last executing test programs: 474.805195ms ago: executing program 1 (id=2): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x80000, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000d00)={0x1, 0x0, 0x8a, 0x2, 0x38, 0x6}) ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x4) 310.14541ms ago: executing program 1 (id=5): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/uprobe_events\x00', 0x81, 0x41) write(r3, &(0x7f0000000380)="703a745f73742f6576656e7431202e2f66696c65303a307830202d8afc717edc400ff5cc5c68f971a57f18f4a128", 0x2e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f246, 0x10000}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000003c0)={0x2, 0x0, 0xaa8}) 253.613663ms ago: executing program 2 (id=3): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000200)={0x1a, 0x7, 0x2, {{0xd, 'pids.current\x00'}}}, 0x1a) lseek(r0, 0x1, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x1) r1 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) syslog(0x3, &(0x7f0000000000)=""/191, 0xbf) madvise(&(0x7f00001af000/0x1000)=nil, 0x1000, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 212.703453ms ago: executing program 3 (id=4): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000002000000000000000000000000005000300050000000f000400726f750600000062696e0000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 145.314744ms ago: executing program 0 (id=1): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x0, 0x19d0}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x2}) 50.120148ms ago: executing program 2 (id=6): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000005c0)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000c40)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000c80)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000e40)='hybla', 0x5) recvfrom$inet(r1, &(0x7f0000000e80), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r2 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xd) fchdir(r3) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0xfdef) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000006c0)="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", 0x559, r6) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x209, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4004040) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 49.233925ms ago: executing program 3 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x183000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000b00)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000b40)="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"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000ac0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x1, 0x80a4ffc, 0x2000, &(0x7f0000002000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000fc0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001000)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001080)=[@text32={0x20, &(0x7f00000010c0)="0f20c035000001000f22c0b8331c39410f23d00f21f8352000000e0f23f8c74424005cec0000c744240209000000c7442406000000000f0114240f08f32ed9f6b8010000000f01d9c4c1fc525f220f01cb0fc7bcba004000009ad4000000ed00", 0x60}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracefs_dir\x00', &(0x7f0000000540)='tracefs\x00', 0x200802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000071114800000000008510000002000000850000000500000095003300000000009500a50500000000a5b2b0535f589e85008eb6ea706629b7c2b1d6d9b6583b24abc34e5c773f2ac3b72440252bec949461c57c42d729e6bf8e68fc78a08493607924d31a323f19e911a66b7a87dded7323d7d132c9bcf780241e5fc2d0e0637c852f0d1bef8b08d7"], &(0x7f00000006c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)) r2 = syz_open_dev$dri(&(0x7f0000000880), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000008c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000900)={&(0x7f0000000940)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000980)={0x1, 0x1, &(0x7f00000009c0)=[r3], &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=9): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x400, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0xa0800, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x3fffffffffefe7, 0x0, 0xc0, 'crypt\x00', {'capi:ccm(aes)-random', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '8191', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1'}, ' 2 integrity:32:aead integrity_key_size:32'}}]}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newqdisc={0xb8, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc}}, [@TCA_STAB={0x39, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x8000, 0xee1, 0x2, 0x1000, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0x80000, 0x2}}, {0x8, 0x2, [0x1, 0x7]}}, {{0x1c, 0x1, {0x14, 0x6, 0xca48, 0x8000, 0x2, 0x2, 0x7f, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xf5, 0xdf, 0x2, 0x5, 0x1, 0x5, 0x4451b5f0, 0x2}}, {0x8, 0x2, [0x5, 0x40]}}]}]}, 0xb8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) open$dir(&(0x7f0000000880)='./file0\x00', 0x0, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x3c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x16}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x40855) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46042' (ED25519) to the list of known hosts. [ 39.951330][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 39.951343][ T43] audit: type=1400 audit(1793163105.430:138): avc: denied { name_bind } for pid=5769 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.977904][ T43] audit: type=1400 audit(1793163105.460:139): avc: denied { execute } for pid=5770 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.978495][ T43] audit: type=1400 audit(1793163105.460:140): avc: denied { execute_no_trans } for pid=5770 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.032099][ T43] audit: type=1400 audit(1793163107.510:141): avc: denied { mounton } for pid=5770 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.034482][ T43] audit: type=1400 audit(1793163107.510:142): avc: denied { mount } for pid=5770 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.036656][ T5770] cgroup: Unknown subsys name 'net' [ 42.038383][ T43] audit: type=1400 audit(1793163107.520:143): avc: denied { unmount } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.189178][ T5770] cgroup: Unknown subsys name 'cpuset' [ 42.194881][ T5770] cgroup: Unknown subsys name 'rlimit' [ 42.318046][ T43] audit: type=1400 audit(1793163107.800:144): avc: denied { setattr } for pid=5770 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.318411][ T43] audit: type=1400 audit(1793163107.800:145): avc: denied { create } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.318596][ T43] audit: type=1400 audit(1793163107.800:146): avc: denied { write } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.318869][ T43] audit: type=1400 audit(1793163107.800:147): avc: denied { read } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.386222][ T5775] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.074808][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.378429][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 46.378441][ T43] audit: type=1400 audit(1793163111.860:154): avc: denied { execmem } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.578303][ T43] audit: type=1400 audit(1793163112.060:155): avc: denied { create } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.578709][ T43] audit: type=1400 audit(1793163112.060:156): avc: denied { read write } for pid=5781 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.579183][ T43] audit: type=1400 audit(1793163112.060:157): avc: denied { open } for pid=5781 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.589187][ T43] audit: type=1400 audit(1793163112.070:158): avc: denied { ioctl } for pid=5783 comm="syz-executor" path="socket:[2634]" dev="sockfs" ino=2634 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.617627][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.619818][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.620057][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.620547][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.621017][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.622275][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.622770][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.623272][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.623579][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.623996][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.624440][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.625706][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.626283][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.627382][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.628769][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.629479][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.629735][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.629994][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.630052][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.633554][ T43] audit: type=1400 audit(1793163112.110:159): avc: denied { read } for pid=5782 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.633598][ T43] audit: type=1400 audit(1793163112.110:160): avc: denied { open } for pid=5782 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.633619][ T43] audit: type=1400 audit(1793163112.110:161): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.635773][ T43] audit: type=1400 audit(1793163112.120:162): avc: denied { module_request } for pid=5782 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.637212][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.639975][ T43] audit: type=1400 audit(1793163112.120:163): avc: denied { mounton } for pid=5789 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.816858][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.821224][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.822098][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.823767][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.833238][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.879023][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.927559][ T5789] infiniband rxe0: set active [ 46.929722][ T5789] infiniband rxe0: added rxe_eth0 [ 46.937466][ T5789] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.937486][ T5789] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.937506][ T5789] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.947060][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.961361][ T5789] RDS/IB: rxe0: added [ 46.961515][ T5789] smc: adding ib device rxe0 with port count 1 [ 46.961550][ T5789] smc: ib device rxe0 port 1 has no pnetid [ 46.974842][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.977868][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.083132][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.178404][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.256008][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.256055][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.256148][ T5781] bridge_slave_0: entered allmulticast mode [ 47.257274][ T5781] bridge_slave_0: entered promiscuous mode [ 47.278064][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.278136][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.278193][ T5781] bridge_slave_1: entered allmulticast mode [ 47.279011][ T5781] bridge_slave_1: entered promiscuous mode [ 47.319368][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.319413][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.319477][ T5782] bridge_slave_0: entered allmulticast mode [ 47.320588][ T5782] bridge_slave_0: entered promiscuous mode [ 47.330391][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.331777][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.334244][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.334290][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.334382][ T5782] bridge_slave_1: entered allmulticast mode [ 47.335010][ T5782] bridge_slave_1: entered promiscuous mode [ 47.340883][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.340926][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.341079][ T5783] bridge_slave_0: entered allmulticast mode [ 47.341773][ T5783] bridge_slave_0: entered promiscuous mode [ 47.343310][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.343349][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.343401][ T5783] bridge_slave_1: entered allmulticast mode [ 47.344077][ T5783] bridge_slave_1: entered promiscuous mode [ 47.356449][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.373362][ T5781] team0: Port device team_slave_0 added [ 47.384477][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.385453][ T5781] team0: Port device team_slave_1 added [ 47.386732][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.387920][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.401153][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.424033][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.424043][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.424055][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.425811][ T5782] team0: Port device team_slave_0 added [ 47.427562][ T5782] team0: Port device team_slave_1 added [ 47.428389][ T5783] team0: Port device team_slave_0 added [ 47.430093][ T5783] team0: Port device team_slave_1 added [ 47.430551][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.430561][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.430579][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.460318][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.460330][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.460342][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.475021][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.475031][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.475044][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.485018][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.485027][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.485039][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.500213][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.500227][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.500247][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.508712][ T5781] hsr_slave_0: entered promiscuous mode [ 47.509400][ T5781] hsr_slave_1: entered promiscuous mode [ 47.531552][ T5783] hsr_slave_0: entered promiscuous mode [ 47.531965][ T5783] hsr_slave_1: entered promiscuous mode [ 47.532252][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 47.532299][ T5783] Cannot create hsr debugfs directory [ 47.581529][ T5782] hsr_slave_0: entered promiscuous mode [ 47.581979][ T5782] hsr_slave_1: entered promiscuous mode [ 47.582321][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 47.582332][ T5782] Cannot create hsr debugfs directory [ 47.808703][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.811812][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.812223][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.814795][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.820236][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.824138][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.824843][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.828758][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.862111][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.862154][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.862217][ T5789] bridge_slave_0: entered allmulticast mode [ 47.862895][ T5789] bridge_slave_0: entered promiscuous mode [ 47.864139][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.864670][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.864830][ T5789] bridge_slave_1: entered allmulticast mode [ 47.865473][ T5789] bridge_slave_1: entered promiscuous mode [ 47.893262][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.894710][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.912109][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.912158][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.912370][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.912413][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.914923][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.918608][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.928643][ T5789] team0: Port device team_slave_0 added [ 47.930375][ T5789] team0: Port device team_slave_1 added [ 47.930411][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.932364][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.932729][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.934863][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.948071][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.949927][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.978805][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.978815][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.978827][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.982087][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.982096][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.982108][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.982315][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.985739][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.995524][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.001447][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.008770][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.012840][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.014304][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.018627][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.038199][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.038245][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.038379][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.038423][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.050267][ T5789] hsr_slave_0: entered promiscuous mode [ 48.050983][ T5789] hsr_slave_1: entered promiscuous mode [ 48.051496][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 48.051513][ T5789] Cannot create hsr debugfs directory [ 48.101421][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.103071][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.103812][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.107002][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.109448][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.158211][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.181226][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.181300][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.200328][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.200373][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.222585][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.238895][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.241160][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.242775][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.245392][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.245988][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.248943][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.252459][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.256123][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.276021][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.282155][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.282231][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.296124][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.296176][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.308486][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.336563][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.342718][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.342763][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.359299][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.359344][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.370568][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.393778][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.409785][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.409857][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.410395][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.410439][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.522425][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.545859][ T5781] veth0_vlan: entered promiscuous mode [ 48.552160][ T5781] veth1_vlan: entered promiscuous mode [ 48.572693][ T5781] veth0_macvtap: entered promiscuous mode [ 48.578590][ T5781] veth1_macvtap: entered promiscuous mode [ 48.586358][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.588506][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.591875][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.614893][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.614973][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.615194][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.615266][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.645653][ T5787] Bluetooth: hci2: command tx timeout [ 48.653177][ T5782] veth0_vlan: entered promiscuous mode [ 48.656709][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.672673][ T5782] veth1_vlan: entered promiscuous mode [ 48.684132][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.684146][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.686854][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.715659][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.715674][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.724874][ T5787] Bluetooth: hci1: command tx timeout [ 48.734610][ T68] Bluetooth: hci3: command tx timeout [ 48.735236][ T5787] Bluetooth: hci0: command tx timeout [ 48.739014][ T5782] veth0_macvtap: entered promiscuous mode [ 48.743658][ T5789] veth0_vlan: entered promiscuous mode [ 48.747222][ T5782] veth1_macvtap: entered promiscuous mode [ 48.755950][ T5789] veth1_vlan: entered promiscuous mode [ 48.768112][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.772841][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.777481][ T5783] veth0_vlan: entered promiscuous mode [ 48.787579][ T5789] veth0_macvtap: entered promiscuous mode [ 48.789012][ T5783] veth1_vlan: entered promiscuous mode [ 48.789976][ T5781] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.791296][ T5789] veth1_macvtap: entered promiscuous mode [ 48.820922][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.838621][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.842054][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.867585][ T5783] veth0_macvtap: entered promiscuous mode [ 48.867800][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.867817][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.890507][ T5783] veth1_macvtap: entered promiscuous mode [ 48.898316][ T282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.898335][ T282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.928492][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.945783][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.945796][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.971087][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.982500][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.982514][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.984577][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984614][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984642][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984672][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984711][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984740][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984769][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.995566][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.995592][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.995610][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.995627][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.999502][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'. [ 49.052919][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.052931][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.068355][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.068370][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.080721][ T5947] CIFS: VFS: UNC: missing share name [ 49.080756][ T5947] CIFS: VFS: Malformed UNC in devname [ 49.126669][ T5951] team0: No ports can be present during mode change [ 49.295748][ T5954] mmap: syz.2.6 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.465929][ T5964] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 49.469721][ T5964] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 49.472519][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 49.475360][ T5964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.478747][ T5964] RIP: 0010:crypt_setkey+0x6a2/0x910 [ 49.480440][ T5964] Code: 00 0f 85 1f 02 00 00 4c 8b a3 58 06 00 00 45 89 f7 48 b8 00 00 00 00 00 fc ff df 41 0f cf 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 22 [ 49.486577][ T5964] RSP: 0018:ffffc90003b3f7d0 EFLAGS: 00010247 [ 49.488566][ T5964] RAX: dffffc0000000000 RBX: ffff888039b70000 RCX: ffffc90006fe3000 [ 49.491023][ T5964] RDX: 0000000000000000 RSI: ffffffff88b39970 RDI: 0000000000000004 [ 49.493467][ T5964] RBP: 0000000000000020 R08: 0000000000000004 R09: 0000000000000020 [ 49.495943][ T5964] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000 [ 49.498484][ T5964] R13: ffff888039b70660 R14: 0000000000000000 R15: 0000000000000000 [ 49.501001][ T5964] FS: 00007fc2d55f66c0(0000) GS:ffff8880d4498000(0000) knlGS:0000000000000000 [ 49.503817][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.505875][ T5964] CR2: 000000110c2bdfc1 CR3: 000000005d8f6000 CR4: 0000000000352ef0 [ 49.508580][ T5964] Call Trace: [ 49.509984][ T5964] [ 49.510976][ T5964] ? crypt_set_key+0x11b/0x630 [ 49.512485][ T5964] ? rcu_is_watching+0x13/0xc0 [ 49.513994][ T5964] ? crypt_set_key+0x11b/0x630 [ 49.515531][ T5964] ? kfree+0x1e5/0x6d0 [ 49.516853][ T5964] crypt_set_key+0x1c8/0x630 [ 49.518394][ T5964] crypt_ctr+0x1091/0x3d10 [ 49.519809][ T5964] ? __pfx_crypt_ctr+0x10/0x10 [ 49.521316][ T5964] ? kasan_save_track+0x14/0x30 [ 49.522858][ T5964] ? __kasan_kmalloc+0xaa/0xb0 [ 49.524369][ T5964] ? dm_split_args+0xc1/0x570 [ 49.525874][ T5964] ? rcu_is_watching+0x13/0xc0 [ 49.527815][ T5964] ? dm_split_args+0xc1/0x570 [ 49.529844][ T5964] ? kfree+0x1e5/0x6d0 [ 49.531532][ T5964] ? skip_spaces+0xee/0x130 [ 49.533467][ T5964] dm_table_add_target+0x58b/0xee0 [ 49.535629][ T5964] ? __pfx_dm_table_add_target+0x10/0x10 [ 49.537468][ T5964] ? dm_table_create+0x2d3/0x3d0 [ 49.539032][ T5964] table_load+0x3b9/0x7b0 [ 49.540408][ T5964] ? __pfx_table_load+0x10/0x10 [ 49.541956][ T5964] ? __might_fault+0xc5/0x140 [ 49.543445][ T5964] ? __might_fault+0xc5/0x140 [ 49.544927][ T5964] ctl_ioctl+0x4d2/0xcc0 [ 49.546290][ T5964] ? __pfx_table_load+0x10/0x10 [ 49.547892][ T5964] ? __pfx_ctl_ioctl+0x10/0x10 [ 49.549404][ T5964] ? selinux_file_ioctl+0x1e0/0x290 [ 49.551043][ T5964] dm_ctl_ioctl+0x22/0x30 [ 49.552405][ T5964] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 49.553998][ T5964] __x64_sys_ioctl+0x18e/0x210 [ 49.555503][ T5964] do_syscall_64+0x123/0x790 [ 49.556973][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.558868][ T5964] RIP: 0033:0x7fc2d739f559 [ 49.560272][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.566260][ T5964] RSP: 002b:00007fc2d55f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.569344][ T5964] RAX: ffffffffffffffda RBX: 00007fc2d7625fa0 RCX: 00007fc2d739f559 [ 49.571842][ T5964] RDX: 0000200000000600 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 49.574302][ T5964] RBP: 00007fc2d7436b20 R08: 0000000000000000 R09: 0000000000000000 [ 49.576765][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.579242][ T5964] R13: 00007fc2d7626038 R14: 00007fc2d7625fa0 R15: 00007fff7e4c4a98 [ 49.581725][ T5964] [ 49.582710][ T5964] Modules linked in: [ 49.584451][ T5964] ---[ end trace 0000000000000000 ]--- [ 49.588547][ T5964] RIP: 0010:crypt_setkey+0x6a2/0x910 [ 49.588571][ T5964] Code: 00 0f 85 1f 02 00 00 4c 8b a3 58 06 00 00 45 89 f7 48 b8 00 00 00 00 00 fc ff df 41 0f cf 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 22 [ 49.588582][ T5964] RSP: 0018:ffffc90003b3f7d0 EFLAGS: 00010247 [ 49.588592][ T5964] RAX: dffffc0000000000 RBX: ffff888039b70000 RCX: ffffc90006fe3000 [ 49.588599][ T5964] RDX: 0000000000000000 RSI: ffffffff88b39970 RDI: 0000000000000004 [ 49.588605][ T5964] RBP: 0000000000000020 R08: 0000000000000004 R09: 0000000000000020 [ 49.588612][ T5964] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000 [ 49.588618][ T5964] R13: ffff888039b70660 R14: 0000000000000000 R15: 0000000000000000 [ 49.588624][ T5964] FS: 00007fc2d55f66c0(0000) GS:ffff8880d4598000(0000) knlGS:0000000000000000 [ 49.588652][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.588662][ T5964] CR2: 00007fc2d73ecc40 CR3: 000000005d8f6000 CR4: 0000000000352ef0 [ 49.588670][ T5964] Kernel panic - not syncing: Fatal exception [ 49.621395][ T5964] Kernel Offset: disabled [ 49.622777][ T5964] Rebooting in 86400 seconds..