last executing test programs: 4.710083181s ago: executing program 2 (id=581): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 2.893192655s ago: executing program 1 (id=612): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) 2.681544407s ago: executing program 1 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 2.493778784s ago: executing program 1 (id=619): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.398260579s ago: executing program 3 (id=620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028"], 0x40}}, 0x20040810) 2.205717246s ago: executing program 3 (id=623): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a0000000200", 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 2.187337407s ago: executing program 1 (id=624): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.046809927s ago: executing program 1 (id=626): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 2.012073402s ago: executing program 3 (id=627): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @remote, @private0, 0x800001, 0x6, 0xfffe, 0x100, 0x5ffffffe, 0x6820213}) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000"], 0x28}}, 0x0) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1.853096111s ago: executing program 2 (id=629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1.785558866s ago: executing program 3 (id=631): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f310000"], 0xe8}}, 0x0) close(r0) 1.703633042s ago: executing program 2 (id=632): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000078000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002190000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.452312818s ago: executing program 1 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x3}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x90) 1.215848393s ago: executing program 3 (id=637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000000180)="b0", 0x1, 0x6004851, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x400, @loopback, 0x6}}}, 0x84) 1.108301672s ago: executing program 2 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x38f143, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80002, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x5, 0xb}, {0x1, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040044}, 0x4010004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.04905464s ago: executing program 3 (id=640): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x40040c1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 758.005183ms ago: executing program 4 (id=644): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 757.684976ms ago: executing program 0 (id=645): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, @none}, 0xe) 691.630827ms ago: executing program 2 (id=646): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x48, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 666.337181ms ago: executing program 4 (id=647): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x2, 0x2, "cd42"}}, 0x7) 639.913085ms ago: executing program 0 (id=648): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f310000"], 0xe8}}, 0x0) close(r0) 509.944583ms ago: executing program 2 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000078000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002190000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 438.856769ms ago: executing program 4 (id=650): r0 = socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 363.780735ms ago: executing program 4 (id=651): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x421}}]}}]}, 0x58}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 346.189765ms ago: executing program 0 (id=652): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x2, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000480)="8ccc80dd", 0x4}], 0x2}}, {{&(0x7f0000000580)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000c80)=[{0x0}, {0x0, 0x44}], 0x2}}], 0x3, 0x14) 205.73685ms ago: executing program 0 (id=653): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 205.057007ms ago: executing program 4 (id=654): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 69.663721ms ago: executing program 0 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc0100001900010000"], 0x1bc}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 32.714136ms ago: executing program 0 (id=656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setreuid(0x0, 0xee00) 0s ago: executing program 4 (id=657): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 58.031098][ T30] audit: type=1400 audit(1766065251.923:62): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.054443][ T30] audit: type=1400 audit(1766065251.943:63): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.056990][ T5801] cgroup: Unknown subsys name 'net' [ 58.083127][ T30] audit: type=1400 audit(1766065251.973:64): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.228037][ T5801] cgroup: Unknown subsys name 'cpuset' [ 58.235445][ T5801] cgroup: Unknown subsys name 'rlimit' [ 58.354512][ T30] audit: type=1400 audit(1766065252.243:65): avc: denied { setattr } for pid=5801 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.395723][ T30] audit: type=1400 audit(1766065252.243:66): avc: denied { create } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.416580][ T30] audit: type=1400 audit(1766065252.243:67): avc: denied { write } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.438379][ T30] audit: type=1400 audit(1766065252.253:68): avc: denied { read } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.458591][ T5803] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.467479][ T30] audit: type=1400 audit(1766065252.253:69): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.492315][ T30] audit: type=1400 audit(1766065252.253:70): avc: denied { mount } for pid=5801 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.517102][ T30] audit: type=1400 audit(1766065252.353:71): avc: denied { relabelto } for pid=5803 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 59.460226][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.587687][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.595075][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.603599][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.612304][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.617974][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.627694][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.635236][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.642831][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.645774][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.650689][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.665173][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.665251][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.676107][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.680838][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.688327][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.693976][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.706213][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.709260][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.714413][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.722472][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.735778][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.736051][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.744376][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.751493][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.766112][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.090160][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 62.201922][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.210579][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.218007][ T5811] bridge_slave_0: entered allmulticast mode [ 62.225242][ T5811] bridge_slave_0: entered promiscuous mode [ 62.233073][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 62.276516][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.283596][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.290769][ T5811] bridge_slave_1: entered allmulticast mode [ 62.297491][ T5811] bridge_slave_1: entered promiscuous mode [ 62.392681][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.406944][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.438423][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 62.505163][ T5811] team0: Port device team_slave_0 added [ 62.517236][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.524333][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.532140][ T5812] bridge_slave_0: entered allmulticast mode [ 62.538753][ T5812] bridge_slave_0: entered promiscuous mode [ 62.548672][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.555812][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.562905][ T5812] bridge_slave_1: entered allmulticast mode [ 62.569842][ T5812] bridge_slave_1: entered promiscuous mode [ 62.576750][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.587468][ T5811] team0: Port device team_slave_1 added [ 62.603578][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 62.649738][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.690077][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.699734][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.706680][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.732560][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.777694][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.784626][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.811307][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.825219][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.832395][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.839528][ T5821] bridge_slave_0: entered allmulticast mode [ 62.846278][ T5821] bridge_slave_0: entered promiscuous mode [ 62.871189][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.878306][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.885372][ T5821] bridge_slave_1: entered allmulticast mode [ 62.892236][ T5821] bridge_slave_1: entered promiscuous mode [ 62.902768][ T5812] team0: Port device team_slave_0 added [ 62.932338][ T5812] team0: Port device team_slave_1 added [ 62.973238][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.981105][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.988486][ T5823] bridge_slave_0: entered allmulticast mode [ 62.995044][ T5823] bridge_slave_0: entered promiscuous mode [ 63.003364][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.012909][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.020061][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.027382][ T5820] bridge_slave_0: entered allmulticast mode [ 63.033952][ T5820] bridge_slave_0: entered promiscuous mode [ 63.054645][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.061890][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.069214][ T5823] bridge_slave_1: entered allmulticast mode [ 63.076301][ T5823] bridge_slave_1: entered promiscuous mode [ 63.088035][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.097392][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.104470][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.111786][ T5820] bridge_slave_1: entered allmulticast mode [ 63.118620][ T5820] bridge_slave_1: entered promiscuous mode [ 63.125588][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.132609][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.158609][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.173084][ T5811] hsr_slave_0: entered promiscuous mode [ 63.179562][ T5811] hsr_slave_1: entered promiscuous mode [ 63.206784][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.213722][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.239916][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.278284][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.288507][ T5821] team0: Port device team_slave_0 added [ 63.296830][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.314263][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.324635][ T5821] team0: Port device team_slave_1 added [ 63.331947][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.412390][ T5823] team0: Port device team_slave_0 added [ 63.418638][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.425570][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.452175][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.464072][ T5820] team0: Port device team_slave_0 added [ 63.470106][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.477900][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.504601][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.521548][ T5812] hsr_slave_0: entered promiscuous mode [ 63.527568][ T5812] hsr_slave_1: entered promiscuous mode [ 63.533400][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 63.539318][ T5812] Cannot create hsr debugfs directory [ 63.546221][ T5823] team0: Port device team_slave_1 added [ 63.552795][ T5820] team0: Port device team_slave_1 added [ 63.613853][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.621415][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.647577][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.662741][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.669733][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.695668][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.713841][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.720840][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.746722][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.771020][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.778262][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.804612][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.806622][ T5139] Bluetooth: hci0: command tx timeout [ 63.815672][ T5817] Bluetooth: hci1: command tx timeout [ 63.820696][ T5819] Bluetooth: hci2: command tx timeout [ 63.826055][ T51] Bluetooth: hci3: command tx timeout [ 63.831311][ T5828] Bluetooth: hci4: command tx timeout [ 63.880329][ T5821] hsr_slave_0: entered promiscuous mode [ 63.886583][ T5821] hsr_slave_1: entered promiscuous mode [ 63.892465][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 63.898496][ T5821] Cannot create hsr debugfs directory [ 63.955729][ T5823] hsr_slave_0: entered promiscuous mode [ 63.962048][ T5823] hsr_slave_1: entered promiscuous mode [ 63.968118][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 63.973830][ T5823] Cannot create hsr debugfs directory [ 63.989667][ T5820] hsr_slave_0: entered promiscuous mode [ 63.996400][ T5820] hsr_slave_1: entered promiscuous mode [ 64.002333][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 64.008098][ T5820] Cannot create hsr debugfs directory [ 64.210096][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.238040][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.255030][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.275977][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.326954][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.338744][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.350137][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.360123][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.410255][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.422650][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.437679][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.458553][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.517589][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.533316][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.542753][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.563790][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.594586][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.641801][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.653287][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.662619][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.671924][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.694171][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.724416][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.734164][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.741305][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.751052][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.758109][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.794539][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.832735][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.859189][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.866293][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.878236][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.902771][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.909861][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.919321][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.926389][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.948582][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.955707][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.973506][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.010923][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.023135][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 65.023147][ T30] audit: type=1400 audit(1766065258.913:84): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.054722][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.105106][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.112225][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.130560][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.152264][ T2069] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.159359][ T2069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.189461][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.196590][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.235532][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.242686][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.282887][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.340582][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.447759][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.468229][ T5811] veth0_vlan: entered promiscuous mode [ 65.507055][ T5811] veth1_vlan: entered promiscuous mode [ 65.520762][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.617279][ T5812] veth0_vlan: entered promiscuous mode [ 65.628426][ T5811] veth0_macvtap: entered promiscuous mode [ 65.644689][ T5812] veth1_vlan: entered promiscuous mode [ 65.664909][ T5811] veth1_macvtap: entered promiscuous mode [ 65.674669][ T5820] veth0_vlan: entered promiscuous mode [ 65.706468][ T5820] veth1_vlan: entered promiscuous mode [ 65.721298][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.738333][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.749464][ T5812] veth0_macvtap: entered promiscuous mode [ 65.762454][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.772722][ T5812] veth1_macvtap: entered promiscuous mode [ 65.790569][ T999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.800220][ T999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.813250][ T999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.823130][ T999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838748][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.886772][ T5819] Bluetooth: hci1: command tx timeout [ 65.886831][ T5817] Bluetooth: hci2: command tx timeout [ 65.892209][ T5139] Bluetooth: hci4: command tx timeout [ 65.899365][ T51] Bluetooth: hci0: command tx timeout [ 65.903425][ T5828] Bluetooth: hci3: command tx timeout [ 65.910942][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.935254][ T5820] veth0_macvtap: entered promiscuous mode [ 65.963058][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.987724][ T5820] veth1_macvtap: entered promiscuous mode [ 66.007433][ T5823] veth0_vlan: entered promiscuous mode [ 66.013650][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.044412][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.054308][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.066058][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.067472][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.073924][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.131511][ T5823] veth1_vlan: entered promiscuous mode [ 66.161542][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.174079][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.184979][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.199392][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.217810][ T30] audit: type=1400 audit(1766065260.113:85): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.htXzTm/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.260467][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.263353][ T30] audit: type=1400 audit(1766065260.133:86): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.299505][ T30] audit: type=1400 audit(1766065260.143:87): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.htXzTm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.306752][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.335141][ T30] audit: type=1400 audit(1766065260.143:88): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.359242][ T30] audit: type=1400 audit(1766065260.143:89): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.htXzTm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.388986][ T5823] veth0_macvtap: entered promiscuous mode [ 66.400046][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.412887][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.418106][ T30] audit: type=1400 audit(1766065260.153:90): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.htXzTm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.461538][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.468444][ T30] audit: type=1400 audit(1766065260.153:91): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.494240][ T5823] veth1_macvtap: entered promiscuous mode [ 66.498522][ T30] audit: type=1400 audit(1766065260.183:92): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.584209][ T30] audit: type=1400 audit(1766065260.183:93): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=7306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.592003][ T5821] veth0_vlan: entered promiscuous mode [ 66.608418][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.629335][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.663658][ T5821] veth1_vlan: entered promiscuous mode [ 66.670152][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.690549][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.710967][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.737948][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.759940][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.769736][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.787271][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.795175][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.803440][ T5931] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 66.804831][ T4522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.868602][ T4522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.915751][ T4522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.947123][ T4522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.973403][ T5821] veth0_macvtap: entered promiscuous mode [ 67.029553][ T5821] veth1_macvtap: entered promiscuous mode [ 67.140322][ T5943] Zero length message leads to an empty skb [ 67.158070][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.207210][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.217189][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.247329][ T4395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.291475][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.313024][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.322269][ T4522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359321][ T3667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.368465][ T3667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.384551][ T4522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.416248][ T4522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.439432][ T5951] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 67.583249][ T2069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.599938][ T2069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.677826][ T2069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.692839][ T2069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.745462][ T5956] tipc: Started in network mode [ 67.755210][ T5956] tipc: Node identity c6dca0369c13, cluster identity 4711 [ 67.767109][ T5956] tipc: Enabled bearer , priority 0 [ 67.798976][ T5956] syzkaller0: entered promiscuous mode [ 67.804559][ T5956] syzkaller0: entered allmulticast mode [ 67.837674][ T5956] tipc: Resetting bearer [ 67.853606][ T5955] tipc: Resetting bearer [ 67.864980][ T5955] tipc: Disabling bearer [ 67.966087][ T5139] Bluetooth: hci3: command tx timeout [ 67.966112][ T5817] Bluetooth: hci4: command tx timeout [ 67.971545][ T5828] Bluetooth: hci0: command tx timeout [ 67.977672][ T51] Bluetooth: hci2: command tx timeout [ 67.983375][ T5819] Bluetooth: hci1: command tx timeout [ 68.248116][ T5964] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 68.425230][ T5973] netlink: 176 bytes leftover after parsing attributes in process `syz.4.16'. [ 70.046489][ T5828] Bluetooth: hci3: command tx timeout [ 70.046517][ T5830] Bluetooth: hci4: command tx timeout [ 70.052586][ T5139] Bluetooth: hci1: command tx timeout [ 70.057355][ T5817] Bluetooth: hci2: command tx timeout [ 70.068069][ T51] Bluetooth: hci0: command tx timeout [ 70.074331][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 70.074343][ T30] audit: type=1400 audit(1766065263.963:154): avc: denied { setopt } for pid=5994 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.212576][ T30] audit: type=1400 audit(1766065263.993:155): avc: denied { write } for pid=5994 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.366114][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 70.366934][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 70.420432][ T6003] netlink: 68 bytes leftover after parsing attributes in process `syz.3.26'. [ 70.534490][ T30] audit: type=1400 audit(1766065264.423:156): avc: denied { create } for pid=6000 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.596046][ T30] audit: type=1400 audit(1766065264.423:157): avc: denied { setopt } for pid=6000 comm="syz.0.25" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.670659][ T30] audit: type=1400 audit(1766065264.453:158): avc: denied { create } for pid=6007 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.709427][ T30] audit: type=1400 audit(1766065264.453:159): avc: denied { ioctl } for pid=6007 comm="gtp" path="socket:[7718]" dev="sockfs" ino=7718 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.795946][ T30] audit: type=1400 audit(1766065264.693:160): avc: denied { create } for pid=6018 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.834394][ T30] audit: type=1400 audit(1766065264.713:161): avc: denied { setopt } for pid=6018 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.856474][ T30] audit: type=1400 audit(1766065264.723:162): avc: denied { bind } for pid=6018 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.930073][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.940943][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.014478][ T30] audit: type=1400 audit(1766065264.903:163): avc: denied { getopt } for pid=6024 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.747825][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 71.784708][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 71.870571][ T6052] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 72.034556][ T6061] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 72.672851][ T6091] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 72.911380][ T6103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.918780][ T6103] IPv6: NLM_F_CREATE should be set when creating new route [ 72.926035][ T6103] IPv6: NLM_F_CREATE should be set when creating new route [ 73.135223][ T6107] 9p: Bad value for 'wfdno' [ 73.203499][ T6111] pimreg: entered allmulticast mode [ 73.296299][ T6111] pimreg: left allmulticast mode [ 73.906966][ T6115] loop7: detected capacity change from 0 to 7 [ 73.926852][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.945839][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.953936][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.971474][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.990545][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.006707][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.027077][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.050072][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'. [ 74.051853][ T6115] ldm_validate_partition_table(): Disk read failed. [ 74.083162][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.101666][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.117669][ T6115] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.136636][ T6115] Dev loop7: unable to read RDB block 0 [ 74.146470][ T6115] loop7: unable to read partition table [ 74.159790][ T6115] loop7: partition table beyond EOD, truncated [ 74.180977][ T6115] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 74.276366][ T6133] ldm_validate_partition_table(): Disk read failed. [ 74.293181][ T6133] Dev loop7: unable to read RDB block 0 [ 74.321689][ T6133] loop7: unable to read partition table [ 74.343743][ T6133] loop7: partition table beyond EOD, truncated [ 74.657002][ T6149] tipc: Started in network mode [ 74.673352][ T6149] tipc: Node identity 5684ec17b95c, cluster identity 4711 [ 74.704913][ T6149] tipc: Enabled bearer , priority 0 [ 74.738457][ T6154] syzkaller0: entered promiscuous mode [ 74.758935][ T6154] syzkaller0: entered allmulticast mode [ 74.811945][ T6149] tipc: Resetting bearer [ 74.865470][ T6147] tipc: Resetting bearer [ 74.894291][ T6147] tipc: Disabling bearer [ 75.038199][ T6169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.077059][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 75.077074][ T30] audit: type=1326 audit(1766065268.973:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.148955][ T30] audit: type=1326 audit(1766065269.003:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.244049][ T30] audit: type=1326 audit(1766065269.003:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.305782][ T6181] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 75.309791][ T30] audit: type=1326 audit(1766065269.003:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.341887][ T30] audit: type=1326 audit(1766065269.003:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.368424][ T30] audit: type=1326 audit(1766065269.003:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.390926][ T6185] program syz.2.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.459900][ T30] audit: type=1326 audit(1766065269.013:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.483991][ T30] audit: type=1326 audit(1766065269.013:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.573363][ T30] audit: type=1326 audit(1766065269.013:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.597441][ T30] audit: type=1326 audit(1766065269.013:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 75.698625][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 76.972420][ T6204] netlink: 'syz.1.116': attribute type 25 has an invalid length. [ 76.980265][ T6204] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 76.989657][ T6204] bridge0: port 1(bridge_slave_0) entered learning state [ 77.220012][ T6232] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 77.220012][ T6232] program syz.3.129 not setting count and/or reply_len properly [ 77.704475][ T6243] netlink: 176 bytes leftover after parsing attributes in process `syz.1.127'. [ 77.884541][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.514660][ T80] cfg80211: failed to load regulatory.db [ 79.251008][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 79.257644][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 79.418230][ T6273] tipc: Enabled bearer , priority 0 [ 79.425565][ T6273] syzkaller0: entered promiscuous mode [ 79.431089][ T6273] syzkaller0: entered allmulticast mode [ 79.458631][ T6273] tipc: Resetting bearer [ 79.469380][ T6271] tipc: Resetting bearer [ 79.498029][ T6271] tipc: Disabling bearer [ 79.729768][ T6286] program syz.3.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.189200][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 80.189217][ T30] audit: type=1400 audit(1766065274.073:661): avc: denied { mounton } for pid=6291 comm="syz.2.152" path="/29/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.290875][ T30] audit: type=1400 audit(1766065274.183:662): avc: denied { name_bind } for pid=6293 comm="syz.0.153" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.530963][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.608003][ T30] audit: type=1400 audit(1766065274.503:663): avc: denied { read write } for pid=6306 comm="syz.3.160" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.636479][ T30] audit: type=1400 audit(1766065274.523:664): avc: denied { open } for pid=6306 comm="syz.3.160" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.684288][ T30] audit: type=1400 audit(1766065274.573:665): avc: denied { ioctl } for pid=6306 comm="syz.3.160" path="/dev/virtual_nci" dev="devtmpfs" ino=698 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.771005][ T30] audit: type=1400 audit(1766065274.633:666): avc: denied { shutdown } for pid=6312 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.795517][ T30] audit: type=1400 audit(1766065274.633:667): avc: denied { write } for pid=6312 comm="syz.1.161" lport=58956 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 80.826405][ T30] audit: type=1400 audit(1766065274.633:668): avc: denied { getopt } for pid=6312 comm="syz.1.161" lport=58956 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.468663][ T30] audit: type=1400 audit(1766065275.363:669): avc: denied { create } for pid=6330 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.533539][ T30] audit: type=1400 audit(1766065275.363:670): avc: denied { write } for pid=6330 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.869526][ T6353] tap0: tun_chr_ioctl cmd 1074025672 [ 81.874874][ T6353] tap0: ignored: set checksum disabled [ 81.899464][ T6353] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 82.432981][ T6364] ucma_write: process 97 (syz.0.180) changed security contexts after opening file descriptor, this is not allowed. [ 82.485082][ T6368] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6368 comm=syz.1.182 [ 82.505748][ T6368] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6368 comm=syz.1.182 [ 82.842341][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 82.907487][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 82.942723][ T3571] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.963848][ T3571] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.987276][ T3571] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.006091][ T3571] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.487634][ T6411] tipc: Started in network mode [ 83.492631][ T6411] tipc: Node identity be66238a18d, cluster identity 4711 [ 83.500201][ T6411] tipc: Enabled bearer , priority 0 [ 83.508770][ T6411] syzkaller0: entered promiscuous mode [ 83.514281][ T6411] syzkaller0: entered allmulticast mode [ 83.554206][ T6411] tipc: Resetting bearer [ 83.565420][ T6409] tipc: Resetting bearer [ 83.587392][ T6409] tipc: Disabling bearer [ 83.665999][ T6415] loop4: detected capacity change from 0 to 7 [ 83.682218][ T6415] buffer_io_error: 28 callbacks suppressed [ 83.682233][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.767531][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.775410][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.831266][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.849739][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.869134][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.901668][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.931961][ T6415] ldm_validate_partition_table(): Disk read failed. [ 83.955361][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 83.975812][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.004496][ T6415] Buffer I/O error on dev loop4, logical block 0, async page read [ 84.049462][ T6415] Dev loop4: unable to read RDB block 0 [ 84.058661][ T6415] loop4: unable to read partition table [ 84.064531][ T6415] loop4: partition table beyond EOD, truncated [ 84.072369][ T6415] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 84.090642][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 84.426424][ T5188] ldm_validate_partition_table(): Disk read failed. [ 84.443250][ T5188] Dev loop4: unable to read RDB block 0 [ 84.456084][ T5188] loop4: unable to read partition table [ 84.475906][ T5188] loop4: partition table beyond EOD, truncated [ 84.526118][ T6446] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 84.625013][ T6448] tipc: Enabled bearer , priority 0 [ 84.653056][ T6448] syzkaller0: entered promiscuous mode [ 84.676827][ T6448] syzkaller0: entered allmulticast mode [ 84.716085][ T6448] tipc: Resetting bearer [ 84.757108][ T6447] tipc: Resetting bearer [ 84.791044][ T6447] tipc: Disabling bearer [ 85.179255][ T6464] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.207202][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 85.207218][ T30] audit: type=1400 audit(1766065279.103:801): avc: denied { create } for pid=6460 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.217792][ T6466] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.252422][ T30] audit: type=1400 audit(1766065279.103:802): avc: denied { write } for pid=6460 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.342308][ T6466] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.369599][ T30] audit: type=1326 audit(1766065279.263:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.433620][ T30] audit: type=1326 audit(1766065279.263:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.528691][ T30] audit: type=1326 audit(1766065279.263:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.571289][ T30] audit: type=1326 audit(1766065279.263:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.634556][ T30] audit: type=1326 audit(1766065279.263:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.683071][ T30] audit: type=1326 audit(1766065279.263:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.708582][ T30] audit: type=1326 audit(1766065279.263:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 85.732915][ T30] audit: type=1326 audit(1766065279.263:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 86.558295][ T6501] tipc: Started in network mode [ 86.563191][ T6501] tipc: Node identity c2ba493f97b1, cluster identity 4711 [ 86.605916][ T6501] tipc: Enabled bearer , priority 0 [ 86.648420][ T6504] syzkaller0: entered promiscuous mode [ 86.673699][ T6504] syzkaller0: entered allmulticast mode [ 86.750672][ T6501] tipc: Resetting bearer [ 86.805947][ T6500] tipc: Resetting bearer [ 86.887047][ T6500] tipc: Disabling bearer [ 87.510330][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 87.953820][ T6553] syz_tun: entered allmulticast mode [ 88.071286][ T6551] Process accounting resumed [ 88.226528][ T6564] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 88.478078][ T6576] hub 6-0:1.0: USB hub found [ 88.495757][ T6576] hub 6-0:1.0: 1 port detected [ 88.677703][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 88.804790][ T6591] tipc: Enabled bearer , priority 0 [ 88.823685][ T6591] syzkaller0: entered promiscuous mode [ 88.835940][ T6591] syzkaller0: entered allmulticast mode [ 88.874770][ T6591] tipc: Resetting bearer [ 88.890775][ T6590] tipc: Resetting bearer [ 88.924472][ T6590] tipc: Disabling bearer [ 89.584386][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.291'. [ 89.701411][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.709447][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.872526][ T6632] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 89.950456][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.006567][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.270734][ T6641] netlink: 200 bytes leftover after parsing attributes in process `syz.0.299'. [ 90.294826][ T77] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.395534][ T77] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.429984][ T77] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.447105][ T77] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.550603][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 90.550617][ T30] audit: type=1400 audit(1766065284.443:875): avc: denied { append } for pid=6656 comm="syz.2.302" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.623529][ T6657] program syz.2.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.671722][ T30] audit: type=1400 audit(1766065284.563:876): avc: denied { validate_trans } for pid=6659 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.731581][ T6662] netlink: 'syz.0.303': attribute type 4 has an invalid length. [ 90.752642][ T6662] netlink: 152 bytes leftover after parsing attributes in process `syz.0.303'. [ 90.816737][ T6662] .`: renamed from bond0 (while UP) [ 90.892722][ T6665] 9p: Bad value for 'rfdno' [ 90.996180][ T6672] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 91.037790][ T30] audit: type=1326 audit(1766065284.933:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 91.120586][ T30] audit: type=1326 audit(1766065284.953:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 91.201995][ T6682] SELinux: failed to load policy [ 91.211149][ T6687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'. [ 91.217111][ T30] audit: type=1326 audit(1766065284.953:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 91.260274][ T30] audit: type=1400 audit(1766065285.093:880): avc: denied { load_policy } for pid=6681 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 91.342780][ T30] audit: type=1400 audit(1766065285.233:881): avc: denied { name_bind } for pid=6693 comm="syz.0.319" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.439340][ T30] audit: type=1400 audit(1766065285.323:882): avc: denied { append } for pid=6698 comm="syz.4.321" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.624136][ T30] audit: type=1400 audit(1766065285.513:883): avc: denied { execute } for pid=6705 comm="syz.4.324" path="/45/cpu.stat" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.787087][ T30] audit: type=1326 audit(1766065285.633:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714cb8f749 code=0x7ffc0000 [ 91.912864][ T6719] netlink: 'syz.4.329': attribute type 10 has an invalid length. [ 91.921005][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.329'. [ 92.115751][ T6715] bridge_slave_0: left allmulticast mode [ 92.123012][ T6715] bridge_slave_0: left promiscuous mode [ 92.129081][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.146857][ T6715] bridge_slave_1: left allmulticast mode [ 92.152738][ T6715] bridge_slave_1: left promiscuous mode [ 92.161132][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.188278][ T6715] bond0: (slave bond_slave_0): Releasing backup interface [ 92.198597][ T6715] bond0: (slave bond_slave_1): Releasing backup interface [ 92.210511][ T6715] team0: Port device team_slave_0 removed [ 92.219669][ T6715] team0: Port device team_slave_1 removed [ 92.227530][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.234915][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.246880][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.254685][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.265095][ T6715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.288443][ T6719] batman_adv: batadv0: Adding interface: virt_wifi0 [ 92.299926][ T6719] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.326682][ T6719] batman_adv: batadv0: Interface activated: virt_wifi0 [ 92.390150][ T6724] pim6reg1: entered promiscuous mode [ 92.398212][ T6724] pim6reg1: entered allmulticast mode [ 92.504167][ T6730] xt_hashlimit: max too large, truncated to 1048576 [ 92.607067][ T6734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6734 comm=syz.2.335 [ 92.646468][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 93.392492][ T6783] ip6gretap0: entered promiscuous mode [ 93.440916][ T6783] ip6gretap0: left promiscuous mode [ 94.093187][ T6820] netlink: 10 bytes leftover after parsing attributes in process `syz.2.369'. [ 94.232664][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 94.370668][ T6841] random: crng reseeded on system resumption [ 94.657527][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 94.911185][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'. [ 95.858412][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 95.959070][ T6903] Illegal XDP return value 38 on prog (id 177) dev syz_tun, expect packet loss! [ 96.143879][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 96.143894][ T30] audit: type=1400 audit(1766065290.033:1030): avc: denied { ioctl } for pid=6904 comm="syz.1.404" path="socket:[12293]" dev="sockfs" ino=12293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.205776][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 96.214566][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 96.239223][ T30] audit: type=1400 audit(1766065290.133:1031): avc: denied { read write } for pid=6910 comm="syz.0.407" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.256446][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.273320][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 96.296521][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.311152][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 96.311199][ T30] audit: type=1400 audit(1766065290.133:1032): avc: denied { open } for pid=6910 comm="syz.0.407" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.327968][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.394172][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.485660][ T30] audit: type=1326 audit(1766065290.373:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f194998f749 code=0x0 [ 96.607365][ T6925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.413'. [ 96.761693][ T6938] 9p: Bad value for 'rfdno' [ 97.189662][ T30] audit: type=1326 audit(1766065291.083:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7518f749 code=0x7ffc0000 [ 97.222326][ T30] audit: type=1326 audit(1766065291.083:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a7518f749 code=0x7ffc0000 [ 97.248117][ T30] audit: type=1326 audit(1766065291.083:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7518f749 code=0x7ffc0000 [ 97.272514][ T30] audit: type=1326 audit(1766065291.083:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7518f749 code=0x7ffc0000 [ 97.332444][ T30] audit: type=1326 audit(1766065291.083:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a7518f749 code=0x7ffc0000 [ 97.386357][ T30] audit: type=1326 audit(1766065291.083:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7518f749 code=0x7ffc0000 [ 97.836699][ T1537] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.863923][ T6981] tipc: Enabled bearer , priority 0 [ 97.871517][ T6981] syzkaller0: entered promiscuous mode [ 97.896288][ T6981] syzkaller0: entered allmulticast mode [ 97.928892][ T6980] tipc: Resetting bearer [ 97.967553][ T6980] tipc: Disabling bearer [ 97.985899][ T1537] usb 5-1: device descriptor read/64, error -71 [ 98.235765][ T1537] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.318331][ T7003] tipc: Started in network mode [ 98.335768][ T7003] tipc: Node identity ac14140f, cluster identity 4711 [ 98.353190][ T7003] tipc: New replicast peer: 255.255.255.83 [ 98.369902][ T7003] tipc: Enabled bearer , priority 10 [ 98.405670][ T1537] usb 5-1: device descriptor read/64, error -71 [ 98.529637][ T1537] usb usb5-port1: attempt power cycle [ 98.887915][ T1537] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.927506][ T1537] usb 5-1: device descriptor read/8, error -71 [ 99.153422][ T7042] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 99.175803][ T1537] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.216675][ T1537] usb 5-1: device descriptor read/8, error -71 [ 99.217546][ T7045] rdma_op ffff8880307da1f0 conn xmit_rdma 0000000000000000 [ 99.269985][ T7048] __nla_validate_parse: 1 callbacks suppressed [ 99.270007][ T7048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.459'. [ 99.285373][ T7048] ksmbd: Unknown IPC event: 4, ignore. [ 99.336266][ T1537] usb usb5-port1: unable to enumerate USB device [ 99.506929][ T1537] tipc: Node number set to 2886997007 [ 100.088425][ T7071] tipc: Enabled bearer , priority 0 [ 100.098453][ T7071] syzkaller0: entered promiscuous mode [ 100.103932][ T7071] syzkaller0: entered allmulticast mode [ 100.115341][ T7071] tipc: Resetting bearer [ 100.122898][ T7070] tipc: Resetting bearer [ 100.136122][ T7070] tipc: Disabling bearer [ 100.405291][ T7080] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 100.424666][ T7073] ip6t_srh: unknown srh match flags 4000 [ 100.441825][ T7073] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 100.821724][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 100.843892][ T7097] netlink: 'syz.0.478': attribute type 30 has an invalid length. [ 100.857445][ T7103] netlink: 176 bytes leftover after parsing attributes in process `syz.4.480'. [ 100.879544][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.895231][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.921798][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.959435][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.008539][ T7108] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 101.058774][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 101.134888][ T7116] gretap1: entered promiscuous mode [ 101.150833][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 101.150847][ T30] audit: type=1326 audit(1766065295.043:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.214299][ T30] audit: type=1326 audit(1766065295.053:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.275990][ T30] audit: type=1326 audit(1766065295.073:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.312249][ T7124] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 101.356425][ T30] audit: type=1326 audit(1766065295.083:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.545680][ T30] audit: type=1326 audit(1766065295.093:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.570079][ T30] audit: type=1326 audit(1766065295.103:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.593597][ T30] audit: type=1326 audit(1766065295.103:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.625694][ T30] audit: type=1326 audit(1766065295.103:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.717601][ T30] audit: type=1326 audit(1766065295.133:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.752173][ T976] IPVS: starting estimator thread 0... [ 101.779824][ T7141] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 101.837870][ T30] audit: type=1326 audit(1766065295.143:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f36d4b8f749 code=0x7ffc0000 [ 101.908664][ T7144] IPVS: using max 53 ests per chain, 127200 per kthread [ 101.916668][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 102.260138][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 102.289633][ T7163] tipc: Enabled bearer , priority 0 [ 102.301441][ T7163] syzkaller0: entered promiscuous mode [ 102.320919][ T7163] syzkaller0: entered allmulticast mode [ 102.342667][ T7163] tipc: Resetting bearer [ 102.390505][ T7162] tipc: Resetting bearer [ 102.434977][ T7162] tipc: Disabling bearer [ 102.641912][ T7171] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 102.944485][ T7185] netlink: 3 bytes leftover after parsing attributes in process `syz.3.514'. [ 103.006910][ T7185] 0X: renamed from caif0 [ 103.013830][ T7187] serio: Serial port ptm0 [ 103.021112][ T7185] 0X: entered allmulticast mode [ 103.040112][ T7185] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 103.534966][ T7211] mmap: syz.2.525 (7211) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.598481][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 103.693294][ T7219] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 103.704323][ T7219] SELinux: failed to load policy [ 104.078871][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 104.157000][ T7241] -1: renamed from syzkaller0 [ 105.076658][ T7276] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 105.855299][ T7310] tipc: Enabled bearer , priority 0 [ 105.881155][ T7310] syzkaller0: entered promiscuous mode [ 105.896247][ T7310] syzkaller0: entered allmulticast mode [ 105.932348][ T7310] tipc: Resetting bearer [ 105.954633][ T7309] tipc: Resetting bearer [ 105.987540][ T7309] tipc: Disabling bearer [ 106.029754][ T7319] process 'syz.3.570' launched '/dev/fd/3' with NULL argv: empty string added [ 106.057720][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 106.592682][ T7345] ip6t_rpfilter: unknown options [ 106.780726][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 106.780741][ T30] audit: type=1400 audit(1766065300.673:1180): avc: denied { bind } for pid=7350 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.832639][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 106.862480][ T30] audit: type=1400 audit(1766065300.703:1181): avc: denied { setopt } for pid=7350 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.888691][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 106.919539][ T30] audit: type=1400 audit(1766065300.803:1182): avc: denied { read } for pid=7354 comm="syz.0.585" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.954064][ T7351] team1: entered promiscuous mode [ 106.981823][ T7351] team1: entered allmulticast mode [ 106.988292][ T7351] 8021q: adding VLAN 0 to HW filter on device team1 [ 107.024701][ T7359] netlink: 92 bytes leftover after parsing attributes in process `syz.4.587'. [ 107.311519][ T30] audit: type=1400 audit(1766065301.203:1183): avc: denied { connect } for pid=7370 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.418483][ T7375] syzkaller0: entered promiscuous mode [ 107.435565][ T7375] syzkaller0: entered allmulticast mode [ 107.475429][ T30] audit: type=1326 audit(1766065301.363:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 107.550170][ T30] audit: type=1326 audit(1766065301.363:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 107.657485][ T30] audit: type=1326 audit(1766065301.363:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 107.760319][ T30] audit: type=1326 audit(1766065301.363:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e50f8f749 code=0x7ffc0000 [ 108.000511][ T7397] netlink: 92 bytes leftover after parsing attributes in process `syz.0.603'. [ 108.035337][ T7397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.603'. [ 108.278120][ T7412] syzkaller0: entered promiscuous mode [ 108.299222][ T7412] syzkaller0: entered allmulticast mode [ 108.486378][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 108.523107][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 108.606803][ T30] audit: type=1400 audit(1766065302.503:1188): avc: denied { ioctl } for pid=7422 comm="syz.3.615" path="socket:[13137]" dev="sockfs" ino=13137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.741911][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.616'. [ 108.792096][ T7426] netlink: 196 bytes leftover after parsing attributes in process `syz.4.616'. [ 108.910303][ T30] audit: type=1400 audit(1766065302.803:1189): avc: denied { nlmsg_read } for pid=7432 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.468145][ T7456] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 109.493086][ T7456] SELinux: failed to load policy [ 110.201426][ T7477] tipc: Enabled bearer , priority 0 [ 110.223583][ T7477] syzkaller0: entered promiscuous mode [ 110.232006][ T7477] syzkaller0: entered allmulticast mode [ 110.245213][ T7477] tipc: Resetting bearer [ 110.286120][ T7475] tipc: Resetting bearer [ 110.378766][ T7475] tipc: Disabling bearer [ 110.930306][ T7506] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 110.950349][ T7506] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 111.147852][ T7514] __nla_validate_parse: 4 callbacks suppressed [ 111.147868][ T7514] netlink: 260 bytes leftover after parsing attributes in process `syz.0.655'. [ 216.385564][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 216.392567][ C0] rcu: 1-...!: (1 GPs behind) idle=4e94/1/0x4000000000000000 softirq=25805/25806 fqs=1 [ 216.402774][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7478/1:b..l [ 216.410675][ C0] rcu: (detected by 0, t=10502 jiffies, g=15185, q=1856 ncpus=2) [ 216.418464][ C0] Sending NMI from CPU 0 to CPUs 1: [ 216.418489][ C1] NMI backtrace for cpu 1 [ 216.418500][ C1] CPU: 1 UID: 0 PID: 7518 Comm: syz.4.657 Not tainted syzkaller #0 PREEMPT(full) [ 216.418514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.418521][ C1] RIP: 0010:do_raw_spin_lock+0x2a/0x2b0 [ 216.418543][ C1] Code: f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 56 41 55 41 54 55 53 48 89 fb 48 83 c7 04 48 83 ec 68 48 c7 44 24 08 b3 8a b5 41 <48> 8d 6c 24 08 48 c7 44 24 10 13 1b aa 8d 48 c1 ed 03 48 c7 44 24 [ 216.418554][ C1] RSP: 0018:ffffc90000a08cf8 EFLAGS: 00000092 [ 216.418564][ C1] RAX: dffffc0000000000 RBX: ffff8880202f32a8 RCX: 1d89dd3d985ee89f [ 216.418572][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7b4b RDI: ffff8880202f32ac [ 216.418580][ C1] RBP: ffff888028720000 R08: 00000000ffffffff R09: 00000000ffffffff [ 216.418588][ C1] R10: 0000000000000000 R11: ffff8880274f54b0 R12: ffff8880b8528440 [ 216.418596][ C1] R13: 0000000000000000 R14: ffff8880202f3300 R15: ffffffff8980aae0 [ 216.418604][ C1] FS: 00007f4e51d6c6c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 216.418617][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.418625][ C1] CR2: 00007f4e51d6bf98 CR3: 0000000033357000 CR4: 00000000003526f0 [ 216.418633][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.418640][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 216.418648][ C1] Call Trace: [ 216.418653][ C1] [ 216.418659][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 216.418676][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.418693][ C1] advance_sched+0xd9/0xc80 [ 216.418711][ C1] ? find_held_lock+0x2b/0x80 [ 216.418730][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 216.418747][ C1] ? __pfx_advance_sched+0x10/0x10 [ 216.418762][ C1] __hrtimer_run_queues+0x202/0xc40 [ 216.418783][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 216.418800][ C1] ? read_tsc+0x9/0x20 [ 216.418820][ C1] hrtimer_interrupt+0x397/0x8e0 [ 216.418836][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 216.418852][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 216.418867][ C1] [ 216.418871][ C1] [ 216.418875][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.418889][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 216.418903][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 1d 1f f6 48 89 df e8 7e 70 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 73 0f f6 65 8b 05 2e c9 37 08 85 c0 74 16 5b [ 216.418914][ C1] RSP: 0018:ffffc9000f9c7c98 EFLAGS: 00000246 [ 216.418923][ C1] RAX: 0000000000000002 RBX: ffff8880b8428440 RCX: 0000000000000007 [ 216.418931][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: ffffffff8bf2b380 [ 216.418939][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 216.418946][ C1] R10: ffffffff9088afd7 R11: ffff8880274f54b0 R12: 0000000000000000 [ 216.418954][ C1] R13: 1bc16d4d66998c0d R14: dffffc0000000000 R15: ffff8880b8428440 [ 216.418969][ C1] clock_was_set+0x599/0x870 [ 216.418983][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 216.418994][ C1] ? rcu_is_watching+0x12/0xc0 [ 216.419006][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 216.419020][ C1] do_settimeofday64+0x364/0x550 [ 216.419035][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 216.419048][ C1] ? bpf_lsm_capable+0x9/0x10 [ 216.419061][ C1] ? of_get_cpu_hwid+0x1af/0x1d0 [ 216.419077][ C1] ? capable+0xd4/0x110 [ 216.419098][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 216.419115][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 216.419128][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 216.419140][ C1] ? __secure_computing+0x28e/0x3b0 [ 216.419159][ C1] do_syscall_64+0xcd/0xf80 [ 216.419174][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.419187][ C1] RIP: 0033:0x7f4e50f8f749 [ 216.419198][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.419208][ C1] RSP: 002b:00007f4e51d6c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 216.419219][ C1] RAX: ffffffffffffffda RBX: 00007f4e511e5fa0 RCX: 00007f4e50f8f749 [ 216.419227][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 216.419235][ C1] RBP: 00007f4e51013f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.419242][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.419250][ C1] R13: 00007f4e511e6038 R14: 00007f4e511e5fa0 R15: 00007ffe48d2ef78 [ 216.419264][ C1] [ 216.419483][ C0] task:syz.3.640 state:R running task stack:26504 pid:7478 tgid:7476 ppid:5812 task_flags:0x400140 flags:0x00080006 [ 216.874674][ C0] Call Trace: [ 216.877941][ C0] [ 216.880863][ C0] ? __schedule+0x10b9/0x6150 [ 216.885532][ C0] __schedule+0x1139/0x6150 [ 216.890034][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 216.896014][ C0] ? __pfx___schedule+0x10/0x10 [ 216.900853][ C0] ? mark_held_locks+0x49/0x80 [ 216.905609][ C0] preempt_schedule_irq+0x51/0x90 [ 216.910623][ C0] irqentry_exit+0x1d8/0x8c0 [ 216.915206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.921174][ C0] RIP: 0010:stack_access_ok+0x30/0x200 [ 216.926628][ C0] Code: 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 <0f> 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc [ 216.946220][ C0] RSP: 0018:ffffc9000e5a72c8 EFLAGS: 00000246 [ 216.952273][ C0] RAX: dffffc0000000000 RBX: ffffc9000e5a7378 RCX: ffffffff915b7706 [ 216.960231][ C0] RDX: 1ffff92001cb4e70 RSI: ffffc9000e5a7b60 RDI: ffffc9000e5a7378 [ 216.968191][ C0] RBP: ffffc9000e5a7b60 R08: ffffffff915b770a R09: 000000005635be4b [ 216.976147][ C0] R10: 0000000000000002 R11: 000000000003a0e0 R12: 0000000000000008 [ 216.984104][ C0] R13: ffffc9000e5a7378 R14: ffffc9000e5a7380 R15: ffffc9000e5a73ac [ 216.992085][ C0] unwind_next_frame+0xb7d/0x20b0 [ 216.997118][ C0] ? io_handle_tw_list+0x4e7/0x580 [ 217.002228][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 217.008372][ C0] arch_stack_walk+0x94/0x100 [ 217.013044][ C0] ? io_handle_tw_list+0x4e7/0x580 [ 217.018162][ C0] stack_trace_save+0x8e/0xc0 [ 217.022832][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 217.028190][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 217.033648][ C0] ? ip_recv_error+0x964/0xda0 [ 217.038405][ C0] kasan_save_stack+0x33/0x60 [ 217.043076][ C0] ? kasan_save_stack+0x33/0x60 [ 217.047914][ C0] ? kasan_save_track+0x14/0x30 [ 217.052749][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 217.057497][ C0] ? __kmalloc_noprof+0x33d/0x910 [ 217.062515][ C0] ? io_ring_buffers_peek+0x818/0xb00 [ 217.067874][ C0] ? io_buffers_peek+0x31d/0x430 [ 217.072798][ C0] ? io_recv+0x8ff/0x12e0 [ 217.077113][ C0] ? __io_issue_sqe+0xe8/0x7c0 [ 217.081866][ C0] ? io_issue_sqe+0x85/0x1410 [ 217.086528][ C0] ? io_req_task_submit+0x184/0x2a0 [ 217.091710][ C0] ? io_handle_tw_list+0x4e7/0x580 [ 217.096846][ C0] kasan_save_track+0x14/0x30 [ 217.101515][ C0] __kasan_kmalloc+0xaa/0xb0 [ 217.106098][ C0] __kmalloc_noprof+0x33d/0x910 [ 217.110946][ C0] ? io_ring_buffers_peek+0x818/0xb00 [ 217.116310][ C0] ? io_ring_buffers_peek+0x818/0xb00 [ 217.121667][ C0] io_ring_buffers_peek+0x818/0xb00 [ 217.126868][ C0] io_buffers_peek+0x31d/0x430 [ 217.131623][ C0] io_recv+0x8ff/0x12e0 [ 217.135777][ C0] ? __pfx_io_recv+0x10/0x10 [ 217.140365][ C0] ? __io_req_task_work_add+0x395/0x990 [ 217.145906][ C0] __io_issue_sqe+0xe8/0x7c0 [ 217.150490][ C0] io_issue_sqe+0x85/0x1410 [ 217.154989][ C0] io_req_task_submit+0x184/0x2a0 [ 217.160018][ C0] ? __pfx_io_req_task_submit+0x10/0x10 [ 217.165550][ C0] ? find_held_lock+0x2b/0x80 [ 217.170223][ C0] ? io_handle_tw_list+0xcd/0x580 [ 217.175245][ C0] ? __pfx_io_req_task_submit+0x10/0x10 [ 217.180779][ C0] io_handle_tw_list+0x4e7/0x580 [ 217.185718][ C0] tctx_task_work_run+0x55/0x2d0 [ 217.190641][ C0] tctx_task_work+0x7a/0xd0 [ 217.195130][ C0] ? __pfx_tctx_task_work+0x10/0x10 [ 217.200313][ C0] ? rcu_is_watching+0x12/0xc0 [ 217.205067][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.210254][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.215446][ C0] task_work_run+0x150/0x240 [ 217.220027][ C0] ? __pfx_task_work_run+0x10/0x10 [ 217.225127][ C0] ? find_held_lock+0x2b/0x80 [ 217.229801][ C0] ? __do_sys_io_uring_enter+0x60f/0x1630 [ 217.235510][ C0] get_signal+0x1d0/0x26d0 [ 217.239922][ C0] ? io_submit_sqes+0xca3/0x28e0 [ 217.244847][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.250821][ C0] ? __pfx_get_signal+0x10/0x10 [ 217.255673][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 217.261213][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 217.267364][ C0] ? __sys_socket+0xac/0x260 [ 217.271950][ C0] ? fput+0x70/0xf0 [ 217.275746][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 217.281029][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 217.286314][ C0] do_syscall_64+0x4ee/0xf80 [ 217.290896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.296776][ C0] RIP: 0033:0x7f36d4b8f749 [ 217.301176][ C0] RSP: 002b:00007f36d5a11038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 217.309573][ C0] RAX: 0000000000000800 RBX: 00007f36d4de5fa0 RCX: 00007f36d4b8f749 [ 217.317531][ C0] RDX: 000000000000f4f5 RSI: 0000000000003516 RDI: 0000000000000005 [ 217.325490][ C0] RBP: 00007f36d4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.333446][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.341402][ C0] R13: 00007f36d4de6038 R14: 00007f36d4de5fa0 R15: 00007ffc5dc87988 [ 217.349371][ C0] [ 217.352378][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g15185 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 217.363554][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 217.373510][ C0] rcu: RCU grace-period kthread stack dump: [ 217.379379][ C0] task:rcu_preempt state:R running task stack:27768 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 217.392850][ C0] Call Trace: [ 217.396114][ C0] [ 217.399036][ C0] ? __schedule+0x10b9/0x6150 [ 217.403705][ C0] __schedule+0x1139/0x6150 [ 217.408195][ C0] ? __lock_acquire+0x436/0x2890 [ 217.413124][ C0] ? __mod_timer+0x8f2/0xd30 [ 217.417719][ C0] ? __pfx___schedule+0x10/0x10 [ 217.422555][ C0] ? find_held_lock+0x2b/0x80 [ 217.427225][ C0] ? schedule+0x2d7/0x3a0 [ 217.431555][ C0] schedule+0xe7/0x3a0 [ 217.435611][ C0] schedule_timeout+0x123/0x290 [ 217.440458][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 217.445822][ C0] ? __pfx_process_timeout+0x10/0x10 [ 217.451103][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 217.456895][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 217.462348][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 217.467104][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 217.472382][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.477572][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 217.482496][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 217.487340][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 217.493140][ C0] rcu_gp_kthread+0x26d/0x380 [ 217.497810][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 217.502996][ C0] ? rcu_is_watching+0x12/0xc0 [ 217.507746][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.512943][ C0] ? __kthread_parkme+0x19e/0x250 [ 217.517984][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 217.523175][ C0] kthread+0x3c5/0x780 [ 217.527234][ C0] ? __pfx_kthread+0x10/0x10 [ 217.531817][ C0] ? rcu_is_watching+0x12/0xc0 [ 217.536576][ C0] ? __pfx_kthread+0x10/0x10 [ 217.541181][ C0] ret_from_fork+0x983/0xb10 [ 217.545784][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 217.550897][ C0] ? __switch_to+0x7af/0x10d0 [ 217.555567][ C0] ? __pfx_kthread+0x10/0x10 [ 217.560151][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.564938][ C0] [ 217.567946][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 217.574253][ C0] CPU: 0 UID: 0 PID: 1138 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 217.583694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.593733][ C0] Workqueue: events_unbound toggle_allocation_gate [ 217.600229][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0 [ 217.606892][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 35 5b 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 217.626491][ C0] RSP: 0018:ffffc900042c7808 EFLAGS: 00000293 [ 217.632552][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b28b81 [ 217.640509][ C0] RDX: ffff888027af8000 RSI: ffffffff81b28b5b RDI: 0000000000000005 [ 217.648466][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 217.656421][ C0] R10: 0000000000000001 R11: ffff888027af8b30 R12: dffffc0000000000 [ 217.664376][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 217.672337][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 217.681256][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.687828][ C0] CR2: 000000110c3e2cd4 CR3: 000000000e184000 CR4: 00000000003526f0 [ 217.695788][ C0] Call Trace: [ 217.699055][ C0] [ 217.701983][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 217.707005][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 217.713499][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 217.719812][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 217.725178][ C0] ? __pfx___text_poke+0x10/0x10 [ 217.730116][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 217.735144][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 217.740253][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3e/0x1b0 [ 217.746753][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 217.752479][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 217.758720][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 217.764956][ C0] ? find_held_lock+0x2b/0x80 [ 217.769635][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 217.775606][ C0] jump_label_update+0x376/0x550 [ 217.780534][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 217.786417][ C0] static_key_enable+0x1a/0x20 [ 217.791171][ C0] toggle_allocation_gate+0xfa/0x280 [ 217.796449][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 217.802332][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 217.807698][ C0] process_one_work+0x9ba/0x1b20 [ 217.812636][ C0] ? __pfx_process_one_work+0x10/0x10 [ 217.818008][ C0] ? assign_work+0x1a0/0x250 [ 217.822588][ C0] worker_thread+0x6c8/0xf10 [ 217.827179][ C0] ? __pfx_worker_thread+0x10/0x10 [ 217.832281][ C0] kthread+0x3c5/0x780 [ 217.836346][ C0] ? __pfx_kthread+0x10/0x10 [ 217.840930][ C0] ? rcu_is_watching+0x12/0xc0 [ 217.845678][ C0] ? __pfx_kthread+0x10/0x10 [ 217.850262][ C0] ret_from_fork+0x983/0xb10 [ 217.854850][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 217.859960][ C0] ? __switch_to+0x7af/0x10d0 [ 217.864633][ C0] ? __pfx_kthread+0x10/0x10 [ 217.869222][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.874003][ C0]