last executing test programs: 4.386763201s ago: executing program 0 (id=15): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) 3.586861367s ago: executing program 2 (id=20): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1}) 3.56202792s ago: executing program 3 (id=22): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r1 = dup(r0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x7, 0x6) 2.967865939s ago: executing program 3 (id=24): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) timer_create(0x3, 0x0, &(0x7f0000000b00)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x0, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8056}]}}]}, 0x60}}, 0x44080) r4 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) dup(r4) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) 2.967537381s ago: executing program 1 (id=25): r0 = syz_open_dev$vim2m(&(0x7f0000000cc0), 0x82d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x17, 0x1, 0x0, "28e93b07f1322bbdc941bfeac48048beb159fbba176bb1de26098c68d900"}) 2.787255601s ago: executing program 0 (id=28): socket(0x1, 0x803, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x101}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 2.688176605s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) 2.523646876s ago: executing program 4 (id=30): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x1c, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x14, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x840000000002, 0x3, 0xfa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x22000004) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 2.110423857s ago: executing program 2 (id=31): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) splice(r1, 0x0, r0, 0x0, 0x400000005, 0x9) 2.04400431s ago: executing program 1 (id=32): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="11"], 0x11) 2.021310339s ago: executing program 3 (id=33): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{&(0x7f0000001cc0)=@in6, 0x80, 0x0}, 0x9}], 0x1, 0x2000, 0x0) 1.981115483s ago: executing program 4 (id=34): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x5410, 0xffffffffffffffff) 1.756215112s ago: executing program 0 (id=35): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000040)=0x8) 1.755875617s ago: executing program 2 (id=36): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) read(r0, &(0x7f00000000c0)=""/46, 0x2e) 1.755496577s ago: executing program 4 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000140)=0x9, 0x4) 1.749865121s ago: executing program 3 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 727.545305ms ago: executing program 1 (id=39): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 676.189693ms ago: executing program 0 (id=40): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a00000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x51) 657.109478ms ago: executing program 4 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000240)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x44}) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8000, 0x0, 0x190ff366, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000180)) r3 = syz_clone(0x0, 0x0, 0xe, 0x0, 0x0, 0x0) ptrace(0x10, r3) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000140)) 534.576913ms ago: executing program 2 (id=42): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) close(r0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 531.256013ms ago: executing program 3 (id=43): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab0865390403040101000000000100000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 358.47386ms ago: executing program 4 (id=44): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) 358.109232ms ago: executing program 2 (id=45): io_setup(0x5, &(0x7f0000000500)=0x0) r1 = socket(0x40000000015, 0x805, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000700)='9', 0x1}]) 357.715801ms ago: executing program 1 (id=46): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x8008550e, &(0x7f0000000200)) 357.489954ms ago: executing program 0 (id=47): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000b40)) 357.060327ms ago: executing program 3 (id=48): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mq_open(0x0, 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 152.802573ms ago: executing program 1 (id=49): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) 59.774425ms ago: executing program 2 (id=50): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 304.081µs ago: executing program 0 (id=51): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 0s ago: executing program 4 (id=52): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401010000000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 57.223646][ T30] audit: type=1400 audit(1751935524.115:62): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.227340][ T5814] cgroup: Unknown subsys name 'net' [ 57.246460][ T30] audit: type=1400 audit(1751935524.115:63): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.274292][ T30] audit: type=1400 audit(1751935524.145:64): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.404206][ T5814] cgroup: Unknown subsys name 'cpuset' [ 57.412049][ T5814] cgroup: Unknown subsys name 'rlimit' [ 57.558351][ T30] audit: type=1400 audit(1751935524.445:65): avc: denied { setattr } for pid=5814 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.590747][ T30] audit: type=1400 audit(1751935524.445:66): avc: denied { create } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.624719][ T30] audit: type=1400 audit(1751935524.445:67): avc: denied { write } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.647827][ T30] audit: type=1400 audit(1751935524.445:68): avc: denied { read } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.663213][ T5816] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.668466][ T30] audit: type=1400 audit(1751935524.445:69): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.701989][ T30] audit: type=1400 audit(1751935524.445:70): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.726059][ T30] audit: type=1400 audit(1751935524.505:71): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.584885][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.083073][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 63.083089][ T30] audit: type=1400 audit(1751935529.965:78): avc: denied { create } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.151370][ T30] audit: type=1400 audit(1751935529.965:79): avc: denied { read write } for pid=5824 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.178946][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.187373][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.195162][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.203247][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.204162][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.210568][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.219319][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.225605][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.232054][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.239475][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.246723][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.262231][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.269904][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.297195][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.303682][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.304767][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.319705][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.331602][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.339273][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.347293][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.348977][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.362211][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.369801][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.370811][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.385916][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.386566][ T30] audit: type=1400 audit(1751935529.965:80): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.461019][ T30] audit: type=1400 audit(1751935530.005:81): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="socket:[3662]" dev="sockfs" ino=3662 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.488637][ T30] audit: type=1400 audit(1751935530.145:82): avc: denied { read } for pid=5824 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.518463][ T30] audit: type=1400 audit(1751935530.145:83): avc: denied { open } for pid=5824 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.544118][ T30] audit: type=1400 audit(1751935530.145:84): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.680972][ T30] audit: type=1400 audit(1751935530.565:85): avc: denied { module_request } for pid=5824 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.769220][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 63.864650][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 63.898129][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 63.974971][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.982322][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.989586][ T5824] bridge_slave_0: entered allmulticast mode [ 63.998397][ T5824] bridge_slave_0: entered promiscuous mode [ 64.008998][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.016303][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.023425][ T5824] bridge_slave_1: entered allmulticast mode [ 64.030029][ T5824] bridge_slave_1: entered promiscuous mode [ 64.055033][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 64.109139][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.121642][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.128754][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.137394][ T5836] bridge_slave_0: entered allmulticast mode [ 64.144321][ T5836] bridge_slave_0: entered promiscuous mode [ 64.159114][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.166253][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.173448][ T5827] bridge_slave_0: entered allmulticast mode [ 64.180482][ T5827] bridge_slave_0: entered promiscuous mode [ 64.194564][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.213782][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.220917][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.228264][ T5836] bridge_slave_1: entered allmulticast mode [ 64.235240][ T5836] bridge_slave_1: entered promiscuous mode [ 64.251322][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.258470][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.265779][ T5827] bridge_slave_1: entered allmulticast mode [ 64.273159][ T5827] bridge_slave_1: entered promiscuous mode [ 64.328058][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.353947][ T5824] team0: Port device team_slave_0 added [ 64.369412][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.388451][ T5824] team0: Port device team_slave_1 added [ 64.419860][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.436452][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 64.464063][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.480583][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.487640][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.513797][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.529070][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.536523][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.543905][ T5828] bridge_slave_0: entered allmulticast mode [ 64.551178][ T5828] bridge_slave_0: entered promiscuous mode [ 64.559845][ T5836] team0: Port device team_slave_0 added [ 64.568055][ T5836] team0: Port device team_slave_1 added [ 64.581158][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.588512][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.614585][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.637620][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.645576][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.652794][ T5828] bridge_slave_1: entered allmulticast mode [ 64.659712][ T5828] bridge_slave_1: entered promiscuous mode [ 64.675496][ T5827] team0: Port device team_slave_0 added [ 64.684376][ T5827] team0: Port device team_slave_1 added [ 64.754560][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.762416][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.788711][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.800005][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.807131][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.833354][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.853668][ T5824] hsr_slave_0: entered promiscuous mode [ 64.859994][ T5824] hsr_slave_1: entered promiscuous mode [ 64.871614][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.881592][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.888540][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.915316][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.931631][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.938568][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.964655][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.980561][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.009342][ T5828] team0: Port device team_slave_0 added [ 65.038226][ T5828] team0: Port device team_slave_1 added [ 65.066862][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.074155][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.081256][ T5839] bridge_slave_0: entered allmulticast mode [ 65.088371][ T5839] bridge_slave_0: entered promiscuous mode [ 65.136786][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.144608][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.152012][ T5839] bridge_slave_1: entered allmulticast mode [ 65.158695][ T5839] bridge_slave_1: entered promiscuous mode [ 65.175685][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.182816][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.208845][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.232525][ T5836] hsr_slave_0: entered promiscuous mode [ 65.238518][ T5836] hsr_slave_1: entered promiscuous mode [ 65.244705][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.252477][ T5836] Cannot create hsr debugfs directory [ 65.261091][ T5827] hsr_slave_0: entered promiscuous mode [ 65.267702][ T5827] hsr_slave_1: entered promiscuous mode [ 65.273990][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.281641][ T5827] Cannot create hsr debugfs directory [ 65.299033][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.304494][ T5152] Bluetooth: hci0: command tx timeout [ 65.306526][ T51] Bluetooth: hci1: command tx timeout [ 65.311862][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.343233][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.366045][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.381629][ T51] Bluetooth: hci2: command tx timeout [ 65.407911][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.461503][ T51] Bluetooth: hci3: command tx timeout [ 65.492961][ T5839] team0: Port device team_slave_0 added [ 65.502636][ T5828] hsr_slave_0: entered promiscuous mode [ 65.508722][ T5828] hsr_slave_1: entered promiscuous mode [ 65.515028][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.523325][ T5828] Cannot create hsr debugfs directory [ 65.541807][ T51] Bluetooth: hci4: command tx timeout [ 65.542420][ T5839] team0: Port device team_slave_1 added [ 65.609216][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.616235][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.642318][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.654364][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.661478][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.687498][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.798702][ T5839] hsr_slave_0: entered promiscuous mode [ 65.805284][ T5839] hsr_slave_1: entered promiscuous mode [ 65.811233][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.819146][ T5839] Cannot create hsr debugfs directory [ 65.940691][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.951991][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.966602][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.977100][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.055894][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.071005][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.082488][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.109601][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.168046][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.188283][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.209111][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.233887][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.275906][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.308514][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.319103][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.328582][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.338612][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.375792][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.421400][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.428635][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.457225][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.464322][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.483323][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.497783][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.517652][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.536456][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.554609][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.590847][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.626747][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.633867][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.670219][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.677357][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.688853][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.747581][ T30] audit: type=1400 audit(1751935533.625:86): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.758520][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.798390][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.825456][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.832612][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.867829][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.896371][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.914366][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.921492][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.955547][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.975422][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.995505][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.025028][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.032156][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.068907][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.076542][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.087780][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.094940][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.118517][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.125597][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.174544][ T5824] veth0_vlan: entered promiscuous mode [ 67.220879][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.293242][ T5824] veth1_vlan: entered promiscuous mode [ 67.355963][ T5824] veth0_macvtap: entered promiscuous mode [ 67.382294][ T51] Bluetooth: hci1: command tx timeout [ 67.382451][ T5152] Bluetooth: hci0: command tx timeout [ 67.388452][ T5824] veth1_macvtap: entered promiscuous mode [ 67.417528][ T5836] veth0_vlan: entered promiscuous mode [ 67.448234][ T5836] veth1_vlan: entered promiscuous mode [ 67.463789][ T5152] Bluetooth: hci2: command tx timeout [ 67.499167][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.524093][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.541947][ T5152] Bluetooth: hci3: command tx timeout [ 67.552330][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.564868][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.576385][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586783][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.595744][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.623107][ T5152] Bluetooth: hci4: command tx timeout [ 67.665097][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.699747][ T5836] veth0_macvtap: entered promiscuous mode [ 67.747304][ T5836] veth1_macvtap: entered promiscuous mode [ 67.777175][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.786638][ T5827] veth0_vlan: entered promiscuous mode [ 67.796699][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.818342][ T5827] veth1_vlan: entered promiscuous mode [ 67.824949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.867426][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.904707][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.917292][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.924499][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.939466][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.945633][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.948988][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.968554][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995174][ T30] audit: type=1400 audit(1751935534.885:87): avc: denied { mounton } for pid=5824 comm="syz-executor" path="/root/syzkaller.HXV7kn/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.007784][ T5827] veth0_macvtap: entered promiscuous mode [ 68.057733][ T5827] veth1_macvtap: entered promiscuous mode [ 68.077498][ T5828] veth0_vlan: entered promiscuous mode [ 68.101163][ T5828] veth1_vlan: entered promiscuous mode [ 68.114700][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.140011][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.185934][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.193297][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 68.193311][ T30] audit: type=1400 audit(1751935535.075:99): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.235549][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.244391][ T30] audit: type=1400 audit(1751935535.075:100): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.257968][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.277540][ T30] audit: type=1400 audit(1751935535.075:101): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.304561][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.313586][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.339265][ T5940] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 68.340381][ T30] audit: type=1400 audit(1751935535.225:102): avc: denied { create } for pid=5938 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.370796][ T30] audit: type=1400 audit(1751935535.225:103): avc: denied { setopt } for pid=5938 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.383970][ T5839] veth0_vlan: entered promiscuous mode [ 68.465985][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.486196][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.487611][ T5828] veth0_macvtap: entered promiscuous mode [ 68.509584][ T5839] veth1_vlan: entered promiscuous mode [ 69.006198][ T5828] veth1_macvtap: entered promiscuous mode [ 69.043511][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.061476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.125675][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.153279][ T5839] veth0_macvtap: entered promiscuous mode [ 69.166366][ T30] audit: type=1400 audit(1751935536.055:104): avc: denied { create } for pid=5943 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.190336][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.196958][ T5839] veth1_macvtap: entered promiscuous mode [ 69.252831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.260648][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.288452][ T30] audit: type=1400 audit(1751935536.175:105): avc: denied { ioctl } for pid=5943 comm="syz.1.6" path="socket:[6104]" dev="sockfs" ino=6104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.304484][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 69.315477][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.330944][ T30] audit: type=1400 audit(1751935536.175:106): avc: denied { bind } for pid=5943 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.340372][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.352910][ T30] audit: type=1400 audit(1751935536.175:107): avc: denied { setopt } for pid=5943 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.380687][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.381501][ T30] audit: type=1400 audit(1751935536.175:108): avc: denied { write } for pid=5943 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.390013][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.458806][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.466176][ T5152] Bluetooth: hci1: command tx timeout [ 69.473883][ T5152] Bluetooth: hci0: command tx timeout [ 69.498101][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.507371][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.523008][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.525503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.532912][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.549337][ T5152] Bluetooth: hci2: command tx timeout [ 69.554873][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.563674][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.621634][ T5152] Bluetooth: hci3: command tx timeout [ 69.675331][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.689646][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.702170][ T5152] Bluetooth: hci4: command tx timeout [ 69.778209][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.787637][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.822191][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.840991][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.903729][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.913225][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.055112][ T5958] sp0: Synchronizing with TNC [ 70.070768][ T5958] sp0: Found TNC [ 70.174257][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.334373][ T5967] block device autoloading is deprecated and will be removed. [ 70.907928][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.933075][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.551382][ T5152] Bluetooth: hci0: command tx timeout [ 71.557290][ T51] Bluetooth: hci1: command tx timeout [ 71.622846][ T5152] Bluetooth: hci2: command tx timeout [ 71.703738][ T5152] Bluetooth: hci3: command tx timeout [ 71.791879][ T5152] Bluetooth: hci4: command tx timeout [ 73.321388][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 73.321407][ T30] audit: type=1400 audit(1751935540.185:165): avc: denied { bind } for pid=6027 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.087300][ T30] audit: type=1400 audit(1751935540.185:166): avc: denied { name_bind } for pid=6027 comm="syz.0.35" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.155430][ T6038] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 74.161448][ T30] audit: type=1400 audit(1751935540.185:167): avc: denied { node_bind } for pid=6027 comm="syz.0.35" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 74.293240][ T30] audit: type=1400 audit(1751935540.185:168): avc: denied { write } for pid=6027 comm="syz.0.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.331685][ T30] audit: type=1400 audit(1751935540.185:169): avc: denied { connect } for pid=6027 comm="syz.0.35" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.379596][ T30] audit: type=1400 audit(1751935540.185:170): avc: denied { name_connect } for pid=6027 comm="syz.0.35" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.471376][ T30] audit: type=1400 audit(1751935540.495:171): avc: denied { connect } for pid=6032 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.543306][ T30] audit: type=1400 audit(1751935541.005:172): avc: denied { create } for pid=6031 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.598417][ T30] audit: type=1400 audit(1751935541.045:173): avc: denied { bind } for pid=6031 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.636061][ T6059] tmpfs: Bad value for 'mpol' [ 74.637639][ T30] audit: type=1400 audit(1751935541.045:174): avc: denied { read } for pid=6031 comm="syz.2.36" path="socket:[8277]" dev="sockfs" ino=8277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.912945][ T5853] ------------[ cut here ]------------ [ 74.918551][ T5853] WARNING: CPU: 1 PID: 5853 at kernel/softirq.c:387 __local_bh_enable_ip+0xc3/0x120 [ 74.927935][ T5853] Modules linked in: [ 74.931875][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 74.942387][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.952445][ T5853] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 74.958366][ T5853] Code: 00 e8 d1 00 0c 00 e8 9c ce 46 00 fb 65 8b 05 64 97 53 12 85 c0 74 52 5b 5d e9 09 1a 0e 0a 65 8b 05 ae d5 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 33 d0 46 00 eb 99 48 89 ef e8 19 a7 1b 00 eb a2 [ 74.977987][ T5853] RSP: 0018:ffffc900042df758 EFLAGS: 00010046 [ 74.984074][ T5853] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff21534a8 [ 74.992061][ T5853] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89ebd043 [ 75.000035][ T5853] RBP: ffffffff89ebd043 R08: 0000000000000000 R09: ffffed10170a7848 [ 75.008003][ T5853] R10: ffff8880b853c243 R11: 0000000000002c00 R12: 000000000100007f [ 75.015975][ T5853] R13: ffffc900042df8a0 R14: ffff888055ddcf64 R15: ffff88807874c000 [ 75.023968][ T5853] FS: 0000000000000000(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 75.032896][ T5853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.039483][ T5853] CR2: 000000110c2bb1bc CR3: 00000000589ec000 CR4: 00000000003526f0 [ 75.047454][ T5853] Call Trace: [ 75.050729][ T5853] [ 75.053790][ T5853] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 75.059623][ T5853] ? dst_alloc+0xc0/0x1a0 [ 75.063966][ T5853] ? ret_from_fork_asm+0x1a/0x30 [ 75.068918][ T5853] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 75.074918][ T5853] ip_route_output_key_hash+0x137/0x2e0 [ 75.080467][ T5853] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 75.086537][ T5853] ? stack_trace_save+0x8e/0xc0 [ 75.091396][ T5853] ? __pfx_map_id_range_down+0x10/0x10 [ 75.096861][ T5853] ? check_path.constprop.0+0x24/0x50 [ 75.102260][ T5853] ip_route_output_flow+0x27/0x150 [ 75.107367][ T5853] rxrpc_init_peer+0x40f/0xc70 [ 75.112125][ T5853] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 75.117406][ T5853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.123310][ T5853] rxrpc_new_incoming_peer+0x64/0x2e0 [ 75.128687][ T5853] rxrpc_new_incoming_call+0x127b/0x1890 [ 75.134315][ T5853] rxrpc_io_thread+0x2f01/0x4020 [ 75.139251][ T5853] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 75.144525][ T5853] ? rcu_is_watching+0x12/0xc0 [ 75.149281][ T5853] ? trace_sched_exit_tp+0xde/0x130 [ 75.154492][ T5853] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.159512][ T5853] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.165310][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.170500][ T5853] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 75.175774][ T5853] ? kthread+0x3c5/0x780 [ 75.180007][ T5853] kthread+0x3c5/0x780 [ 75.184063][ T5853] ? __pfx_kthread+0x10/0x10 [ 75.188644][ T5853] ? rcu_is_watching+0x12/0xc0 [ 75.193413][ T5853] ? __pfx_kthread+0x10/0x10 [ 75.197988][ T5853] ret_from_fork+0x5d4/0x6f0 [ 75.202577][ T5853] ? __pfx_kthread+0x10/0x10 [ 75.207154][ T5853] ret_from_fork_asm+0x1a/0x30 [ 75.211914][ T5853] [ 75.214917][ T5853] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.222184][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 75.232680][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.242719][ T5853] Call Trace: [ 75.245984][ T5853] [ 75.248902][ T5853] dump_stack_lvl+0x3d/0x1f0 [ 75.253498][ T5853] panic+0x71c/0x800 [ 75.257386][ T5853] ? __pfx_panic+0x10/0x10 [ 75.261806][ T5853] ? show_trace_log_lvl+0x29b/0x3e0 [ 75.267001][ T5853] ? check_panic_on_warn+0x1f/0xb0 [ 75.272108][ T5853] ? __local_bh_enable_ip+0xc3/0x120 [ 75.277384][ T5853] check_panic_on_warn+0xab/0xb0 [ 75.282315][ T5853] __warn+0xf6/0x3c0 [ 75.286194][ T5853] ? __local_bh_enable_ip+0xc3/0x120 [ 75.291469][ T5853] report_bug+0x3c3/0x580 [ 75.295789][ T5853] ? __local_bh_enable_ip+0xc3/0x120 [ 75.301062][ T5853] handle_bug+0x184/0x210 [ 75.305392][ T5853] exc_invalid_op+0x17/0x50 [ 75.309909][ T5853] asm_exc_invalid_op+0x1a/0x20 [ 75.314748][ T5853] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 75.320645][ T5853] Code: 00 e8 d1 00 0c 00 e8 9c ce 46 00 fb 65 8b 05 64 97 53 12 85 c0 74 52 5b 5d e9 09 1a 0e 0a 65 8b 05 ae d5 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 33 d0 46 00 eb 99 48 89 ef e8 19 a7 1b 00 eb a2 [ 75.340249][ T5853] RSP: 0018:ffffc900042df758 EFLAGS: 00010046 [ 75.346301][ T5853] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff21534a8 [ 75.354257][ T5853] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89ebd043 [ 75.362214][ T5853] RBP: ffffffff89ebd043 R08: 0000000000000000 R09: ffffed10170a7848 [ 75.370170][ T5853] R10: ffff8880b853c243 R11: 0000000000002c00 R12: 000000000100007f [ 75.378127][ T5853] R13: ffffc900042df8a0 R14: ffff888055ddcf64 R15: ffff88807874c000 [ 75.386151][ T5853] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 75.392134][ T5853] ? rt_set_nexthop.constprop.0+0x673/0x12e0 [ 75.398106][ T5853] rt_set_nexthop.constprop.0+0x673/0x12e0 [ 75.403902][ T5853] ? dst_alloc+0xc0/0x1a0 [ 75.408220][ T5853] ? ret_from_fork_asm+0x1a/0x30 [ 75.413149][ T5853] ip_route_output_key_hash_rcu+0x94a/0x28f0 [ 75.419124][ T5853] ip_route_output_key_hash+0x137/0x2e0 [ 75.424660][ T5853] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 75.430725][ T5853] ? stack_trace_save+0x8e/0xc0 [ 75.435569][ T5853] ? __pfx_map_id_range_down+0x10/0x10 [ 75.441014][ T5853] ? check_path.constprop.0+0x24/0x50 [ 75.446380][ T5853] ip_route_output_flow+0x27/0x150 [ 75.451483][ T5853] rxrpc_init_peer+0x40f/0xc70 [ 75.456241][ T5853] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 75.461527][ T5853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.467420][ T5853] rxrpc_new_incoming_peer+0x64/0x2e0 [ 75.472790][ T5853] rxrpc_new_incoming_call+0x127b/0x1890 [ 75.478418][ T5853] rxrpc_io_thread+0x2f01/0x4020 [ 75.483353][ T5853] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 75.488642][ T5853] ? rcu_is_watching+0x12/0xc0 [ 75.493397][ T5853] ? trace_sched_exit_tp+0xde/0x130 [ 75.498603][ T5853] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.503624][ T5853] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.509419][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.514610][ T5853] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 75.519882][ T5853] ? kthread+0x3c5/0x780 [ 75.524112][ T5853] kthread+0x3c5/0x780 [ 75.528167][ T5853] ? __pfx_kthread+0x10/0x10 [ 75.532743][ T5853] ? rcu_is_watching+0x12/0xc0 [ 75.537499][ T5853] ? __pfx_kthread+0x10/0x10 [ 75.542099][ T5853] ret_from_fork+0x5d4/0x6f0 [ 75.546702][ T5853] ? __pfx_kthread+0x10/0x10 [ 75.551281][ T5853] ret_from_fork_asm+0x1a/0x30 [ 75.556051][ T5853] [ 75.559167][ T5853] Kernel Offset: disabled [ 75.563484][ T5853] Rebooting in 86400 seconds..