last executing test programs: 8.094515515s ago: executing program 2 (id=66): syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="a7", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_clone3(&(0x7f00000003c0)={0x100040000, &(0x7f0000000100), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x39}, &(0x7f0000001280)=""/4096, 0x1000, &(0x7f00000002c0)=""/76, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ptrace$cont(0x1f, r4, 0xea7a, 0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.73776735s ago: executing program 1 (id=71): syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="a7", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ptrace$cont(0x1f, 0x0, 0xea7a, 0x9) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.534851509s ago: executing program 4 (id=72): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.41686734s ago: executing program 4 (id=73): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1a9041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbe32501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c, r3}, 0x95) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.281849045s ago: executing program 4 (id=75): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c0001800600060006060000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x7, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x10fb, 0x80, 0x2000000, 0x803a6, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.507460755s ago: executing program 2 (id=77): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x12}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x32, &(0x7f0000000740)=""/50, 0x1f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x85}, 0x8, 0x10, 0x0, 0x0, 0x10dfb, r0, 0x3, 0x0, &(0x7f0000000940)=[{0x0, 0x1, 0xc, 0x8}, {0x2, 0x4, 0x9, 0x6}, {0x1, 0x5, 0x4}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x39) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="4f381e3650eb839c50ea44c9b1dc3ae1622be7a792d70d9eb076a7ab33e0d8d77e5240e2a2e4b399b956bac7a6b0bf419b6c7e8cd0976bbccf9eece99fa33f47991013995cb39b17c95f7cdbf8fd9ef63b054357930c5d7dc2518af514682c80455431c5b341f021cf24d48a942983b9963b79acbf618fed554c66f696ed145801a7e3e651ab3c86db7186c1afdeda8ae48e8a0576bab986006531b12c7b7e7ede2deedfa72d19ed7ebc7f8a5cc59be2e397c37df51414d74998c77562ba70de00524b9b8cfb64c1", 0xc8}, {&(0x7f0000000080)=';/', 0x2}, {&(0x7f0000000240)="173d53b05fd175b771c4f3c0f15ba758cbf8c791a475e81dcc71623c0349aa7db8802ae93ead2413f61393d1327b125b76b4a938e502ac0e2a60f5c099ec0ceadd1f3469d836c382788ae9a6637be7b71476e0d267c51057f5ae1df57578a5f5da43dddf5db4803e9011aee33c1edc57de7de35930034673372891a5395fb09ee9818d561613d408bf435a3ffd1c4a4dd4fd006406b4d9590e42c97f3c5dc91090d36c656fd6dcea301ffd21d8e07add2005878c6a7d3d7460e4c1f6cabc1ab9f71ea644a10a5ff21a98b430ae621b63fa76059b9d3373b366883d400c464e37a8898ecc5b2eb9", 0xe7}, {&(0x7f0000000340)="c627241e3dbc486c24de97765c08966392b9c77edf0af159a139b46b92fb1c7394cc0c304fe5e89013126f939bd3993836b42c512f229f23c25474a0f050e80e804706f876c1eea4aed031ed8b04a4cd724354e00ddc3b825bffa6ec3fbd29bdae4c4bb7de3d96fb6f8dbf518dfc180bae6674fedeceedc7bfed0af6aaec986dbf8a3599d81ca84437b1985c35d9d560325b49b0860d3e21b54781c0404d6ddb7ba123f727ffd708b7dd4299b024f3030c0b1c37feac78bba4933c135289d0b5eefd5f15354763d0b60f4923709541ebe7a4d1982116499f9258", 0xda}, {&(0x7f00000000c0)="0d124dce61990904b3c90ab702f73d2229529773ad2e4c5857683dce98a8fab13504f07d51a839c7948bda4f410d4b5089390a655a51a7d8d3f8", 0x3a}], 0x5}}], 0x1, 0x48001) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="93200000002000001c0012800bc03c2c84084c7a82a38335d6b3fc0b00010067656e65766500000c00028008000b4000000007"], 0x3c}}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x1}}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r7, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) 3.291602372s ago: executing program 3 (id=78): syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="a7", 0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_clone3(&(0x7f00000003c0)={0x100040000, &(0x7f0000000100), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x39}, &(0x7f0000001280)=""/4096, 0x1000, &(0x7f00000002c0)=""/76, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ptrace$cont(0x1f, r4, 0xea7a, 0x9) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r7 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x178}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.978791745s ago: executing program 4 (id=79): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(0x0, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) 2.784036646s ago: executing program 1 (id=80): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x237, &(0x7f0000000140)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r6, 0x1, 0x0, &(0x7f0000000380), &(0x7f0000000700)={0x0, 0x3938700}, 0x0) 2.239385372s ago: executing program 2 (id=81): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x3f8}, {&(0x7f0000001140)="3a0f", 0x2}], 0x2}, 0x2000c080) 1.904904598s ago: executing program 2 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x47) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x44000, 0x0) move_mount(r1, &(0x7f0000000300)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x100) 1.640064939s ago: executing program 2 (id=84): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a02369101020301090224000100", @ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 1.352611467s ago: executing program 0 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) 1.274705607s ago: executing program 0 (id=86): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) mmap(&(0x7f0000479000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) 1.114477892s ago: executing program 2 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 892.772128ms ago: executing program 32 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 886.469361ms ago: executing program 0 (id=89): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0x492f, 0x7f, 0x1, 0x1}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x22, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 884.406261ms ago: executing program 3 (id=90): syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 883.438813ms ago: executing program 4 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x808, 0x0) 728.291355ms ago: executing program 1 (id=92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 724.611387ms ago: executing program 3 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 598.151231ms ago: executing program 4 (id=94): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 520.775099ms ago: executing program 1 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x4) userfaultfd(0x80001) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0xffe0}}}, 0x24}}, 0x0) 511.811539ms ago: executing program 0 (id=96): syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @multicast2}}}}}}, 0x0) 406.988149ms ago: executing program 0 (id=97): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) open(&(0x7f0000000300)='.\x00', 0x0, 0x122) pipe2$9p(&(0x7f0000000240), 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 284.931156ms ago: executing program 3 (id=98): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r0, r1, 0x0) 186.726144ms ago: executing program 0 (id=99): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x23d, @tick=0x7, 0x0, {0x2, 0x4}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) tkill(r0, 0x7) 183.524749ms ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x70bd26, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 136.75613ms ago: executing program 3 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r0, 0x1, 0xc, 0x0, 0x0) 62.262598ms ago: executing program 3 (id=102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x11}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 0s ago: executing program 1 (id=103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000020c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2502"], 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x4000040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 64.776293][ T30] audit: type=1400 audit(1760718605.791:62): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.799773][ T30] audit: type=1400 audit(1760718605.811:63): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.802293][ T5795] cgroup: Unknown subsys name 'net' [ 64.828864][ T30] audit: type=1400 audit(1760718605.841:64): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.987704][ T5795] cgroup: Unknown subsys name 'cpuset' [ 64.995516][ T5795] cgroup: Unknown subsys name 'rlimit' [ 65.180947][ T30] audit: type=1400 audit(1760718606.191:65): avc: denied { setattr } for pid=5795 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.213870][ T30] audit: type=1400 audit(1760718606.191:66): avc: denied { create } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.247714][ T30] audit: type=1400 audit(1760718606.191:67): avc: denied { write } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.268617][ T30] audit: type=1400 audit(1760718606.191:68): avc: denied { read } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.269256][ T5797] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.297620][ T30] audit: type=1400 audit(1760718606.191:69): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.322636][ T30] audit: type=1400 audit(1760718606.191:70): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.346771][ T30] audit: type=1400 audit(1760718606.251:71): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.296208][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.123331][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 70.123350][ T30] audit: type=1400 audit(1760718611.131:78): avc: denied { create } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.205637][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.210369][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.214049][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.224431][ T30] audit: type=1400 audit(1760718611.161:79): avc: denied { read write } for pid=5808 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.228843][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.250743][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.260012][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.267238][ T30] audit: type=1400 audit(1760718611.161:80): avc: denied { open } for pid=5808 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.302343][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.304621][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.311713][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.324783][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.359526][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.368834][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.375893][ T30] audit: type=1400 audit(1760718611.181:81): avc: denied { ioctl } for pid=5808 comm="syz-executor" path="socket:[4700]" dev="sockfs" ino=4700 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.375944][ T30] audit: type=1400 audit(1760718611.351:82): avc: denied { read } for pid=5809 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.375980][ T30] audit: type=1400 audit(1760718611.351:83): avc: denied { open } for pid=5809 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.376018][ T30] audit: type=1400 audit(1760718611.351:84): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.391578][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.464745][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.482847][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.490710][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.493252][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.505044][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.506466][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.519875][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.520370][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.536340][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.545088][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.565859][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.592302][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.757335][ T30] audit: type=1400 audit(1760718611.771:85): avc: denied { module_request } for pid=5809 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.820380][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 70.877921][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 70.941577][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.949184][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.957166][ T5809] bridge_slave_0: entered allmulticast mode [ 70.963934][ T5809] bridge_slave_0: entered promiscuous mode [ 70.978662][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.985822][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.992896][ T5809] bridge_slave_1: entered allmulticast mode [ 70.999730][ T5809] bridge_slave_1: entered promiscuous mode [ 71.048571][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.055076][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.078170][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.101160][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.159047][ T5809] team0: Port device team_slave_0 added [ 71.187503][ T5809] team0: Port device team_slave_1 added [ 71.193369][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.201237][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.208432][ T5808] bridge_slave_0: entered allmulticast mode [ 71.215499][ T5808] bridge_slave_0: entered promiscuous mode [ 71.241491][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 71.259875][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.267119][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.274313][ T5808] bridge_slave_1: entered allmulticast mode [ 71.281220][ T5808] bridge_slave_1: entered promiscuous mode [ 71.305449][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.312407][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.338307][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.383376][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.390486][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.416766][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.461752][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.519812][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.537931][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 71.587062][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.594178][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.601464][ T5817] bridge_slave_0: entered allmulticast mode [ 71.608210][ T5817] bridge_slave_0: entered promiscuous mode [ 71.619226][ T5809] hsr_slave_0: entered promiscuous mode [ 71.625355][ T5809] hsr_slave_1: entered promiscuous mode [ 71.632780][ T5808] team0: Port device team_slave_0 added [ 71.646655][ T5808] team0: Port device team_slave_1 added [ 71.652769][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 71.666594][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.673730][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.681165][ T5817] bridge_slave_1: entered allmulticast mode [ 71.687988][ T5817] bridge_slave_1: entered promiscuous mode [ 71.781638][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.799430][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.806464][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.832941][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.853520][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.866799][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.873779][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.899816][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.969844][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.977060][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.984277][ T5822] bridge_slave_0: entered allmulticast mode [ 71.991480][ T5822] bridge_slave_0: entered promiscuous mode [ 72.010355][ T5817] team0: Port device team_slave_0 added [ 72.018361][ T5817] team0: Port device team_slave_1 added [ 72.024837][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.031893][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.039225][ T5822] bridge_slave_1: entered allmulticast mode [ 72.046178][ T5822] bridge_slave_1: entered promiscuous mode [ 72.052487][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.059810][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.067758][ T5819] bridge_slave_0: entered allmulticast mode [ 72.074525][ T5819] bridge_slave_0: entered promiscuous mode [ 72.106990][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.114086][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.121415][ T5819] bridge_slave_1: entered allmulticast mode [ 72.128188][ T5819] bridge_slave_1: entered promiscuous mode [ 72.182901][ T5808] hsr_slave_0: entered promiscuous mode [ 72.189177][ T5808] hsr_slave_1: entered promiscuous mode [ 72.195572][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 72.201353][ T5808] Cannot create hsr debugfs directory [ 72.207388][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.215040][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.241710][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.255519][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.262473][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.288360][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.301621][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.313181][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.346287][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.357224][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.405260][ T5810] Bluetooth: hci0: command tx timeout [ 72.405258][ T5815] Bluetooth: hci1: command tx timeout [ 72.434901][ T5819] team0: Port device team_slave_0 added [ 72.441903][ T5822] team0: Port device team_slave_0 added [ 72.472995][ T5819] team0: Port device team_slave_1 added [ 72.489517][ T5822] team0: Port device team_slave_1 added [ 72.498733][ T5817] hsr_slave_0: entered promiscuous mode [ 72.505313][ T5817] hsr_slave_1: entered promiscuous mode [ 72.511170][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 72.517381][ T5817] Cannot create hsr debugfs directory [ 72.564510][ T5810] Bluetooth: hci2: command tx timeout [ 72.567041][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.577147][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.603398][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.615500][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.622443][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.648549][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.659355][ T5810] Bluetooth: hci4: command tx timeout [ 72.659448][ T5815] Bluetooth: hci3: command tx timeout [ 72.671482][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.678626][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.704647][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.738728][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.745750][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.771664][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.861901][ T5819] hsr_slave_0: entered promiscuous mode [ 72.868299][ T5819] hsr_slave_1: entered promiscuous mode [ 72.874293][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 72.880082][ T5819] Cannot create hsr debugfs directory [ 72.932270][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.970854][ T5822] hsr_slave_0: entered promiscuous mode [ 72.977192][ T5822] hsr_slave_1: entered promiscuous mode [ 72.983216][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 72.989051][ T5822] Cannot create hsr debugfs directory [ 72.998397][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.007995][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.040822][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.159718][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.172314][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.183172][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.193192][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.308848][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.318124][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.341328][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.351393][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.410360][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.426633][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.444214][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.477921][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.513570][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.523513][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.539025][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.548418][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.566696][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.578415][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.597015][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.643439][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.650691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.665836][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.678226][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.685415][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.736273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.743347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.769776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.776905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.824614][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.839515][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.850941][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.907499][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.917345][ T30] audit: type=1400 audit(1760718614.931:86): avc: denied { sys_module } for pid=5809 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.942440][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.957722][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.019895][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.027139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.043994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.051193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.062134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.069323][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.083529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.090745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.103973][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.140405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.147595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.167446][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.174595][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.277522][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.300212][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.345147][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.447752][ T5808] veth0_vlan: entered promiscuous mode [ 74.482768][ T5808] veth1_vlan: entered promiscuous mode [ 74.488630][ T5815] Bluetooth: hci0: command tx timeout [ 74.497338][ T5815] Bluetooth: hci1: command tx timeout [ 74.589831][ T5808] veth0_macvtap: entered promiscuous mode [ 74.623322][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.641824][ T5808] veth1_macvtap: entered promiscuous mode [ 74.647758][ T5815] Bluetooth: hci2: command tx timeout [ 74.693615][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.726040][ T5815] Bluetooth: hci3: command tx timeout [ 74.727001][ T5810] Bluetooth: hci4: command tx timeout [ 74.762651][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.781880][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.801751][ T5822] veth0_vlan: entered promiscuous mode [ 74.814118][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.828810][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.840601][ T5822] veth1_vlan: entered promiscuous mode [ 74.847142][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.856741][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.866692][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.902619][ T5817] veth0_vlan: entered promiscuous mode [ 74.917506][ T5809] veth0_vlan: entered promiscuous mode [ 74.939519][ T5809] veth1_vlan: entered promiscuous mode [ 74.947341][ T5817] veth1_vlan: entered promiscuous mode [ 75.003090][ T5819] veth0_vlan: entered promiscuous mode [ 75.011403][ T5822] veth0_macvtap: entered promiscuous mode [ 75.046882][ T5822] veth1_macvtap: entered promiscuous mode [ 75.068937][ T5817] veth0_macvtap: entered promiscuous mode [ 75.081427][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.087395][ T5819] veth1_vlan: entered promiscuous mode [ 75.096274][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.120808][ T5809] veth0_macvtap: entered promiscuous mode [ 75.130081][ T5817] veth1_macvtap: entered promiscuous mode [ 75.150153][ T5809] veth1_macvtap: entered promiscuous mode [ 75.160339][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.183368][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.195990][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.206784][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.208286][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.218199][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.227165][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.243354][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.255457][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.265262][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.288033][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.297074][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309192][ T30] audit: type=1400 audit(1760718616.321:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.5oULX0/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.342600][ T30] audit: type=1400 audit(1760718616.321:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.366261][ T30] audit: type=1400 audit(1760718616.321:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.5oULX0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.392726][ T30] audit: type=1400 audit(1760718616.321:90): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.398966][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.423552][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.434838][ T30] audit: type=1400 audit(1760718616.321:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.5oULX0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.436034][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.465643][ T30] audit: type=1400 audit(1760718616.321:92): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.5oULX0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.496457][ T30] audit: type=1400 audit(1760718616.321:93): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.498307][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.530624][ T30] audit: type=1400 audit(1760718616.351:94): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.530665][ T30] audit: type=1400 audit(1760718616.351:95): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=8307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.530704][ T30] audit: type=1400 audit(1760718616.351:96): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.616581][ T5819] veth0_macvtap: entered promiscuous mode [ 75.633535][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.654979][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.664321][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.703239][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.719899][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.733476][ T5819] veth1_macvtap: entered promiscuous mode [ 75.817533][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.826234][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.866447][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.898228][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.900209][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.913512][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.932169][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.946791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.010935][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.020386][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.036807][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.041941][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.044681][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.044696][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.072287][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.088188][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.097097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.236607][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.286680][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.618404][ T5810] Bluetooth: hci1: command tx timeout [ 76.623834][ T5810] Bluetooth: hci0: command tx timeout [ 76.679937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.735206][ T5815] Bluetooth: hci2: command tx timeout [ 76.807767][ T5815] Bluetooth: hci3: command tx timeout [ 76.813875][ T5810] Bluetooth: hci4: command tx timeout [ 76.924809][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.932653][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.986922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.044968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.089447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.396649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.554201][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.562811][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.902402][ T5943] netlink: 'syz.4.5': attribute type 20 has an invalid length. [ 77.911366][ T5943] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.925119][ T5943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.932459][ T5943] IPv6: NLM_F_CREATE should be set when creating new route [ 78.093367][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 78.318711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.535766][ T5952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.660479][ T5815] Bluetooth: hci0: command tx timeout [ 78.665987][ T5815] Bluetooth: hci1: command tx timeout [ 78.733484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.743592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.763818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.805355][ T5810] Bluetooth: hci2: command tx timeout [ 78.868671][ T5946] ref_ctr increment failed for inode: 0x17 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88806197cb40 [ 78.886023][ T5810] Bluetooth: hci3: command tx timeout [ 78.892208][ T5815] Bluetooth: hci4: command tx timeout [ 78.904678][ T5951] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 78.918951][ T5954] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7'. [ 78.937919][ T5951] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.204646][ T5946] uprobe: syz.0.6:5946 failed to unregister, leaking uprobe [ 79.288088][ T5963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.597043][ T5966] netlink: 'syz.3.9': attribute type 20 has an invalid length. [ 79.605312][ T5966] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.613739][ T5966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.621015][ T5966] IPv6: NLM_F_CREATE should be set when creating new route [ 81.044953][ T5983] netlink: 'syz.2.12': attribute type 20 has an invalid length. [ 81.052631][ T5983] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.210726][ T5983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.218005][ T5983] IPv6: NLM_F_CREATE should be set when creating new route [ 81.344298][ T1206] cfg80211: failed to load regulatory.db [ 81.351012][ T5979] netlink: 'syz.0.11': attribute type 20 has an invalid length. [ 81.393777][ T5979] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.402284][ T5979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.409534][ T5979] IPv6: NLM_F_CREATE should be set when creating new route [ 81.792565][ T5986] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14'. [ 81.818948][ T5979] netlink: 'syz.0.11': attribute type 39 has an invalid length. [ 82.206267][ T5992] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15'. [ 82.406849][ T5999] comedi: No check for data length of config insn id 3 is implemented [ 82.415660][ T5999] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 82.425474][ T5999] comedi: Assuming n=15 is correct [ 82.944568][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 82.944588][ T30] audit: type=1400 audit(1760718623.531:141): avc: denied { create } for pid=5996 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.355113][ T30] audit: type=1400 audit(1760718623.531:142): avc: denied { setopt } for pid=5996 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.193407][ T6009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.194456][ T30] audit: type=1400 audit(1760718624.801:143): avc: denied { create } for pid=6003 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.206237][ T6009] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 84.395117][ T30] audit: type=1400 audit(1760718624.801:144): avc: denied { shutdown } for pid=6003 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.404060][ T6009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.553135][ T6016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.739990][ T30] audit: type=1400 audit(1760718624.801:145): avc: denied { getopt } for pid=6003 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.760556][ T30] audit: type=1400 audit(1760718624.801:146): avc: denied { connect } for pid=6003 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.783764][ T30] audit: type=1400 audit(1760718624.801:147): avc: denied { name_connect } for pid=6003 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 84.819975][ T30] audit: type=1400 audit(1760718624.821:148): avc: denied { setopt } for pid=6003 comm="syz.1.18" laddr=::ffff:172.20.20.170 lport=44708 faddr=::ffff:172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.844924][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.024540][ T30] audit: type=1400 audit(1760718625.601:149): avc: denied { create } for pid=6015 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.115986][ T6024] comedi: No check for data length of config insn id 3 is implemented [ 85.124217][ T6024] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 85.134111][ T6024] comedi: Assuming n=15 is correct [ 85.643792][ T30] audit: type=1400 audit(1760718625.611:150): avc: denied { setopt } for pid=6004 comm="syz.4.19" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.785003][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.841041][ T6040] ref_ctr increment failed for inode: 0x2d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807a2760c0 [ 87.948136][ T6051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.209349][ T6059] comedi: No check for data length of config insn id 3 is implemented [ 88.217610][ T6059] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 88.226909][ T6059] comedi: Assuming n=15 is correct [ 89.627564][ T6050] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 89.643746][ T6050] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.669871][ T6058] netlink: 148 bytes leftover after parsing attributes in process `syz.3.29'. [ 90.036220][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.045475][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 90.045490][ T30] audit: type=1400 audit(1760718631.061:157): avc: denied { read write } for pid=6066 comm="syz.0.34" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.074550][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.184892][ T30] audit: type=1400 audit(1760718631.061:158): avc: denied { open } for pid=6066 comm="syz.0.34" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.115639][ T6088] comedi: No check for data length of config insn id 3 is implemented [ 91.124475][ T6088] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 91.134159][ T6088] comedi: Assuming n=15 is correct [ 92.026687][ T6095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.080846][ T6095] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 92.091727][ T6095] overlayfs: overlapping lowerdir path [ 92.241400][ T6096] overlayfs: overlapping lowerdir path [ 92.365582][ T6080] netlink: 'syz.1.33': attribute type 20 has an invalid length. [ 92.408342][ T6080] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.429594][ T6080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.436854][ T6080] IPv6: NLM_F_CREATE should be set when creating new route [ 92.656069][ T6090] netlink: 'syz.4.36': attribute type 20 has an invalid length. [ 92.663943][ T6090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.771837][ T6102] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40'. [ 93.074407][ T6107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.224456][ T6105] overlayfs: overlapping lowerdir path [ 93.234525][ T30] audit: type=1400 audit(1760718633.781:159): avc: denied { write } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.279257][ T30] audit: type=1400 audit(1760718633.781:160): avc: denied { create } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.308162][ T6100] netlink: 'syz.4.36': attribute type 39 has an invalid length. [ 93.395820][ T30] audit: type=1400 audit(1760718633.781:161): avc: denied { create } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.452473][ T30] audit: type=1400 audit(1760718633.781:162): avc: denied { write } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.529424][ T30] audit: type=1400 audit(1760718633.781:163): avc: denied { nlmsg_write } for pid=6101 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.883835][ T6121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.089534][ T6125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.171114][ T6119] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 95.183746][ T6119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.662717][ T6133] netlink: 'syz.1.43': attribute type 20 has an invalid length. [ 95.670605][ T6133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.733651][ T6133] netlink: 'syz.1.43': attribute type 39 has an invalid length. [ 96.461905][ T30] audit: type=1400 audit(1760718637.261:164): avc: denied { create } for pid=6141 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.032028][ T6148] netlink: 92 bytes leftover after parsing attributes in process `syz.0.50'. [ 97.520136][ T6160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.615901][ T6161] overlayfs: overlapping lowerdir path [ 98.506584][ T6170] netlink: 148 bytes leftover after parsing attributes in process `syz.1.54'. [ 98.852100][ T6173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.418222][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.518352][ T6179] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 99.670320][ T6180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.886042][ T6182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.906265][ T6177] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 100.019871][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 100.563304][ T6184] ref_ctr increment failed for inode: 0x50 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888062386b80 [ 102.424728][ T6222] comedi: No check for data length of config insn id 3 is implemented [ 102.432972][ T6222] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 102.442244][ T6222] comedi: Assuming n=15 is correct [ 103.967394][ T6224] netlink: 'syz.0.65': attribute type 20 has an invalid length. [ 104.009557][ T6227] netlink: 'syz.2.66': attribute type 20 has an invalid length. [ 104.017922][ T6227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.100300][ T6230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.109644][ T6230] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 104.126287][ T6224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.428066][ T6228] netlink: 'syz.2.66': attribute type 39 has an invalid length. [ 104.815823][ T6241] netlink: 148 bytes leftover after parsing attributes in process `syz.3.70'. [ 105.567520][ T6254] netlink: 'syz.1.71': attribute type 20 has an invalid length. [ 105.581576][ T6254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.737047][ T6253] netlink: 'syz.1.71': attribute type 39 has an invalid length. [ 106.125667][ T6262] comedi: No check for data length of config insn id 3 is implemented [ 106.133887][ T6262] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 106.143261][ T6262] comedi: Assuming n=15 is correct [ 106.945185][ T6257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.250737][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.77'. [ 107.326557][ T6270] netlink: 92 bytes leftover after parsing attributes in process `syz.0.76'. [ 107.365325][ T6269] ref_ctr increment failed for inode: 0x5b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880617035c0 [ 107.852981][ T6273] netlink: 'syz.3.78': attribute type 20 has an invalid length. [ 107.885390][ T6273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.115195][ T6273] netlink: 'syz.3.78': attribute type 39 has an invalid length. [ 108.425073][ T6294] ======================================================= [ 108.425073][ T6294] WARNING: The mand mount option has been deprecated and [ 108.425073][ T6294] and is ignored by this kernel. Remove the mand [ 108.425073][ T6294] option from the mount to silence this warning. [ 108.425073][ T6294] ======================================================= [ 108.557558][ T30] audit: type=1400 audit(1760718649.571:165): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.654459][ T30] audit: type=1400 audit(1760718649.601:166): avc: denied { bind } for pid=6295 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.720465][ T30] audit: type=1400 audit(1760718649.601:167): avc: denied { name_bind } for pid=6295 comm="syz.0.83" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.767978][ T30] audit: type=1400 audit(1760718649.601:168): avc: denied { node_bind } for pid=6295 comm="syz.0.83" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 108.823058][ T30] audit: type=1400 audit(1760718649.611:169): avc: denied { listen } for pid=6295 comm="syz.0.83" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.847069][ T30] audit: type=1400 audit(1760718649.611:170): avc: denied { write } for pid=6295 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.882935][ T30] audit: type=1400 audit(1760718649.611:171): avc: denied { name_connect } for pid=6295 comm="syz.0.83" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.250568][ T3462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.359156][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'. [ 109.368287][ T6305] netlink: 'syz.0.89': attribute type 7 has an invalid length. [ 109.371386][ T3462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.376557][ T6305] netlink: 'syz.0.89': attribute type 8 has an invalid length. [ 109.396777][ T6307] Bluetooth: MGMT ver 1.23 [ 109.409793][ T30] audit: type=1400 audit(1760718650.411:172): avc: denied { bind } for pid=6306 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.414506][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 109.523218][ T30] audit: type=1400 audit(1760718650.421:173): avc: denied { unlink } for pid=6303 comm="syz.4.91" name="#1" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.574964][ T30] audit: type=1400 audit(1760718650.501:174): avc: denied { read write } for pid=6308 comm="syz.3.93" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.746111][ T3462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.798204][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 109.845280][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.854100][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.861463][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 109.872222][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.892576][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.900953][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.943666][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 109.976641][ T3462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.167226][ T6333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.174596][ T6333] IPv6: NLM_F_CREATE should be set when creating new route [ 110.181851][ T6333] IPv6: NLM_F_CREATE should be set when creating new route [ 110.213892][ T6333] ------------[ cut here ]------------ [ 110.219892][ T6333] WARNING: CPU: 1 PID: 6333 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb9d/0x10d0 [ 110.230513][ T6333] Modules linked in: [ 110.234912][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) [ 110.244465][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.254675][ T6333] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 110.260522][ T6333] Code: 24 20 48 8b 6c 24 38 e8 f1 76 c3 fa e8 ec 76 c3 fa 89 de 44 89 ef e8 62 71 c3 fa 41 39 dd 0f 84 cb fd ff ff e8 d4 76 c3 fa 90 <0f> 0b 90 e9 bd fd ff ff e8 c6 76 c3 fa 48 8d 7d 38 be 01 00 00 00 [ 110.281200][ T6333] RSP: 0018:ffffc9000418f128 EFLAGS: 00010287 [ 110.288204][ T6333] RAX: 000000000000b3de RBX: ffff888056fa782c RCX: ffffc9000cb3a000 [ 110.296230][ T6333] RDX: 0000000000080000 RSI: ffffffff86f9c1dc RDI: ffff888056fa7818 [ 110.304217][ T6333] RBP: ffff8880289ba000 R08: 0000000000000005 R09: 0000000000000000 [ 110.312241][ T6333] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000418f280 [ 110.320275][ T6333] R13: 0000000000000001 R14: ffff88807cfb3300 R15: ffff888056fa7800 [ 110.328499][ T6333] FS: 00007fa2644bb6c0(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 110.337948][ T6333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.344628][ T6333] CR2: 00007f569ab156c0 CR3: 00000000793c4000 CR4: 00000000003526f0 [ 110.352650][ T6333] Call Trace: [ 110.355987][ T6333] [ 110.358934][ T6333] notifier_call_chain+0xbc/0x410 [ 110.363981][ T6333] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 110.364249][ T6339] netlink: 76 bytes leftover after parsing attributes in process `syz.1.103'. [ 110.370243][ T6333] atomic_notifier_call_chain+0x71/0x1c0 [ 110.370282][ T6333] call_fib_notifiers+0x33/0x70 [ 110.390982][ T6333] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 110.397548][ T6333] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 110.404658][ T6333] ? find_held_lock+0x2b/0x80 [ 110.409357][ T6333] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 110.415148][ T6333] ip6_route_multipath_add+0xb4f/0x1bd0 [ 110.420713][ T6333] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 110.426749][ T6333] ? avc_has_perm_noaudit+0x117/0x3b0 [ 110.432147][ T6333] ? avc_has_perm_noaudit+0x149/0x3b0 [ 110.437659][ T6333] ? inet6_rtm_newroute+0xe4/0x1a0 [ 110.442785][ T6333] inet6_rtm_newroute+0xe4/0x1a0 [ 110.447777][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.453349][ T6333] ? __lock_acquire+0x622/0x1c90 [ 110.458361][ T6333] ? find_held_lock+0x2b/0x80 [ 110.463055][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.468723][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.475026][ T6333] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 110.480171][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.486533][ T6333] rtnetlink_rcv_msg+0x95e/0xe90 [ 110.491498][ T6333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.497053][ T6333] ? ref_tracker_free+0x37c/0x830 [ 110.502109][ T6333] netlink_rcv_skb+0x158/0x420 [ 110.506938][ T6333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.512421][ T6333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.517786][ T6333] ? netlink_deliver_tap+0x1ae/0xd30 [ 110.523104][ T6333] netlink_unicast+0x5aa/0x870 [ 110.527937][ T6333] ? __pfx_netlink_unicast+0x10/0x10 [ 110.533254][ T6333] netlink_sendmsg+0x8c8/0xdd0 [ 110.538100][ T6333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.543420][ T6333] ____sys_sendmsg+0xa98/0xc70 [ 110.548248][ T6333] ? copy_msghdr_from_user+0x10a/0x160 [ 110.553730][ T6333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.559111][ T6333] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.564647][ T6333] ___sys_sendmsg+0x134/0x1d0 [ 110.569348][ T6333] ? futex_private_hash_put+0x176/0x300 [ 110.575825][ T6333] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.581048][ T6333] ? __lock_acquire+0x622/0x1c90 [ 110.586703][ T6333] __sys_sendmsg+0x16d/0x220 [ 110.591315][ T6333] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.596493][ T6333] ? __x64_sys_futex+0x1e0/0x4c0 [ 110.601478][ T6333] do_syscall_64+0xcd/0xfa0 [ 110.606041][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.611945][ T6333] RIP: 0033:0x7fa26358efc9 [ 110.616480][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.636146][ T6333] RSP: 002b:00007fa2644bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.644601][ T6333] RAX: ffffffffffffffda RBX: 00007fa2637e5fa0 RCX: 00007fa26358efc9 [ 110.652606][ T6333] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 110.660621][ T6333] RBP: 00007fa263611f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.668623][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.677393][ T6333] R13: 00007fa2637e6038 R14: 00007fa2637e5fa0 R15: 00007ffc01b2ca48 [ 110.686125][ T6333] [ 110.689161][ T6333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.696461][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) [ 110.705669][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.715735][ T6333] Call Trace: [ 110.719016][ T6333] [ 110.721950][ T6333] dump_stack_lvl+0x3d/0x1f0 [ 110.726552][ T6333] vpanic+0x640/0x6f0 [ 110.730537][ T6333] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 110.735736][ T6333] panic+0xca/0xd0 [ 110.739466][ T6333] ? __pfx_panic+0x10/0x10 [ 110.743896][ T6333] check_panic_on_warn+0xab/0xb0 [ 110.748826][ T6333] __warn+0xf6/0x3c0 [ 110.752707][ T6333] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 110.757896][ T6333] report_bug+0x3c3/0x580 [ 110.762215][ T6333] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 110.767401][ T6333] handle_bug+0x184/0x210 [ 110.771721][ T6333] exc_invalid_op+0x17/0x50 [ 110.776212][ T6333] asm_exc_invalid_op+0x1a/0x20 [ 110.781049][ T6333] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 110.786850][ T6333] Code: 24 20 48 8b 6c 24 38 e8 f1 76 c3 fa e8 ec 76 c3 fa 89 de 44 89 ef e8 62 71 c3 fa 41 39 dd 0f 84 cb fd ff ff e8 d4 76 c3 fa 90 <0f> 0b 90 e9 bd fd ff ff e8 c6 76 c3 fa 48 8d 7d 38 be 01 00 00 00 [ 110.806456][ T6333] RSP: 0018:ffffc9000418f128 EFLAGS: 00010287 [ 110.812506][ T6333] RAX: 000000000000b3de RBX: ffff888056fa782c RCX: ffffc9000cb3a000 [ 110.820457][ T6333] RDX: 0000000000080000 RSI: ffffffff86f9c1dc RDI: ffff888056fa7818 [ 110.828410][ T6333] RBP: ffff8880289ba000 R08: 0000000000000005 R09: 0000000000000000 [ 110.836379][ T6333] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000418f280 [ 110.844335][ T6333] R13: 0000000000000001 R14: ffff88807cfb3300 R15: ffff888056fa7800 [ 110.852299][ T6333] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 110.857498][ T6333] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 110.862691][ T6333] notifier_call_chain+0xbc/0x410 [ 110.867698][ T6333] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 110.873154][ T6333] atomic_notifier_call_chain+0x71/0x1c0 [ 110.878772][ T6333] call_fib_notifiers+0x33/0x70 [ 110.883611][ T6333] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 110.890103][ T6333] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 110.897118][ T6333] ? find_held_lock+0x2b/0x80 [ 110.901777][ T6333] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 110.907480][ T6333] ip6_route_multipath_add+0xb4f/0x1bd0 [ 110.913019][ T6333] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 110.918996][ T6333] ? avc_has_perm_noaudit+0x117/0x3b0 [ 110.924442][ T6333] ? avc_has_perm_noaudit+0x149/0x3b0 [ 110.929812][ T6333] ? inet6_rtm_newroute+0xe4/0x1a0 [ 110.934904][ T6333] inet6_rtm_newroute+0xe4/0x1a0 [ 110.939826][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.945355][ T6333] ? __lock_acquire+0x622/0x1c90 [ 110.950292][ T6333] ? find_held_lock+0x2b/0x80 [ 110.954948][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.960477][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.966005][ T6333] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 110.971103][ T6333] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 110.976633][ T6333] rtnetlink_rcv_msg+0x95e/0xe90 [ 110.981559][ T6333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.987017][ T6333] ? ref_tracker_free+0x37c/0x830 [ 110.992052][ T6333] netlink_rcv_skb+0x158/0x420 [ 110.996830][ T6333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.002290][ T6333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.007580][ T6333] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.012870][ T6333] netlink_unicast+0x5aa/0x870 [ 111.017625][ T6333] ? __pfx_netlink_unicast+0x10/0x10 [ 111.022906][ T6333] netlink_sendmsg+0x8c8/0xdd0 [ 111.027660][ T6333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.032951][ T6333] ____sys_sendmsg+0xa98/0xc70 [ 111.037710][ T6333] ? copy_msghdr_from_user+0x10a/0x160 [ 111.043153][ T6333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.048435][ T6333] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.053714][ T6333] ___sys_sendmsg+0x134/0x1d0 [ 111.058375][ T6333] ? futex_private_hash_put+0x176/0x300 [ 111.063907][ T6333] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.069088][ T6333] ? __lock_acquire+0x622/0x1c90 [ 111.074035][ T6333] __sys_sendmsg+0x16d/0x220 [ 111.078611][ T6333] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.083718][ T6333] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.088662][ T6333] do_syscall_64+0xcd/0xfa0 [ 111.093171][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.099051][ T6333] RIP: 0033:0x7fa26358efc9 [ 111.103452][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.123054][ T6333] RSP: 002b:00007fa2644bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.131467][ T6333] RAX: ffffffffffffffda RBX: 00007fa2637e5fa0 RCX: 00007fa26358efc9 [ 111.139430][ T6333] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 111.147381][ T6333] RBP: 00007fa263611f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.155337][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.163286][ T6333] R13: 00007fa2637e6038 R14: 00007fa2637e5fa0 R15: 00007ffc01b2ca48 [ 111.171250][ T6333] [ 111.174456][ T6333] Kernel Offset: disabled [ 111.178752][ T6333] Rebooting in 86400 seconds..