last executing test programs: 2.930250793s ago: executing program 3 (id=587): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ec0)=@newlink={0x7c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x1b200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x40, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x1, 0xae}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0xc4) 2.83909687s ago: executing program 3 (id=589): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 2.775974438s ago: executing program 3 (id=591): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.569704158s ago: executing program 3 (id=599): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 1.56939295s ago: executing program 3 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.410519234s ago: executing program 0 (id=605): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x13, 0x2, 0x6, 0x3fc, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x6, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x5, 0x6, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x3, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x3, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x9, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r5, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='t', 0x1}], 0x1}, 0x0) 1.316957116s ago: executing program 2 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x2, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.080409874s ago: executing program 1 (id=607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 630.663806ms ago: executing program 3 (id=608): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000001300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 340.376618ms ago: executing program 2 (id=609): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) 339.662596ms ago: executing program 0 (id=610): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 339.571608ms ago: executing program 2 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flistxattr(r0, &(0x7f0000000040)=""/40, 0x28) 283.745104ms ago: executing program 0 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb29e0000, 0x0, 0x31, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 283.479439ms ago: executing program 1 (id=613): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x4, 0xffff}}}, 0x24}}, 0x24040084) r0 = socket(0xa, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) 259.530742ms ago: executing program 0 (id=614): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x2000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 259.344879ms ago: executing program 2 (id=615): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x80084, 0x6, 0x11, 0x9, "0060730000efbc8901000000008de190faf600"}) 180.536188ms ago: executing program 1 (id=616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 180.358515ms ago: executing program 0 (id=617): socket(0x11, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_clone(0x4008400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 180.21687ms ago: executing program 1 (id=618): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ppoll(0x0, 0x0, &(0x7f0000001340)={0x0, 0x989680}, 0x0, 0x0) 67.789208ms ago: executing program 2 (id=619): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 67.58548ms ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 67.334789ms ago: executing program 0 (id=621): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x13, 0x2, 0x6, 0x3fc, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x6, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x5, 0x6, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x3, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x3, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ed, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x9, 0x400001, 0x4d15, 0x1fb, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x1, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x48088}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r6, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='t', 0x1}], 0x1}, 0x0) 218.366µs ago: executing program 1 (id=622): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64810100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 0s ago: executing program 2 (id=623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): [ 37.857985][ T43] audit: type=1400 audit(1788464989.621:116): avc: denied { siginh } for pid=5636 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.900594][ T43] audit: type=1400 audit(1788464989.661:117): avc: denied { write } for pid=5638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.999098][ T43] audit: type=1400 audit(1788464989.761:118): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.061638][ T43] audit: type=1400 audit(1788464989.821:119): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.157762][ T43] audit: type=1400 audit(1788464989.921:120): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:59767' (ED25519) to the list of known hosts. [ 42.930929][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.931652][ T43] audit: type=1400 audit(1788464994.691:141): avc: denied { mounton } for pid=5711 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.934759][ T43] audit: type=1400 audit(1788464994.691:142): avc: denied { mount } for pid=5711 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.938064][ T5711] cgroup: Unknown subsys name 'net' [ 42.940222][ T43] audit: type=1400 audit(1788464994.701:143): avc: denied { unmount } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.099831][ T5711] cgroup: Unknown subsys name 'cpuset' [ 43.106276][ T5711] cgroup: Unknown subsys name 'rlimit' [ 43.256596][ T43] audit: type=1400 audit(1788464995.021:144): avc: denied { setattr } for pid=5711 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.256784][ T43] audit: type=1400 audit(1788464995.021:145): avc: denied { create } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.256953][ T43] audit: type=1400 audit(1788464995.021:146): avc: denied { write } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.257152][ T43] audit: type=1400 audit(1788464995.021:147): avc: denied { read } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.285605][ T43] audit: type=1400 audit(1788464995.051:148): avc: denied { read } for pid=5441 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.292111][ T43] audit: type=1400 audit(1788464995.051:149): avc: denied { read } for pid=5441 comm="dhcpcd" name="n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.292429][ T43] audit: type=1400 audit(1788464995.051:150): avc: denied { open } for pid=5441 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.325649][ T5721] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.086588][ T5711] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.988245][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 47.988311][ T43] audit: type=1400 audit(1788464999.751:157): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.988658][ T43] audit: type=1400 audit(1788464999.751:158): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.989180][ T43] audit: type=1400 audit(1788464999.751:159): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.997119][ T43] audit: type=1400 audit(1788464999.761:160): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[3849]" dev="sockfs" ino=3849 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.034106][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.041765][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.046668][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.051415][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.051718][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.052742][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.052855][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.053139][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.054277][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.055345][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.057021][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.057127][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.057196][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.057710][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.059085][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.059656][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.060572][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.067319][ T43] audit: type=1400 audit(1788464999.831:161): avc: denied { read } for pid=5727 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.067347][ T43] audit: type=1400 audit(1788464999.831:162): avc: denied { open } for pid=5727 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.069780][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.070827][ T43] audit: type=1400 audit(1788464999.831:163): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.073531][ T43] audit: type=1400 audit(1788464999.831:164): avc: denied { module_request } for pid=5727 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.078041][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.083612][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.093492][ T43] audit: type=1400 audit(1788464999.851:165): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.894526][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.895317][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.895469][ T5733] bridge_slave_0: entered allmulticast mode [ 48.896347][ T5733] bridge_slave_0: entered promiscuous mode [ 48.898967][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.899009][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.899091][ T5733] bridge_slave_1: entered allmulticast mode [ 48.899840][ T5733] bridge_slave_1: entered promiscuous mode [ 48.900850][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.900892][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.900948][ T5728] bridge_slave_0: entered allmulticast mode [ 48.901728][ T5728] bridge_slave_0: entered promiscuous mode [ 48.915283][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.915326][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.916929][ T5734] bridge_slave_0: entered allmulticast mode [ 48.917655][ T5734] bridge_slave_0: entered promiscuous mode [ 48.927748][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.927790][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.927842][ T5728] bridge_slave_1: entered allmulticast mode [ 48.928862][ T5728] bridge_slave_1: entered promiscuous mode [ 48.941401][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.941443][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.941599][ T5734] bridge_slave_1: entered allmulticast mode [ 48.942324][ T5734] bridge_slave_1: entered promiscuous mode [ 48.970958][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.972124][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.975799][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.975905][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.975943][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.976022][ T5727] bridge_slave_0: entered allmulticast mode [ 48.977084][ T5727] bridge_slave_0: entered promiscuous mode [ 48.978501][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.978559][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.978934][ T5727] bridge_slave_1: entered allmulticast mode [ 48.979709][ T5727] bridge_slave_1: entered promiscuous mode [ 48.991214][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.005485][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.026001][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.032631][ T5728] team0: Port device team_slave_0 added [ 49.035708][ T5728] team0: Port device team_slave_1 added [ 49.037291][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.045387][ T5733] team0: Port device team_slave_0 added [ 49.053256][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.068148][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.068195][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.068912][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.070831][ T5733] team0: Port device team_slave_1 added [ 49.084402][ T5734] team0: Port device team_slave_0 added [ 49.085163][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.085171][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.085184][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.086343][ T5734] team0: Port device team_slave_1 added [ 49.092482][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.092492][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.092504][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.111380][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.111391][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.111404][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.112710][ T5727] team0: Port device team_slave_0 added [ 49.114504][ T5727] team0: Port device team_slave_1 added [ 49.136878][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.136889][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.136901][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.143575][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.143660][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.143674][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.156996][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.157012][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.157033][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.160780][ T5728] hsr_slave_0: entered promiscuous mode [ 49.161318][ T5728] hsr_slave_1: entered promiscuous mode [ 49.162281][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.162291][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.162305][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.184596][ T5733] hsr_slave_0: entered promiscuous mode [ 49.185312][ T5733] hsr_slave_1: entered promiscuous mode [ 49.185634][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.185691][ T5733] Cannot create hsr debugfs directory [ 49.265622][ T5734] hsr_slave_0: entered promiscuous mode [ 49.266084][ T5734] hsr_slave_1: entered promiscuous mode [ 49.266384][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.266395][ T5734] Cannot create hsr debugfs directory [ 49.276817][ T5727] hsr_slave_0: entered promiscuous mode [ 49.277906][ T5727] hsr_slave_1: entered promiscuous mode [ 49.278608][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 49.278627][ T5727] Cannot create hsr debugfs directory [ 49.517841][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.525743][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.535473][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.541211][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.541859][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.547157][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.552545][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.556774][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.593911][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.594424][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.595361][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.595449][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.610851][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.616842][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.617414][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.621595][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.629786][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.636304][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.649201][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.654302][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.666305][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.669135][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.718321][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.725916][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.726719][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.730852][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.739330][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.745093][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.745563][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.747700][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.806504][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.810501][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.812678][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.814585][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.817631][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.824066][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.828482][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.828949][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.833942][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.875773][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.903850][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.904418][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.916128][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.916272][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.923699][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.977547][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.986901][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.987023][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.997868][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.997954][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.013408][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.049860][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.060280][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.060413][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.079197][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.080226][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.080271][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.112694][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.126155][ T5732] Bluetooth: hci1: command tx timeout [ 50.126327][ T5732] Bluetooth: hci0: command tx timeout [ 50.126898][ T5737] Bluetooth: hci3: command tx timeout [ 50.127066][ T5737] Bluetooth: hci2: command tx timeout [ 50.134069][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.134172][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.150542][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.150614][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.323625][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.361391][ T5728] veth0_vlan: entered promiscuous mode [ 50.369412][ T5728] veth1_vlan: entered promiscuous mode [ 50.397881][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.410106][ T5728] veth0_macvtap: entered promiscuous mode [ 50.413633][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.417852][ T5728] veth1_macvtap: entered promiscuous mode [ 50.449530][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.452463][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.452621][ T5734] veth0_vlan: entered promiscuous mode [ 50.468224][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.481193][ T5733] veth0_vlan: entered promiscuous mode [ 50.482345][ T5734] veth1_vlan: entered promiscuous mode [ 50.491541][ T5733] veth1_vlan: entered promiscuous mode [ 50.581265][ T5733] veth0_macvtap: entered promiscuous mode [ 50.582771][ T5734] veth0_macvtap: entered promiscuous mode [ 50.590223][ T5727] veth0_vlan: entered promiscuous mode [ 50.592838][ T5733] veth1_macvtap: entered promiscuous mode [ 50.595918][ T5734] veth1_macvtap: entered promiscuous mode [ 50.596689][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.596709][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.622638][ T5727] veth1_vlan: entered promiscuous mode [ 50.632526][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.632579][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.635454][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.639490][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.641408][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.642040][ T43] audit: type=1400 audit(1788465002.401:166): avc: denied { mount } for pid=5728 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.646881][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.653007][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.654913][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654945][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654964][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.685755][ T5727] veth0_macvtap: entered promiscuous mode [ 50.693085][ T5728] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.702029][ T5727] veth1_macvtap: entered promiscuous mode [ 50.704995][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.768444][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.791356][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.806892][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.806983][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.825840][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.855369][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.855411][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.864528][ T5877] syzkaller0: entered promiscuous mode [ 50.864537][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.864555][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.866320][ T5877] syzkaller0: entered allmulticast mode [ 50.914830][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.914988][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.923600][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.923658][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.935376][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.972054][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.972148][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.976177][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.976217][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.976249][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.976306][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.976338][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.976378][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.976407][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.033437][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.033504][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.608596][ T5897] syzkaller1: entered promiscuous mode [ 51.608674][ T5897] syzkaller1: entered allmulticast mode [ 51.654280][ T5946] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.204847][ T5732] Bluetooth: hci2: command tx timeout [ 52.205294][ T5732] Bluetooth: hci3: command tx timeout [ 52.215503][ T5737] Bluetooth: hci0: command tx timeout [ 52.215587][ T5737] Bluetooth: hci1: command tx timeout [ 52.807402][ T6055] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.881478][ T6064] Zero length message leads to an empty skb [ 53.651139][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 53.651217][ T43] audit: type=1400 audit(1788465005.411:214): avc: denied { name_bind } for pid=6161 comm="syz.3.131" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 54.145094][ T6186] syzkaller1: entered promiscuous mode [ 54.146163][ T6186] syzkaller1: entered allmulticast mode [ 54.295806][ T5732] Bluetooth: hci3: command tx timeout [ 54.296989][ T5732] Bluetooth: hci1: command tx timeout [ 54.297014][ T5732] Bluetooth: hci2: command tx timeout [ 54.297036][ T5732] Bluetooth: hci0: command tx timeout [ 54.709169][ T6231] syzkaller1: entered promiscuous mode [ 54.709213][ T6231] syzkaller1: entered allmulticast mode [ 54.796107][ T43] audit: type=1400 audit(1788465006.561:215): avc: denied { mount } for pid=6259 comm="syz.1.172" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.812813][ T43] audit: type=1400 audit(1788465006.571:216): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.190246][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.191'. [ 55.306953][ T6289] syzkaller1: entered promiscuous mode [ 55.307003][ T6289] syzkaller1: entered allmulticast mode [ 55.962387][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.227'. [ 56.069955][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 56.113559][ T43] audit: type=1400 audit(1788465007.871:217): avc: denied { setopt } for pid=6403 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.251855][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 56.365122][ T5737] Bluetooth: hci0: command tx timeout [ 56.365420][ T5737] Bluetooth: hci2: command tx timeout [ 56.365435][ T5737] Bluetooth: hci1: command tx timeout [ 56.365447][ T5737] Bluetooth: hci3: command tx timeout [ 56.382392][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 56.647220][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 56.759977][ T6480] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 57.100783][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.280'. [ 57.363894][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 57.484395][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 57.531883][ T6573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.302'. [ 58.258343][ T6677] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.163525][ T6820] FAULT_INJECTION: forcing a failure. [ 60.163525][ T6820] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.169650][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.2.402 Not tainted syzkaller #0 PREEMPT(full) [ 60.169668][ T6820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.169674][ T6820] Call Trace: [ 60.169678][ T6820] [ 60.169683][ T6820] dump_stack_lvl+0x100/0x190 [ 60.169703][ T6820] should_fail_ex.cold+0x5/0xa [ 60.169718][ T6820] _copy_from_user+0x2e/0xd0 [ 60.169736][ T6820] memdup_user+0x6b/0xe0 [ 60.169751][ T6820] strndup_user+0x78/0xe0 [ 60.169767][ T6820] __x64_sys_mount+0x136/0x310 [ 60.169783][ T6820] ? __pfx___x64_sys_mount+0x10/0x10 [ 60.169801][ T6820] do_syscall_64+0x123/0x790 [ 60.169815][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.169827][ T6820] RIP: 0033:0x7fd312d9e159 [ 60.169836][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.169846][ T6820] RSP: 002b:00007fd313ba6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.169857][ T6820] RAX: ffffffffffffffda RBX: 00007fd313025fa0 RCX: 00007fd312d9e159 [ 60.169864][ T6820] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 60.169870][ T6820] RBP: 00007fd312e35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.169876][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.169882][ T6820] R13: 00007fd313026038 R14: 00007fd313025fa0 R15: 00007ffee137c618 [ 60.169895][ T6820] [ 60.182364][ T43] audit: type=1400 audit(1788465011.941:218): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.204566][ T6823] __nla_validate_parse: 11 callbacks suppressed [ 60.204579][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 60.431036][ T6850] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.461129][ T6858] FAULT_INJECTION: forcing a failure. [ 60.461129][ T6858] name failslab, interval 1, probability 0, space 0, times 1 [ 60.461229][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.0.418 Not tainted syzkaller #0 PREEMPT(full) [ 60.461268][ T6858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.461281][ T6858] Call Trace: [ 60.461287][ T6858] [ 60.461295][ T6858] dump_stack_lvl+0x100/0x190 [ 60.461327][ T6858] should_fail_ex.cold+0x5/0xa [ 60.461352][ T6858] should_failslab+0xc2/0x120 [ 60.461374][ T6858] __kmalloc_noprof+0xfc/0x840 [ 60.461391][ T6858] ? lsm_blob_alloc+0x68/0x90 [ 60.461417][ T6858] lsm_blob_alloc+0x68/0x90 [ 60.461439][ T6858] security_prepare_creds+0x2d/0x290 [ 60.461459][ T6858] prepare_creds+0x5d6/0x950 [ 60.461489][ T6858] join_session_keyring+0x17/0x350 [ 60.461515][ T6858] lookup_user_key+0xbf9/0x1300 [ 60.461541][ T6858] ? __pfx_lookup_user_key+0x10/0x10 [ 60.461566][ T6858] ? lock_acquire+0x1d1/0x380 [ 60.461583][ T6858] ? __might_fault+0xc5/0x140 [ 60.461608][ T6858] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 60.461639][ T6858] ? strncpy_from_user+0x19d/0x2d0 [ 60.461670][ T6858] __do_sys_add_key+0x2a6/0x460 [ 60.461718][ T6858] ? __pfx___do_sys_add_key+0x10/0x10 [ 60.461750][ T6858] do_syscall_64+0x123/0x790 [ 60.461773][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.461791][ T6858] RIP: 0033:0x7f8fcb99e159 [ 60.461807][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.461823][ T6858] RSP: 002b:00007f8fcc8a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 60.461842][ T6858] RAX: ffffffffffffffda RBX: 00007f8fcbc25fa0 RCX: 00007f8fcb99e159 [ 60.461854][ T6858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 60.461864][ T6858] RBP: 00007f8fcba35024 R08: fffffffffffffffd R09: 0000000000000000 [ 60.461874][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.461883][ T6858] R13: 00007f8fcbc26038 R14: 00007f8fcbc25fa0 R15: 00007ffc469e5ea8 [ 60.461905][ T6858] [ 61.130031][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 61.400336][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 61.409211][ T6946] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 61.447108][ T6950] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.897989][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 62.107893][ T43] audit: type=1400 audit(1788465013.871:219): avc: denied { name_bind } for pid=7006 comm="syz.3.480" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.251058][ T43] audit: type=1400 audit(1788465014.011:220): avc: denied { relabelfrom } for pid=7020 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.251353][ T43] audit: type=1400 audit(1788465014.011:221): avc: denied { relabelto } for pid=7020 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.342407][ T7026] syzkaller0: entered promiscuous mode [ 62.342482][ T7026] syzkaller0: entered allmulticast mode [ 62.353801][ T7032] ip_tables: iptables: counters copy to user failed while replacing table [ 62.386997][ T43] audit: type=1400 audit(1788465014.151:222): avc: denied { ioctl } for pid=7035 comm="syz.3.494" path="socket:[12120]" dev="sockfs" ino=12120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.332461][ T7046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.526036][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 63.527142][ T7080] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.620917][ T7088] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.681774][ T7075] syzkaller1: entered promiscuous mode [ 63.681837][ T7075] syzkaller1: entered allmulticast mode [ 63.774251][ T7099] syzkaller0: entered promiscuous mode [ 63.774293][ T7099] syzkaller0: entered allmulticast mode [ 64.850595][ T43] audit: type=1400 audit(1788465016.611:223): avc: denied { create } for pid=7137 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.853999][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 64.854947][ T43] audit: type=1400 audit(1788465016.611:224): avc: denied { write } for pid=7137 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.854986][ T43] audit: type=1400 audit(1788465016.611:225): avc: denied { nlmsg_write } for pid=7137 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.959658][ T7151] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.084746][ T7161] syzkaller0: entered promiscuous mode [ 65.088150][ T7161] syzkaller0: entered allmulticast mode [ 65.105739][ T7161] tipc: Started in network mode [ 65.105807][ T7161] tipc: Node identity 5a57dfc7f58e, cluster identity 4711 [ 65.106607][ T7161] tipc: Enabled bearer , priority 0 [ 65.114593][ T7160] tipc: Resetting bearer [ 65.130264][ T7160] tipc: Disabling bearer [ 65.182843][ T7166] syzkaller0: entered promiscuous mode [ 65.182920][ T7166] syzkaller0: entered allmulticast mode [ 66.223595][ T7189] syzkaller1: entered promiscuous mode [ 66.225054][ T7189] syzkaller1: entered allmulticast mode [ 67.212475][ T7238] syzkaller0: entered promiscuous mode [ 67.212548][ T7238] syzkaller0: entered allmulticast mode [ 68.273505][ T43] audit: type=1400 audit(1788465020.031:226): avc: denied { create } for pid=7260 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.275303][ T43] audit: type=1400 audit(1788465020.041:227): avc: denied { create } for pid=7260 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.372277][ T43] audit: type=1400 audit(1788465020.131:228): avc: denied { write } for pid=7273 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.396624][ T43] audit: type=1400 audit(1788465020.161:229): avc: denied { read write } for pid=7277 comm="syz.1.586" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.396939][ T43] audit: type=1400 audit(1788465020.161:230): avc: denied { open } for pid=7277 comm="syz.1.586" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.414219][ T35] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0002/input/input5 [ 68.452824][ T35] asus 0018:0B05:0101.0002: input,hidraw1: I2C HID v0.00 Mouse [syz0] on syz1 [ 68.452922][ T35] asus 0018:0B05:0101.0002: Asus failed to start multitouch: -5 [ 68.517217][ T35] asus 0018:0B05:0101.0002: probe with driver asus failed with error -5 [ 68.576605][ T7289] syzkaller0: entered promiscuous mode [ 68.576706][ T7289] syzkaller0: entered allmulticast mode [ 68.624469][ T5737] Bluetooth: hci4: sending frame failed (-49) [ 68.627972][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 68.858470][ T43] audit: type=1400 audit(1788465020.621:231): avc: denied { sys_module } for pid=7290 comm="syz.3.591" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.755711][ T43] audit: type=1400 audit(1788465021.521:232): avc: denied { mount } for pid=7314 comm="syz.0.598" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.774112][ T43] audit: type=1400 audit(1788465021.531:233): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.823422][ T43] audit: type=1400 audit(1788465021.581:234): avc: denied { mount } for pid=7321 comm="syz.1.602" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 69.831324][ T43] audit: type=1400 audit(1788465021.591:235): avc: denied { search } for pid=7321 comm="syz.1.602" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.909643][ T7331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.968890][ T7333] syzkaller0: entered promiscuous mode [ 69.968959][ T7333] syzkaller0: entered allmulticast mode [ 70.204216][ T7331] md: pers->run() failed ... [ 70.957112][ T7341] syzkaller1: entered promiscuous mode [ 70.957184][ T7341] syzkaller1: entered allmulticast mode [ 70.998158][ T7349] netlink: 763 bytes leftover after parsing attributes in process `syz.2.609'. [ 71.050843][ T7354] FAULT_INJECTION: forcing a failure. [ 71.050843][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 71.050915][ T7354] CPU: 2 UID: 0 PID: 7354 Comm: syz.2.611 Not tainted syzkaller #0 PREEMPT(full) [ 71.050952][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.050966][ T7354] Call Trace: [ 71.050973][ T7354] [ 71.050981][ T7354] dump_stack_lvl+0x100/0x190 [ 71.051017][ T7354] should_fail_ex.cold+0x5/0xa [ 71.051045][ T7354] should_failslab+0xc2/0x120 [ 71.051070][ T7354] __kvmalloc_node_noprof+0x113/0x9b0 [ 71.051096][ T7354] ? listxattr+0x89/0x190 [ 71.051120][ T7354] listxattr+0x89/0x190 [ 71.051143][ T7354] path_listxattrat+0x2b3/0x370 [ 71.051165][ T7354] ? __pfx_path_listxattrat+0x10/0x10 [ 71.051184][ T7354] do_syscall_64+0x123/0x790 [ 71.051199][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.051211][ T7354] RIP: 0033:0x7fd312d9e159 [ 71.051221][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.051231][ T7354] RSP: 002b:00007fd313ba6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 71.051244][ T7354] RAX: ffffffffffffffda RBX: 00007fd313025fa0 RCX: 00007fd312d9e159 [ 71.051251][ T7354] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000003 [ 71.051260][ T7354] RBP: 00007fd312e35024 R08: 0000000000000000 R09: 0000000000000000 [ 71.051270][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.051280][ T7354] R13: 00007fd313026038 R14: 00007fd313025fa0 R15: 00007ffee137c618 [ 71.051299][ T7354] [ 71.073883][ T7355] VFS: Mount too revealing [ 71.248307][ T7366] ptrace attach of "/syz-executor exec"[7369] was attempted by "/syz-executor exec"[7366] [ 71.298862][ T7374] bridge0: entered promiscuous mode [ 71.298926][ T7374] bridge0: entered allmulticast mode [ 71.369830][ T7375] syzkaller0: entered promiscuous mode [ 71.369911][ T7375] syzkaller0: entered allmulticast mode [ 71.423623][ T7383] [ 71.428668][ T7383] ============================= [ 71.430389][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.430490][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.436900][ T7383] WARNING: suspicious RCU usage [ 71.439488][ T7383] syzkaller #0 Not tainted [ 71.441663][ T7383] ----------------------------- [ 71.443700][ T7383] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 71.447270][ T7383] [ 71.447270][ T7383] other info that might help us debug this: [ 71.447270][ T7383] [ 71.452147][ T7383] [ 71.452147][ T7383] rcu_scheduler_active = 2, debug_locks = 1 [ 71.456025][ T7383] locks held by syz.2.623/7383: 1, last CPU#2: [ 71.458093][ T7383] #0: ffff88802bceeb90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 71.462688][ T7383] [ 71.462688][ T7383] stack backtrace: [ 71.465185][ T7383] CPU: 2 UID: 0 PID: 7383 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT(full) [ 71.469132][ T7383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.474749][ T7383] Call Trace: [ 71.476380][ T7383] [ 71.477656][ T7383] dump_stack_lvl+0x100/0x190 [ 71.479687][ T7383] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 71.482203][ T7383] xfrm_do_migrate_state+0x2463/0x2f10 [ 71.484539][ T7383] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 71.487011][ T7383] ? __asan_memset+0x23/0x50 [ 71.489009][ T7383] ? __nla_validate_parse+0x1e7/0x28b0 [ 71.491388][ T7383] ? __nla_parse+0x40/0x60 [ 71.493491][ T7383] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 71.496269][ T7383] ? xfrm_user_rcv_msg+0x483/0xd80 [ 71.498452][ T7383] xfrm_user_rcv_msg+0x483/0xd80 [ 71.500680][ T7383] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 71.503805][ T7383] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.506062][ T7383] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 71.508695][ T7383] ? __lock_acquire+0x4c5/0x1ec0 [ 71.510665][ T7383] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.512952][ T7383] ? __mutex_lock+0x829/0x1bd0 [ 71.515100][ T7383] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.517510][ T7383] ? __mutex_lock+0x829/0x1bd0 [ 71.519926][ T7383] ? __mutex_lock+0x26c/0x1bd0 [ 71.522295][ T7383] netlink_rcv_skb+0x159/0x420 [ 71.524401][ T7383] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 71.526691][ T7383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.528983][ T7383] xfrm_netlink_rcv+0x71/0x90 [ 71.531341][ T7383] netlink_unicast+0x585/0x850 [ 71.534103][ T7383] ? __pfx_netlink_unicast+0x10/0x10 [ 71.536492][ T7383] ? __pfx_sock_has_perm+0x10/0x10 [ 71.538897][ T7383] netlink_sendmsg+0x8b0/0xda0 [ 71.541062][ T7383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.543400][ T7383] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.545791][ T7383] ____sys_sendmsg+0xa4d/0xbe0 [ 71.547840][ T7383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.550382][ T7383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.553269][ T7383] ? find_held_lock+0x2b/0x80 [ 71.555569][ T7383] ___sys_sendmsg+0x190/0x1e0 [ 71.557637][ T7383] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.559878][ T7383] ? find_held_lock+0x2b/0x80 [ 71.561934][ T7383] __sys_sendmsg+0x160/0x210 [ 71.563914][ T7383] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.566244][ T7383] ? kcov_ioctl+0x17a/0x760 [ 71.568429][ T7383] do_syscall_64+0x123/0x790 [ 71.570824][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.573425][ T7383] RIP: 0033:0x7fd312d9e159 [ 71.575310][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.583518][ T7383] RSP: 002b:00007fd313b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.587072][ T7383] RAX: ffffffffffffffda RBX: 00007fd313026090 RCX: 00007fd312d9e159 [ 71.589995][ T7383] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 71.592438][ T7383] RBP: 00007fd312e35024 R08: 0000000000000000 R09: 0000000000000000 [ 71.595246][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.598931][ T7383] R13: 00007fd313026128 R14: 00007fd313026090 R15: 00007ffee137c618 [ 71.601811][ T7383] [ 76.530261][ T1349] cfg80211: failed to load regulatory.db