last executing test programs: 9.951195276s ago: executing program 4 (id=5): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x1, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syzkaller1\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 9.8027235s ago: executing program 2 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x1020304, @rand_addr=0x1020304}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1020304}}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c0000000040296f8c01020304010203046000000000083a40fe800000000000000000000000000001fe8000000000000000000000000000028000000000000000"], 0x3c) 9.505151688s ago: executing program 2 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 9.14180425s ago: executing program 1 (id=21): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 8.562432858s ago: executing program 2 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x601, 0x0, 0x0, {0x2, 0x18}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x3c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r2, &(0x7f0000000700)=@in={0x2, 0x1f90, @private=0xa010101}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000720)=@in={0x2, 0x0, @private=0xa010102}, 0x10) connect$inet(r3, &(0x7f0000000740)={0x2, 0x1f90, @private=0xa010101}, 0x10) accept(r2, 0x0, 0x0) 7.242386762s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 6.769467249s ago: executing program 3 (id=29): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e21, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, "4e214e2000000000000000000500000800000000"}}}}, 0x0) 6.752255639s ago: executing program 1 (id=31): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1'}, {'port=2049'}, {'mountport=2049'}, {'proto=tcp'}, {'mountproto=tcp'}, {'nolock'}, {'soft'}, {'timeo=1'}, {'retrans=1'}]}) (async) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) read(r1, &(0x7f0000000100), 0x70) write(r1, &(0x7f0000000300), 0x100) close(r0) close(r1) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 6.724574467s ago: executing program 4 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x801, 0x0) write(r0, &(0x7f0000000400)='10 1 1\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x801, 0x0) write(r1, &(0x7f0000000600)='1\n\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="300000001200010001000000000000000000000000000000000000000000000009000300657468300000000008001d0001000000"], 0x30}}, 0x0) 6.598444307s ago: executing program 3 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1\x00') r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 6.539049138s ago: executing program 4 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x33, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x2}}, 0xf0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x33, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x1}}, 0x120) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 5.826954791s ago: executing program 4 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='64\n\x00', 0x3) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000200)={0x2, 0x801, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 5.489893925s ago: executing program 3 (id=37): r0 = socket$inet6_sctp(0xa, 0x805, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x0, @loopback}]}, &(0x7f0000000140)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) 5.401163989s ago: executing program 1 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000300)="2c00000018000506000000000000000023000000fe0000010000000005000100000000000800040001000000", 0x2c) close(r0) 5.304073275s ago: executing program 1 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r3) 5.012267821s ago: executing program 0 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000900)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c) syz_emit_ethernet(0x58, &(0x7f0000000a00)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x84, 0x40, @remote, @local, {[], "4e234e230000000000000000c100001400000001c001000c0000000100000000"}}}}}, 0x0) 4.994849996s ago: executing program 4 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 4.993497573s ago: executing program 3 (id=42): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)='\x00'/4096, 0x1000}], 0x1}, 0x0) 4.790640649s ago: executing program 3 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001800010000000000000000002d0000000000000001000000050001000a0000000c0005000100000014000000"], 0x34}}, 0x0) 4.787611229s ago: executing program 0 (id=44): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x2}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x2}, 0x10) 4.674653998s ago: executing program 0 (id=45): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='mon_addr\x00', &(0x7f0000000180)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='a@b.c=/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x0) 4.58768695s ago: executing program 3 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 4.543074875s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = fsopen(&(0x7f0000000200)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='addr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='clientaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) move_mount(r3, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file0\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000500)='abcdef\x00', 0x6) setxattr(&(0x7f0000000400)='./mnt/file0\x00', &(0x7f0000000600)=@known='user.syz\x00', &(0x7f0000000700)='000102030405060708090a0b0c0d0e0f\x00', 0x20, 0x0) 4.215777816s ago: executing program 2 (id=48): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000003c0), &(0x7f0000000440)=0x54) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480), 0x3a0) 4.159265871s ago: executing program 2 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 3.654777946s ago: executing program 0 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00', 0x1}) 3.654320147s ago: executing program 2 (id=51): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10) syz_emit_ethernet(0x1b, &(0x7f0000000020)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x3, 'c'}}}}}, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0002"}}}}}, 0x0) 3.654165055s ago: executing program 0 (id=52): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x50000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@RTM_NEWNSID={0x24, 0x58, 0x1, 0x0, 0x0, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x24}}, 0x0) close(r1) close(r0) 0s ago: executing program 0 (id=53): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000500)="0000000100000001000000010000000100000001010400000000000168656c6c6f", 0x21, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0) kernel console output (not intermixed with test programs): [ 53.067806][ T30] audit: type=1400 audit(1785173941.993:111): avc: denied { write } for pid=5461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.125860][ T30] audit: type=1400 audit(1785173942.043:112): avc: denied { write } for pid=5472 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.974162][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 53.974179][ T30] audit: type=1400 audit(1785173942.893:115): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.029550][ T30] audit: type=1400 audit(1785173942.953:116): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.498192][ T30] audit: type=1400 audit(1785173943.423:117): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.554028][ T30] audit: type=1400 audit(1785173943.473:118): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.738878][ T30] audit: type=1400 audit(1785173943.663:119): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.798616][ T30] audit: type=1400 audit(1785173943.723:120): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.970376][ T30] audit: type=1400 audit(1785173943.893:121): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.031275][ T30] audit: type=1400 audit(1785173943.953:122): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.221673][ T30] audit: type=1400 audit(1785173944.143:123): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.271053][ T30] audit: type=1400 audit(1785173944.193:124): avc: denied { write } for pid=5556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 60.143570][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 60.143585][ T30] audit: type=1400 audit(1785173949.063:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.173568][ T30] audit: type=1400 audit(1785173949.093:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.176890][ T5596] cgroup: Unknown subsys name 'net' [ 60.203799][ T30] audit: type=1400 audit(1785173949.133:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.340328][ T5596] cgroup: Unknown subsys name 'cpuset' [ 60.348641][ T5596] cgroup: Unknown subsys name 'rlimit' [ 60.487343][ T30] audit: type=1400 audit(1785173949.403:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.512787][ T30] audit: type=1400 audit(1785173949.403:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.549385][ T30] audit: type=1400 audit(1785173949.403:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.574889][ T30] audit: type=1400 audit(1785173949.403:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.595877][ T30] audit: type=1400 audit(1785173949.403:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.620925][ T30] audit: type=1400 audit(1785173949.403:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.627125][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.653837][ T30] audit: type=1400 audit(1785173949.573:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.663692][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.726477][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.739431][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.753979][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.763007][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.764115][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.773147][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.781407][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.786669][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.795188][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.810752][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.811411][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.820622][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.826685][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.832721][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.838972][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.848592][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.855314][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.870716][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.872165][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.890639][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.900046][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.907855][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.919528][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.927929][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.937273][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.305543][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.313369][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.320672][ T5613] bridge_slave_0: entered allmulticast mode [ 65.328091][ T5613] bridge_slave_0: entered promiscuous mode [ 65.364906][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.372193][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.379600][ T5613] bridge_slave_1: entered allmulticast mode [ 65.386355][ T5613] bridge_slave_1: entered promiscuous mode [ 65.467926][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.475138][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.482335][ T5621] bridge_slave_0: entered allmulticast mode [ 65.489080][ T5621] bridge_slave_0: entered promiscuous mode [ 65.496215][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.503562][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.510899][ T5609] bridge_slave_0: entered allmulticast mode [ 65.518018][ T5609] bridge_slave_0: entered promiscuous mode [ 65.534443][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.548115][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.555367][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.563145][ T5621] bridge_slave_1: entered allmulticast mode [ 65.570142][ T5621] bridge_slave_1: entered promiscuous mode [ 65.577038][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.584352][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.592105][ T5609] bridge_slave_1: entered allmulticast mode [ 65.600403][ T5609] bridge_slave_1: entered promiscuous mode [ 65.616413][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.647704][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.654908][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.662477][ T5614] bridge_slave_0: entered allmulticast mode [ 65.669356][ T5614] bridge_slave_0: entered promiscuous mode [ 65.704311][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.711780][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.720173][ T5614] bridge_slave_1: entered allmulticast mode [ 65.726925][ T5614] bridge_slave_1: entered promiscuous mode [ 65.741360][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.748630][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.755909][ T5608] bridge_slave_0: entered allmulticast mode [ 65.762891][ T5608] bridge_slave_0: entered promiscuous mode [ 65.772206][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.783779][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.801750][ T5613] team0: Port device team_slave_0 added [ 65.807543][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.815713][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.823134][ T5608] bridge_slave_1: entered allmulticast mode [ 65.830503][ T5608] bridge_slave_1: entered promiscuous mode [ 65.838927][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.850002][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.867131][ T5613] team0: Port device team_slave_1 added [ 65.902211][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.942616][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.959407][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.966379][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.994360][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.994724][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.009634][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.015344][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.021464][ T5620] Bluetooth: hci1: command tx timeout [ 66.032076][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.034055][ T5615] Bluetooth: hci3: command tx timeout [ 66.042802][ T5611] Bluetooth: hci4: command tx timeout [ 66.049239][ T5620] Bluetooth: hci2: command tx timeout [ 66.055244][ T50] Bluetooth: hci0: command tx timeout [ 66.068561][ T5621] team0: Port device team_slave_0 added [ 66.075689][ T5609] team0: Port device team_slave_0 added [ 66.089226][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.096328][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.122509][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.145348][ T5621] team0: Port device team_slave_1 added [ 66.152849][ T5609] team0: Port device team_slave_1 added [ 66.159834][ T5614] team0: Port device team_slave_0 added [ 66.196015][ T5614] team0: Port device team_slave_1 added [ 66.212857][ T5608] team0: Port device team_slave_0 added [ 66.221230][ T5608] team0: Port device team_slave_1 added [ 66.242716][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.249805][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.275836][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.302472][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.309698][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.335953][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.353955][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.361124][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.387196][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.398952][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.405917][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.431819][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.451035][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.458128][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.484125][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.507327][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.514400][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.540481][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.551904][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.559237][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.585192][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.605822][ T5613] hsr_slave_0: entered promiscuous mode [ 66.612200][ T5613] hsr_slave_1: entered promiscuous mode [ 66.625564][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.632623][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.659142][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.739552][ T5609] hsr_slave_0: entered promiscuous mode [ 66.745855][ T5609] hsr_slave_1: entered promiscuous mode [ 66.751952][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 66.757814][ T5609] Cannot create hsr debugfs directory [ 66.779676][ T5621] hsr_slave_0: entered promiscuous mode [ 66.786202][ T5621] hsr_slave_1: entered promiscuous mode [ 66.792392][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 66.798191][ T5621] Cannot create hsr debugfs directory [ 66.817149][ T5614] hsr_slave_0: entered promiscuous mode [ 66.823583][ T5614] hsr_slave_1: entered promiscuous mode [ 66.830092][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 66.835829][ T5614] Cannot create hsr debugfs directory [ 66.870029][ T5608] hsr_slave_0: entered promiscuous mode [ 66.876446][ T5608] hsr_slave_1: entered promiscuous mode [ 66.882817][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.888565][ T5608] Cannot create hsr debugfs directory [ 67.264819][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.275949][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.283992][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.294746][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.305267][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.314756][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.331780][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.341307][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.390954][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.400049][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.413554][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.423337][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.431348][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.441120][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.450307][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.459693][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.526033][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.535547][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.551153][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.560074][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.568806][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.578889][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.587033][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.597356][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.676417][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.690437][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.711474][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.720503][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.728463][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.736968][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.745435][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.754114][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.852458][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.863382][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.872916][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.883433][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.896515][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.907873][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.915920][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.925322][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.933594][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.943379][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.965147][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.012554][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.020086][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.031506][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.042431][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.053507][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.060639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.068437][ T50] Bluetooth: hci1: command tx timeout [ 68.080184][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.087300][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.121600][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.128767][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.139561][ T50] Bluetooth: hci0: command tx timeout [ 68.145060][ T5611] Bluetooth: hci4: command tx timeout [ 68.150581][ T5620] Bluetooth: hci2: command tx timeout [ 68.153068][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.156029][ T5615] Bluetooth: hci3: command tx timeout [ 68.194021][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.201141][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.241886][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.249013][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.272494][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.354295][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.394201][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.401429][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.426535][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.436949][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.444163][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.543383][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.583275][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.590456][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.630797][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.637966][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.270215][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.305036][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.327448][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.506652][ T5613] veth0_vlan: entered promiscuous mode [ 69.526244][ T5621] veth0_vlan: entered promiscuous mode [ 69.535768][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.558089][ T5621] veth1_vlan: entered promiscuous mode [ 69.572136][ T5613] veth1_vlan: entered promiscuous mode [ 69.671214][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.686495][ T5613] veth0_macvtap: entered promiscuous mode [ 69.701826][ T5614] veth0_vlan: entered promiscuous mode [ 69.720886][ T5613] veth1_macvtap: entered promiscuous mode [ 69.734086][ T5621] veth0_macvtap: entered promiscuous mode [ 69.745965][ T5621] veth1_macvtap: entered promiscuous mode [ 69.766900][ T5614] veth1_vlan: entered promiscuous mode [ 69.780461][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.802871][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.825406][ T162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.835025][ T162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.860713][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.869890][ T162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.879630][ T162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.908723][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.924028][ T5608] veth0_vlan: entered promiscuous mode [ 69.938104][ T162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.947371][ T162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.981376][ T162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.990451][ T162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.025861][ T5608] veth1_vlan: entered promiscuous mode [ 70.033277][ T5614] veth0_macvtap: entered promiscuous mode [ 70.060081][ T5614] veth1_macvtap: entered promiscuous mode [ 70.068612][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.079461][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.100271][ T5609] veth0_vlan: entered promiscuous mode [ 70.138702][ T5615] Bluetooth: hci1: command tx timeout [ 70.146263][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.151953][ T5609] veth1_vlan: entered promiscuous mode [ 70.156552][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.188130][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.209758][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 70.209774][ T30] audit: type=1400 audit(1785173959.133:152): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.wq0glP/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.237097][ T5608] veth0_macvtap: entered promiscuous mode [ 70.244584][ T5615] Bluetooth: hci3: command tx timeout [ 70.245950][ T5620] Bluetooth: hci2: command tx timeout [ 70.251682][ T5615] Bluetooth: hci4: command tx timeout [ 70.251701][ T5615] Bluetooth: hci0: command tx timeout [ 70.251868][ T30] audit: type=1400 audit(1785173959.133:153): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.251908][ T30] audit: type=1400 audit(1785173959.133:154): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.wq0glP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.251943][ T30] audit: type=1400 audit(1785173959.133:155): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.251975][ T30] audit: type=1400 audit(1785173959.133:156): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.wq0glP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.252008][ T30] audit: type=1400 audit(1785173959.133:157): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.wq0glP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.252039][ T30] audit: type=1400 audit(1785173959.133:158): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.267416][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.283828][ T30] audit: type=1400 audit(1785173959.203:159): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.314539][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.319111][ T30] audit: type=1400 audit(1785173959.203:160): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="gadgetfs" ino=7043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.344774][ T5608] veth1_macvtap: entered promiscuous mode [ 70.393827][ T30] audit: type=1400 audit(1785173959.203:161): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.422796][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.507151][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.521499][ T5609] veth0_macvtap: entered promiscuous mode [ 70.547444][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.600380][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.613000][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.622368][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.641213][ T5609] veth1_macvtap: entered promiscuous mode [ 70.651839][ T3342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.669729][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.678419][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.679081][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.710601][ T3342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.724386][ T3342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.746740][ T3342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.761251][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.804803][ T3342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.841457][ T3342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.864922][ T3342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.915931][ T5803] NFSD: Failed to start, no listeners configured. [ 70.936708][ T3342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.959368][ T3342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.992332][ T3342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.041828][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.066496][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.093990][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.106692][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.135945][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.149694][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.190391][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.222750][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.247191][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.296327][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.331959][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.366188][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.934674][ T5621] svc: failed to register nfsdv3 RPC service (errno 111). [ 71.952632][ T5621] svc: failed to register nfsaclv3 RPC service (errno 111). [ 71.970704][ T5621] failed to unregister tcp with rpcbind [ 72.039540][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.063662][ T5835] netlink: ct family unspecified [ 72.074187][ T5835] openvswitch: netlink: Actions may not be safe on all matching packets [ 72.214188][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.227927][ T5620] Bluetooth: hci1: command tx timeout [ 72.261748][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.279131][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.288321][ T10] usb 5-1: SerialNumber: syz [ 72.297973][ T5620] Bluetooth: hci0: command tx timeout [ 72.300813][ T5615] Bluetooth: hci3: command tx timeout [ 72.307807][ T5620] Bluetooth: hci2: command tx timeout [ 72.309562][ T5611] Bluetooth: hci4: command tx timeout [ 72.460220][ T5621] svc: failed to register nfsdv3 RPC service (errno 111). [ 72.482227][ T5621] svc: failed to register nfsaclv3 RPC service (errno 111). [ 72.516629][ T5621] failed to unregister tcp with rpcbind [ 72.532488][ T5621] svc: failed to register nfsdv3 RPC service (errno 97). [ 72.558052][ T5621] svc: failed to register nfsaclv3 RPC service (errno 97). [ 72.571835][ T5621] failed to unregister tcp with rpcbind [ 72.599282][ T5841] infiniband syz0: set active [ 72.605709][ T5841] infiniband syz0: added veth0 [ 72.652253][ T5841] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 72.668943][ T5841] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 72.690508][ T5841] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 72.743619][ T5841] RDS/IB: syz0: added [ 72.758114][ T5841] smc: adding ib device syz0 with port count 1 [ 72.765750][ T5841] smc: ib device syz0 port 1 has no pnetid [ 72.964109][ T10] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 74.200846][ T29] usb 5-1: USB disconnect, device number 2 [ 74.232029][ T29] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 74.261400][ T5856] siw: device registration error -23 [ 74.268364][ T5867] rdma_rxe: rxe_newlink: failed to add veth0 [ 74.624315][ T48] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.659659][ T48] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698387][ T5869] infiniband syz1: set active [ 74.703313][ T5869] infiniband syz1: added veth1 [ 74.709931][ T5869] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 74.713661][ T5869] infiniband syz1: Couldn't open port 1 [ 74.728328][ T5887] NFSD: Unable to initialize client recovery tracking! (-110) [ 74.737026][ T5887] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 74.746579][ T5869] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.757712][ T5887] NFSD: starting 90-second grace period (net f00004d1) [ 74.815563][ T5869] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.855337][ T5869] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.948442][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 74.979953][ T5869] RDS/IB: syz1: added [ 75.007118][ T5869] smc: adding ib device syz1 with port count 1 [ 75.035754][ T5869] smc: ib device syz1 port 1 has no pnetid [ 75.231701][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 75.231718][ T30] audit: type=1400 audit(1785173964.143:224): avc: denied { mounton } for pid=5934 comm="syz.3.33" path="/9/mnt" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.367286][ T30] audit: type=1400 audit(1785173964.203:225): avc: denied { read } for pid=5942 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.426953][ T5951] atomic_op ffff88807dc53198 conn xmit_atomic 0000000000000000 [ 75.432193][ T5939] svc: failed to register lockdv1 RPC service (errno 111). [ 75.472549][ T5939] lockd_up: makesock failed, error=-111 [ 75.497313][ T30] audit: type=1400 audit(1785173964.203:226): avc: denied { open } for pid=5942 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.793433][ T5939] svc: failed to register nfsdv3 RPC service (errno 111). [ 75.820688][ T30] audit: type=1400 audit(1785173964.733:227): avc: denied { write } for pid=5938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.832615][ T5939] svc: failed to register nfsaclv3 RPC service (errno 111). [ 75.866137][ T5939] failed to unregister tcp with rpcbind [ 75.872194][ T30] audit: type=1400 audit(1785173964.733:228): avc: denied { create } for pid=5938 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.904339][ T5939] svc: failed to register nfsdv3 RPC service (errno 97). [ 75.922906][ T5939] svc: failed to register nfsaclv3 RPC service (errno 97). [ 75.932583][ T30] audit: type=1400 audit(1785173964.733:229): avc: denied { write } for pid=5938 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.941799][ T5939] failed to unregister tcp with rpcbind [ 76.004118][ T30] audit: type=1400 audit(1785173964.743:230): avc: denied { append } for pid=5938 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.045777][ T30] audit: type=1400 audit(1785173964.913:231): avc: denied { write } for pid=5967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.114020][ T30] audit: type=1400 audit(1785173964.913:232): avc: denied { unlink } for pid=5967 comm="rm" name="resolv.conf.lapb6.link" dev="tmpfs" ino=2024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.122834][ T5966] svc: failed to register lockdv1 RPC service (errno 111). [ 76.293246][ T5966] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.302442][ T5966] svc: failed to register nfsaclv3 RPC service (errno 111). [ 76.330761][ T5966] failed to unregister tcp with rpcbind [ 76.350300][ T5966] svc: failed to register nfsdv3 RPC service (errno 97). [ 76.368770][ T5966] svc: failed to register nfsaclv3 RPC service (errno 97). [ 76.386542][ T5966] failed to unregister tcp with rpcbind [ 76.457474][ T30] audit: type=1400 audit(1785173965.373:233): avc: denied { getopt } for pid=5982 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.471988][ T5980] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.539828][ T5980] svc: failed to register nfsaclv3 RPC service (errno 111). [ 76.694276][ T5985] NFSD: Failed to start, no listeners configured. [ 76.869261][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 77.965756][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.52'. [ 81.813161][ T1614] cfg80211: failed to load regulatory.db [ 178.553171][ C1] sched: DL replenish lagged too much [ 282.547502][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 282.554489][ C1] rcu: 0-...!: (1 GPs behind) idle=752c/1/0x4000000000000000 softirq=15848/15865 fqs=3 [ 282.564697][ C1] rcu: hardirqs softirqs csw/system [ 282.571102][ C1] rcu: number: 2 59 9 [ 282.577500][ C1] rcu: cputime: 0 12 20 ==> 105050(ms) [ 282.585372][ C1] rcu: (detected by 1, t=10502 jiffies, g=13729, q=790 ncpus=2) [ 282.593076][ C1] Sending NMI from CPU 1 to CPUs 0: [ 282.593100][ C0] NMI backtrace for cpu 0 [ 282.593113][ C0] CPU: 0 UID: 0 PID: 3302 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 282.593129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 282.593138][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 282.593161][ C0] RIP: 0010:mark_lock+0x0/0xa20 [ 282.593178][ C0] Code: f6 48 c7 c7 a0 4c ae 8e e8 3d df 51 ff e9 5c fd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 53 48 83 e4 [ 282.593190][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000046 [ 282.593200][ C0] RAX: 0000000000000001 RBX: ffff8880343931a8 RCX: 0000000000000000 [ 282.593209][ C0] RDX: 0000000000000000 RSI: ffff8880343931a8 RDI: ffff888034392540 [ 282.593217][ C0] RBP: ffff888034392540 R08: 0000000000000001 R09: 0000000000000002 [ 282.593225][ C0] R10: 0000000000000004 R11: 0000000000000005 R12: 0000000000000000 [ 282.593232][ C0] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000005 [ 282.593240][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 282.593253][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.593262][ C0] CR2: 00007ffe14a79f52 CR3: 00000000761d8000 CR4: 00000000003526f0 [ 282.593270][ C0] Call Trace: [ 282.593275][ C0] [ 282.593279][ C0] __lock_acquire+0x10a8/0x1a40 [ 282.593298][ C0] ? do_raw_spin_lock+0x128/0x260 [ 282.593315][ C0] lock_acquire+0x1b9/0x370 [ 282.593330][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 282.593347][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 282.593366][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 282.593391][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 282.593407][ C0] debug_object_deactivate+0x135/0x3b0 [ 282.593424][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 282.593441][ C0] ? timerqueue_linked_add+0x260/0x430 [ 282.593461][ C0] __hrtimer_run_queues+0x2e9/0x9c0 [ 282.593483][ C0] hrtimer_interrupt+0x3e5/0x940 [ 282.593499][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 282.593520][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 282.593535][ C0] [ 282.593539][ C0] [ 282.593544][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.593559][ C0] RIP: 0010:sched_clock_noinstr+0x4/0x20 [ 282.593578][ C0] Code: 89 4c 24 0c 48 89 44 24 10 e8 e8 c7 7c f5 8b 4c 24 0c eb 8a 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 77 28 00 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 282.593589][ C0] RSP: 0018:ffffc9000e44e9a0 EFLAGS: 00000283 [ 282.593598][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 282.593606][ C0] RDX: ffff888034392540 RSI: ffffffff82859a3a RDI: ffffea0000cb9800 [ 282.593614][ C0] RBP: 0000000000000003 R08: 0000000000001000 R09: 0000000000000000 [ 282.593621][ C0] R10: ffffed10065cc000 R11: dffffc0000000000 R12: 00000000000d2820 [ 282.593629][ C0] R13: 1ffff92001c89d3e R14: 00000000000d2820 R15: dffffc0000000000 [ 282.593640][ C0] ? __set_page_owner+0x7a/0x540 [ 282.593658][ C0] local_clock_noinstr+0xd/0x100 [ 282.593672][ C0] local_clock+0x10/0x30 [ 282.593686][ C0] __set_page_owner+0x7f/0x540 [ 282.593703][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 282.593718][ C0] ? bad_range+0x257/0x3f0 [ 282.593734][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 282.593748][ C0] ? get_page_from_freelist+0xf25/0x3530 [ 282.593762][ C0] post_alloc_hook+0xfd/0x120 [ 282.593781][ C0] get_page_from_freelist+0xf48/0x3530 [ 282.593800][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 282.593813][ C0] ? prepare_alloc_pages+0x1f0/0x5f0 [ 282.593829][ C0] ? __lock_acquire+0x49f/0x1a40 [ 282.593845][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 282.593858][ C0] ? __lock_acquire+0x49f/0x1a40 [ 282.593875][ C0] ? __lock_acquire+0x49f/0x1a40 [ 282.593889][ C0] ? lock_acquire+0x1b9/0x370 [ 282.593903][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.593918][ C0] ? do_raw_spin_lock+0x128/0x260 [ 282.593936][ C0] ? mark_held_locks+0x40/0x70 [ 282.593952][ C0] ? __refill_objects_node+0x369/0xaa0 [ 282.593964][ C0] ? __kmalloc_noprof+0x170/0x820 [ 282.593981][ C0] new_slab+0xa2/0x640 [ 282.593993][ C0] refill_objects+0xe3/0x410 [ 282.594008][ C0] __pcs_replace_empty_main+0x376/0x680 [ 282.594028][ C0] __kmalloc_noprof+0x66d/0x820 [ 282.594043][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 282.594064][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 282.594086][ C0] ? mark_held_locks+0x40/0x70 [ 282.594100][ C0] ? find_held_lock+0x2b/0x80 [ 282.594119][ C0] ? __kfree_rcu_sheaf+0x195/0x730 [ 282.594133][ C0] ? __kfree_rcu_sheaf+0x195/0x730 [ 282.594148][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 282.594170][ C0] ? kvfree_call_rcu+0x1be/0x4f0 [ 282.594190][ C0] ? __asan_memcpy+0x3c/0x60 [ 282.594203][ C0] ieee80211_inform_bss+0x159/0x1170 [ 282.594222][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 282.594241][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 282.594259][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 282.594275][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 282.594292][ C0] ? unwind_next_frame+0x3be/0x2090 [ 282.594307][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 282.594324][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 282.594347][ C0] ? stack_trace_save+0x8e/0xc0 [ 282.594360][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 282.594375][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 282.594395][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 282.594411][ C0] ? __kmalloc_noprof+0x322/0x820 [ 282.594425][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 282.594444][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 282.594460][ C0] ? process_one_work+0xa23/0x1940 [ 282.594473][ C0] ? worker_thread+0x5ef/0xe50 [ 282.594485][ C0] ? kthread+0x370/0x450 [ 282.594497][ C0] ? ret_from_fork+0x72b/0xd50 [ 282.594514][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 282.594533][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 282.594550][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.594566][ C0] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 282.594586][ C0] ? __lock_acquire+0x49f/0x1a40 [ 282.594601][ C0] ? __lock_acquire+0x49f/0x1a40 [ 282.594619][ C0] ? __lock_acquire+0x49f/0x1a40 [ 282.594633][ C0] ? find_held_lock+0x2b/0x80 [ 282.594651][ C0] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 282.594669][ C0] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 282.594688][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 282.594707][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 282.594725][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 282.594745][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 282.594761][ C0] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 282.594779][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 282.594800][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 282.594819][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 282.594837][ C0] process_one_work+0xa23/0x1940 [ 282.594854][ C0] ? __pfx_process_one_work+0x10/0x10 [ 282.594869][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 282.594886][ C0] worker_thread+0x5ef/0xe50 [ 282.594902][ C0] ? kthread+0x13a/0x450 [ 282.594913][ C0] ? __pfx_worker_thread+0x10/0x10 [ 282.594926][ C0] kthread+0x370/0x450 [ 282.594938][ C0] ? __pfx_kthread+0x10/0x10 [ 282.594951][ C0] ret_from_fork+0x72b/0xd50 [ 282.594968][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 282.594985][ C0] ? __switch_to+0x800/0x10f0 [ 282.594998][ C0] ? __pfx_kthread+0x10/0x10 [ 282.595010][ C0] ret_from_fork_asm+0x1a/0x30 [ 282.595031][ C0] [ 282.595095][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10495 jiffies! g13729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 283.346962][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=4548 [ 283.354753][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g13729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 283.366106][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 283.376059][ C1] rcu: RCU grace-period kthread stack dump: [ 283.381945][ C1] task:rcu_preempt state:I stack:28872 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 283.393875][ C1] Call Trace: [ 283.397155][ C1] [ 283.400080][ C1] __schedule+0x125c/0x6730 [ 283.404596][ C1] ? __pfx___schedule+0x10/0x10 [ 283.409441][ C1] ? find_held_lock+0x2b/0x80 [ 283.414121][ C1] ? schedule+0x225/0x2c0 [ 283.418453][ C1] schedule+0xdd/0x2c0 [ 283.422515][ C1] schedule_timeout+0x127/0x280 [ 283.427370][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 283.432745][ C1] ? __pfx_process_timeout+0x10/0x10 [ 283.438027][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 283.443825][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 283.449290][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 283.454068][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 283.459375][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 283.464309][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 283.469500][ C1] ? rcu_is_watching+0x12/0xc0 [ 283.474272][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 283.480073][ C1] rcu_gp_kthread+0x179/0x230 [ 283.484746][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 283.489936][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 283.495736][ C1] ? __kthread_parkme+0x18c/0x230 [ 283.500760][ C1] ? kthread+0x13a/0x450 [ 283.504991][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 283.510185][ C1] kthread+0x370/0x450 [ 283.514245][ C1] ? __pfx_kthread+0x10/0x10 [ 283.518827][ C1] ret_from_fork+0x72b/0xd50 [ 283.523416][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 283.528528][ C1] ? __switch_to+0x800/0x10f0 [ 283.533201][ C1] ? __pfx_kthread+0x10/0x10 [ 283.537781][ C1] ret_from_fork_asm+0x1a/0x30 [ 283.542557][ C1] [ 283.545566][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 283.551885][ C1] CPU: 1 UID: 0 PID: 162 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 283.561241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 283.571284][ C1] Workqueue: events_unbound toggle_allocation_gate [ 283.577785][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 283.583409][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 283.603018][ C1] RSP: 0018:ffffc90000a08240 EFLAGS: 00000246 [ 283.609092][ C1] RAX: 000000000003e214 RBX: 0000000000000003 RCX: 0000000000000004 [ 283.617069][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 283.625051][ C1] RBP: ffff8880532a0150 R08: 0000000000000001 R09: 0000000000000000 [ 283.633030][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 283.641005][ C1] R13: 0000000000000003 R14: ffff8880b853c4c0 R15: 0000000000000000 [ 283.648968][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 283.657909][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.664500][ C1] CR2: 00007f4b865e6ee0 CR3: 000000000e994000 CR4: 00000000003526f0 [ 283.672465][ C1] Call Trace: [ 283.675736][ C1] [ 283.678573][ C1] kvm_wait+0x124/0x160 [ 283.682746][ C1] __pv_queued_spin_lock_slowpath+0x4b0/0xc00 [ 283.688857][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 283.695483][ C1] do_raw_spin_lock+0x1e0/0x260 [ 283.700341][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.705712][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 283.712126][ C1] cfg80211_inform_single_bss_data+0x752/0x1dc0 [ 283.718373][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 283.725062][ C1] ? mark_held_locks+0x40/0x70 [ 283.729824][ C1] ? mark_held_locks+0x40/0x70 [ 283.734591][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 283.740394][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 283.746030][ C1] ? __lock_acquire+0x49f/0x1a40 [ 283.750966][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 283.756773][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 283.762917][ C1] ? find_held_lock+0x2b/0x80 [ 283.767636][ C1] ? unwind_next_frame+0x3be/0x2090 [ 283.772859][ C1] ? unwind_next_frame+0x3be/0x2090 [ 283.778093][ C1] ? __lock_acquire+0x49f/0x1a40 [ 283.783062][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 283.789148][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 283.794786][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 283.800958][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 283.806802][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 283.811783][ C1] ? __lock_acquire+0x49f/0x1a40 [ 283.816739][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 283.822659][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 283.829333][ C1] ? do_raw_spin_lock+0x128/0x260 [ 283.834401][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 283.839600][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 283.844913][ C1] ieee80211_rx_list+0xf19/0x2160 [ 283.849980][ C1] ? lock_acquire+0x1b9/0x370 [ 283.854653][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 283.860140][ C1] ieee80211_rx_napi+0xdc/0x400 [ 283.865019][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 283.870498][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 283.875707][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 283.881512][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 283.887520][ C1] tasklet_action_common+0x2de/0x3d0 [ 283.892848][ C1] handle_softirqs+0x1ea/0x9b0 [ 283.897643][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 283.902924][ C1] ? _raw_spin_unlock+0x28/0x50 [ 283.907796][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 283.913462][ C1] __irq_exit_rcu+0x162/0x210 [ 283.918158][ C1] irq_exit_rcu+0x9/0x30 [ 283.922418][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 283.928091][ C1] [ 283.931045][ C1] [ 283.933984][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.939969][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 283.946665][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 283.966284][ C1] RSP: 0018:ffffc90002e37858 EFLAGS: 00000293 [ 283.972358][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdc702 [ 283.980336][ C1] RDX: ffff888020bda540 RSI: ffffffff81fdc6dc RDI: ffff888020bda540 [ 283.988336][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 283.996331][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 284.004309][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 284.012293][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 284.018378][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 284.024474][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 284.030578][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 284.035636][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 284.041962][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 284.047340][ C1] ? __pfx___text_poke+0x10/0x10 [ 284.052272][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 284.057301][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 284.062408][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 284.068309][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 284.074057][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 284.079965][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 284.086211][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 284.092446][ C1] ? find_held_lock+0x2b/0x80 [ 284.097128][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 284.103112][ C1] jump_label_update+0x37a/0x550 [ 284.108076][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 284.113988][ C1] static_key_enable+0x1a/0x20 [ 284.118759][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 284.124044][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 284.129940][ C1] ? rcu_is_watching+0x12/0xc0 [ 284.134707][ C1] process_one_work+0xa23/0x1940 [ 284.139649][ C1] ? __pfx_process_one_work+0x10/0x10 [ 284.145025][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 284.150940][ C1] worker_thread+0x5ef/0xe50 [ 284.155573][ C1] ? __pfx_worker_thread+0x10/0x10 [ 284.160698][ C1] ? kthread+0x13a/0x450 [ 284.164933][ C1] ? __pfx_worker_thread+0x10/0x10 [ 284.170034][ C1] kthread+0x370/0x450 [ 284.174098][ C1] ? __pfx_kthread+0x10/0x10 [ 284.178684][ C1] ret_from_fork+0x72b/0xd50 [ 284.183274][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 284.188387][ C1] ? __switch_to+0x800/0x10f0 [ 284.193054][ C1] ? __pfx_kthread+0x10/0x10 [ 284.197641][ C1] ret_from_fork_asm+0x1a/0x30 [ 284.202422][ C1]