode [ 65.457952][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.467421][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.483662][ T5609] veth1_macvtap: entered promiscuous mode [ 65.494403][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.518471][ T5612] veth1_macvtap: entered promiscuous mode [ 65.535103][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.535439][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.552030][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.562611][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.570419][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.571959][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.596300][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 65.596314][ T30] audit: type=1400 audit(1779824597.277:152): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.H9t2Ef/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.629314][ T30] audit: type=1400 audit(1779824597.287:153): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.641338][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.659596][ T30] audit: type=1400 audit(1779824597.287:154): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.H9t2Ef/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.686129][ T30] audit: type=1400 audit(1779824597.287:155): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.687317][ T1176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711227][ T30] audit: type=1400 audit(1779824597.287:156): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.H9t2Ef/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.767828][ T30] audit: type=1400 audit(1779824597.287:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.H9t2Ef/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.802366][ T30] audit: type=1400 audit(1779824597.307:158): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.809126][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.828767][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.843059][ T5625] Bluetooth: hci4: command tx timeout [ 65.847583][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.850912][ T30] audit: type=1400 audit(1779824597.387:159): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.878909][ T30] audit: type=1400 audit(1779824597.427:160): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="gadgetfs" ino=6913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.882513][ T1176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.902164][ T5625] Bluetooth: hci3: command tx timeout [ 65.915877][ T5625] Bluetooth: hci0: command tx timeout [ 65.917084][ T5613] Bluetooth: hci2: command tx timeout [ 65.921267][ T5625] Bluetooth: hci1: command tx timeout [ 65.932284][ T30] audit: type=1400 audit(1779824597.427:161): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.955759][ T1176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.966832][ T1176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.983999][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.994227][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.009851][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.021601][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034170][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.069553][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.143822][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.192161][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.208441][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.250908][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.253247][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.294130][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.310520][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.319872][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.343076][ T5809] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.380304][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.403243][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.423634][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.459234][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.497228][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.523920][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.618286][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.643745][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.875618][ T5822] netlink: 'syz.1.2': attribute type 32 has an invalid length. [ 66.887656][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.966600][ T5823] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!' [ 67.000779][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 67.000810][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 67.000822][ T5823] Call Trace: [ 67.000829][ T5823] [ 67.000837][ T5823] dump_stack_lvl+0x100/0x190 [ 67.000874][ T5823] sysfs_warn_dup.cold+0x1c/0x28 [ 67.000901][ T5823] sysfs_do_create_link_sd+0x113/0x140 [ 67.000930][ T5823] sysfs_create_link+0x61/0xc0 [ 67.000956][ T5823] device_add+0x675/0x1950 [ 67.000985][ T5823] ? __pfx_device_add+0x10/0x10 [ 67.001009][ T5823] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.001034][ T5823] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 67.001061][ T5823] wiphy_register+0x1edd/0x2d90 [ 67.001087][ T5823] ? __rtnl_unlock+0xb9/0xf0 [ 67.001118][ T5823] ? __pfx_wiphy_register+0x10/0x10 [ 67.001145][ T5823] ? __asan_memset+0x23/0x50 [ 67.001175][ T5823] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 67.001207][ T5823] ieee80211_register_hw+0x3055/0x4570 [ 67.001241][ T5823] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 67.001260][ T5823] ? __pfx___debug_object_init+0x10/0x10 [ 67.001294][ T5823] ? find_held_lock+0x2b/0x80 [ 67.001314][ T5823] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.001338][ T5823] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 67.001364][ T5823] ? __hrtimer_setup+0x208/0x330 [ 67.001394][ T5823] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 67.001436][ T5823] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 67.001459][ T5823] ? __asan_memcpy+0x3c/0x60 [ 67.001490][ T5823] hwsim_new_radio_nl+0xc5f/0x1370 [ 67.001510][ T5823] ? rcu_is_watching+0x12/0xc0 [ 67.001542][ T5823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 67.001570][ T5823] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 67.001602][ T5823] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 67.001640][ T5823] genl_family_rcv_msg_doit+0x214/0x300 [ 67.001662][ T5823] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 67.001690][ T5823] ? bpf_lsm_capable+0x9/0x10 [ 67.001710][ T5823] ? security_capable+0x80/0x260 [ 67.001733][ T5823] ? ns_capable+0xd2/0xf0 [ 67.001762][ T5823] genl_rcv_msg+0x560/0x800 [ 67.001784][ T5823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.001804][ T5823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 67.001833][ T5823] netlink_rcv_skb+0x159/0x420 [ 67.001867][ T5823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.001885][ T5823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.001923][ T5823] ? netlink_deliver_tap+0x1ae/0xcc0 [ 67.001955][ T5823] genl_rcv+0x28/0x40 [ 67.001985][ T5823] netlink_unicast+0x585/0x850 [ 67.002018][ T5823] ? __pfx_netlink_unicast+0x10/0x10 [ 67.002054][ T5823] netlink_sendmsg+0x8b0/0xda0 [ 67.002089][ T5823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.002115][ T5823] ? __might_fault+0x80/0x140 [ 67.002153][ T5823] ____sys_sendmsg+0x9e1/0xb70 [ 67.002179][ T5823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.002208][ T5823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.002240][ T5823] ? __pfx_futex_wake_mark+0x10/0x10 [ 67.002266][ T5823] ___sys_sendmsg+0x190/0x1e0 [ 67.002295][ T5823] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.002356][ T5823] __sys_sendmsg+0x170/0x220 [ 67.002378][ T5823] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.002399][ T5823] ? __x64_sys_futex+0x34f/0x4d0 [ 67.002438][ T5823] ? rcu_is_watching+0x12/0xc0 [ 67.002471][ T5823] do_syscall_64+0x10b/0x860 [ 67.002499][ T5823] ? clear_bhb_loop+0x40/0x90 [ 67.002522][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.002541][ T5823] RIP: 0033:0x7f77db59ce59 [ 67.002558][ T5823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.002575][ T5823] RSP: 002b:00007f77dc520028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.002594][ T5823] RAX: ffffffffffffffda RBX: 00007f77db816090 RCX: 00007f77db59ce59 [ 67.002606][ T5823] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 67.002617][ T5823] RBP: 00007f77db632d6f R08: 0000000000000000 R09: 0000000000000000 [ 67.002628][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.002639][ T5823] R13: 00007f77db816128 R14: 00007f77db816090 R15: 00007ffd14140ce8 [ 67.002665][ T5823] [ 67.583595][ T805] cfg80211: failed to load regulatory.db [ 67.905459][ T5625] Bluetooth: hci4: command tx timeout [ 67.975362][ T5625] Bluetooth: hci1: command tx timeout [ 67.976109][ T5620] Bluetooth: hci2: command tx timeout [ 67.980790][ T5625] Bluetooth: hci0: command tx timeout [ 67.986913][ T5613] Bluetooth: hci3: command tx timeout [ 69.571486][ T5854] veth0: entered allmulticast mode [ 69.913525][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.921519][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.351280][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.380550][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.834962][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.847875][ T1167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.905050][ T1167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.925367][ T1167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.137629][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 71.137644][ T30] audit: type=1400 audit(1779824602.817:218): avc: denied { ioctl } for pid=5880 comm="syz.0.21" path="socket:[9265]" dev="sockfs" ino=9265 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.178588][ T5881] syzkaller0: entered promiscuous mode [ 71.201086][ T5881] syzkaller0: entered allmulticast mode [ 71.706726][ T30] audit: type=1400 audit(1779824603.387:219): avc: denied { read } for pid=5888 comm="syz.1.23" path="socket:[8738]" dev="sockfs" ino=8738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.883219][ T30] audit: type=1400 audit(1779824603.557:220): avc: denied { write } for pid=5896 comm="syz.3.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.994953][ T30] audit: type=1400 audit(1779824603.587:221): avc: denied { read } for pid=5898 comm="syz.0.26" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.077060][ T30] audit: type=1400 audit(1779824603.587:222): avc: denied { open } for pid=5898 comm="syz.0.26" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.131028][ T30] audit: type=1400 audit(1779824603.597:223): avc: denied { ioctl } for pid=5896 comm="syz.3.25" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.156875][ T30] audit: type=1400 audit(1779824603.597:224): avc: denied { ioctl } for pid=5898 comm="syz.0.26" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.183744][ T30] audit: type=1400 audit(1779824603.597:225): avc: denied { set_context_mgr } for pid=5898 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.203477][ T30] audit: type=1404 audit(1779824603.617:226): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 72.236656][ T30] audit: type=1400 audit(1779824603.617:227): avc: denied { read } for pid=5898 comm="syz.0.26" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 72.421338][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 72.535985][ T5917] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 73.102698][ T5929] syzkaller0: entered promiscuous mode [ 73.120814][ T5929] syzkaller0: entered allmulticast mode [ 73.744597][ T5952] netlink: 'syz.1.44': attribute type 1 has an invalid length. [ 73.797548][ T5952] erspan1: entered allmulticast mode [ 73.833623][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 73.876307][ T5955] bond0: (slave bond_slave_0): Releasing backup interface [ 73.938984][ T5951] syzkaller0: entered promiscuous mode [ 73.963908][ T5951] syzkaller0: entered allmulticast mode [ 74.378339][ T5968] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.902210][ T5976] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 74.957369][ T5976] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 75.211344][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'. [ 75.239184][ T5983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5983 comm=syz.2.56 [ 75.320804][ T5989] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 75.349291][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 76.319293][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 76.319308][ T30] audit: type=1400 audit(1779824607.997:320): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 76.453826][ T30] audit: type=1400 audit(1779824608.127:321): avc: denied { read } for pid=6011 comm="syz.4.66" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 76.538297][ T30] audit: type=1400 audit(1779824608.197:322): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 76.627382][ T30] audit: type=1400 audit(1779824608.277:323): avc: denied { map_create } for pid=6013 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 76.700865][ T30] audit: type=1400 audit(1779824608.277:324): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 76.769622][ T30] audit: type=1400 audit(1779824608.417:325): avc: denied { create } for pid=6015 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 77.149127][ T30] audit: type=1400 audit(1779824608.827:326): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.224399][ T30] audit: type=1400 audit(1779824608.827:327): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.309461][ T30] audit: type=1400 audit(1779824608.867:328): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.343674][ T30] audit: type=1400 audit(1779824608.887:329): avc: denied { read write } for pid=6020 comm="syz.0.70" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 77.383172][ T6029] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 77.983531][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 77.994044][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 78.036743][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.054044][ T6042] bond1: (slave bond0): making interface the new active one [ 78.067037][ T6042] bond1: (slave bond0): Enslaving as an active interface with an up link [ 78.067113][ T6045] netlink: 'syz.1.77': attribute type 4 has an invalid length. [ 78.087479][ T6045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.77'. [ 78.103591][ T6045] .`: renamed from bond0 (while UP) [ 78.536707][ T6051] netlink: 140 bytes leftover after parsing attributes in process `syz.1.80'. [ 80.545280][ T6086] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.624139][ T6089] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 80.973489][ T6106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.547109][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 81.547125][ T30] audit: type=1400 audit(1779824613.227:425): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.659525][ T30] audit: type=1400 audit(1779824613.337:426): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.723603][ T30] audit: type=1400 audit(1779824613.397:427): avc: denied { create } for pid=6115 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 81.781688][ T30] audit: type=1400 audit(1779824613.397:428): avc: denied { execmem } for pid=6115 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 81.828576][ T30] audit: type=1400 audit(1779824613.397:429): avc: denied { create } for pid=6115 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 81.871898][ T30] audit: type=1400 audit(1779824613.487:430): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.933054][ T30] audit: type=1400 audit(1779824613.497:431): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.961071][ T30] audit: type=1400 audit(1779824613.507:432): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 81.999589][ T30] audit: type=1400 audit(1779824613.577:433): avc: denied { create } for pid=6117 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 82.023949][ T30] audit: type=1400 audit(1779824613.577:434): avc: denied { map_create } for pid=6117 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 82.129138][ T6132] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 83.689174][ T6164] syzkaller0: entered promiscuous mode [ 83.695479][ T6164] syzkaller0: entered allmulticast mode [ 86.083358][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.090692][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.168735][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.190316][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.322020][ T6188] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 86.346496][ T6179] Zero length message leads to an empty skb [ 86.362168][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.384358][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.407831][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.461046][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.474837][ T6188] netlink: 14 bytes leftover after parsing attributes in process `syz.4.130'. [ 86.596247][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 86.596263][ T30] audit: type=1400 audit(1779824618.277:505): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.635141][ T30] audit: type=1400 audit(1779824618.307:506): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.663784][ T30] audit: type=1400 audit(1779824618.307:507): avc: denied { read write } for pid=6194 comm="syz.1.132" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=0 [ 86.689760][ T30] audit: type=1400 audit(1779824618.307:508): avc: denied { execmem } for pid=6194 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 86.710228][ T30] audit: type=1400 audit(1779824618.337:509): avc: denied { create } for pid=6196 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 86.732196][ T30] audit: type=1400 audit(1779824618.337:510): avc: denied { execmem } for pid=6196 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 86.752063][ T30] audit: type=1400 audit(1779824618.367:511): avc: denied { create } for pid=6194 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 86.773531][ T30] audit: type=1400 audit(1779824618.427:512): avc: denied { read } for pid=6196 comm="syz.4.133" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 86.833473][ T30] audit: type=1400 audit(1779824618.507:513): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.889674][ T30] audit: type=1400 audit(1779824618.567:514): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.839812][ T6216] syz.0.138 (6216): drop_caches: 1 [ 91.621219][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 91.621251][ T30] audit: type=1400 audit(1779824623.297:587): avc: denied { mount } for pid=6277 comm="syz.4.161" name="/" dev="ramfs" ino=10376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 92.167410][ T30] audit: type=1400 audit(1779824623.847:588): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.340692][ T30] audit: type=1400 audit(1779824624.017:589): avc: denied { watch } for pid=6281 comm="syz.0.162" path="/35" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 92.441101][ T30] audit: type=1400 audit(1779824624.117:590): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.531908][ T30] audit: type=1400 audit(1779824624.187:591): avc: denied { map_create } for pid=6284 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 92.788386][ T30] audit: type=1400 audit(1779824624.467:592): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.901380][ T30] audit: type=1400 audit(1779824624.577:593): avc: denied { execmem } for pid=6287 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 92.982058][ T30] audit: type=1400 audit(1779824624.657:594): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.079933][ T30] audit: type=1400 audit(1779824624.737:595): avc: denied { read } for pid=6291 comm="syz.1.165" dev="nsfs" ino=4026533176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 93.163717][ T30] audit: type=1400 audit(1779824624.747:596): avc: denied { read } for pid=6291 comm="syz.1.165" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 94.500235][ T6311] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 94.569666][ T5620] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 94.572074][ T6315] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 94.645165][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 94.651601][ T6311] bond1: entered promiscuous mode [ 94.660024][ T6319] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 94.688362][ T6311] bond1: entered allmulticast mode [ 94.713440][ T6311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.818986][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.860853][ T6315] team0: Port device netdevsim1 added [ 94.889235][ T6316] erspan1: entered allmulticast mode [ 94.918472][ T6316] bond1: (slave erspan1): making interface the new active one [ 94.928038][ T6316] erspan1: entered promiscuous mode [ 94.944136][ T6316] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 94.991945][ T6318] bond1 (unregistering): (slave erspan1): Releasing active interface [ 95.020178][ T6318] erspan1: left promiscuous mode [ 95.055839][ T6318] bond1 (unregistering): Released all slaves [ 95.110907][ T6319] team0: Port device netdevsim1 removed [ 95.140574][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.186856][ T6319] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 95.395924][ T6334] syzkaller0: entered promiscuous mode [ 95.424780][ T6334] syzkaller0: entered allmulticast mode [ 95.964363][ T6349] xt_connbytes: Forcing CT accounting to be enabled [ 95.979254][ T6349] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 97.162816][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 97.162844][ T30] audit: type=1400 audit(1779824628.837:720): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.272261][ T30] audit: type=1400 audit(1779824628.947:721): avc: denied { create } for pid=6359 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 97.340043][ T30] audit: type=1400 audit(1779824629.007:722): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.435056][ T30] audit: type=1400 audit(1779824629.107:723): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.509633][ T30] audit: type=1400 audit(1779824629.167:724): avc: denied { name_bind } for pid=6359 comm="syz.1.184" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 97.566652][ T30] audit: type=1400 audit(1779824629.237:725): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.630139][ T30] audit: type=1400 audit(1779824629.307:726): avc: denied { write } for pid=6364 comm="syz.4.187" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 97.681007][ T30] audit: type=1400 audit(1779824629.327:727): avc: denied { read } for pid=6364 comm="syz.4.187" dev="nsfs" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 97.813837][ T30] audit: type=1400 audit(1779824629.357:728): avc: denied { execute } for pid=6362 comm="syz.2.185" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 97.847690][ T30] audit: type=1400 audit(1779824629.447:729): avc: denied { map_create } for pid=6364 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.877740][ T6404] mmap: syz.3.197 (6404) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.159081][ T6418] syzkaller0: entered promiscuous mode [ 187.738047][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 187.744122][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 187.750193][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 187.757014][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 187.763378][ T5623] Bluetooth: hci0: command tx timeout [ 206.914583][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 206.921555][ C1] rcu: 0-...!: (0 ticks this GP) idle=01b4/1/0x4000000000000002 softirq=19300/19300 fqs=134 [ 206.932161][ C1] rcu: (detected by 1, t=10502 jiffies, g=17729, q=288 ncpus=2) [ 206.939885][ C1] Sending NMI from CPU 1 to CPUs 0: [ 206.939909][ C0] NMI backtrace for cpu 0 [ 206.939921][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 206.939936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.939944][ C0] RIP: 0010:kasan_check_range+0x159/0x1e0 [ 206.939968][ C0] Code: 90 48 83 c0 01 49 89 d3 48 39 d0 74 0f 80 38 00 74 ef 4e 8d 5c 25 00 48 85 c0 75 9d 48 89 da 4c 89 d8 4c 29 da e9 32 ff ff ff <48> 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 [ 206.939980][ C0] RSP: 0018:ffffc90000007e68 EFLAGS: 00000083 [ 206.939992][ C0] RAX: fffffbfff21afd0a RBX: fffffbfff21afd0b RCX: ffffffff81f47eda [ 206.940000][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff90d7e850 [ 206.940008][ C0] RBP: fffffbfff21afd0a R08: 0000000000000000 R09: fffffbfff21afd0a [ 206.940016][ C0] R10: ffffffff90d7e857 R11: 0000000000000001 R12: ffff88802e280300 [ 206.940024][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b8428650 [ 206.940033][ C0] FS: 0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 206.940047][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.940055][ C0] CR2: 0000200000006680 CR3: 000000002cb38000 CR4: 00000000003526f0 [ 206.940064][ C0] Call Trace: [ 206.940068][ C0] [ 206.940073][ C0] ? __pfx_advance_sched+0x10/0x10 [ 206.940089][ C0] __hrtimer_run_queues+0x3ca/0xa00 [ 206.940113][ C0] hrtimer_interrupt+0x3e5/0x940 [ 206.940130][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 206.940149][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 206.940170][ C0] [ 206.940174][ C0] [ 206.940179][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.940193][ C0] RIP: 0010:tick_nohz_idle_enter+0x1a1/0x270 [ 206.940212][ C0] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 cd 00 00 00 48 83 0b 01 48 89 df e8 c6 e3 ff ff e8 61 b7 17 00 fb 5b <5d> 41 5c c3 cc cc cc cc e8 72 73 0f 00 65 8b 2d 37 68 12 12 31 ff [ 206.940224][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000206 [ 206.940235][ C0] RAX: 00000000002590f5 RBX: ffffffff8e4955c0 RCX: 0000000000000000 [ 206.940243][ C0] RDX: 0000000000000000 RSI: ffffffff8df2430b RDI: ffffffff8c1c4400 [ 206.940252][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 206.940260][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 206.940268][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000008b000 [ 206.940281][ C0] do_idle+0x80/0x590 [ 206.940295][ C0] ? __pfx_do_idle+0x10/0x10 [ 206.940307][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 206.940324][ C0] cpu_startup_entry+0x4f/0x60 [ 206.940337][ C0] rest_init+0x251/0x260 [ 206.940352][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 206.940368][ C0] start_kernel+0x484/0x490 [ 206.940382][ C0] x86_64_start_reservations+0x24/0x30 [ 206.940397][ C0] x86_64_start_kernel+0x12b/0x130 [ 206.940411][ C0] common_startup_64+0x13e/0x148 [ 206.940435][ C0] [ 206.940904][ C1] rcu: rcu_preempt kthread starved for 10127 jiffies! g17729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 207.242465][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 207.252418][ C1] rcu: RCU grace-period kthread stack dump: [ 207.258288][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 207.271777][ C1] Call Trace: [ 207.275044][ C1] [ 207.277969][ C1] __schedule+0x1295/0x67a0 [ 207.282486][ C1] ? __pfx___schedule+0x10/0x10 [ 207.287328][ C1] ? find_held_lock+0x2b/0x80 [ 207.291992][ C1] ? schedule+0x2bf/0x390 [ 207.296317][ C1] schedule+0xdd/0x390 [ 207.300381][ C1] schedule_timeout+0x127/0x280 [ 207.305227][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 207.310593][ C1] ? __pfx_process_timeout+0x10/0x10 [ 207.315878][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 207.321678][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 207.327133][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 207.331890][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 207.337166][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 207.342617][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 207.347550][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 207.352737][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 207.358542][ C1] rcu_gp_kthread+0x179/0x230 [ 207.363216][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 207.368403][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 207.374213][ C1] ? __kthread_parkme+0x18c/0x230 [ 207.379230][ C1] ? kthread+0x13a/0x450 [ 207.383467][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 207.388656][ C1] kthread+0x370/0x450 [ 207.392714][ C1] ? __pfx_kthread+0x10/0x10 [ 207.397297][ C1] ret_from_fork+0x72b/0xd50 [ 207.401883][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 207.406988][ C1] ? __switch_to+0x800/0x1100 [ 207.411663][ C1] ? __pfx_kthread+0x10/0x10 [ 207.416248][ C1] ret_from_fork_asm+0x1a/0x30 [ 207.421025][ C1] [ 207.424029][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 207.430345][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 207.439265][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.449304][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 207.454931][ C1] Code: 36 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 31 20 00 fb f4 7c 42 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 207.474524][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 207.480577][ C1] RAX: 000000000010ea31 RBX: ffff88801e2c2500 RCX: ffffffff8b8b60b5 [ 207.488534][ C1] RDX: 0000000000000000 RSI: ffffffff8df2430b RDI: ffffffff8c1c4400 [ 207.496493][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 207.504452][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 207.512412][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d7e850 [ 207.520373][ C1] FS: 0000000000000000(0000) GS:ffff88812446a000(0000) knlGS:0000000000000000 [ 207.529297][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.536303][ C1] CR2: 0000001b33819ff8 CR3: 000000002cb38000 CR4: 00000000003526f0 [ 207.544268][ C1] Call Trace: [ 207.547535][ C1] [ 207.550451][ C1] default_idle+0x9/0x10 [ 207.554681][ C1] default_idle_call+0x6c/0xb0 [ 207.559433][ C1] do_idle+0x464/0x590 [ 207.563492][ C1] ? __pfx_do_idle+0x10/0x10 [ 207.568078][ C1] cpu_startup_entry+0x4f/0x60 [ 207.572830][ C1] start_secondary+0x21d/0x2d0 [ 207.577584][ C1] ? __pfx_start_secondary+0x10/0x10 [ 207.582863][ C1] common_startup_64+0x13e/0x148 [ 207.587821][ C1]