last executing test programs: 1m42.822042296s ago: executing program 3 (id=4): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3"], 0x1508}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x6008000) 1m42.524250212s ago: executing program 3 (id=6): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x8, 0x0, 0x6}, {0x1, 0x6, 0x9, 0xfffffffffffffffe}, 0x0, 0x6e6bb4}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1m41.841872224s ago: executing program 1 (id=2): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) 1m41.738440337s ago: executing program 0 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x13) 1m41.676363843s ago: executing program 0 (id=9): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe", @ANYRES64=0x0], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c000180060001"], 0xb0}}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000102010800000000000000000a000001440002802c"], 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = creat(0x0, 0x122) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c00"], 0x30}}, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6d, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xb, 0x1, 0x10900000, 0x4c3e, 0x7, 0xd}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x7fff}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x3, 0x6, 0x6, 0x1}}]}]}}}]}, 0x74}}, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) socket(0x10, 0x3, 0x0) 1m41.666796932s ago: executing program 1 (id=10): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x191) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x3ff, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1m41.498083387s ago: executing program 3 (id=12): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 1m41.162176073s ago: executing program 1 (id=14): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@newtaction={0xe8, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0xd4, 0x1, [@m_nat={0xa4, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x2c, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004001}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000340)="120000001200e7ef0000a1001b0000000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m41.14372045s ago: executing program 4 (id=5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b8, 0x29, 0x36, {0x5e, 0x33, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x368}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m41.099377471s ago: executing program 2 (id=15): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, 0x0, 0x0) 1m40.646470913s ago: executing program 0 (id=16): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4802, 0x0, 0x7289, 0x1}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x26, 0x803, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 1m40.618307397s ago: executing program 2 (id=17): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3a33, 0x4) sendto(r0, &(0x7f0000000540)='P', 0x1, 0x8052, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f801006e004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800", 0xba, 0x52, 0x0, 0x0) 1m40.590560171s ago: executing program 1 (id=18): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7f7c, 0x6, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.592683346s ago: executing program 0 (id=19): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) unshare(0x6020400) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e0000001100818804", 0x9}], 0x1}, 0x0) 1m39.524471189s ago: executing program 2 (id=20): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a", 0x32}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/80, 0x50}], 0x1}, 0x6}], 0x1, 0x2160, 0x0) 1m39.434303956s ago: executing program 4 (id=21): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/172, 0xac}], 0x1}, 0x8000}], 0x2, 0x40000000, 0x0) 1m39.393797527s ago: executing program 2 (id=22): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) 1m39.390172235s ago: executing program 1 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x3, 0x3, 0x15, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f0000faffffff000010e200", [0xfffffffffffffffe, 0x7]}}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0xc2) r9 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$FUSE_IOCTL(r8, &(0x7f0000000100)={0x20}, 0xfdef) 1m39.301975885s ago: executing program 0 (id=24): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x31, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x23e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 1m38.33244863s ago: executing program 2 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x72, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0xc2, 0x0, 0x0, 0x8, {[@eol, @nop, @mptcp=@capable={0x1e, 0x14, 0x7, 0x1, 0xe, 0x1, [0x4]}, @nop, @window={0x3, 0x3, 0x80}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0) 1m38.142595285s ago: executing program 4 (id=26): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = open(0x0, 0x2400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m38.140643856s ago: executing program 2 (id=27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 1m37.686258263s ago: executing program 0 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 1m37.139986951s ago: executing program 4 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 32 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 58.822058][ T30] audit: type=1400 audit(1762134651.159:62): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.845524][ T30] audit: type=1400 audit(1762134651.179:63): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.847953][ T5796] cgroup: Unknown subsys name 'net' [ 58.874769][ T30] audit: type=1400 audit(1762134651.209:64): avc: denied { unmount } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.013494][ T5796] cgroup: Unknown subsys name 'cpuset' [ 59.020859][ T5796] cgroup: Unknown subsys name 'rlimit' [ 59.146033][ T30] audit: type=1400 audit(1762134651.479:65): avc: denied { setattr } for pid=5796 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.178668][ T30] audit: type=1400 audit(1762134651.479:66): avc: denied { create } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.200896][ T30] audit: type=1400 audit(1762134651.479:67): avc: denied { write } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.224064][ T30] audit: type=1400 audit(1762134651.479:68): avc: denied { read } for pid=5796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.244413][ T30] audit: type=1400 audit(1762134651.489:69): avc: denied { mounton } for pid=5796 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.269234][ T30] audit: type=1400 audit(1762134651.489:70): avc: denied { mount } for pid=5796 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.291161][ T5798] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.292878][ T30] audit: type=1400 audit(1762134651.529:71): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.230142][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.429299][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.450572][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.458583][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.466538][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.474860][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.482621][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.490215][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.497616][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.498704][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.505109][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.518292][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.520047][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.526906][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.532966][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.539608][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.548212][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.553732][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.567543][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.569817][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.582110][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.582656][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.598716][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.605974][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.615896][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.624316][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.041354][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 63.085384][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 63.100271][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 63.163617][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 63.248877][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.256079][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.263842][ T5806] bridge_slave_0: entered allmulticast mode [ 63.270450][ T5806] bridge_slave_0: entered promiscuous mode [ 63.314409][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.321597][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.328695][ T5806] bridge_slave_1: entered allmulticast mode [ 63.335531][ T5806] bridge_slave_1: entered promiscuous mode [ 63.389233][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.396566][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.404599][ T5815] bridge_slave_0: entered allmulticast mode [ 63.411725][ T5815] bridge_slave_0: entered promiscuous mode [ 63.420476][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 63.444069][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.451214][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.458303][ T5811] bridge_slave_0: entered allmulticast mode [ 63.464883][ T5811] bridge_slave_0: entered promiscuous mode [ 63.472176][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.479266][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.486403][ T5815] bridge_slave_1: entered allmulticast mode [ 63.493053][ T5815] bridge_slave_1: entered promiscuous mode [ 63.504922][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.514499][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.521729][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.528811][ T5816] bridge_slave_0: entered allmulticast mode [ 63.535454][ T5816] bridge_slave_0: entered promiscuous mode [ 63.542092][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.549155][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.556476][ T5811] bridge_slave_1: entered allmulticast mode [ 63.563145][ T5811] bridge_slave_1: entered promiscuous mode [ 63.593328][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.602614][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.609694][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.617152][ T5816] bridge_slave_1: entered allmulticast mode [ 63.623818][ T5816] bridge_slave_1: entered promiscuous mode [ 63.667243][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.678177][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.705968][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.716722][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.729837][ T5806] team0: Port device team_slave_0 added [ 63.737601][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.765424][ T5806] team0: Port device team_slave_1 added [ 63.772666][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.817229][ T5811] team0: Port device team_slave_0 added [ 63.824234][ T5815] team0: Port device team_slave_0 added [ 63.830991][ T5811] team0: Port device team_slave_1 added [ 63.868531][ T5815] team0: Port device team_slave_1 added [ 63.874603][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.882042][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.889114][ T5810] bridge_slave_0: entered allmulticast mode [ 63.896119][ T5810] bridge_slave_0: entered promiscuous mode [ 63.903890][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.910813][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.936860][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.949384][ T5816] team0: Port device team_slave_0 added [ 63.977881][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.985107][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.992243][ T5810] bridge_slave_1: entered allmulticast mode [ 63.998854][ T5810] bridge_slave_1: entered promiscuous mode [ 64.005919][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.012869][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.039462][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.051423][ T5816] team0: Port device team_slave_1 added [ 64.061136][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.068223][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.094841][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.106538][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.113589][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.139590][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.186538][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.193586][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.219528][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.231015][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.238038][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.264187][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.275953][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.282901][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.308802][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.321381][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.331651][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.338582][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.364616][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.384572][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.441376][ T5806] hsr_slave_0: entered promiscuous mode [ 64.447612][ T5806] hsr_slave_1: entered promiscuous mode [ 64.473561][ T5811] hsr_slave_0: entered promiscuous mode [ 64.479538][ T5811] hsr_slave_1: entered promiscuous mode [ 64.485805][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 64.491577][ T5811] Cannot create hsr debugfs directory [ 64.500150][ T5816] hsr_slave_0: entered promiscuous mode [ 64.506367][ T5816] hsr_slave_1: entered promiscuous mode [ 64.512244][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 64.517956][ T5816] Cannot create hsr debugfs directory [ 64.532271][ T5810] team0: Port device team_slave_0 added [ 64.563191][ T5810] team0: Port device team_slave_1 added [ 64.611046][ T5815] hsr_slave_0: entered promiscuous mode [ 64.617227][ T5815] hsr_slave_1: entered promiscuous mode [ 64.623471][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 64.629173][ T5815] Cannot create hsr debugfs directory [ 64.641850][ T50] Bluetooth: hci2: command tx timeout [ 64.641854][ T5809] Bluetooth: hci1: command tx timeout [ 64.653264][ T5817] Bluetooth: hci0: command tx timeout [ 64.693196][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.700133][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.726309][ T5817] Bluetooth: hci4: command tx timeout [ 64.731932][ T5817] Bluetooth: hci3: command tx timeout [ 64.737476][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.772385][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.779327][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.806017][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.934475][ T5810] hsr_slave_0: entered promiscuous mode [ 64.940588][ T5810] hsr_slave_1: entered promiscuous mode [ 64.946763][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 64.952886][ T5810] Cannot create hsr debugfs directory [ 65.098674][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.114060][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.134433][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.144602][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.184907][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.220262][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.230273][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.253278][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.302344][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.313877][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.324371][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.343996][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.391519][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.433821][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.445905][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.455512][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.465079][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.473889][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.498351][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.505585][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.536590][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.565501][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.572587][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.625905][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.634119][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.645056][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.655479][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.669695][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.680539][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.702865][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.709913][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.723829][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.753409][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.760487][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.770988][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.778071][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.797826][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.804901][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.846973][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.846987][ T30] audit: type=1400 audit(1762134658.179:86): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.929045][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.958957][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.017987][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.057739][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.064878][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.095058][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.102157][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.122921][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.134388][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.238217][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.270560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.277664][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.286154][ T5816] veth0_vlan: entered promiscuous mode [ 66.306494][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.313591][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.336205][ T5816] veth1_vlan: entered promiscuous mode [ 66.374538][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.409504][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.456872][ T5816] veth0_macvtap: entered promiscuous mode [ 66.503274][ T5816] veth1_macvtap: entered promiscuous mode [ 66.525493][ T5811] veth0_vlan: entered promiscuous mode [ 66.545636][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.555771][ T5815] veth0_vlan: entered promiscuous mode [ 66.572726][ T5815] veth1_vlan: entered promiscuous mode [ 66.595232][ T5811] veth1_vlan: entered promiscuous mode [ 66.606151][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.626637][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.663700][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.685426][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.696450][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.709126][ T5815] veth0_macvtap: entered promiscuous mode [ 66.720840][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.730055][ T5817] Bluetooth: hci0: command tx timeout [ 66.730212][ T50] Bluetooth: hci1: command tx timeout [ 66.736428][ T5809] Bluetooth: hci2: command tx timeout [ 66.748150][ T5811] veth0_macvtap: entered promiscuous mode [ 66.773289][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.788827][ T5811] veth1_macvtap: entered promiscuous mode [ 66.800240][ T5815] veth1_macvtap: entered promiscuous mode [ 66.802513][ T5809] Bluetooth: hci3: command tx timeout [ 66.811833][ T5817] Bluetooth: hci4: command tx timeout [ 66.846934][ T5806] veth0_vlan: entered promiscuous mode [ 66.877949][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.888244][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.899398][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.916890][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.933072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.942467][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.953089][ T5806] veth1_vlan: entered promiscuous mode [ 66.961904][ T1339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.973744][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.019402][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.041079][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.055615][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.083661][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.096324][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.114258][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.127820][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.157579][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.169502][ T30] audit: type=1400 audit(1762134659.499:87): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.R0UCRq/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.198125][ T30] audit: type=1400 audit(1762134659.499:88): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.198576][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.225385][ T30] audit: type=1400 audit(1762134659.499:89): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.R0UCRq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.242862][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.269553][ T30] audit: type=1400 audit(1762134659.499:90): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.311769][ T5806] veth0_macvtap: entered promiscuous mode [ 67.327894][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.335335][ T5806] veth1_macvtap: entered promiscuous mode [ 67.352912][ T30] audit: type=1400 audit(1762134659.499:91): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.R0UCRq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.366174][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.387757][ T30] audit: type=1400 audit(1762134659.499:92): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.R0UCRq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.436034][ T30] audit: type=1400 audit(1762134659.499:93): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.475209][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.483972][ T30] audit: type=1400 audit(1762134659.529:94): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.510674][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.518851][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.522340][ T30] audit: type=1400 audit(1762134659.559:95): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=6926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.548409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.558246][ T1339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.567052][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.569292][ T1339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.597736][ T1339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.606662][ T1339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.620648][ T5810] veth0_vlan: entered promiscuous mode [ 67.905541][ T5810] veth1_vlan: entered promiscuous mode [ 67.939095][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.948586][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.958899][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.971458][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.978225][ T5930] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.981403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.126971][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.135531][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.136330][ T5810] veth0_macvtap: entered promiscuous mode [ 68.192718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.220423][ T5810] veth1_macvtap: entered promiscuous mode [ 68.242135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.387024][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.393605][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.776049][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.802952][ T5817] Bluetooth: hci2: command tx timeout [ 68.807759][ T142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.809211][ T5809] Bluetooth: hci0: command tx timeout [ 68.817641][ T50] Bluetooth: hci1: command tx timeout [ 68.828030][ T5940] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6'. [ 68.843479][ T142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.859925][ T142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.869472][ T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.881670][ T50] Bluetooth: hci4: command tx timeout [ 68.882116][ T5809] Bluetooth: hci3: command tx timeout [ 69.061134][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.081194][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.241315][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 69.250111][ T5953] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 69.271036][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.303256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.631373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.703701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.805809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.121487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.129924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.138392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.147619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.932717][ T5809] Bluetooth: hci0: command tx timeout [ 70.933123][ T50] Bluetooth: hci2: command tx timeout [ 70.938130][ T5809] Bluetooth: hci1: command tx timeout [ 70.942161][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.962612][ T50] Bluetooth: hci4: command tx timeout [ 70.965980][ T5817] Bluetooth: hci3: command tx timeout [ 70.980924][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.093244][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 71.093259][ T30] audit: type=1400 audit(1762134663.429:150): avc: denied { read } for pid=5979 comm="syz.1.18" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.130662][ T30] audit: type=1400 audit(1762134663.459:151): avc: denied { open } for pid=5979 comm="syz.1.18" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.178739][ T30] audit: type=1400 audit(1762134663.469:152): avc: denied { ioctl } for pid=5979 comm="syz.1.18" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.311668][ T30] audit: type=1400 audit(1762134663.639:153): avc: denied { name_bind } for pid=5986 comm="syz.4.21" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.365454][ T5989] Zero length message leads to an empty skb [ 71.590963][ T30] audit: type=1400 audit(1762134663.919:154): avc: denied { read write } for pid=5988 comm="syz.1.23" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.325650][ T30] audit: type=1400 audit(1762134663.959:155): avc: denied { open } for pid=5988 comm="syz.1.23" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.357366][ T30] audit: type=1400 audit(1762134664.219:156): avc: denied { setopt } for pid=5992 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.446830][ T30] audit: type=1400 audit(1762134664.219:157): avc: denied { create } for pid=5990 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.467260][ T30] audit: type=1400 audit(1762134664.219:158): avc: denied { connect } for pid=5990 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.488969][ T30] audit: type=1400 audit(1762134664.219:159): avc: denied { ioctl } for pid=5990 comm="syz.2.22" path="socket:[8524]" dev="sockfs" ino=8524 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.280937][ T10] cfg80211: failed to load regulatory.db [ 78.881169][ C0] sched: DL replenish lagged too much [ 132.465119][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.483026][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.585922][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 188.605746][ T5821] Bluetooth: hci4: command tx timeout [ 188.617856][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 188.630473][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 189.106433][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 284.171084][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 284.178044][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5811/1:b..l [ 284.186126][ C0] rcu: (detected by 0, t=10503 jiffies, g=7441, q=389 ncpus=2) [ 284.193741][ C0] task:syz-executor state:R running task stack:23688 pid:5811 tgid:5811 ppid:5803 task_flags:0x400140 flags:0x00080001 [ 284.207556][ C0] Call Trace: [ 284.210830][ C0] [ 284.213770][ C0] __schedule+0x1190/0x5de0 [ 284.218256][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 284.223185][ C0] ? __pfx___schedule+0x10/0x10 [ 284.228052][ C0] ? mark_held_locks+0x49/0x80 [ 284.232818][ C0] preempt_schedule_irq+0x51/0x90 [ 284.237844][ C0] irqentry_exit+0x36/0x90 [ 284.242250][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.248245][ C0] RIP: 0010:__orc_find+0x3d/0xf0 [ 284.253185][ C0] Code: 53 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c <48> 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 [ 284.272782][ C0] RSP: 0018:ffffc90002f97540 EFLAGS: 00000216 [ 284.278822][ C0] RAX: ffffffff91263244 RBX: ffffffff909dc9a8 RCX: dffffc0000000000 [ 284.286775][ C0] RDX: ffffffff823cf146 RSI: 0000000000000000 RDI: ffffffff909dc9a8 [ 284.294751][ C0] RBP: ffffffff909dc9a8 R08: ffffffff91263274 R09: 0000000000000000 [ 284.302709][ C0] R10: 0000000000000000 R11: 0000000000013cf2 R12: ffffffff909dc9a8 [ 284.310683][ C0] R13: ffffffff823cf204 R14: ffffffff909dc9a8 R15: ffffffff909dc9a8 [ 284.318653][ C0] ? __x64_sys_unlink+0xc4/0x110 [ 284.323580][ C0] ? __x64_sys_unlink+0x6/0x110 [ 284.328434][ C0] ? __x64_sys_unlink+0xc4/0x110 [ 284.333365][ C0] unwind_next_frame+0x2ec/0x20a0 [ 284.338385][ C0] ? __x64_sys_unlink+0xc5/0x110 [ 284.343319][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.349476][ C0] arch_stack_walk+0x94/0x100 [ 284.354147][ C0] ? __x64_sys_unlink+0xc5/0x110 [ 284.359087][ C0] stack_trace_save+0x8e/0xc0 [ 284.363755][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 284.369100][ C0] ? __lock_acquire+0x622/0x1c90 [ 284.374023][ C0] save_stack+0x160/0x1f0 [ 284.378354][ C0] ? __pfx_save_stack+0x10/0x10 [ 284.383199][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 284.388544][ C0] ? __put_partials+0x130/0x170 [ 284.393372][ C0] ? qlist_free_all+0x4d/0x120 [ 284.398130][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 284.403753][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 284.408747][ C0] ? __kmalloc_noprof+0x2e8/0x880 [ 284.413749][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 284.418591][ C0] ? tomoyo_encode+0x29/0x50 [ 284.423166][ C0] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 284.428942][ C0] ? tomoyo_path_perm+0x274/0x460 [ 284.433937][ C0] ? tomoyo_path_unlink+0x91/0xe0 [ 284.438954][ C0] ? security_path_unlink+0x145/0x2b0 [ 284.444314][ C0] ? do_unlinkat+0x463/0x6a0 [ 284.448874][ C0] ? __x64_sys_unlink+0xc5/0x110 [ 284.453788][ C0] ? page_ext_put+0x3e/0xd0 [ 284.458298][ C0] __reset_page_owner+0x84/0x1a0 [ 284.463233][ C0] __free_frozen_pages+0x7df/0x1160 [ 284.468405][ C0] ? mark_held_locks+0x49/0x80 [ 284.473153][ C0] __put_partials+0x130/0x170 [ 284.477839][ C0] qlist_free_all+0x4d/0x120 [ 284.482417][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 284.487859][ C0] __kasan_slab_alloc+0x69/0x90 [ 284.492700][ C0] __kmalloc_noprof+0x2e8/0x880 [ 284.497560][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 284.502412][ C0] ? tomoyo_encode2+0x100/0x3e0 [ 284.507245][ C0] tomoyo_encode2+0x100/0x3e0 [ 284.511906][ C0] tomoyo_encode+0x29/0x50 [ 284.516323][ C0] tomoyo_realpath_from_path+0x18f/0x6e0 [ 284.521953][ C0] tomoyo_path_perm+0x274/0x460 [ 284.526776][ C0] ? tomoyo_path_perm+0x260/0x460 [ 284.531786][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 284.537200][ C0] ? __d_lookup+0x25c/0x4a0 [ 284.541722][ C0] tomoyo_path_unlink+0x91/0xe0 [ 284.546547][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 284.552077][ C0] ? lookup_dcache+0x66/0x170 [ 284.556754][ C0] security_path_unlink+0x145/0x2b0 [ 284.561945][ C0] do_unlinkat+0x463/0x6a0 [ 284.566335][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 284.571258][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 284.576635][ C0] __x64_sys_unlink+0xc5/0x110 [ 284.581404][ C0] do_syscall_64+0xcd/0xfa0 [ 284.585932][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.591813][ C0] RIP: 0033:0x7f3e4b18e577 [ 284.596235][ C0] RSP: 002b:00007fffa82f6198 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 284.604642][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e4b18e577 [ 284.612594][ C0] RDX: 00007fffa82f61c0 RSI: 00007fffa82f6250 RDI: 00007fffa82f6250 [ 284.620565][ C0] RBP: 00007fffa82f6250 R08: 0000000000000000 R09: 0000000000000000 [ 284.628533][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffa82f72e0 [ 284.636483][ C0] R13: 00007f3e4b211d7d R14: 00000000000132a0 R15: 00007fffa82f7320 [ 284.644458][ C0] [ 284.647459][ C0] rcu: rcu_preempt kthread starved for 9162 jiffies! g7441 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 284.658456][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 284.668425][ C0] rcu: RCU grace-period kthread stack dump: [ 284.674290][ C0] task:rcu_preempt state:R running task stack:28968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 284.687774][ C0] Call Trace: [ 284.691032][ C0] [ 284.693952][ C0] __schedule+0x1190/0x5de0 [ 284.698470][ C0] ? __lock_acquire+0x622/0x1c90 [ 284.703411][ C0] ? __pfx___schedule+0x10/0x10 [ 284.708244][ C0] ? find_held_lock+0x2b/0x80 [ 284.712900][ C0] ? schedule+0x2d7/0x3a0 [ 284.717236][ C0] schedule+0xe7/0x3a0 [ 284.721301][ C0] schedule_timeout+0x123/0x290 [ 284.726127][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 284.731475][ C0] ? __pfx_process_timeout+0x10/0x10 [ 284.736764][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.742568][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 284.748024][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 284.752787][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 284.758076][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.763257][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 284.768182][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 284.773018][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.778800][ C0] rcu_gp_kthread+0x26d/0x380 [ 284.783452][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.788643][ C0] ? rcu_is_watching+0x12/0xc0 [ 284.793404][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.798578][ C0] ? __kthread_parkme+0x19e/0x250 [ 284.803581][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 284.808770][ C0] kthread+0x3c5/0x780 [ 284.812822][ C0] ? __pfx_kthread+0x10/0x10 [ 284.817380][ C0] ? rcu_is_watching+0x12/0xc0 [ 284.822119][ C0] ? __pfx_kthread+0x10/0x10 [ 284.826699][ C0] ret_from_fork+0x675/0x7d0 [ 284.831273][ C0] ? __pfx_kthread+0x10/0x10 [ 284.835831][ C0] ret_from_fork_asm+0x1a/0x30 [ 284.840573][ C0] [ 284.843567][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 284.849870][ C0] Sending NMI from CPU 0 to CPUs 1: [ 284.855066][ C1] NMI backtrace for cpu 1 [ 284.855077][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 284.855093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.855101][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 284.855124][ C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 284.855137][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 284.855148][ C1] RAX: 0000000001b2ac0b RBX: 0000000000000001 RCX: ffffffff8b6082a9 [ 284.855157][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 284.855165][ C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655 [ 284.855173][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 284.855182][ C1] R13: ffff88801d6e2480 R14: ffffffff908203d0 R15: 0000000000000000 [ 284.855190][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 284.855204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.855213][ C1] CR2: 00007fffa4cdcf80 CR3: 00000000749c6000 CR4: 00000000003526f0 [ 284.855221][ C1] Call Trace: [ 284.855226][ C1] [ 284.855230][ C1] default_idle+0x13/0x20 [ 284.855243][ C1] default_idle_call+0x6c/0xb0 [ 284.855255][ C1] do_idle+0x38d/0x500 [ 284.855274][ C1] ? __pfx_do_idle+0x10/0x10 [ 284.855289][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 284.855306][ C1] cpu_startup_entry+0x4f/0x60 [ 284.855322][ C1] start_secondary+0x21d/0x2b0 [ 284.855341][ C1] ? __pfx_start_secondary+0x10/0x10 [ 284.855360][ C1] common_startup_64+0x13e/0x148 [ 284.855379][ C1] [ 287.904066][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.916168][ T1294] ieee802154 phy1 wpan1: encryption failed: -22