last executing test programs: 20.584262394s ago: executing program 3 (id=102): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) unshare(0x6a040000) syz_kvm_add_vcpu$x86(0x0, 0x0) r6 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000040a882, 0x0) r8 = dup(r7) syz_usb_control_io$rtl8150(r6, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x22, 0x2, {0x2, 0x9}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0004ff"]}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x36, 0xfa, "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"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x28011, r8, 0x4a0b9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000310000/0x4000)=nil, 0x4000, 0x0) r9 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000140)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00', 0xffffffff}, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_open_dev$audion(&(0x7f0000000000), 0x8001, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 17.011821086s ago: executing program 0 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 15.956948391s ago: executing program 0 (id=111): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f, 0x30]}}, 0x0, 0x54}, 0x28) 15.40186759s ago: executing program 3 (id=113): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c80000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000640)={{0x33, @private=0xa010100, 0x4e22, 0x800003, 'none\x00', 0x10, 0x8ca1, 0x37}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4e22, 0x10000, 0x7c5, 0x8, 0x8}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}]}, 0x1c}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x180, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 15.183864239s ago: executing program 0 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000540)=""/55, 0x37) 13.741987455s ago: executing program 0 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) r5 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@isdn, &(0x7f0000000200)=0x80, 0x40800) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r5, &(0x7f0000000580)={0xa, 0x4e20, 0x3, @remote, 0xf}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000080)={0xc, {0x17, "67976694c92c88257f3482279aed0f053d0eda5a09764b"}}, 0x1d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 12.903456609s ago: executing program 4 (id=120): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000b40)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {}, 0x4d, [0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000400)="633aaf2414b741a5a4d57dbd04582a4a73238ef9282525cbb14db0917e79375a1e8932504f9813ef4a2eba0f9f8962185eccff1f0c58b0e9797491bd099b0c92c92b4f765e9d7e256d24d8f37db2e3735e9fb3ed78b4f821e8b7464871e2f52fff40e2", &(0x7f0000000480)=""/89, &(0x7f00000009c0)="dee54ea9c1c4229edb4b34045998bed9f782c5d870659fc5a23360ff11bdb5da838fc46333093eca895e5686a1f701806db3f670757570ee01cf8120890ed790389cbb9b1fcb8230353fd0443ec662b5e7c4e0f51cc47fdbedb5e4c37db1f84a651894d131b1266e417f9f5f1140623155a8d30b0f2a83acae208479b993cde5", 0x0, 0x4, 0x1}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8010002b) 12.603297572s ago: executing program 4 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 11.505146117s ago: executing program 4 (id=123): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) socket$kcm(0xa, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r1, &(0x7f0000000340), 0x0}, 0x20) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b96900000000", 0xe, 0xffffffffffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 11.498972414s ago: executing program 3 (id=124): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000280)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) 11.250258152s ago: executing program 2 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}]}, 0x1c}], 0x1}, 0x0) 9.598064386s ago: executing program 3 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0xffffffff, 0x0, 0xd, 0x7}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 9.591637771s ago: executing program 1 (id=128): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 9.422750213s ago: executing program 2 (id=129): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/186, 0xba}, {&(0x7f0000000780)=""/250, 0xfa}], 0x4, 0xb, 0x6) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) 9.035541612s ago: executing program 1 (id=130): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x8, 0x4}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000007000000000000006d0d000000400000", @ANYRES32=r6, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000500000001ffffff000000000000eb66cf5fe9874a8c4c731ee8fa85938d00"/44], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x1, 0x12) socket$tipc(0x1e, 0x2, 0x0) 7.367172351s ago: executing program 2 (id=131): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) 5.411410404s ago: executing program 2 (id=132): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) socket(0x6, 0x0, 0x8) 5.207829153s ago: executing program 1 (id=133): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0xfffffffe, 0x3}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000000280)={&(0x7f00000003c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/87, 0x57}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/97, 0x61}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000840)=""/238, 0xee}], 0x6, &(0x7f0000000940)=""/103, 0x67}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) dup(r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x31, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_COST={0x8, 0x3, 0x40}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x7}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 4.706438062s ago: executing program 3 (id=134): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c80000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000640)={{0x33, @private=0xa010100, 0x4e22, 0x800003, 'none\x00', 0x10, 0x8ca1, 0x37}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4e22, 0x10000, 0x7c5, 0x8, 0x8}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}]}, 0x1c}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x180, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4.194620302s ago: executing program 2 (id=135): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip_tables_matches\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x1000000, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3.732254504s ago: executing program 1 (id=136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000180)={0x8, 0x4}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000007000000000000006d0d000000400000", @ANYRES32=r6, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x1, 0x12) socket$tipc(0x1e, 0x2, 0x0) 3.676951073s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xfa08, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x217b, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0xfffffffe}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 3.240293173s ago: executing program 2 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 2.947763047s ago: executing program 0 (id=139): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) syz_extract_tcp_res(&(0x7f00000000c0), 0xd7, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[], 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r6, 0x4, 0x40800) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8b5}, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff004) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 1.846124107s ago: executing program 0 (id=140): setregid(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x2, 0x0) write(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x382, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.83461559s ago: executing program 1 (id=141): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 791.186952ms ago: executing program 4 (id=142): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 371.026923ms ago: executing program 1 (id=143): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 9.756989ms ago: executing program 3 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) 0s ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) socket(0x6, 0x0, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 57.986191][ T30] audit: type=1400 audit(1768638249.633:62): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.009598][ T30] audit: type=1400 audit(1768638249.653:63): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.012008][ T5802] cgroup: Unknown subsys name 'net' [ 58.038365][ T30] audit: type=1400 audit(1768638249.683:64): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.223051][ T5802] cgroup: Unknown subsys name 'cpuset' [ 58.230654][ T5802] cgroup: Unknown subsys name 'rlimit' [ 58.380184][ T30] audit: type=1400 audit(1768638250.023:65): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.412345][ T30] audit: type=1400 audit(1768638250.023:66): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.440884][ T30] audit: type=1400 audit(1768638250.023:67): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.468000][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.471891][ T30] audit: type=1400 audit(1768638250.023:68): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.500017][ T30] audit: type=1400 audit(1768638250.023:69): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.527029][ T30] audit: type=1400 audit(1768638250.023:70): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.550827][ T30] audit: type=1400 audit(1768638250.133:71): avc: denied { relabelto } for pid=5804 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.442455][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.991695][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 62.991709][ T30] audit: type=1400 audit(1768638254.643:79): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="socket:[5202]" dev="sockfs" ino=5202 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.033398][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.051734][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.059062][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.066759][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.074681][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.082956][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.090259][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.096293][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.097915][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.104939][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.119362][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.123972][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.126928][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.134626][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.141264][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.154707][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.155992][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.162622][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.169631][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.181152][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.182952][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.191534][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.197703][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.211634][ T30] audit: type=1400 audit(1768638254.863:80): avc: denied { read } for pid=5819 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.221662][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.267597][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.275182][ T30] audit: type=1400 audit(1768638254.883:81): avc: denied { open } for pid=5819 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.299735][ T30] audit: type=1400 audit(1768638254.883:82): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.610817][ T30] audit: type=1400 audit(1768638255.253:83): avc: denied { module_request } for pid=5814 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.704754][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 63.720745][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 63.805993][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 63.872094][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 63.911109][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 63.947656][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.955157][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.962703][ T5814] bridge_slave_0: entered allmulticast mode [ 63.969312][ T5814] bridge_slave_0: entered promiscuous mode [ 63.976753][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.983854][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.991031][ T5815] bridge_slave_0: entered allmulticast mode [ 63.997720][ T5815] bridge_slave_0: entered promiscuous mode [ 64.026209][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.033347][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.040526][ T5814] bridge_slave_1: entered allmulticast mode [ 64.047518][ T5814] bridge_slave_1: entered promiscuous mode [ 64.054418][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.061916][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.068995][ T5815] bridge_slave_1: entered allmulticast mode [ 64.075943][ T5815] bridge_slave_1: entered promiscuous mode [ 64.153109][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.164281][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.181171][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.188355][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.195617][ T5817] bridge_slave_0: entered allmulticast mode [ 64.202264][ T5817] bridge_slave_0: entered promiscuous mode [ 64.217401][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.227617][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.237126][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.244510][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.251900][ T5819] bridge_slave_0: entered allmulticast mode [ 64.258452][ T5819] bridge_slave_0: entered promiscuous mode [ 64.265395][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.272831][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.279897][ T5817] bridge_slave_1: entered allmulticast mode [ 64.286707][ T5817] bridge_slave_1: entered promiscuous mode [ 64.313043][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.320533][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.327976][ T5819] bridge_slave_1: entered allmulticast mode [ 64.334686][ T5819] bridge_slave_1: entered promiscuous mode [ 64.348227][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.355390][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.362670][ T5812] bridge_slave_0: entered allmulticast mode [ 64.369348][ T5812] bridge_slave_0: entered promiscuous mode [ 64.404861][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.412263][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.419333][ T5812] bridge_slave_1: entered allmulticast mode [ 64.426156][ T5812] bridge_slave_1: entered promiscuous mode [ 64.433708][ T5814] team0: Port device team_slave_0 added [ 64.440519][ T5815] team0: Port device team_slave_0 added [ 64.454698][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.471539][ T5814] team0: Port device team_slave_1 added [ 64.478127][ T5815] team0: Port device team_slave_1 added [ 64.492490][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.503118][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.533923][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.551746][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.568469][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.575510][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.601563][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.628361][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.637850][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.645034][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.671004][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.682515][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.689440][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.715317][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.735063][ T5817] team0: Port device team_slave_0 added [ 64.752860][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.759778][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.785889][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.804108][ T5819] team0: Port device team_slave_0 added [ 64.811350][ T5817] team0: Port device team_slave_1 added [ 64.836570][ T5819] team0: Port device team_slave_1 added [ 64.843360][ T5812] team0: Port device team_slave_0 added [ 64.851154][ T5812] team0: Port device team_slave_1 added [ 64.887653][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.894662][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.921067][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.959548][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.966857][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.993305][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.007373][ T5815] hsr_slave_0: entered promiscuous mode [ 65.013663][ T5815] hsr_slave_1: entered promiscuous mode [ 65.020155][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.027083][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.053101][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.071346][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.078259][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.104127][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.120949][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.127869][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.154385][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.168295][ T5814] hsr_slave_0: entered promiscuous mode [ 65.174933][ T5814] hsr_slave_1: entered promiscuous mode [ 65.181011][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 65.186761][ T5814] Cannot create hsr debugfs directory [ 65.192721][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.199687][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.225862][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.281472][ T5826] Bluetooth: hci3: command tx timeout [ 65.281653][ T5825] Bluetooth: hci4: command tx timeout [ 65.292604][ T5827] Bluetooth: hci2: command tx timeout [ 65.298253][ T52] Bluetooth: hci1: command tx timeout [ 65.351107][ T5817] hsr_slave_0: entered promiscuous mode [ 65.357169][ T5817] hsr_slave_1: entered promiscuous mode [ 65.363535][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 65.369242][ T5817] Cannot create hsr debugfs directory [ 65.371529][ T52] Bluetooth: hci0: command tx timeout [ 65.390320][ T5819] hsr_slave_0: entered promiscuous mode [ 65.396347][ T5819] hsr_slave_1: entered promiscuous mode [ 65.402694][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 65.408396][ T5819] Cannot create hsr debugfs directory [ 65.424789][ T5812] hsr_slave_0: entered promiscuous mode [ 65.430988][ T5812] hsr_slave_1: entered promiscuous mode [ 65.437159][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 65.443310][ T5812] Cannot create hsr debugfs directory [ 65.767125][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.782515][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.795852][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.805694][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.833803][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.843805][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.860027][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.869658][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.914728][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.934296][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.944076][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.964982][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.030488][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.039821][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.053026][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.062390][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.160315][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.171243][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.185884][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.202844][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.212231][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.239672][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.254829][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.281077][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.290623][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.297791][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.322437][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.329500][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.345388][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.364267][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.384485][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.391614][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.408280][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.415359][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.432143][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.441203][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.448236][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.458397][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.465463][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.535038][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.557136][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.564253][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.579029][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.593652][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.600799][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.608872][ T30] audit: type=1400 audit(1768638258.253:84): avc: denied { sys_module } for pid=5814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.681089][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.726351][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.733477][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.773489][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780646][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.833283][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.030622][ T5814] veth0_vlan: entered promiscuous mode [ 67.055306][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.078385][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.089208][ T5814] veth1_vlan: entered promiscuous mode [ 67.155850][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.175734][ T5817] veth0_vlan: entered promiscuous mode [ 67.214608][ T5814] veth0_macvtap: entered promiscuous mode [ 67.224197][ T5817] veth1_vlan: entered promiscuous mode [ 67.236121][ T5814] veth1_macvtap: entered promiscuous mode [ 67.255836][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.269404][ T5815] veth0_vlan: entered promiscuous mode [ 67.293374][ T5815] veth1_vlan: entered promiscuous mode [ 67.318232][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.342248][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.361953][ T5825] Bluetooth: hci4: command tx timeout [ 67.361958][ T5826] Bluetooth: hci3: command tx timeout [ 67.367374][ T5827] Bluetooth: hci2: command tx timeout [ 67.375742][ T52] Bluetooth: hci1: command tx timeout [ 67.382127][ T5817] veth0_macvtap: entered promiscuous mode [ 67.413612][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423503][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.435343][ T5817] veth1_macvtap: entered promiscuous mode [ 67.441262][ T52] Bluetooth: hci0: command tx timeout [ 67.452830][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471646][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.505984][ T5815] veth0_macvtap: entered promiscuous mode [ 67.522981][ T5815] veth1_macvtap: entered promiscuous mode [ 67.534146][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.571503][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.578832][ T5812] veth0_vlan: entered promiscuous mode [ 67.593883][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.609019][ T5812] veth1_vlan: entered promiscuous mode [ 67.629205][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.654777][ T476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.664348][ T476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.679143][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.689722][ T476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691652][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.703498][ T476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.738882][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.748613][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.770472][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.779923][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.801405][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.803775][ T5819] veth0_vlan: entered promiscuous mode [ 67.809214][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.820082][ T5819] veth1_vlan: entered promiscuous mode [ 67.860371][ T30] audit: type=1400 audit(1768638259.503:85): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.NN23e7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.892697][ T30] audit: type=1400 audit(1768638259.503:86): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.914821][ T30] audit: type=1400 audit(1768638259.513:87): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.NN23e7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.953541][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.963584][ T5812] veth0_macvtap: entered promiscuous mode [ 67.969171][ T30] audit: type=1400 audit(1768638259.513:88): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.999189][ T5819] veth0_macvtap: entered promiscuous mode [ 68.005306][ T30] audit: type=1400 audit(1768638259.513:89): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.NN23e7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.020164][ T5819] veth1_macvtap: entered promiscuous mode [ 68.038835][ T30] audit: type=1400 audit(1768638259.513:90): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.NN23e7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.066897][ T30] audit: type=1400 audit(1768638259.513:91): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.088152][ T30] audit: type=1400 audit(1768638259.533:92): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.090057][ T5812] veth1_macvtap: entered promiscuous mode [ 68.116985][ T30] audit: type=1400 audit(1768638259.543:93): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="gadgetfs" ino=7631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.141424][ T30] audit: type=1400 audit(1768638259.543:94): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.164953][ T649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.167002][ T30] audit: type=1400 audit(1768638259.543:95): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 68.172899][ T649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.225495][ T30] audit: type=1400 audit(1768638259.543:96): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.248883][ T30] audit: type=1400 audit(1768638259.873:97): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.293577][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.307144][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.310442][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.320391][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.330302][ T30] audit: type=1400 audit(1768638259.873:98): avc: denied { open } for pid=5814 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.370086][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.433876][ T476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.441824][ T476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.500102][ T3002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.524151][ T3002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.539386][ T3002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.548553][ T3002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.548907][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.573128][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.585753][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.605085][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.626245][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.659366][ T476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.700136][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.709252][ T476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.719114][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.739967][ T476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.858120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.868984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.949906][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.972092][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.480270][ T52] Bluetooth: hci1: command tx timeout [ 69.499698][ T5826] Bluetooth: hci3: command tx timeout [ 69.499800][ T52] Bluetooth: hci2: command tx timeout [ 69.510698][ T52] Bluetooth: hci4: command tx timeout [ 69.531064][ T52] Bluetooth: hci0: command tx timeout [ 69.589821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.598662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.675067][ T4076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.724302][ T4076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.408951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.511266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.761280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.941256][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.947688][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.520966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.618444][ T52] Bluetooth: hci4: command tx timeout [ 71.623897][ T52] Bluetooth: hci3: command tx timeout [ 71.629277][ T52] Bluetooth: hci1: command tx timeout [ 71.634848][ T52] Bluetooth: hci2: command tx timeout [ 71.641560][ T52] Bluetooth: hci0: command tx timeout [ 71.727315][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.201569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.209861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.330723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.338919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.561392][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.059905][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 73.059920][ T30] audit: type=1400 audit(1768638264.703:133): avc: denied { create } for pid=5985 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.127583][ T5822] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 73.142094][ T5822] usb 3-1: config 0 has no interface number 0 [ 73.580769][ T5822] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 73.596851][ T30] audit: type=1400 audit(1768638264.713:134): avc: denied { create } for pid=5985 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.610609][ T5822] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 73.633809][ T5822] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 73.646706][ T5822] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 73.655777][ T5822] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 73.664789][ T5822] usb 3-1: Product: syz [ 73.670900][ T5822] usb 3-1: Manufacturer: syz [ 73.670918][ T5822] usb 3-1: SerialNumber: syz [ 73.692665][ T5822] usb 3-1: config 0 descriptor?? [ 73.694064][ T5977] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.706608][ T5822] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 73.751488][ T30] audit: type=1400 audit(1768638265.333:135): avc: denied { create } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.751525][ T30] audit: type=1400 audit(1768638265.393:136): avc: denied { write } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.751559][ T30] audit: type=1400 audit(1768638265.393:137): avc: denied { create } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.751590][ T30] audit: type=1400 audit(1768638265.403:138): avc: denied { connect } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.170941][ T5998] use of bytesused == 0 is deprecated and will be removed in the future, [ 74.171006][ T5998] use the actual size instead. [ 74.187952][ T30] audit: type=1400 audit(1768638265.703:139): avc: denied { create } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.188132][ T30] audit: type=1400 audit(1768638265.713:140): avc: denied { shutdown } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.188251][ T30] audit: type=1400 audit(1768638265.793:141): avc: denied { getopt } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.188394][ T30] audit: type=1400 audit(1768638265.793:142): avc: denied { connect } for pid=5992 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.123505][ T6006] overlayfs: missing 'lowerdir' [ 75.151220][ T5822] usb 3-1: USB disconnect, device number 2 [ 75.312674][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.545034][ T6011] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18'. [ 75.707274][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18'. [ 75.780235][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.830896][ T6019] tipc: Started in network mode [ 75.837506][ T6019] tipc: Node identity ac14140f, cluster identity 4711 [ 75.844579][ T6019] tipc: New replicast peer: 255.255.255.255 [ 75.850861][ T6019] tipc: Enabled bearer , priority 10 [ 75.858153][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.020072][ T90] cfg80211: failed to load regulatory.db [ 77.349674][ T5822] tipc: Node number set to 2886997007 [ 77.418349][ T6042] fuse: Bad value for 'fd' [ 78.490330][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 78.490344][ T30] audit: type=1400 audit(1768638270.133:162): avc: denied { read write } for pid=6048 comm="syz.3.26" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.940830][ T30] audit: type=1400 audit(1768638270.173:163): avc: denied { open } for pid=6048 comm="syz.3.26" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.004198][ T6077] gfs2: gfs2 mount does not exist [ 79.120784][ T30] audit: type=1400 audit(1768638270.253:164): avc: denied { write } for pid=6049 comm="syz.1.28" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.203612][ T30] audit: type=1400 audit(1768638270.253:165): avc: denied { map } for pid=6049 comm="syz.1.28" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.907692][ T30] audit: type=1400 audit(1768638270.273:166): avc: denied { call } for pid=6049 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 80.053840][ T30] audit: type=1400 audit(1768638270.623:167): avc: denied { create } for pid=6068 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.215442][ T30] audit: type=1400 audit(1768638270.653:168): avc: denied { setopt } for pid=6068 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.218832][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 80.244109][ T30] audit: type=1400 audit(1768638270.653:169): avc: denied { mounton } for pid=6068 comm="syz.4.29" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 80.815232][ T30] audit: type=1400 audit(1768638270.843:170): avc: denied { create } for pid=6030 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.410718][ T30] audit: type=1400 audit(1768638270.843:171): avc: denied { getopt } for pid=6030 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.731981][ T6112] tipc: Started in network mode [ 81.819120][ T6112] tipc: Node identity ac14140f, cluster identity 4711 [ 81.871373][ T6112] tipc: New replicast peer: 255.255.255.255 [ 81.917731][ T6112] tipc: Enabled bearer , priority 10 [ 81.936491][ T6120] capability: warning: `syz.1.37' uses deprecated v2 capabilities in a way that may be insecure [ 81.978266][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 82.683225][ T6132] openvswitch: netlink: IP tunnel TTL not specified. [ 83.033527][ T5822] tipc: Node number set to 2886997007 [ 83.424222][ T6136] lo speed is unknown, defaulting to 1000 [ 83.441627][ T6136] lo speed is unknown, defaulting to 1000 [ 83.449911][ T6136] lo speed is unknown, defaulting to 1000 [ 83.463777][ T6134] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 83.480828][ T6134] PKCS7: Only support pkcs7_signedData type [ 83.496518][ T6136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.519701][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 83.519714][ T30] audit: type=1400 audit(1768638275.163:183): avc: denied { read } for pid=6114 comm="syz.2.36" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.604322][ T30] audit: type=1400 audit(1768638275.193:184): avc: denied { open } for pid=6114 comm="syz.2.36" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.632247][ T6136] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 83.675130][ T30] audit: type=1400 audit(1768638275.193:185): avc: denied { ioctl } for pid=6114 comm="syz.2.36" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.784666][ T6136] lo speed is unknown, defaulting to 1000 [ 83.810673][ T30] audit: type=1400 audit(1768638275.203:186): avc: denied { read write } for pid=6114 comm="syz.2.36" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.811789][ T6136] lo speed is unknown, defaulting to 1000 [ 83.928955][ T30] audit: type=1400 audit(1768638275.203:187): avc: denied { open } for pid=6114 comm="syz.2.36" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.180755][ T30] audit: type=1400 audit(1768638275.503:188): avc: denied { mounton } for pid=6143 comm="syz.4.44" path="/10/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.182276][ T6136] lo speed is unknown, defaulting to 1000 [ 84.279298][ T30] audit: type=1400 audit(1768638275.633:189): avc: denied { read write } for pid=6143 comm="syz.4.44" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 84.370077][ T30] audit: type=1400 audit(1768638275.633:190): avc: denied { open } for pid=6143 comm="syz.4.44" path="/10/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.146091][ T6136] lo speed is unknown, defaulting to 1000 [ 85.259951][ T6136] lo speed is unknown, defaulting to 1000 [ 85.311986][ T6136] lo speed is unknown, defaulting to 1000 [ 85.457578][ T30] audit: type=1400 audit(1768638277.103:191): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.520105][ T30] audit: type=1400 audit(1768638277.143:192): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.573390][ T6191] tipc: Enabling of bearer rejected, already enabled [ 88.588371][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 88.959946][ T6197] netlink: 'syz.3.55': attribute type 2 has an invalid length. [ 90.120715][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 90.120731][ T30] audit: type=1400 audit(1768638281.323:201): avc: denied { create } for pid=6198 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.187479][ T30] audit: type=1400 audit(1768638281.343:202): avc: denied { write } for pid=6198 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.221344][ T6193] netlink: 'syz.3.55': attribute type 29 has an invalid length. [ 90.702018][ T30] audit: type=1400 audit(1768638282.353:203): avc: denied { mount } for pid=6207 comm="syz.3.59" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 91.441014][ T30] audit: type=1400 audit(1768638283.043:204): avc: denied { bind } for pid=6216 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.522434][ T30] audit: type=1400 audit(1768638283.043:205): avc: denied { setopt } for pid=6216 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.560630][ T30] audit: type=1400 audit(1768638283.083:206): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.488138][ T30] audit: type=1400 audit(1768638284.123:207): avc: denied { create } for pid=6227 comm="syz.0.65" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.593446][ T30] audit: type=1400 audit(1768638284.123:208): avc: denied { map } for pid=6227 comm="syz.0.65" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.619086][ T30] audit: type=1400 audit(1768638284.123:209): avc: denied { read write } for pid=6227 comm="syz.0.65" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.631069][ T6235] tipc: Enabled bearer , priority 0 [ 92.648543][ T30] audit: type=1400 audit(1768638284.263:210): avc: denied { create } for pid=6234 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.707558][ T6234] tipc: Disabling bearer [ 93.200668][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.365216][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.390585][ T5869] usb 1-1: config 0 has no interfaces? [ 93.415635][ T5869] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.444373][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.477884][ T5869] usb 1-1: config 0 descriptor?? [ 93.767598][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 93.813650][ T5869] usb 1-1: USB disconnect, device number 2 [ 95.460650][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 95.460680][ T30] audit: type=1400 audit(1768638287.093:213): avc: denied { create } for pid=6254 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.595281][ T30] audit: type=1400 audit(1768638289.243:214): avc: denied { write } for pid=6280 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.618243][ T30] audit: type=1400 audit(1768638289.263:215): avc: denied { nlmsg_write } for pid=6280 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.030589][ T6286] tipc: Started in network mode [ 98.035551][ T6286] tipc: Node identity , cluster identity 4711 [ 98.041720][ T6286] tipc: Failed to obtain node identity [ 98.047753][ T6286] tipc: Enabling of bearer rejected, failed to enable media [ 100.295640][ T30] audit: type=1400 audit(1768638291.493:216): avc: denied { ioctl } for pid=6310 comm="syz.3.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9743 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.334082][ T30] audit: type=1400 audit(1768638291.653:217): avc: denied { ioctl } for pid=6301 comm="syz.4.85" path="socket:[9733]" dev="sockfs" ino=9733 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.922625][ T30] audit: type=1400 audit(1768638292.153:218): avc: denied { create } for pid=6310 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.502523][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.90'. [ 103.355462][ T6338] Zero length message leads to an empty skb [ 106.452122][ T30] audit: type=1400 audit(1768638298.043:219): avc: denied { open } for pid=6377 comm="syz.2.105" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 106.723104][ T6373] lo speed is unknown, defaulting to 1000 [ 107.080788][ T30] audit: type=1400 audit(1768638298.143:220): avc: denied { read } for pid=6380 comm="syz.2.106" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.310751][ T30] audit: type=1400 audit(1768638298.143:221): avc: denied { open } for pid=6380 comm="syz.2.106" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.335706][ T30] audit: type=1400 audit(1768638298.223:222): avc: denied { mounton } for pid=6380 comm="syz.2.106" path="/20/file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.645805][ T6398] tipc: Enabling of bearer rejected, already enabled [ 108.655869][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 109.738903][ T30] audit: type=1400 audit(1768638301.023:223): avc: denied { name_bind } for pid=6401 comm="syz.1.110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.840214][ T30] audit: type=1400 audit(1768638301.023:224): avc: denied { node_bind } for pid=6401 comm="syz.1.110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 110.737029][ T6415] syzkaller0: entered promiscuous mode [ 110.742664][ T6415] syzkaller0: entered allmulticast mode [ 110.753894][ T6415] tipc: Enabled bearer , priority 0 [ 110.771995][ T6413] tipc: Resetting bearer [ 110.790782][ T30] audit: type=1400 audit(1768638302.403:225): avc: denied { create } for pid=6413 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.940697][ T30] audit: type=1400 audit(1768638302.403:226): avc: denied { write } for pid=6413 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.090186][ T6421] overlayfs: failed to resolve './file1': -2 [ 111.128453][ T6413] tipc: Disabling bearer [ 111.254620][ T30] audit: type=1400 audit(1768638302.873:227): avc: denied { audit_write } for pid=6418 comm="syz.4.116" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.610824][ T30] audit: type=1107 audit(1768638302.883:228): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 111.663497][ T30] audit: type=1400 audit(1768638302.893:229): avc: denied { write } for pid=6418 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.524508][ T30] audit: type=1400 audit(1768638304.173:230): avc: denied { read write } for pid=6435 comm="syz.4.120" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.553282][ T6436] input: syz0 as /devices/virtual/input/input5 [ 112.636528][ T30] audit: type=1400 audit(1768638304.193:231): avc: denied { open } for pid=6435 comm="syz.4.120" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.662842][ T30] audit: type=1400 audit(1768638304.203:232): avc: denied { ioctl } for pid=6435 comm="syz.4.120" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.133424][ T6442] tipc: Started in network mode [ 113.138700][ T6442] tipc: Node identity ac14140f, cluster identity 4711 [ 113.147540][ T6442] tipc: New replicast peer: 255.255.255.255 [ 113.154468][ T6442] tipc: Enabled bearer , priority 10 [ 113.165286][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 114.200596][ T30] audit: type=1400 audit(1768638305.843:233): avc: denied { bind } for pid=6445 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.271480][ T5982] tipc: Node number set to 2886997007 [ 115.076262][ T30] audit: type=1400 audit(1768638306.713:234): avc: denied { create } for pid=6449 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.954283][ T6451] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 117.964253][ T6451] PKCS7: Only support pkcs7_signedData type [ 121.079569][ T30] audit: type=1400 audit(1768638312.703:235): avc: denied { read } for pid=6487 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.235170][ T6462] lo speed is unknown, defaulting to 1000 [ 124.892413][ T30] audit: type=1400 audit(1768638316.533:236): avc: denied { mount } for pid=6521 comm="syz.4.142" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 230.550583][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 230.557591][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6532/3:b..l P6523/1:b..l [ 230.566916][ C0] rcu: (detected by 0, t=10502 jiffies, g=10689, q=902 ncpus=2) [ 230.574624][ C0] task:syz.0.140 state:R running task stack:26488 pid:6523 tgid:6518 ppid:5812 task_flags:0x400140 flags:0x00080002 [ 230.588682][ C0] Call Trace: [ 230.591960][ C0] [ 230.594894][ C0] ? __schedule+0x10b9/0x6150 [ 230.599581][ C0] __schedule+0x1139/0x6150 [ 230.604098][ C0] ? __pfx___schedule+0x10/0x10 [ 230.608954][ C0] ? mark_held_locks+0x49/0x80 [ 230.613717][ C0] preempt_schedule_irq+0x51/0x90 [ 230.618738][ C0] irqentry_exit+0x1d8/0x8c0 [ 230.623325][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.629296][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 230.634487][ C0] Code: e3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 c1 ee 0e 0f 82 74 02 00 00 8b 35 ea f1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 e3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 230.654089][ C0] RSP: 0018:ffffc9000b95f1c8 EFLAGS: 00000206 [ 230.660164][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000ee6c1df9 [ 230.668133][ C0] RDX: 0000000000000000 RSI: ffffffff8daa966f RDI: ffffffff8bf2b580 [ 230.676103][ C0] RBP: 0000000000000002 R08: 00000000ce29622f R09: 00000000fce29622 [ 230.684064][ C0] R10: 0000000000000002 R11: ffff88802f5b8b30 R12: 0000000000000000 [ 230.692022][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.699994][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 230.705190][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.711335][ C0] unwind_next_frame+0xd1/0x20b0 [ 230.716262][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 230.721365][ C0] ? do_syscall_64+0xcd/0xf80 [ 230.726046][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.732209][ C0] arch_stack_walk+0x94/0x100 [ 230.736896][ C0] ? do_syscall_64+0xcd/0xf80 [ 230.741576][ C0] stack_trace_save+0x8e/0xc0 [ 230.746258][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 230.751620][ C0] ? __lock_acquire+0x436/0x2890 [ 230.756555][ C0] kasan_save_stack+0x33/0x60 [ 230.761229][ C0] ? kasan_save_stack+0x33/0x60 [ 230.766076][ C0] ? kasan_save_track+0x14/0x30 [ 230.770920][ C0] ? kasan_save_free_info+0x3b/0x60 [ 230.776108][ C0] ? __kasan_slab_free+0x5f/0x80 [ 230.781033][ C0] ? kfree+0x2f8/0x6e0 [ 230.785088][ C0] ? __scm_destroy+0x104/0x150 [ 230.789837][ C0] ? __scm_recv_common.constprop.0+0x3f1/0x520 [ 230.795977][ C0] ? scm_recv_unix+0x99/0x400 [ 230.800639][ C0] ? __unix_dgram_recvmsg+0x769/0xc30 [ 230.805997][ C0] ? unix_seqpacket_recvmsg+0x11c/0x170 [ 230.811525][ C0] ? ____sys_recvmsg+0x5f9/0x6b0 [ 230.816459][ C0] ? ___sys_recvmsg+0x114/0x1a0 [ 230.821299][ C0] ? do_recvmmsg+0x2fe/0x750 [ 230.825876][ C0] ? __x64_sys_recvmmsg+0x22a/0x280 [ 230.831059][ C0] ? do_syscall_64+0xcd/0xf80 [ 230.835754][ C0] kasan_save_track+0x14/0x30 [ 230.840423][ C0] kasan_save_free_info+0x3b/0x60 [ 230.845434][ C0] __kasan_slab_free+0x5f/0x80 [ 230.850187][ C0] kfree+0x2f8/0x6e0 [ 230.854066][ C0] ? __pfx_free_uid+0x10/0x10 [ 230.858726][ C0] ? __scm_destroy+0x104/0x150 [ 230.863482][ C0] ? __scm_destroy+0x104/0x150 [ 230.868324][ C0] __scm_destroy+0x104/0x150 [ 230.872902][ C0] __scm_recv_common.constprop.0+0x3f1/0x520 [ 230.878875][ C0] ? __pfx___scm_recv_common.constprop.0+0x10/0x10 [ 230.885371][ C0] ? rcu_is_watching+0x12/0xc0 [ 230.890132][ C0] scm_recv_unix+0x99/0x400 [ 230.894622][ C0] ? __pfx_scm_recv_unix+0x10/0x10 [ 230.899721][ C0] ? __asan_memcpy+0x3c/0x60 [ 230.904298][ C0] ? kmemdup_noprof+0x49/0x60 [ 230.908962][ C0] ? scm_fp_dup+0x30a/0x410 [ 230.913457][ C0] __unix_dgram_recvmsg+0x769/0xc30 [ 230.918649][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 230.924367][ C0] ? iovec_from_user+0xbb/0x140 [ 230.929229][ C0] unix_seqpacket_recvmsg+0x11c/0x170 [ 230.934610][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 230.939400][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 230.944703][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 230.949467][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.954665][ C0] ___sys_recvmsg+0x114/0x1a0 [ 230.959336][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 230.964538][ C0] ? __pfx___might_resched+0x10/0x10 [ 230.969814][ C0] do_recvmmsg+0x2fe/0x750 [ 230.974231][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 230.979160][ C0] ? __pfx_signal_setup_done+0x10/0x10 [ 230.984623][ C0] ? do_futex+0x122/0x350 [ 230.988957][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 230.993889][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 230.998902][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 231.004449][ C0] do_syscall_64+0xcd/0xf80 [ 231.008961][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.014855][ C0] RIP: 0033:0x7f3d7b18f749 [ 231.019267][ C0] RSP: 002b:00007f3d7c0a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 231.027675][ C0] RAX: ffffffffffffffda RBX: 00007f3d7b3e6090 RCX: 00007f3d7b18f749 [ 231.035636][ C0] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 231.043594][ C0] RBP: 00007f3d7b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.051553][ C0] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000000 [ 231.059517][ C0] R13: 00007f3d7b3e6128 R14: 00007f3d7b3e6090 R15: 00007ffc68c16a08 [ 231.067493][ C0] [ 231.070508][ C0] task:modprobe state:R running task stack:25000 pid:6532 tgid:6532 ppid:3589 task_flags:0x400000 flags:0x00080000 [ 231.084069][ C0] Call Trace: [ 231.087342][ C0] [ 231.090261][ C0] ? __schedule+0x10b9/0x6150 [ 231.094934][ C0] __schedule+0x1139/0x6150 [ 231.099437][ C0] ? page_table_check_set+0x7e7/0xa40 [ 231.104807][ C0] ? __pfx___schedule+0x10/0x10 [ 231.109656][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 231.115039][ C0] preempt_schedule_common+0x44/0xc0 [ 231.120322][ C0] preempt_schedule_thunk+0x16/0x30 [ 231.125513][ C0] _raw_spin_unlock+0x3e/0x50 [ 231.130182][ C0] filemap_map_pages+0x1194/0x1e00 [ 231.135296][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 231.140751][ C0] ? do_fault+0x9fb/0x1ad0 [ 231.145162][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 231.150606][ C0] do_fault+0x9cd/0x1ad0 [ 231.154841][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 231.160292][ C0] __handle_mm_fault+0x1919/0x2bb0 [ 231.165411][ C0] ? reacquire_held_locks+0xcd/0x1f0 [ 231.170689][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 231.176174][ C0] ? lock_vma_under_rcu+0x176/0x580 [ 231.181382][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 231.187796][ C0] handle_mm_fault+0x3fe/0xad0 [ 231.192581][ C0] do_user_addr_fault+0x60c/0x1370 [ 231.197691][ C0] ? rcu_is_watching+0x12/0xc0 [ 231.202446][ C0] exc_page_fault+0x64/0xc0 [ 231.206942][ C0] asm_exc_page_fault+0x26/0x30 [ 231.211802][ C0] RIP: 0033:0x7f0af3451000 [ 231.216202][ C0] RSP: 002b:00007fff4d2cdae8 EFLAGS: 00010206 [ 231.222258][ C0] RAX: 00007f0af3451000 RBX: 00007f0af34ba6b0 RCX: 00007fff4d2cdb90 [ 231.230216][ C0] RDX: 00007fff4d2cdb90 RSI: 00007fff4d2cdb68 RDI: 0000000000000004 [ 231.238172][ C0] RBP: 0000000000000004 R08: 00007f0af37f4af8 R09: 0000000000000000 [ 231.246128][ C0] R10: 00007fff4d2cd790 R11: 0000000000000246 R12: 00007fff4d2cdb68 [ 231.254088][ C0] R13: 00007fff4d2cdb90 R14: 00007f0af37f7310 R15: 0000000000000000 [ 231.262061][ C0] [ 231.265068][ C0] rcu: rcu_preempt kthread starved for 10573 jiffies! g10689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 231.276245][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 231.286202][ C0] rcu: RCU grace-period kthread stack dump: [ 231.292077][ C0] task:rcu_preempt state:R running task stack:29112 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 231.305547][ C0] Call Trace: [ 231.308812][ C0] [ 231.311731][ C0] ? __schedule+0x10b9/0x6150 [ 231.316399][ C0] __schedule+0x1139/0x6150 [ 231.320904][ C0] ? __pfx___schedule+0x10/0x10 [ 231.325745][ C0] ? find_held_lock+0x2b/0x80 [ 231.330415][ C0] ? schedule+0x2d7/0x3a0 [ 231.334738][ C0] schedule+0xe7/0x3a0 [ 231.338797][ C0] schedule_timeout+0x123/0x290 [ 231.343643][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 231.349009][ C0] ? __pfx_process_timeout+0x10/0x10 [ 231.354288][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 231.360085][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 231.365544][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 231.370309][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 231.375586][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.380775][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 231.385707][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 231.390558][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.396360][ C0] rcu_gp_kthread+0x26d/0x380 [ 231.401035][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.406221][ C0] ? rcu_is_watching+0x12/0xc0 [ 231.410969][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.416160][ C0] ? __kthread_parkme+0x19e/0x250 [ 231.421193][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.426389][ C0] kthread+0x3c5/0x780 [ 231.430478][ C0] ? __pfx_kthread+0x10/0x10 [ 231.435072][ C0] ? rcu_is_watching+0x12/0xc0 [ 231.439830][ C0] ? __pfx_kthread+0x10/0x10 [ 231.444413][ C0] ret_from_fork+0x983/0xb10 [ 231.448997][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 231.454100][ C0] ? __switch_to+0x7af/0x10d0 [ 231.458771][ C0] ? __pfx_kthread+0x10/0x10 [ 231.463352][ C0] ret_from_fork_asm+0x1a/0x30 [ 231.468119][ C0] [ 231.471123][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 231.477431][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 231.486353][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.496398][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 231.502032][ C0] Code: 26 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 99 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 231.522061][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 231.528119][ C0] RAX: 000000000041e917 RBX: 0000000000000000 RCX: ffffffff8b78c6d9 [ 231.536092][ C0] RDX: 0000000000000000 RSI: ffffffff8dacf6fe RDI: ffffffff8bf2b580 [ 231.544047][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 231.552005][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 231.560058][ C0] R13: ffffffff8e097b40 R14: ffffffff9088cdd0 R15: 0000000000000000 [ 231.568042][ C0] FS: 0000000000000000(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 231.576992][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.583569][ C0] CR2: 0000001b30217ff8 CR3: 000000004cca5000 CR4: 00000000003526f0 [ 231.591539][ C0] Call Trace: [ 231.594807][ C0] [ 231.597726][ C0] default_idle+0x13/0x20 [ 231.602045][ C0] default_idle_call+0x6c/0xb0 [ 231.606794][ C0] do_idle+0x38d/0x510 [ 231.610866][ C0] ? __pfx_do_idle+0x10/0x10 [ 231.615455][ C0] cpu_startup_entry+0x4f/0x60 [ 231.620228][ C0] rest_init+0x16b/0x2b0 [ 231.624477][ C0] ? acpi_subsystem_init+0x133/0x180 [ 231.629845][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 231.635480][ C0] start_kernel+0x3ef/0x4d0 [ 231.639985][ C0] x86_64_start_reservations+0x18/0x30 [ 231.645431][ C0] x86_64_start_kernel+0x130/0x190 [ 231.650531][ C0] common_startup_64+0x13e/0x148 [ 231.655469][ C0]