last executing test programs: 13.900699168s ago: executing program 1 (id=2): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xf5}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) accept4$packet(r5, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setreuid(0x0, 0xee01) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 12.212380422s ago: executing program 1 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000000)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8], 0x40}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = fcntl$dupfd(r9, 0x0, r9) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) 11.295146348s ago: executing program 0 (id=1): socket$vsock_stream(0x28, 0x1, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001340)=""/102378, 0x7706c522012798af) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003f9000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) socket(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_route(0x10, 0x3, 0x0) 10.025102057s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a3200000000090001"], 0x38}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002c00)={&(0x7f0000000400)={0x88, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x54a}, {0xfffffffffffffc63, 0x0, 0x8001}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8001}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x786c}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="53d38cc402ee"}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x810) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) r8 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000000c0)={0x0, r8}) r9 = io_uring_setup(0x2026, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_emit_vhci(0x0, 0x22) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000a00)) 7.473489102s ago: executing program 1 (id=7): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20044040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000c0603050001000700"/25], 0x1c}}, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet(0x2, 0x3, 0x33) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 6.050147s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) geteuid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000b800)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "662a47efb7108dc9ff50afa8d9fa55bb9d354c74fd391b1d786a74f1aef2669e"}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup(r0) 5.995215471s ago: executing program 2 (id=9): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffdd) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xff00) 5.438882602s ago: executing program 3 (id=4): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000000)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000003c0)={0x28, 0x0, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = fcntl$dupfd(r10, 0x0, r10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r11, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) 4.986685471s ago: executing program 0 (id=10): prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680040008"], 0x38}}, 0x0) 4.593290251s ago: executing program 2 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="67b53433981732ea50cb5e9951c78af7ec127cbb92ec71b8dec2fcc395dd630871057e807d08a5f122960b57e06248e2b92fe3bc0bdf6190b44df607682896c64b4b31a654c7f5ec90a2b209075fa29002a8bab9330f946ff60f4f32ecfa7af7", @ANYRES16=0x0], 0x14}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000002060500000000001800000000000000050004000000000005000100060000000900020073797a32000000000c000300686173683a697000050005000a"], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601020000000800000000000000000500010007000000"], 0x1c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000080), 0x76e5467) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0xff03, 0x3c0, 0x108, 0x108, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x27e9, 0xfffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 4.053695381s ago: executing program 4 (id=5): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xf5}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) accept4$packet(r5, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setreuid(0x0, 0xee01) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 3.27229517s ago: executing program 2 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_io_uring_setup(0x6291, &(0x7f0000000340)={0x0, 0x722f, 0x400, 0x2}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0x185, &(0x7f00000009c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, [{}, {}, {0x0, 0x24, "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"}, {0x18, 0x2, "5e14f0e74d2d42cfb3f27fafb60845f9"}, {0x0, 0x1, "d5170000dce9"}]}}}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, 0x0, 0x80d2) socket(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) close(r5) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@null, 0xb, 'veth0\x00'}) 3.09619346s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xa) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x4, r8, 0x0, 0x0, 0x1}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.942127959s ago: executing program 1 (id=14): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000000)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000003c0)={0x28, 0x0, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = fcntl$dupfd(r10, 0x0, r10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r11, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) 2.870157718s ago: executing program 3 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSTI(r1, 0x541b, &(0x7f0000000040)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="67b53433981732ea50cb5e9951c78af7ec127cbb92ec71b8dec2fcc395dd630871057e807d08a5f122960b57e06248e2b92fe3bc0bdf6190b44df607682896c64b4b31a654c7f5ec90a2b209075fa29002a8bab9330f946ff60f4f32ecfa7af7", @ANYRES16=0x0], 0x14}}, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x895) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000002060500000000001800000000000000050004000000000005000100060000000900020073797a32000000000c000300686173683a697000050005000a"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601020000000800000000000000000500010007000000"], 0x1c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r8, &(0x7f0000000080), 0x76e5467) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0xff03, 0x3c0, 0x108, 0x108, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x27e9, 0xfffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 229.592471ms ago: executing program 4 (id=16): socket$vsock_stream(0x28, 0x1, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001340)=""/102378, 0x7706c522012798af) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003f9000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/209, 0xc8}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}, 0x7d}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x4c, 0xcb, &(0x7f0000008000)={0x77359400}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=17): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x13}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0xfffffffffffffdd8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) epoll_create1(0x0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000002c0)={{0x0, 0x0, 0xc558, 0x1, 0xb3}, 0x8000, 0xd1, 'id1\x00', 'timer1\x00', 0x0, 0x8000000000000000, 0x5, 0x8, 0x6}) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a40)={0x0, 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000280)=r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000200)={r3}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 97.470517][ T47] cfg80211: failed to load regulatory.db [ 98.549388][ T29] audit: type=1400 audit(1723658769.699:88): avc: denied { mounton } for pid=5205 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 98.563291][ T5205] cgroup: Unknown subsys name 'net' [ 98.572280][ T29] audit: type=1400 audit(1723658769.699:89): avc: denied { mount } for pid=5205 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.599754][ T29] audit: type=1400 audit(1723658769.729:90): avc: denied { unmount } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.751896][ T5205] cgroup: Unknown subsys name 'rlimit' [ 98.980946][ T29] audit: type=1400 audit(1723658770.129:91): avc: denied { setattr } for pid=5205 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.035622][ T29] audit: type=1400 audit(1723658770.129:92): avc: denied { create } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.068188][ T29] audit: type=1400 audit(1723658770.129:93): avc: denied { write } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.092017][ T29] audit: type=1400 audit(1723658770.129:94): avc: denied { read } for pid=5205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.112850][ T29] audit: type=1400 audit(1723658770.149:95): avc: denied { mounton } for pid=5205 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 99.139112][ T29] audit: type=1400 audit(1723658770.149:96): avc: denied { mount } for pid=5205 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 99.141842][ T5210] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 99.163044][ T29] audit: type=1400 audit(1723658770.159:97): avc: denied { read } for pid=4883 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 101.004117][ T5205] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.976868][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 103.976890][ T29] audit: type=1400 audit(1723658775.109:103): avc: denied { mounton } for pid=5218 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 104.038498][ T29] audit: type=1400 audit(1723658775.109:104): avc: denied { mount } for pid=5218 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.086933][ T29] audit: type=1400 audit(1723658775.109:105): avc: denied { create } for pid=5218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.107533][ T29] audit: type=1400 audit(1723658775.109:106): avc: denied { read write } for pid=5218 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.131790][ T29] audit: type=1400 audit(1723658775.109:107): avc: denied { open } for pid=5218 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.156604][ T29] audit: type=1400 audit(1723658775.199:108): avc: denied { ioctl } for pid=5218 comm="syz-executor" path="socket:[4456]" dev="sockfs" ino=4456 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.248238][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.266890][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.275106][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.299117][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.315904][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.323549][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.324604][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.340421][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.348541][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.349470][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.360997][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.364502][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.372610][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.380641][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.383773][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.391368][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.404787][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.412425][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.417441][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.421973][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.428198][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.434131][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.440882][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.452210][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.459096][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.464694][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.470447][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.477254][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.496610][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.503635][ T29] audit: type=1400 audit(1723658775.629:109): avc: denied { read } for pid=5222 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.525619][ T29] audit: type=1400 audit(1723658775.649:110): avc: denied { open } for pid=5219 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.526877][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.585804][ T29] audit: type=1400 audit(1723658775.669:111): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.378303][ T29] audit: type=1400 audit(1723658776.529:112): avc: denied { module_request } for pid=5222 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.475002][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 105.650329][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 105.740254][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 105.812800][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 105.878418][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 105.941594][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.949765][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.957710][ T5222] bridge_slave_0: entered allmulticast mode [ 105.965656][ T5222] bridge_slave_0: entered promiscuous mode [ 106.028315][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.035577][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.043044][ T5222] bridge_slave_1: entered allmulticast mode [ 106.051222][ T5222] bridge_slave_1: entered promiscuous mode [ 106.301178][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.317238][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.357075][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.364245][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.372826][ T5221] bridge_slave_0: entered allmulticast mode [ 106.380659][ T5221] bridge_slave_0: entered promiscuous mode [ 106.391628][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.399082][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.406322][ T5221] bridge_slave_1: entered allmulticast mode [ 106.415181][ T5221] bridge_slave_1: entered promiscuous mode [ 106.460751][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.468480][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.476020][ T5220] bridge_slave_0: entered allmulticast mode [ 106.484940][ T5220] bridge_slave_0: entered promiscuous mode [ 106.507643][ T5223] Bluetooth: hci4: command tx timeout [ 106.547507][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.554725][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.567825][ T5219] bridge_slave_0: entered allmulticast mode [ 106.575455][ T5219] bridge_slave_0: entered promiscuous mode [ 106.586345][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.594745][ T5234] Bluetooth: hci1: command tx timeout [ 106.594846][ T55] Bluetooth: hci0: command tx timeout [ 106.600807][ T5223] Bluetooth: hci3: command tx timeout [ 106.613302][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.620672][ T5219] bridge_slave_1: entered allmulticast mode [ 106.629089][ T5219] bridge_slave_1: entered promiscuous mode [ 106.655165][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.662562][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.670064][ T5223] Bluetooth: hci2: command tx timeout [ 106.674405][ T5220] bridge_slave_1: entered allmulticast mode [ 106.683997][ T5220] bridge_slave_1: entered promiscuous mode [ 106.789272][ T5222] team0: Port device team_slave_0 added [ 106.817983][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.825194][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.833660][ T5218] bridge_slave_0: entered allmulticast mode [ 106.841488][ T5218] bridge_slave_0: entered promiscuous mode [ 106.855443][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.889232][ T5222] team0: Port device team_slave_1 added [ 106.899640][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.913637][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.924064][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.931824][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.940153][ T5218] bridge_slave_1: entered allmulticast mode [ 106.948296][ T5218] bridge_slave_1: entered promiscuous mode [ 106.959099][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.011656][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.043914][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.093368][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.101385][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.128063][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.168944][ T5219] team0: Port device team_slave_0 added [ 107.254480][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.263917][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.290550][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.305472][ T5219] team0: Port device team_slave_1 added [ 107.362876][ T5220] team0: Port device team_slave_0 added [ 107.374608][ T5220] team0: Port device team_slave_1 added [ 107.385956][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.404388][ T5221] team0: Port device team_slave_0 added [ 107.423890][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.431264][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.457277][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.471454][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.478562][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.504555][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.559045][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.588862][ T5221] team0: Port device team_slave_1 added [ 107.693631][ T5218] team0: Port device team_slave_0 added [ 107.743676][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.751046][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.778729][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.793365][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.802569][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.829363][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.844581][ T5218] team0: Port device team_slave_1 added [ 107.851590][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.859223][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.885476][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.908240][ T5222] hsr_slave_0: entered promiscuous mode [ 107.915645][ T5222] hsr_slave_1: entered promiscuous mode [ 107.957622][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.964630][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.990716][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.052282][ T5219] hsr_slave_0: entered promiscuous mode [ 108.059818][ T5219] hsr_slave_1: entered promiscuous mode [ 108.066253][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.074388][ T5219] Cannot create hsr debugfs directory [ 108.109492][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.116470][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.142610][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.214346][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.221923][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.249285][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.331195][ T5220] hsr_slave_0: entered promiscuous mode [ 108.339473][ T5220] hsr_slave_1: entered promiscuous mode [ 108.346008][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.354235][ T5220] Cannot create hsr debugfs directory [ 108.434732][ T5221] hsr_slave_0: entered promiscuous mode [ 108.443709][ T5221] hsr_slave_1: entered promiscuous mode [ 108.451517][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.459929][ T5221] Cannot create hsr debugfs directory [ 108.587179][ T5223] Bluetooth: hci4: command tx timeout [ 108.667245][ T5223] Bluetooth: hci0: command tx timeout [ 108.667268][ T55] Bluetooth: hci3: command tx timeout [ 108.667280][ T5234] Bluetooth: hci1: command tx timeout [ 108.725151][ T5218] hsr_slave_0: entered promiscuous mode [ 108.732607][ T5218] hsr_slave_1: entered promiscuous mode [ 108.740266][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.748025][ T5223] Bluetooth: hci2: command tx timeout [ 108.754545][ T5218] Cannot create hsr debugfs directory [ 109.360439][ T5219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.393886][ T5219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.408511][ T5219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.421817][ T5219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.538531][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.556918][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.581265][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.594692][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.774000][ T5221] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.789471][ T5221] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.828145][ T5221] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.845084][ T5221] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.885774][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.988794][ T5220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.030161][ T5220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.072417][ T5220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.088128][ T5220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.112345][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.213767][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.221494][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.310651][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.317956][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.330517][ T5218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.361375][ T5218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.405020][ T5218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.419484][ T5218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.521918][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.678873][ T5223] Bluetooth: hci4: command tx timeout [ 110.715699][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.747519][ T5223] Bluetooth: hci0: command tx timeout [ 110.748260][ T5234] Bluetooth: hci3: command tx timeout [ 110.752944][ T55] Bluetooth: hci1: command tx timeout [ 110.774553][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.796001][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.803232][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.827716][ T5223] Bluetooth: hci2: command tx timeout [ 110.897519][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.904790][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.930725][ T29] audit: type=1400 audit(1723658782.079:113): avc: denied { sys_module } for pid=5219 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.042664][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.111288][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.118695][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.153773][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.194221][ T5222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.217873][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.225126][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.363292][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.380046][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.405417][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.519068][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.526377][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.585044][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.592670][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.722905][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.795675][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.802989][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.864504][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.871823][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.942769][ T5219] veth0_vlan: entered promiscuous mode [ 112.010601][ T5219] veth1_vlan: entered promiscuous mode [ 112.064136][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.277792][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.285959][ T5219] veth0_macvtap: entered promiscuous mode [ 112.365235][ T5219] veth1_macvtap: entered promiscuous mode [ 112.523545][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.565678][ T5222] veth0_vlan: entered promiscuous mode [ 112.581377][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.612514][ T5219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.623029][ T5219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.632742][ T5219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.642143][ T5219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.748702][ T5223] Bluetooth: hci4: command tx timeout [ 112.764791][ T5221] veth0_vlan: entered promiscuous mode [ 112.783885][ T5222] veth1_vlan: entered promiscuous mode [ 112.827560][ T5223] Bluetooth: hci0: command tx timeout [ 112.833047][ T5223] Bluetooth: hci1: command tx timeout [ 112.839191][ T55] Bluetooth: hci3: command tx timeout [ 112.856533][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.909645][ T5223] Bluetooth: hci2: command tx timeout [ 112.948443][ T5221] veth1_vlan: entered promiscuous mode [ 113.056227][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.105631][ T5222] veth0_macvtap: entered promiscuous mode [ 113.144998][ T5222] veth1_macvtap: entered promiscuous mode [ 113.184986][ T5220] veth0_vlan: entered promiscuous mode [ 113.295728][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.315358][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.362250][ T5220] veth1_vlan: entered promiscuous mode [ 113.387990][ T5221] veth0_macvtap: entered promiscuous mode [ 113.449419][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.461222][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.475469][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.495449][ T5221] veth1_macvtap: entered promiscuous mode [ 113.495955][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.528922][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.549995][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.565951][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.585014][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.617800][ T29] audit: type=1400 audit(1723658784.759:114): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.iSaSza/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 113.674887][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.691845][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.705205][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.707487][ T29] audit: type=1400 audit(1723658784.789:115): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.725468][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.764979][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.782183][ T29] audit: type=1400 audit(1723658784.799:116): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.iSaSza/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.797047][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.823942][ T29] audit: type=1400 audit(1723658784.799:117): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.831844][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.846395][ T29] audit: type=1400 audit(1723658784.839:118): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 113.864598][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.884026][ T29] audit: type=1400 audit(1723658784.899:119): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 113.921534][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.928633][ T29] audit: type=1400 audit(1723658784.929:120): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 113.969992][ T5220] veth0_macvtap: entered promiscuous mode [ 114.015365][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.026464][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.039555][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.050642][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.064432][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.095223][ T29] audit: type=1400 audit(1723658785.239:121): avc: denied { read write } for pid=5219 comm="syz-executor" name="loop1" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.145058][ T29] audit: type=1400 audit(1723658785.239:122): avc: denied { open } for pid=5219 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.190725][ T5220] veth1_macvtap: entered promiscuous mode [ 114.218522][ T5221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.228738][ T5221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.242837][ T5221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.253615][ T5221] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.956228][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.970541][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.275350][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.301552][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.320430][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.338388][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.356243][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.409414][ T5218] veth0_vlan: entered promiscuous mode [ 115.446726][ T5218] veth1_vlan: entered promiscuous mode [ 115.629963][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.660141][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.708953][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.743688][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.754226][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.766755][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.776840][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.787914][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.800415][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.852759][ T5220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.874617][ T5220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.891745][ T5220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.901698][ T5220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.026188][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 116.026209][ T29] audit: type=1400 audit(1723658787.169:129): avc: denied { name_bind } for pid=5305 comm="syz.1.6" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 116.056562][ T29] audit: type=1400 audit(1723658787.199:130): avc: denied { node_bind } for pid=5305 comm="syz.1.6" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 116.182553][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.204729][ T29] audit: type=1400 audit(1723658787.329:131): avc: denied { read } for pid=5305 comm="syz.1.6" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.234319][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.240485][ T5307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.253396][ T5218] veth0_macvtap: entered promiscuous mode [ 116.326421][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.342595][ T29] audit: type=1400 audit(1723658787.329:132): avc: denied { open } for pid=5305 comm="syz.1.6" path="/dev/iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.349618][ T5218] veth1_macvtap: entered promiscuous mode [ 116.381312][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.438985][ T29] audit: type=1400 audit(1723658787.329:133): avc: denied { ioctl } for pid=5305 comm="syz.1.6" path="/dev/iommu" dev="devtmpfs" ino=626 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.476979][ T29] audit: type=1400 audit(1723658787.489:134): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/root/syzkaller.cmjhN1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.653407][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.689030][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.702576][ T29] audit: type=1400 audit(1723658787.849:135): avc: denied { create } for pid=5305 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.804375][ T29] audit: type=1400 audit(1723658787.909:136): avc: denied { write } for pid=5305 comm="syz.1.6" path="socket:[5849]" dev="sockfs" ino=5849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.860160][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.883787][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.901492][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.902037][ T29] audit: type=1400 audit(1723658788.039:137): avc: denied { create } for pid=5309 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.921502][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.942091][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.953408][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.986523][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.006286][ T29] audit: type=1400 audit(1723658788.149:138): avc: denied { read } for pid=5309 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.047977][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.258513][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.663200][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.854252][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.900287][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.009689][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.157993][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.323776][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.431635][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.447126][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.461595][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.477012][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.504494][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.958006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.987678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.554159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.758805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.861937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.698094][ T5218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.717348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.736163][ T5218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.762531][ T5218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.781176][ T5218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.797293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.806646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.846914][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.976995][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.231223][ T5324] Zero length message leads to an empty skb [ 121.242407][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 121.308147][ T5324] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.339087][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 121.339133][ T29] audit: type=1400 audit(1723658792.399:150): avc: denied { read } for pid=5321 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.986902][ T29] audit: type=1400 audit(1723658792.409:151): avc: denied { map_create } for pid=5321 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.046954][ T29] audit: type=1400 audit(1723658792.439:152): avc: denied { create } for pid=5321 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.123322][ T29] audit: type=1400 audit(1723658792.449:153): avc: denied { create } for pid=5321 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.178161][ T29] audit: type=1400 audit(1723658792.469:154): avc: denied { getopt } for pid=5321 comm="syz.1.7" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.199106][ T29] audit: type=1400 audit(1723658792.479:155): avc: denied { setopt } for pid=5321 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.222275][ T29] audit: type=1400 audit(1723658793.249:156): avc: denied { bpf } for pid=5325 comm="syz.2.9" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.254618][ T29] audit: type=1400 audit(1723658793.349:157): avc: denied { read } for pid=5326 comm="syz.1.8" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.314150][ T29] audit: type=1400 audit(1723658793.349:158): avc: denied { open } for pid=5326 comm="syz.1.8" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.349348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 122.359364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.526949][ T29] audit: type=1400 audit(1723658793.429:159): avc: denied { perfmon } for pid=5326 comm="syz.1.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.667509][ T5329] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.016007][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.047063][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.065178][ T5335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.318088][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.335685][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.360717][ T5335] netlink: 'syz.3.4': attribute type 72 has an invalid length. [ 123.457109][ T5335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 124.667688][ T5223] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 124.678049][ T5234] Bluetooth: hci5: command 0x1003 tx timeout [ 127.798866][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 127.798884][ T29] audit: type=1400 audit(1723658798.909:166): avc: denied { unmount } for pid=5346 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.206909][ T29] audit: type=1400 audit(1723658799.329:167): avc: denied { create } for pid=5346 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.242143][ T5357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.804905][ T29] audit: type=1400 audit(1723658799.749:168): avc: denied { write } for pid=5349 comm="syz.0.13" name="rdma_cm" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.043513][ T29] audit: type=1400 audit(1723658800.129:169): avc: denied { create } for pid=5369 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 234.241398][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 234.248723][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5370/1:b..l P12/1:b..l [ 234.257961][ C0] rcu: (detected by 0, t=10503 jiffies, g=11617, q=859 ncpus=2) [ 234.265681][ C0] task:kworker/u8:1 state:R running task stack:24592 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 234.278046][ C0] Workqueue: bat_events batadv_nc_worker [ 234.283730][ C0] Call Trace: [ 234.287013][ C0] [ 234.289949][ C0] __schedule+0xe37/0x5490 [ 234.294391][ C0] ? __pfx_mark_lock+0x10/0x10 [ 234.299170][ C0] ? __pfx___schedule+0x10/0x10 [ 234.304067][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 234.309281][ C0] ? mark_held_locks+0x9f/0xe0 [ 234.314057][ C0] preempt_schedule_irq+0x51/0x90 [ 234.319097][ C0] irqentry_exit+0x36/0x90 [ 234.323526][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.329527][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 234.335782][ C0] Code: 90 90 90 90 f3 0f 1e fa 8b 05 4a d5 00 05 85 c0 74 20 8b 05 44 05 01 05 85 c0 74 16 65 48 8b 05 40 d1 f1 74 8b 80 dc 0a 00 00 <85> c0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 [ 234.355417][ C0] RSP: 0018:ffffc90000117b88 EFLAGS: 00000202 [ 234.361581][ C0] RAX: 0000000000000000 RBX: ffff88802d3513f0 RCX: ffffffff8ad68db9 [ 234.369557][ C0] RDX: ffff888017a85a00 RSI: ffffffff8ad689db RDI: 0000000000000001 [ 234.377538][ C0] RBP: 000000000000027e R08: 0000000000000001 R09: 0000000000000000 [ 234.385514][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e4d9ec0 [ 234.393490][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 234.401466][ C0] ? batadv_nc_worker+0xc99/0x10f0 [ 234.406586][ C0] ? batadv_nc_worker+0x8bb/0x10f0 [ 234.411710][ C0] batadv_nc_worker+0x8c0/0x10f0 [ 234.416668][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 234.422074][ C0] ? __pfx_lock_release+0x10/0x10 [ 234.427107][ C0] process_one_work+0x9c5/0x1b40 [ 234.432056][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 234.437488][ C0] ? __pfx_process_one_work+0x10/0x10 [ 234.442875][ C0] ? assign_work+0x1a0/0x250 [ 234.447511][ C0] worker_thread+0x6c8/0xf20 [ 234.452125][ C0] ? __pfx_worker_thread+0x10/0x10 [ 234.457262][ C0] kthread+0x2c1/0x3a0 [ 234.461355][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.466561][ C0] ? __pfx_kthread+0x10/0x10 [ 234.471156][ C0] ret_from_fork+0x45/0x80 [ 234.475593][ C0] ? __pfx_kthread+0x10/0x10 [ 234.480188][ C0] ret_from_fork_asm+0x1a/0x30 [ 234.484992][ C0] [ 234.488014][ C0] task:syz.3.17 state:R running task stack:25216 pid:5370 tgid:5369 ppid:5220 flags:0x00004002 [ 234.499755][ C0] Call Trace: [ 234.503031][ C0] [ 234.505977][ C0] __schedule+0xe37/0x5490 [ 234.510403][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 234.515611][ C0] ? __pfx___schedule+0x10/0x10 [ 234.520473][ C0] ? hlock_class+0x4e/0x130 [ 234.524990][ C0] ? __lock_acquire+0x1620/0x3cb0 [ 234.530021][ C0] ? mark_held_locks+0x9f/0xe0 [ 234.534794][ C0] preempt_schedule_irq+0x51/0x90 [ 234.539833][ C0] irqentry_exit+0x36/0x90 [ 234.544263][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.550279][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 234.555605][ C0] Code: c1 05 4a 11 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 234.575217][ C0] RSP: 0018:ffffc9000348f048 EFLAGS: 00000206 [ 234.581285][ C0] RAX: dffffc0000000000 RBX: 1ffff92000691e0b RCX: 0000000000000001 [ 234.589255][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc800 RDI: ffffffff8bb08ec0 [ 234.597230][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c5ad8 [ 234.605219][ C0] R10: ffffffff9462d6c7 R11: 0000000000000000 R12: 0000000000000000 [ 234.613191][ C0] R13: 0000000000000000 R14: ffffffff8ddb5ce0 R15: 0000000000000000 [ 234.621174][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 234.626210][ C0] ? mt_find+0x82f/0xa20 [ 234.630459][ C0] ? __pfx_lock_release+0x10/0x10 [ 234.635508][ C0] mt_find+0x16a/0xa20 [ 234.639580][ C0] ? mt_find+0x164/0xa20 [ 234.643850][ C0] ? __pfx_mt_find+0x10/0x10 [ 234.648452][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 234.653773][ C0] find_vma+0xc0/0x140 [ 234.657860][ C0] ? __pfx_find_vma+0x10/0x10 [ 234.662551][ C0] gup_vma_lookup+0x24/0x220 [ 234.667157][ C0] __get_user_pages+0x261/0x15c0 [ 234.672116][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 234.677504][ C0] ? down_read_killable+0xcc/0x380 [ 234.682652][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 234.688217][ C0] ? shmem_file_write_iter+0xd5/0x140 [ 234.693608][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 234.699436][ C0] get_dump_page+0xfb/0x220 [ 234.703958][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 234.709098][ C0] ? free_unref_page+0x75f/0xe40 [ 234.714051][ C0] dump_user_range+0x135/0x8a0 [ 234.718829][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 234.724143][ C0] ? dump_align+0xa3/0xd0 [ 234.728659][ C0] ? __pfx_writenote+0x10/0x10 [ 234.733451][ C0] elf_core_dump+0x27c1/0x39a0 [ 234.738321][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 234.743447][ C0] ? kasan_save_stack+0x42/0x60 [ 234.748306][ C0] ? kasan_save_stack+0x33/0x60 [ 234.753184][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 234.757965][ C0] ? __kmalloc_node_noprof+0x211/0x430 [ 234.763440][ C0] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 234.768920][ C0] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 234.774741][ C0] ? do_syscall_64+0xda/0x250 [ 234.779453][ C0] ? 0xffffffffff600000 [ 234.783629][ C0] ? do_coredump+0x29c5/0x3de0 [ 234.788429][ C0] do_coredump+0x29c5/0x3de0 [ 234.793035][ C0] ? __pfx_do_coredump+0x10/0x10 [ 234.797993][ C0] ? find_held_lock+0x2d/0x110 [ 234.802783][ C0] get_signal+0x23d4/0x2770 [ 234.807303][ C0] ? __pfx_get_signal+0x10/0x10 [ 234.812170][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 234.817732][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 234.823918][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 234.829569][ C0] do_syscall_64+0xda/0x250 [ 234.834100][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.840098][ C0] RIP: 0033:0x7f02d8d799f9 [ 234.844515][ C0] RSP: 002b:00007f02d87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 234.852937][ C0] RAX: ffffffffffffffda RBX: 00007f02d8f15f80 RCX: 00007f02d8d799f9 [ 234.860921][ C0] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000009 [ 234.868919][ C0] RBP: 00007f02d8de78ee R08: 0000000020000200 R09: 0000000000000000 [ 234.876902][ C0] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.884973][ C0] R13: 0000000000000000 R14: 00007f02d8f15f80 R15: 00007ffcc3b60b38 [ 234.892969][ C0] [ 234.895999][ C0] rcu: rcu_preempt kthread starved for 10562 jiffies! g11617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 234.907220][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 234.917196][ C0] rcu: RCU grace-period kthread stack dump: [ 234.923109][ C0] task:rcu_preempt state:R running task stack:26144 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 234.934854][ C0] Call Trace: [ 234.938142][ C0] [ 234.941077][ C0] __schedule+0xe37/0x5490 [ 234.945506][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 234.950723][ C0] ? __pfx___schedule+0x10/0x10 [ 234.955586][ C0] ? schedule+0x298/0x350 [ 234.959938][ C0] ? __pfx_lock_release+0x10/0x10 [ 234.965008][ C0] ? __pfx___mod_timer+0x10/0x10 [ 234.969968][ C0] ? lock_acquire+0x1b1/0x560 [ 234.974653][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 234.980160][ C0] schedule+0xe7/0x350 [ 234.984255][ C0] schedule_timeout+0x136/0x2a0 [ 234.989120][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 234.994523][ C0] ? __pfx_process_timeout+0x10/0x10 [ 234.999832][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 235.005681][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 235.011157][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 235.015932][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 235.021230][ C0] ? rcu_gp_init+0xc82/0x1630 [ 235.025913][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 235.031126][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.036950][ C0] rcu_gp_kthread+0x271/0x380 [ 235.041661][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.046875][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.052084][ C0] ? __kthread_parkme+0x148/0x220 [ 235.057130][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 235.062355][ C0] kthread+0x2c1/0x3a0 [ 235.066630][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.071846][ C0] ? __pfx_kthread+0x10/0x10 [ 235.076486][ C0] ret_from_fork+0x45/0x80 [ 235.080926][ C0] ? __pfx_kthread+0x10/0x10 [ 235.085538][ C0] ret_from_fork_asm+0x1a/0x30 [ 235.090328][ C0] [ 235.093352][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 235.099685][ C0] Sending NMI from CPU 0 to CPUs 1: [ 235.104927][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20