last executing test programs: 4.859666871s ago: executing program 0 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 4.730871558s ago: executing program 0 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40005) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000200)=0x5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) 4.295473236s ago: executing program 4 (id=236): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) clock_nanosleep(0xa, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002600)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x4f, 0x0, &(0x7f0000002780)="480810b7fa81d08be297c3d0a210b859a911ec1a9e852408245c92b0a3b474eca2fd51801e869214bdff3dfffbfbf3e09d1d459588f4bdccf6c887a1a1b07af0208856b25a8ff078fc3a51e05ac51c"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000180)=0x3, 0x12) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffc, 0x3f8, 0x0, 0x72, 0x0, 0x2}, 0x9c) 3.301500314s ago: executing program 3 (id=239): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0xa654, "49eb663cea3b03e971a2211a078c9675b78a9f47fda1db33533dbeae2449fbb8", 0x4, 0x1}) 3.300622764s ago: executing program 4 (id=240): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) socket(0x11, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket$netlink(0x10, 0x3, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.147265691s ago: executing program 3 (id=241): r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x6}}, 0x4, 0xb46, 0x5, 0x7, 0x7f7b}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x30}}, 0x0) accept4(r2, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 3.122033034s ago: executing program 3 (id=242): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket(0x1d, 0x2, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.027127407s ago: executing program 1 (id=243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180816ffffff00000000000086291b4010ff530500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000300)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x6, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) read(r7, &(0x7f0000001180)=""/4096, 0x1000) pread64(r6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440fdd544f9b0176aeeef844967f4cbb2a56842c683bd04fcb9b85331f3e5d78605f7e72a5dcdbd67196ca41d2aea01e4bb568a09730c70000000500674d363d207a4b9194175a14bc040ef5a5a34989b90decd8d5df4acf3b486829fadaf16d47268ec47f6e0c60c8cf5e4da2824c50185a2dc218846279", @ANYRES16=r1, @ANYRESDEC], 0x7c}}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010"]) tkill(r5, 0xb) 1.979541359s ago: executing program 2 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 1.857469381s ago: executing program 1 (id=246): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x4}}}, 0x24}}, 0x0) 1.80422911s ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r4, 0x333, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x0) 1.776739088s ago: executing program 3 (id=248): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) clock_nanosleep(0xa, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002600)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x4f, 0x0, &(0x7f0000002780)="480810b7fa81d08be297c3d0a210b859a911ec1a9e852408245c92b0a3b474eca2fd51801e869214bdff3dfffbfbf3e09d1d459588f4bdccf6c887a1a1b07af0208856b25a8ff078fc3a51e05ac51c"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 1.707128396s ago: executing program 2 (id=249): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000012002927000000000040000028001a00fc020000fffff0000000000000000000fe880000000000000041bf03d47f56d75e905f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000380)=0x20) write$binfmt_elf32(r6, 0x0, 0x4cd) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0xfff7fffc, 0x0, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1, 0x329}, 0x0, {[0x5a, 0x0, 0xffffffff, 0x5]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0xb24e, @private2}, {0xa, 0x4e24, 0x0, @empty}, 0x0, {[0x2]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x5}, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38001dbd000010f05f010000000000000064345729292de18857fbc7", @ANYRES32=r8, @ANYBLOB="00000000d1100100180016801400018010000200020000003a0a0000ff7fffff"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000880) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000aaaa1086dd600106ef00081100fe8000000000000000000000000000bbff02000000000000000000000000000100000e2200089078000000"], 0x0) 1.69091519s ago: executing program 0 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000240)={0xb6, 0x0, 0xf45}) ioctl$KVM_RUN(r2, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.318189118s ago: executing program 1 (id=251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r1, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x407f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.272068835s ago: executing program 1 (id=252): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.21403642s ago: executing program 1 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 1.190621604s ago: executing program 1 (id=254): keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0xe0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) 907.724459ms ago: executing program 3 (id=255): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x32, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) 747.177819ms ago: executing program 2 (id=256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pipe(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGDEV(r5, 0x540e, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 746.600551ms ago: executing program 0 (id=257): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, r0, &(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0xa1fc48f9ddfbbe16, 0x2000, 0x8dfa35d9876d6641, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 683.898741ms ago: executing program 0 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40005) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0x5, 0x4) preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) 495.031049ms ago: executing program 2 (id=259): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) chdir(&(0x7f00000002c0)='./file0\x00') sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) 426.423035ms ago: executing program 2 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 421.16515ms ago: executing program 4 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) 390.912283ms ago: executing program 4 (id=262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r1, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x407f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) 362.181511ms ago: executing program 2 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r6, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0xc000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfe, @empty}, 0x10) io_setup(0x81, &(0x7f0000000180)) 331.926533ms ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 95.448126ms ago: executing program 4 (id=265): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x38080862, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4) ioctl$KVM_SET_CPUID2(r7, 0xc048aeca, &(0x7f0000000180)=ANY=[]) setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f00000000c0), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=266): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f413, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 41.731344][ T29] audit: type=1400 audit(1735860732.479:88): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.732421][ T5803] cgroup: Unknown subsys name 'net' [ 41.754070][ T29] audit: type=1400 audit(1735860732.479:89): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.782311][ T29] audit: type=1400 audit(1735860732.529:90): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.941356][ T5803] cgroup: Unknown subsys name 'cpuset' [ 41.947902][ T5803] cgroup: Unknown subsys name 'rlimit' [ 42.023536][ T29] audit: type=1400 audit(1735860732.769:91): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.046905][ T29] audit: type=1400 audit(1735860732.769:92): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.070321][ T29] audit: type=1400 audit(1735860732.769:93): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.073596][ T5806] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.090886][ T29] audit: type=1400 audit(1735860732.769:94): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.119633][ T29] audit: type=1400 audit(1735860732.769:95): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.144544][ T29] audit: type=1400 audit(1735860732.769:96): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.167943][ T29] audit: type=1400 audit(1735860732.789:97): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.786331][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.494998][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.502410][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.517118][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.520216][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.524475][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.531471][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 46.545703][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.545889][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.552870][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.564147][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.573676][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 46.573967][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.581676][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.588472][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.594863][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.602392][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.616359][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 46.616621][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 46.627732][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 46.630893][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.639026][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.644547][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.651769][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 46.668622][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.675983][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.683253][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 46.693983][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 46.701010][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 46.708295][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.715306][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 46.767829][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 46.767844][ T29] audit: type=1400 audit(1735860737.509:110): avc: denied { module_request } for pid=5814 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.825073][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 46.898786][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.906173][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.913526][ T5814] bridge_slave_0: entered allmulticast mode [ 46.919745][ T5814] bridge_slave_0: entered promiscuous mode [ 46.926782][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.933862][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.941023][ T5814] bridge_slave_1: entered allmulticast mode [ 46.947364][ T5814] bridge_slave_1: entered promiscuous mode [ 46.999894][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 47.011814][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 47.019882][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 47.029088][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.053304][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.087722][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 47.097938][ T5814] team0: Port device team_slave_0 added [ 47.110779][ T5814] team0: Port device team_slave_1 added [ 47.139740][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.146951][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.154661][ T5815] bridge_slave_0: entered allmulticast mode [ 47.161238][ T5815] bridge_slave_0: entered promiscuous mode [ 47.167726][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.175356][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.182860][ T5815] bridge_slave_1: entered allmulticast mode [ 47.189060][ T5815] bridge_slave_1: entered promiscuous mode [ 47.201821][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.208908][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.216097][ T5822] bridge_slave_0: entered allmulticast mode [ 47.222343][ T5822] bridge_slave_0: entered promiscuous mode [ 47.233180][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.240461][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.247529][ T5816] bridge_slave_0: entered allmulticast mode [ 47.254399][ T5816] bridge_slave_0: entered promiscuous mode [ 47.261926][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.268862][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.294774][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.305593][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.312689][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.319760][ T5822] bridge_slave_1: entered allmulticast mode [ 47.326085][ T5822] bridge_slave_1: entered promiscuous mode [ 47.338169][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.347308][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.354641][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.361949][ T5816] bridge_slave_1: entered allmulticast mode [ 47.368139][ T5816] bridge_slave_1: entered promiscuous mode [ 47.374562][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.381606][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.407584][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.425074][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.444277][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.463750][ T5815] team0: Port device team_slave_0 added [ 47.470427][ T5815] team0: Port device team_slave_1 added [ 47.480792][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.494038][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.505845][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.513142][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.520611][ T5827] bridge_slave_0: entered allmulticast mode [ 47.526821][ T5827] bridge_slave_0: entered promiscuous mode [ 47.536704][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.556879][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.564343][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.571564][ T5827] bridge_slave_1: entered allmulticast mode [ 47.577788][ T5827] bridge_slave_1: entered promiscuous mode [ 47.591616][ T5816] team0: Port device team_slave_0 added [ 47.597932][ T5816] team0: Port device team_slave_1 added [ 47.603956][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.611155][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.637073][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.648592][ T5822] team0: Port device team_slave_0 added [ 47.658839][ T5814] hsr_slave_0: entered promiscuous mode [ 47.664798][ T5814] hsr_slave_1: entered promiscuous mode [ 47.674418][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.681410][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.707451][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.718777][ T5822] team0: Port device team_slave_1 added [ 47.740809][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.754439][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.761996][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.788440][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.799844][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.806821][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.832727][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.847016][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.871031][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.877980][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.904375][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.921500][ T5827] team0: Port device team_slave_0 added [ 47.931788][ T5815] hsr_slave_0: entered promiscuous mode [ 47.937669][ T5815] hsr_slave_1: entered promiscuous mode [ 47.943640][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.951779][ T5815] Cannot create hsr debugfs directory [ 47.957513][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.964565][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.990602][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.003450][ T5827] team0: Port device team_slave_1 added [ 48.035488][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.042495][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.068595][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.083203][ T5816] hsr_slave_0: entered promiscuous mode [ 48.089119][ T5816] hsr_slave_1: entered promiscuous mode [ 48.095018][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.102596][ T5816] Cannot create hsr debugfs directory [ 48.113080][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.120106][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.146254][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.186748][ T5822] hsr_slave_0: entered promiscuous mode [ 48.192741][ T5822] hsr_slave_1: entered promiscuous mode [ 48.198500][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.206544][ T5822] Cannot create hsr debugfs directory [ 48.221360][ T5827] hsr_slave_0: entered promiscuous mode [ 48.227223][ T5827] hsr_slave_1: entered promiscuous mode [ 48.233113][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.240679][ T5827] Cannot create hsr debugfs directory [ 48.321045][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.329351][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.346057][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.362619][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.386558][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.395158][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.407178][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.420512][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.433204][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.446992][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.455550][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.463798][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.502198][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.533286][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.541473][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.549397][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.557963][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.566065][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.574036][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.582045][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.606525][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.623126][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.645654][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.657272][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.672604][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.679690][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.694750][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.701804][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.711132][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.728398][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.740496][ T5831] Bluetooth: hci3: command tx timeout [ 48.740514][ T5824] Bluetooth: hci4: command tx timeout [ 48.745891][ T5820] Bluetooth: hci2: command tx timeout [ 48.751363][ T5831] Bluetooth: hci1: command tx timeout [ 48.756664][ T5820] Bluetooth: hci0: command tx timeout [ 48.763801][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.776746][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.783816][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.804690][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.815316][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.828041][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.835105][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.844456][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.851520][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.859845][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.866913][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.879362][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.902084][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.909170][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.910855][ T29] audit: type=1400 audit(1735860739.649:111): avc: denied { sys_module } for pid=5814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.962302][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.969370][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.985682][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.006329][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.023973][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.035046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.042161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.061398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.068490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.085783][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.097135][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.142929][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.171163][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.196428][ T5814] veth0_vlan: entered promiscuous mode [ 49.212963][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.239521][ T5814] veth1_vlan: entered promiscuous mode [ 49.275796][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.285600][ T5816] veth0_vlan: entered promiscuous mode [ 49.297121][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.309530][ T5814] veth0_macvtap: entered promiscuous mode [ 49.317882][ T5816] veth1_vlan: entered promiscuous mode [ 49.337938][ T5814] veth1_macvtap: entered promiscuous mode [ 49.372039][ T5816] veth0_macvtap: entered promiscuous mode [ 49.379331][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.386933][ T5815] veth0_vlan: entered promiscuous mode [ 49.398345][ T5827] veth0_vlan: entered promiscuous mode [ 49.405525][ T5816] veth1_macvtap: entered promiscuous mode [ 49.416027][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.434679][ T5815] veth1_vlan: entered promiscuous mode [ 49.454034][ T5827] veth1_vlan: entered promiscuous mode [ 49.461260][ T5822] veth0_vlan: entered promiscuous mode [ 49.467026][ T5815] veth0_macvtap: entered promiscuous mode [ 49.477464][ T5815] veth1_macvtap: entered promiscuous mode [ 49.484253][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.494841][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.505306][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.513141][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.521952][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.530871][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.539564][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.554380][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.565420][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.576362][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.586614][ T5822] veth1_vlan: entered promiscuous mode [ 49.597316][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.606261][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.615193][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.624276][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.637624][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.648653][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.658593][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.669111][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.679746][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.688686][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.699404][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.709757][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.720442][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.730831][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.743020][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.752172][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.761119][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.769777][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.793748][ T5827] veth0_macvtap: entered promiscuous mode [ 49.812684][ T5827] veth1_macvtap: entered promiscuous mode [ 49.837774][ T5822] veth0_macvtap: entered promiscuous mode [ 49.845999][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.849641][ T5822] veth1_macvtap: entered promiscuous mode [ 49.862849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.877934][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.881372][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.897631][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.898325][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.915570][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.926024][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.935886][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.947861][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.958606][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.976879][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.988500][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.998898][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.009889][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.019853][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.030794][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.041172][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.050436][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.053697][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.058291][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.070886][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.086379][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.096856][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.106761][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.117229][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.127224][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.137684][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.148225][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.163811][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.174462][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.184599][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.195135][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.205061][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.215508][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.225388][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.236063][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.246960][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.258339][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.258936][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.275758][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.281108][ T29] audit: type=1400 audit(1735860741.019:112): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YYihpM/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.284940][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.311239][ T29] audit: type=1400 audit(1735860741.019:113): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.317652][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.341236][ T29] audit: type=1400 audit(1735860741.019:114): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YYihpM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.347450][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.382573][ T29] audit: type=1400 audit(1735860741.019:115): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.386363][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.410412][ T29] audit: type=1400 audit(1735860741.019:116): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YYihpM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.414328][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.440819][ T29] audit: type=1400 audit(1735860741.019:117): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YYihpM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.450396][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478762][ T29] audit: type=1400 audit(1735860741.059:118): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.485280][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.513799][ T29] audit: type=1400 audit(1735860741.149:119): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.565630][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.574615][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.586448][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.586454][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.604568][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.628876][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.650294][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.662694][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.687183][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.739556][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.745395][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.767779][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.783570][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.792887][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.823099][ T5820] Bluetooth: hci0: command tx timeout [ 50.831461][ T5820] Bluetooth: hci1: command tx timeout [ 50.836917][ T5820] Bluetooth: hci4: command tx timeout [ 50.836924][ T5143] Bluetooth: hci2: command tx timeout [ 50.836943][ T5143] Bluetooth: hci3: command tx timeout [ 51.560140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.662511][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 51.786037][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 51.786052][ T29] audit: type=1400 audit(1735860742.529:155): avc: denied { execute } for pid=5933 comm="syz.0.12" path="/1/cpu.stat" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.820184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.896506][ T29] audit: type=1400 audit(1735860742.639:156): avc: denied { create } for pid=5930 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.083099][ T29] audit: type=1400 audit(1735860742.639:157): avc: denied { ioctl } for pid=5930 comm="syz.1.10" path="socket:[7940]" dev="sockfs" ino=7940 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.120121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.160079][ T29] audit: type=1400 audit(1735860742.779:158): avc: denied { create } for pid=5930 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.222270][ T29] audit: type=1400 audit(1735860742.879:159): avc: denied { read } for pid=5936 comm="syz.2.11" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.245228][ T29] audit: type=1400 audit(1735860742.879:160): avc: denied { open } for pid=5936 comm="syz.2.11" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.269261][ T29] audit: type=1400 audit(1735860742.879:161): avc: denied { map_read map_write } for pid=5941 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.288881][ T29] audit: type=1400 audit(1735860742.889:162): avc: denied { prog_run } for pid=5941 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.307665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 52.316293][ T29] audit: type=1400 audit(1735860742.889:163): avc: denied { write } for pid=5941 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.360107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.368643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.452415][ T29] audit: type=1400 audit(1735860742.889:164): avc: denied { connect } for pid=5941 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.612093][ T5953] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.817587][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.848075][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.860912][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.900182][ T5143] Bluetooth: hci4: command tx timeout [ 52.900409][ T5831] Bluetooth: hci2: command tx timeout [ 52.905610][ T5143] Bluetooth: hci1: command tx timeout [ 52.911086][ T5820] Bluetooth: hci0: command tx timeout [ 52.911121][ T5820] Bluetooth: hci3: command tx timeout [ 52.983409][ T5956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.090161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.540186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.549061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 53.558295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.738179][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.747277][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.800713][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.809661][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.871153][ T5973] Zero length message leads to an empty skb [ 53.885251][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 54.981641][ T5143] Bluetooth: hci2: command tx timeout [ 54.987085][ T5824] Bluetooth: hci3: command tx timeout [ 54.987127][ T5820] Bluetooth: hci4: command tx timeout [ 54.997888][ T5831] Bluetooth: hci0: command tx timeout [ 55.003335][ T5820] Bluetooth: hci1: command tx timeout [ 55.302847][ T6032] binder: BINDER_SET_CONTEXT_MGR already set [ 55.309033][ T6032] binder: 6025:6032 ioctl 4018620d 200002c0 returned -16 [ 55.320195][ T6032] overlayfs: failed to resolve './file0': -2 [ 56.112371][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 56.678823][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 57.076161][ T6071] IPv6: NLM_F_REPLACE set, but no existing node found! [ 57.156024][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 57.156040][ T29] audit: type=1400 audit(1735860747.899:210): avc: denied { write } for pid=6073 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.498666][ T29] audit: type=1400 audit(1735860748.219:211): avc: denied { read } for pid=6075 comm="syz.0.62" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.521122][ C1] vkms_vblank_simulate: vblank timer overrun [ 57.527436][ T29] audit: type=1400 audit(1735860748.219:212): avc: denied { open } for pid=6075 comm="syz.0.62" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.550789][ T29] audit: type=1400 audit(1735860748.229:213): avc: denied { shutdown } for pid=6075 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.570836][ T29] audit: type=1400 audit(1735860748.299:214): avc: denied { accept } for pid=6075 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.607913][ T29] audit: type=1326 audit(1735860749.289:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1392b85d29 code=0x7ffc0000 [ 58.717278][ T29] audit: type=1326 audit(1735860749.289:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1392b85d29 code=0x7ffc0000 [ 58.740395][ C1] vkms_vblank_simulate: vblank timer overrun [ 58.928452][ T29] audit: type=1326 audit(1735860749.289:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1392b85d29 code=0x7ffc0000 [ 59.009282][ T29] audit: type=1326 audit(1735860749.289:218): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1392b85d29 code=0x7ffc0000 [ 59.191051][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 59.213856][ T29] audit: type=1326 audit(1735860749.289:219): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1392b85d29 code=0x7ffc0000 [ 59.240606][ T2981] Bluetooth: Error in BCSP hdr checksum [ 60.539050][ T6171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.585924][ T6171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.674890][ T6171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.744916][ T6174] 9pnet_virtio: no channels available for device syz [ 60.796772][ T6171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.881712][ T6171] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.932323][ T6171] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.976993][ T6171] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.028378][ T6171] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.060497][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 61.060986][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 61.148146][ T6182] bond1: entered promiscuous mode [ 61.153379][ T6182] bond1: entered allmulticast mode [ 61.158699][ T6182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.288874][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 61.502041][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.105'. [ 62.062280][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.108'. [ 62.179121][ T6221] tmpfs: Bad value for 'mpol' [ 62.185426][ T6217] tmpfs: Bad value for 'mpol' [ 62.190211][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 62.190226][ T29] audit: type=1400 audit(1735860752.929:267): avc: denied { watch watch_reads } for pid=6208 comm="syz.4.108" path="/21" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.465464][ T29] audit: type=1400 audit(1735860753.209:268): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 62.953628][ T29] audit: type=1400 audit(1735860753.699:269): avc: denied { ioctl } for pid=6231 comm="syz.1.115" path="socket:[9609]" dev="sockfs" ino=9609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.978037][ C1] vkms_vblank_simulate: vblank timer overrun [ 63.220487][ T29] audit: type=1400 audit(1735860753.949:270): avc: denied { create } for pid=6231 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.239697][ C1] vkms_vblank_simulate: vblank timer overrun [ 63.254687][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 63.263808][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 63.282152][ T6241] bond2: entered promiscuous mode [ 63.287626][ T6241] bond2: entered allmulticast mode [ 63.288964][ T6240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.119'. [ 63.293017][ T6241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.332377][ T6241] bond2 (unregistering): Released all slaves [ 64.230880][ T29] audit: type=1400 audit(1735860754.239:271): avc: denied { getopt } for pid=6252 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.254594][ T29] audit: type=1400 audit(1735860754.339:272): avc: denied { create } for pid=6249 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 64.696236][ T29] audit: type=1400 audit(1735860755.329:273): avc: denied { read } for pid=6266 comm="syz.1.127" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.851495][ T29] audit: type=1400 audit(1735860755.329:274): avc: denied { open } for pid=6266 comm="syz.1.127" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.903549][ T29] audit: type=1400 audit(1735860755.339:275): avc: denied { ioctl } for pid=6266 comm="syz.1.127" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.928509][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.939376][ T6278] netlink: 80 bytes leftover after parsing attributes in process `syz.2.125'. [ 65.101717][ T6281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.219515][ T29] audit: type=1400 audit(1735860755.959:276): avc: denied { bind } for pid=6279 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.220226][ T6280] lo speed is unknown, defaulting to 1000 [ 65.287192][ T6280] lo speed is unknown, defaulting to 1000 [ 65.294565][ T6280] lo speed is unknown, defaulting to 1000 [ 65.321188][ T6280] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.323514][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'. [ 65.358385][ T6280] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 65.398171][ T6280] lo speed is unknown, defaulting to 1000 [ 65.470547][ T6280] lo speed is unknown, defaulting to 1000 [ 65.481262][ T6280] lo speed is unknown, defaulting to 1000 [ 65.520581][ T6280] lo speed is unknown, defaulting to 1000 [ 65.537516][ T6280] lo speed is unknown, defaulting to 1000 [ 65.551462][ T6280] lo speed is unknown, defaulting to 1000 [ 67.152572][ T6309] syzkaller0: entered promiscuous mode [ 67.168811][ T6309] syzkaller0: entered allmulticast mode [ 67.202277][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 67.202380][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 67.202392][ T29] audit: type=1400 audit(1735860757.949:283): avc: denied { relabelfrom } for pid=6308 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.290753][ T29] audit: type=1400 audit(1735860757.979:284): avc: denied { relabelto } for pid=6308 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.495536][ T6330] binder: 6312:6330 ioctl c0306201 0 returned -14 [ 67.536308][ T6343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.154'. [ 67.805016][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 67.811427][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 67.910925][ T6349] ceph: No mds server is up or the cluster is laggy [ 68.184029][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 68.196732][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 68.558181][ T6358] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 68.564446][ T6358] syzkaller0: linktype set to 0 [ 69.425479][ T29] audit: type=1400 audit(1735860760.159:285): avc: denied { block_suspend } for pid=6377 comm="syz.0.163" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.899893][ T29] audit: type=1400 audit(1735860760.639:286): avc: denied { connect } for pid=6383 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.919272][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.949926][ T29] audit: type=1400 audit(1735860760.689:287): avc: denied { setopt } for pid=6383 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.980419][ T6391] raw_sendmsg: syz.0.167 forgot to set AF_INET. Fix it! [ 70.043842][ T29] audit: type=1400 audit(1735860760.689:288): avc: denied { read } for pid=6383 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.457059][ T6399] process 'syz.0.171' launched '/dev/fd/3' with NULL argv: empty string added [ 70.540184][ T29] audit: type=1400 audit(1735860761.269:289): avc: denied { unlink } for pid=6398 comm="syz.0.171" name="#1" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.608761][ T29] audit: type=1400 audit(1735860761.339:290): avc: denied { execute_no_trans } for pid=6398 comm="syz.0.171" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.751043][ T29] audit: type=1400 audit(1735860761.389:291): avc: denied { mount } for pid=6403 comm="syz.4.173" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.867668][ T6424] netlink: 52 bytes leftover after parsing attributes in process `syz.0.177'. [ 70.920081][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.200070][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 71.209021][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.242558][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 71.353981][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.402641][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.425954][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.467672][ T29] audit: type=1400 audit(1735860762.209:292): avc: denied { create } for pid=6435 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.497452][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 71.514048][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.542201][ T5868] usb 3-1: Product: syz [ 71.554755][ T5868] usb 3-1: Manufacturer: syz [ 71.630069][ T5868] usb 3-1: SerialNumber: syz [ 71.648032][ T5868] usb 3-1: config 0 descriptor?? [ 71.671348][ T5868] appledisplay 3-1:0.0: Could not find int-in endpoint [ 71.692135][ T5868] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 71.985763][ T6456] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 71.995512][ T6456] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.031740][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.061447][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.310443][ T6464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.193'. [ 72.774371][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 72.774567][ T29] audit: type=1400 audit(1735860763.249:296): avc: denied { create } for pid=6461 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.847023][ T5868] usb 3-1: USB disconnect, device number 2 [ 72.960571][ T29] audit: type=1400 audit(1735860763.709:297): avc: denied { create } for pid=6472 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 73.334434][ T29] audit: type=1400 audit(1735860764.079:298): avc: denied { getopt } for pid=6472 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.680838][ T6489] fuse: Bad value for 'fd' [ 74.024790][ T29] audit: type=1400 audit(1735860764.769:299): avc: denied { setopt } for pid=6496 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.054851][ T29] audit: type=1400 audit(1735860764.799:300): avc: denied { connect } for pid=6496 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.150017][ T29] audit: type=1400 audit(1735860764.889:301): avc: denied { setopt } for pid=6500 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.200111][ T29] audit: type=1400 audit(1735860764.889:302): avc: denied { write } for pid=6500 comm="syz.1.204" path="socket:[10553]" dev="sockfs" ino=10553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.248848][ T29] audit: type=1400 audit(1735860764.889:303): avc: denied { read } for pid=6500 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.268530][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.730776][ T29] audit: type=1400 audit(1735860765.299:304): avc: denied { create } for pid=6507 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.749979][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.763157][ T29] audit: type=1400 audit(1735860765.309:305): avc: denied { write } for pid=6507 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.003638][ T6524] fuse: Bad value for 'fd' [ 76.226961][ T6562] fuse: Bad value for 'fd' [ 76.423555][ T9] cfg80211: failed to load regulatory.db [ 78.594792][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 78.594817][ T29] audit: type=1400 audit(1735860769.339:308): avc: denied { create } for pid=6588 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.689251][ T29] audit: type=1400 audit(1735860769.369:309): avc: denied { setopt } for pid=6588 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.796540][ T29] audit: type=1400 audit(1735860769.529:310): avc: denied { connect } for pid=6605 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.848847][ T29] audit: type=1400 audit(1735860769.529:311): avc: denied { ioctl } for pid=6605 comm="syz.4.240" path="socket:[10696]" dev="sockfs" ino=10696 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.873490][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.896483][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 79.292605][ T29] audit: type=1400 audit(1735860769.769:312): avc: denied { setopt } for pid=6600 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.357916][ T29] audit: type=1400 audit(1735860770.029:313): avc: denied { create } for pid=6613 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.022665][ T6622] ceph: No mds server is up or the cluster is laggy [ 80.029530][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 80.035573][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 80.712990][ T29] audit: type=1400 audit(1735860771.459:314): avc: denied { nlmsg_read } for pid=6640 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.820092][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 80.830935][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 80.907439][ T29] audit: type=1400 audit(1735860771.649:315): avc: denied { write } for pid=6661 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.839176][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 81.848706][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 81.858005][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 81.867128][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 82.100153][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 82.112943][ C1] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 82.121347][ C1] CPU: 1 UID: 0 PID: 6693 Comm: syz.4.265 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 82.131934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.141978][ C1] RIP: 0010:pskb_expand_head+0x97d/0x1240 [ 82.147678][ C1] Code: 83 e6 01 4c 89 f6 e8 32 40 96 f8 4d 85 f6 0f 85 7f 03 00 00 e8 b4 3d 96 f8 e8 af 3d 96 f8 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 da 06 00 00 4d 8b 74 24 08 31 ff 4d 89 f7 41 [ 82.167273][ C1] RSP: 0018:ffffc90000a188a8 EFLAGS: 00010202 [ 82.173316][ C1] RAX: 0000000000000001 RBX: 0000000000000030 RCX: ffffffff8903d85e [ 82.181315][ C1] RDX: ffff88807a092440 RSI: ffffffff8903d871 RDI: 0000000000000008 [ 82.189318][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 82.197310][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 82.205268][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000140 [ 82.213228][ C1] FS: 00007f2250d6a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 82.222148][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.228732][ C1] CR2: 0000000020024000 CR3: 00000000786ba000 CR4: 00000000003526f0 [ 82.236688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.244641][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.252595][ C1] Call Trace: [ 82.255860][ C1] [ 82.258696][ C1] ? die_addr+0x3b/0xa0 [ 82.262840][ C1] ? exc_general_protection+0x155/0x230 [ 82.268383][ C1] ? asm_exc_general_protection+0x26/0x30 [ 82.274103][ C1] ? pskb_expand_head+0x95e/0x1240 [ 82.279217][ C1] ? pskb_expand_head+0x971/0x1240 [ 82.284311][ C1] ? pskb_expand_head+0x97d/0x1240 [ 82.289418][ C1] ? pskb_expand_head+0x971/0x1240 [ 82.294511][ C1] ? __pfx_pskb_expand_head+0x10/0x10 [ 82.299866][ C1] __skb_unclone_keeptruesize+0x91/0x2c0 [ 82.305486][ C1] __tcp_retransmit_skb.part.0+0xeff/0x2690 [ 82.311364][ C1] ? __pfx_tcp_current_mss+0x10/0x10 [ 82.316633][ C1] ? __pfx___tcp_retransmit_skb.part.0+0x10/0x10 [ 82.322945][ C1] ? lock_release+0x4e2/0x6f0 [ 82.327623][ C1] ? tcp_mstamp_refresh+0x16/0xa0 [ 82.332635][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.337387][ C1] tcp_send_loss_probe+0x454/0xb00 [ 82.342482][ C1] tcp_write_timer_handler+0x59d/0xa70 [ 82.347926][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.353285][ C1] ? __pfx_tcp_write_timer_handler+0x10/0x10 [ 82.359259][ C1] ? tcp_write_timer+0xe6/0x2f0 [ 82.364098][ C1] tcp_write_timer+0x157/0x2f0 [ 82.368847][ C1] call_timer_fn+0x1a0/0x610 [ 82.373420][ C1] ? __pfx_tcp_write_timer+0x10/0x10 [ 82.378691][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 82.383783][ C1] ? __pfx_lock_release+0x10/0x10 [ 82.388791][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.394148][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.398912][ C1] ? __pfx_tcp_write_timer+0x10/0x10 [ 82.404184][ C1] __run_timers+0x6e8/0x930 [ 82.408673][ C1] ? __pfx___run_timers+0x10/0x10 [ 82.413682][ C1] ? clockevents_program_event+0x155/0x380 [ 82.419472][ C1] ? __pfx_lock_release+0x10/0x10 [ 82.424480][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.429232][ C1] ? lock_acquire+0x2f/0xb0 [ 82.433719][ C1] ? run_timer_base+0x10c/0x190 [ 82.438570][ C1] run_timer_base+0x114/0x190 [ 82.443233][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 82.448416][ C1] run_timer_softirq+0x1a/0x40 [ 82.453168][ C1] handle_softirqs+0x213/0x8f0 [ 82.457924][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 82.463210][ C1] __irq_exit_rcu+0x109/0x170 [ 82.467872][ C1] irq_exit_rcu+0x9/0x30 [ 82.472099][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 82.477719][ C1] [ 82.480631][ C1] [ 82.483547][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.489548][ C1] RIP: 0010:__might_fault+0x48/0x190 [ 82.494826][ C1] Code: ff df 65 4c 8b 25 28 4e 21 7e 49 8d bc 24 84 17 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 11 01 00 00 45 8b a4 24 84 17 00 00 31 ff 44 89 e6 e8 [ 82.514429][ C1] RSP: 0018:ffffc9001076fc20 EFLAGS: 00000202 [ 82.520479][ C1] RAX: 0000000000000007 RBX: ffffffff8bd19d40 RCX: ffffc9000e199000 [ 82.528433][ C1] RDX: 0000000000000000 RSI: ffffffff81e28ac6 RDI: ffff88807a093bc4 [ 82.536397][ C1] RBP: 00000000000000c0 R08: 0000000000000005 R09: 0000000000000000 [ 82.544362][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807a092440 [ 82.552317][ C1] R13: ffffc9001076fcb8 R14: 0000000020024d50 R15: 0000000020019680 [ 82.560272][ C1] ? __might_fault+0x16/0x190 [ 82.564940][ C1] _copy_to_user+0x2d/0xd0 [ 82.569346][ C1] msr_read+0x14f/0x250 [ 82.573490][ C1] ? __pfx_msr_read+0x10/0x10 [ 82.578159][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 82.583520][ C1] ? security_file_permission+0x71/0x210 [ 82.589140][ C1] ? __pfx_msr_read+0x10/0x10 [ 82.593803][ C1] vfs_read+0x1df/0xbe0 [ 82.597942][ C1] ? __fget_files+0x1fc/0x3a0 [ 82.602604][ C1] ? __pfx_lock_release+0x10/0x10 [ 82.607614][ C1] ? __pfx_vfs_read+0x10/0x10 [ 82.612286][ C1] ? do_futex+0x123/0x350 [ 82.616600][ C1] ? __fget_files+0x40/0x3a0 [ 82.621175][ C1] ? lock_acquire+0x2f/0xb0 [ 82.625662][ C1] ? __fget_files+0x40/0x3a0 [ 82.630237][ C1] ? __fget_files+0x206/0x3a0 [ 82.634910][ C1] ksys_read+0x12b/0x250 [ 82.639133][ C1] ? __pfx_ksys_read+0x10/0x10 [ 82.643878][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.648638][ C1] ? rcu_is_watching+0x12/0xc0 [ 82.653387][ C1] do_syscall_64+0xcd/0x250 [ 82.657879][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.663768][ C1] RIP: 0033:0x7f224ff85d29 [ 82.668164][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.687754][ C1] RSP: 002b:00007f2250d6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.696149][ C1] RAX: ffffffffffffffda RBX: 00007f2250175fa0 RCX: 00007f224ff85d29 [ 82.704103][ C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 82.712055][ C1] RBP: 00007f2250001b08 R08: 0000000000000000 R09: 0000000000000000 [ 82.720007][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.727960][ C1] R13: 0000000000000000 R14: 00007f2250175fa0 R15: 00007ffd83f14f38 [ 82.735917][ C1] [ 82.738922][ C1] Modules linked in: [ 82.742855][ C1] ---[ end trace 0000000000000000 ]--- [ 82.748312][ C1] RIP: 0010:pskb_expand_head+0x97d/0x1240 [ 82.754048][ C1] Code: 83 e6 01 4c 89 f6 e8 32 40 96 f8 4d 85 f6 0f 85 7f 03 00 00 e8 b4 3d 96 f8 e8 af 3d 96 f8 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 da 06 00 00 4d 8b 74 24 08 31 ff 4d 89 f7 41 [ 82.773643][ C1] RSP: 0018:ffffc90000a188a8 EFLAGS: 00010202 [ 82.779689][ C1] RAX: 0000000000000001 RBX: 0000000000000030 RCX: ffffffff8903d85e [ 82.787650][ C1] RDX: ffff88807a092440 RSI: ffffffff8903d871 RDI: 0000000000000008 [ 82.795610][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 82.803611][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 82.811626][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000140 [ 82.819588][ C1] FS: 00007f2250d6a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 82.828603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.835192][ C1] CR2: 0000000020024000 CR3: 00000000786ba000 CR4: 00000000003526f0 [ 82.843156][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.851115][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.859074][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 82.866455][ C1] Kernel Offset: disabled [ 82.870755][ C1] Rebooting in 86400 seconds..