last executing test programs: 335.59176ms ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="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", 0xffffff5d, 0x12, 0x0, 0x1200) recvfrom$inet(r0, &(0x7f0000000540), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001380)=@filter={'filter\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @empty, [], [0xff000000, 0x0, 0x0, 0xffffff00], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2, 0xe}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x72a, 'system_u:object_r:init_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r3 = socket$inet6(0xa, 0x3, 0x1000003c) connect$inet6(r3, &(0x7f0000000780)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000800)="06c3", 0x2}, {&(0x7f0000000d40)="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", 0x61e}], 0x2) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e16bb3f81fcb00483a00fc000000000000000000000000000000ff0200000000000000000000000000010400907800000000604aa1d300000000000000000000000000000000000000000000ffff7f0000013c000000000000002f000400"/118], 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf25010000001400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff050003000300000200000008000200ac1414aa05000300030000000400008024000100"/169], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100029bd7000ffffdf25010000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 300.886527ms ago: executing program 3 (id=4): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xaad80) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000003c0)={0x1, 0x9, 0x1, 'queue1\x00', 0x800}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000340)={0x0, 0x9, 0x5, {0xb}, 0x3}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x120) rmdir(&(0x7f00000004c0)='./file0\x00') (async) rmdir(&(0x7f00000004c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000100)={0x9, 0x3, 0x1, 'queue1\x00'}) 218.563435ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./sys/class/net/bonding_masters\x00', 0xb8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0f8ffffff3061b9f81e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001600)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000001640)='./sys\x00', &(0x7f0000001680)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r2, &(0x7f0000001700)='-bond0', 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001580)={'syzkaller1\x00', 0x1}) recvmsg(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x10040) clock_nanosleep(0x2, 0xca9a3b, &(0x7f0000000200)={0x77359400}, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f00000003c0)=0xc) r4 = accept$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001380)=0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000001740)={0x0, 0xfead, 0x8, 0x0, 0x1b0, 0x0, r2}, &(0x7f00000017c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1227, 0x100, 0x1, 0x1f4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x932b, 0x8, 0x2, 0xc}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbe79, 0x2, 0x1, 0x28a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x804e, 0x7856fdd8a3fdd197, 0x2, 0x3d6, 0x0, r2}}], 0x4, &(0x7f0000002a40)={0x2e, 0x3, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0xe87, 0x0, &(0x7f0000001a40)=@buf_max_buf="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"}}, &(0x7f0000002ac0)) syz_io_uring_setup(0xf03, &(0x7f0000002b00)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000002b80)=0x0, &(0x7f0000002bc0)=0x0, &(0x7f0000002c00)=0x0) syz_io_uring_submit(r8, r9, r10, 0x0) r11 = mmap$IORING_OFF_PBUF_RING(0x0, 0x7c, 0x1000002, 0x2010, r2, 0x8692ab28) syz_ublk_add_dev(r7, r8, r11, 0x0, &(0x7f0000002c80)={0x2e, 0x61, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002c40)=@new_dev={0x1, 0x65a, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x99}}}, &(0x7f0000002d00)) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r12, 0xaea3) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0x1f, 0x10, &(0x7f00000010c0), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r13, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000001180)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000001380), &(0x7f00000013c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendto(r4, &(0x7f0000000180)="aee891450461fb", 0x7, 0x4048001, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x8) write(r14, &(0x7f0000000400)='address_group grp1 0.0,0.0-255.255.255.255\naddress_groux grp1!::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\nacl_group stream bind @grp1 0-655;5\na', 0x8e) r15 = semget$private(0x0, 0x2, 0x4) semtimedop(r15, &(0x7f0000000300)=[{0x1, 0x5}, {0x1, 0xf, 0xc00}, {0x0, 0x8, 0x400}, {0x0, 0x8, 0x1000}, {0x0, 0xb9}, {0x4, 0x7fff, 0x1c00}], 0x6, &(0x7f0000000340)) 187.305616ms ago: executing program 2 (id=3): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x160, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6b7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x15, 0xbe, "578b917e0d20965aa585329a84029a73b9"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x65, 0xbe, "e4e5395e6f89f1fd42084c76bdad84522416fa24662cdb3e489162fd33d807e4e97b2b8d703324643b12a1962d0f11c6d527d2c440cf3794262c4a15bc356b2c9f50a501f8bd3e8d05c05000db56a1b3443d5528d1b60f3aaf83b70114c52001e9"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x55}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x91, 0xac, "567566a9225aca5155765f04ad11dae3a9ae9484c27b888ac92ba10c07a94dd1bc3cccb5880b6adbd52fbd201453cc11003e67e6612f7877a318b1778d24013d1af9a3972090379fab6e82c6b8efd7c33b6dbcf30abd42451a393cdbf5af224a85d1d73fa8ffc6814e7b8b81113462e58de635dd9b7dfaebdb135036c399ff8a92d5b9ab2bf178e0d4c0a62ed7"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1000}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1fa9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000004) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 93.9237ms ago: executing program 3 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x12c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3c) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}}, 0x0) 91.037868ms ago: executing program 3 (id=6): syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$vsock_seqpacket(0x28, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004a80)=[{{&(0x7f0000000000)=@l2tp6, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/244, 0xf4}], 0x1}, 0xc4}, {{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)}, {0xfffffffffffffffd}, {&(0x7f0000000440)=""/177, 0xb1}], 0x6, &(0x7f0000000580)}, 0x2}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/206, 0xce}], 0x5, &(0x7f0000000a40)=""/98, 0x62}, 0x1a1}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/100, 0x64}, {&(0x7f0000000c40)=""/156, 0x9c}, {&(0x7f0000000d00)=""/203, 0xcb}, {&(0x7f0000000e00)=""/252, 0xfc}], 0x5, &(0x7f0000000f80)=""/25, 0x19}, 0x5}, {{&(0x7f0000000fc0)=@caif=@rfm, 0x80, &(0x7f0000001400)=[{&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=""/54, 0x36}, {&(0x7f0000001140)=""/183, 0xb7}, {&(0x7f0000001200)=""/254, 0xfe}, {&(0x7f0000001300)=""/170, 0xaa}, {&(0x7f00000013c0)=""/39, 0x27}], 0x7}, 0xfffffbff}, {{&(0x7f0000001480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001500)=""/108, 0x6c}, {&(0x7f0000001580)=""/17, 0x11}, {&(0x7f00000015c0)=""/109, 0x6d}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000001740)=""/36, 0x24}, {&(0x7f0000001780)=""/96, 0x60}, {&(0x7f0000001800)=""/72, 0x48}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/107, 0x6b}], 0x9, &(0x7f00000029c0)=""/97, 0x61}, 0x4}, {{&(0x7f0000002a40)=@can, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002ac0)=""/52, 0x34}, {&(0x7f0000002b00)=""/133, 0x85}, {&(0x7f0000002bc0)=""/10, 0xa}, {&(0x7f0000002c00)=""/103, 0x67}], 0x4, &(0x7f0000002cc0)=""/232, 0xe8}}, {{&(0x7f0000002dc0)=@isdn, 0x80, &(0x7f0000003400)=[{&(0x7f0000002e40)=""/219, 0xdb}, {&(0x7f0000002f40)=""/111, 0x6f}, {&(0x7f0000003280)=""/143, 0x8f}, {&(0x7f0000003080)=""/214, 0xd6}, {&(0x7f0000003180)=""/230, 0xe6}, {&(0x7f0000004d00)=""/183, 0xb7}, {&(0x7f0000003340)=""/178, 0xb2}], 0x7}, 0x4}, {{&(0x7f0000003480)=@nl, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/229, 0xe5}], 0x1, &(0x7f0000003640)=""/118, 0x76}, 0xffffff88}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000036c0)=""/102, 0x66}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/106, 0x6a}, {&(0x7f00000047c0)=""/215, 0xd7}, {&(0x7f00000048c0)=""/144, 0x90}], 0x5, &(0x7f0000004a00)=""/126, 0x7e}, 0x3}], 0xa, 0x40002040, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 13.729653ms ago: executing program 2 (id=7): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000)='pr', 0x2, 0x0, &(0x7f0000000640)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x7}}, 0x10) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x211, 0x3, 0x200, 0x1, 0xa, 0x3]}, &(0x7f00000000c0)=0x78) 0s ago: executing program 2 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32607' (ED25519) to the list of known hosts. [ 42.129516][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.129534][ T43] audit: type=1400 audit(1793860645.451:141): avc: denied { mounton } for pid=5775 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.132070][ T43] audit: type=1400 audit(1793860645.451:142): avc: denied { mount } for pid=5775 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.139473][ T5775] cgroup: Unknown subsys name 'net' [ 42.141375][ T43] audit: type=1400 audit(1793860645.461:143): avc: denied { unmount } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.294988][ T5775] cgroup: Unknown subsys name 'cpuset' [ 42.298841][ T5775] cgroup: Unknown subsys name 'rlimit' [ 42.415635][ T43] audit: type=1400 audit(1793860645.741:144): avc: denied { setattr } for pid=5775 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.415984][ T43] audit: type=1400 audit(1793860645.741:145): avc: denied { create } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.416220][ T43] audit: type=1400 audit(1793860645.741:146): avc: denied { write } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.416472][ T43] audit: type=1400 audit(1793860645.741:147): avc: denied { read } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.427726][ T43] audit: type=1400 audit(1793860645.751:148): avc: denied { mounton } for pid=5775 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.428223][ T43] audit: type=1400 audit(1793860645.751:149): avc: denied { mount } for pid=5775 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.497250][ T5780] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.498122][ T43] audit: type=1400 audit(1793860645.821:150): avc: denied { relabelto } for pid=5780 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.177865][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.706028][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.706807][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.707642][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.708251][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.711712][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.711721][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.713207][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.714040][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.714401][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.714969][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.716869][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.717015][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.717325][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.717342][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.717600][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.722236][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.727504][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.729021][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.733851][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.734708][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.900761][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.900764][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.911051][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.911801][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.913372][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.915550][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.994780][ T5789] infiniband rxe0: set active [ 46.995455][ T5789] infiniband rxe0: added rxe_eth0 [ 47.005062][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.005781][ T5789] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.005803][ T5789] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.005825][ T5789] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.018720][ T5789] RDS/IB: rxe0: added [ 47.018833][ T5789] smc: adding ib device rxe0 with port count 1 [ 47.018868][ T5789] smc: ib device rxe0 port 1 has no pnetid [ 47.026832][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.027707][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.130941][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.145728][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.146013][ T855] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.244317][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.337860][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.337937][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.337998][ T5787] bridge_slave_0: entered allmulticast mode [ 47.339428][ T5787] bridge_slave_0: entered promiscuous mode [ 47.350247][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.350292][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.350374][ T5788] bridge_slave_0: entered allmulticast mode [ 47.351054][ T5788] bridge_slave_0: entered promiscuous mode [ 47.365002][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.365047][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.365109][ T5791] bridge_slave_0: entered allmulticast mode [ 47.365781][ T5791] bridge_slave_0: entered promiscuous mode [ 47.367127][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.367169][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.367222][ T5787] bridge_slave_1: entered allmulticast mode [ 47.368385][ T5787] bridge_slave_1: entered promiscuous mode [ 47.374577][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.374619][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.374671][ T5788] bridge_slave_1: entered allmulticast mode [ 47.375298][ T5788] bridge_slave_1: entered promiscuous mode [ 47.385786][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.386677][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.386742][ T5791] bridge_slave_1: entered allmulticast mode [ 47.387547][ T5791] bridge_slave_1: entered promiscuous mode [ 47.400126][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.408358][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.410520][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.418720][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.419845][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.421109][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.422696][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.475047][ T5787] team0: Port device team_slave_0 added [ 47.477791][ T5788] team0: Port device team_slave_0 added [ 47.479175][ T5791] team0: Port device team_slave_0 added [ 47.482602][ T5791] team0: Port device team_slave_1 added [ 47.492637][ T5788] team0: Port device team_slave_1 added [ 47.499331][ T5787] team0: Port device team_slave_1 added [ 47.499816][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.499830][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.499851][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.517007][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.517024][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.517043][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.548006][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.548019][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.548033][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.551214][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.551226][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.551255][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.557565][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.557583][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.557605][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.570780][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.570792][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.570807][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.606061][ T5791] hsr_slave_0: entered promiscuous mode [ 47.606520][ T5791] hsr_slave_1: entered promiscuous mode [ 47.640686][ T5787] hsr_slave_0: entered promiscuous mode [ 47.642393][ T5787] hsr_slave_1: entered promiscuous mode [ 47.642702][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 47.642712][ T5787] Cannot create hsr debugfs directory [ 47.646155][ T5788] hsr_slave_0: entered promiscuous mode [ 47.646658][ T5788] hsr_slave_1: entered promiscuous mode [ 47.647064][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 47.647074][ T5788] Cannot create hsr debugfs directory [ 47.938655][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.938841][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.939012][ T5789] bridge_slave_0: entered allmulticast mode [ 47.939679][ T5789] bridge_slave_0: entered promiscuous mode [ 47.947581][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.947756][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.947914][ T5789] bridge_slave_1: entered allmulticast mode [ 47.948599][ T5789] bridge_slave_1: entered promiscuous mode [ 47.965952][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.970690][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.971161][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.977586][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.979023][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.979050][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.982430][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.986858][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.994079][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.997355][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.036700][ T5789] team0: Port device team_slave_0 added [ 48.052400][ T5789] team0: Port device team_slave_1 added [ 48.074608][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.076503][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.076996][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.079906][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.081454][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.081558][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.081832][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.081878][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.093426][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.093438][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.093452][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.093665][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.099030][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.100540][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.106703][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.107665][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.107674][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.107689][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.160403][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.161035][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.177623][ T5789] hsr_slave_0: entered promiscuous mode [ 48.178207][ T5789] hsr_slave_1: entered promiscuous mode [ 48.178505][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 48.178514][ T5789] Cannot create hsr debugfs directory [ 48.210235][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.214585][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.215409][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.221096][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.246039][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.250596][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.267781][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.270819][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.358528][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.421487][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.428641][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.432898][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.433626][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.437459][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.443552][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.449281][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.457246][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.457455][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.460122][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.462511][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.468101][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.476310][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.476391][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.524910][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.546266][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.546358][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.563323][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.563410][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.613125][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.634911][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 48.634929][ T43] audit: type=1400 audit(1793860651.961:172): avc: denied { sys_module } for pid=5791 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.647840][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.662077][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.662157][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.681094][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.681180][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.694136][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.714141][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.731200][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.731286][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.739889][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.739971][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.783949][ T5798] Bluetooth: hci1: command tx timeout [ 48.792868][ T5798] Bluetooth: hci0: command tx timeout [ 48.793123][ T5798] Bluetooth: hci3: command tx timeout [ 48.793679][ T5798] Bluetooth: hci2: command tx timeout [ 48.916613][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.927826][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.964783][ T5787] veth0_vlan: entered promiscuous mode [ 48.973311][ T5791] veth0_vlan: entered promiscuous mode [ 48.976488][ T5787] veth1_vlan: entered promiscuous mode [ 48.980117][ T5791] veth1_vlan: entered promiscuous mode [ 49.008048][ T5787] veth0_macvtap: entered promiscuous mode [ 49.011702][ T5791] veth0_macvtap: entered promiscuous mode [ 49.014901][ T5787] veth1_macvtap: entered promiscuous mode [ 49.018495][ T5791] veth1_macvtap: entered promiscuous mode [ 49.024309][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.036148][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.044856][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.046910][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.050286][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.071114][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.107762][ T5789] veth0_vlan: entered promiscuous mode [ 49.127772][ T5789] veth1_vlan: entered promiscuous mode [ 49.159714][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.159736][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.169748][ T5788] veth0_vlan: entered promiscuous mode [ 49.177207][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.177225][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.186627][ T5788] veth1_vlan: entered promiscuous mode [ 49.207622][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.207641][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.221627][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.221647][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.223397][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.223672][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.223839][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.223981][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.224149][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.224454][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.227918][ T5789] veth0_macvtap: entered promiscuous mode [ 49.229929][ T43] audit: type=1400 audit(1793860652.551:173): avc: denied { mount } for pid=5791 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.230553][ T43] audit: type=1400 audit(1793860652.551:174): avc: denied { mounton } for pid=5791 comm="syz-executor" path="/syzkaller.Lec7Jb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.233791][ T5789] veth1_macvtap: entered promiscuous mode [ 49.235101][ T43] audit: type=1400 audit(1793860652.561:175): avc: denied { mount } for pid=5791 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.239902][ T43] audit: type=1400 audit(1793860652.561:176): avc: denied { mounton } for pid=5787 comm="syz-executor" path="/syzkaller.TUrjL7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.241691][ T43] audit: type=1400 audit(1793860652.561:178): avc: denied { mounton } for pid=5787 comm="syz-executor" path="/syzkaller.TUrjL7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.241766][ T43] audit: type=1400 audit(1793860652.561:177): avc: denied { mounton } for pid=5791 comm="syz-executor" path="/syzkaller.Lec7Jb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.246536][ T43] audit: type=1400 audit(1793860652.571:179): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.248780][ T43] audit: type=1400 audit(1793860652.571:180): avc: denied { mounton } for pid=5787 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.250109][ T43] audit: type=1400 audit(1793860652.571:181): avc: denied { mount } for pid=5787 comm="syz-executor" name="/" dev="gadgetfs" ino=8613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.251104][ T5788] veth0_macvtap: entered promiscuous mode [ 49.253034][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.257344][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.262899][ T5788] veth1_macvtap: entered promiscuous mode [ 49.267727][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.293831][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.293962][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.294059][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.294089][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.298165][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.309321][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.352611][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352819][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352865][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352893][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.358719][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.393235][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.393252][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.417637][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.417653][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.436977][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.436992][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.456812][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.456826][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.472493][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.550935][ T5960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 49.590204][ T5965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.602446][ T5966] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 49.609645][ T5966] bonding: bond0 is being deleted... [ 49.621794][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.627958][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.630074][ T5966] bond0 (unregistering): Released all slaves [ 49.646025][ T5971] tipc: Enabling of bearer rejected, failed to enable media [ 49.675042][ T5975] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 49.691237][ T5871] smpboot: CPU 1 is now offline [ 49.701276][ T5978] ip_tables: iptables: counters copy to user failed while replacing table [ 49.727543][ T5871] [ 49.728357][ T5871] ====================================================== [ 49.729121][ T5973] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.732634][ T5871] WARNING: possible circular locking dependency detected [ 49.734807][ T5871] syzkaller #0 Not tainted [ 49.736279][ T5871] ------------------------------------------------------ [ 49.738474][ T5871] kworker/u32:3/5871 is trying to acquire lock: [ 49.741001][ T5871] ffff88801e3d35a8 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 49.744621][ T5871] [ 49.744621][ T5871] but task is already holding lock: [ 49.747464][ T5871] ffffffff8fe7a370 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 49.751682][ T5871] [ 49.751682][ T5871] which lock already depends on the new lock. [ 49.751682][ T5871] [ 49.755814][ T5871] [ 49.755814][ T5871] the existing dependency chain (in reverse order) is: [ 49.759533][ T5871] [ 49.759533][ T5871] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 49.762760][ T5871] lock_acquire+0x1d1/0x380 [ 49.764897][ T5871] percpu_down_write+0x4e/0x3d0 [ 49.767102][ T5871] _cpu_up+0x68/0x960 [ 49.768979][ T5871] cpu_up+0x1ba/0x230 [ 49.771209][ T5871] cpuhp_bringup_mask+0xf8/0x180 [ 49.773566][ T5871] bringup_nonboot_cpus+0xd9/0x1b0 [ 49.775833][ T5871] smp_init+0x32/0x150 [ 49.777689][ T5871] kernel_init_freeable+0x44b/0x7b0 [ 49.779995][ T5871] kernel_init+0x21/0x1e0 [ 49.782012][ T5871] ret_from_fork+0x730/0xd60 [ 49.784175][ T5871] ret_from_fork_asm+0x1a/0x30 [ 49.786389][ T5871] [ 49.786389][ T5871] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 49.789692][ T5871] lock_acquire+0x1d1/0x380 [ 49.791732][ T5871] __mutex_lock+0x19f/0x1c10 [ 49.793651][ T5871] cpu_device_down+0x46/0xc0 [ 49.795580][ T5871] device_offline+0x2f4/0x400 [ 49.797574][ T5871] acpi_bus_offline+0x3c7/0x550 [ 49.799592][ T5871] acpi_device_hotplug+0x627/0xbe0 [ 49.801729][ T5871] acpi_hotplug_work_fn+0x5e/0x90 [ 49.803693][ T5871] process_one_work+0xac7/0x1b10 [ 49.805579][ T5871] worker_thread+0x5ef/0xe50 [ 49.807362][ T5871] kthread+0x373/0x450 [ 49.808836][ T5871] ret_from_fork+0x730/0xd60 [ 49.810441][ T5871] ret_from_fork_asm+0x1a/0x30 [ 49.812108][ T5871] [ 49.812108][ T5871] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 49.814808][ T5871] lock_acquire+0x1d1/0x380 [ 49.816360][ T5871] __mutex_lock+0x19f/0x1c10 [ 49.817915][ T5871] acpi_companion_match+0xc0/0x180 [ 49.819611][ T5871] acpi_device_uevent_modalias+0x19/0x30 [ 49.821553][ T5871] platform_uevent+0x51/0xc0 [ 49.823179][ T5871] dev_uevent+0x1de/0x870 [ 49.824728][ T5871] kobject_uevent_env+0x6eb/0x18b0 [ 49.826491][ T5871] kobject_synth_uevent+0x6f1/0x830 [ 49.828278][ T5871] uevent_store+0x24/0x90 [ 49.829881][ T5871] dev_attr_store+0x58/0x80 [ 49.831463][ T5871] sysfs_kf_write+0xf2/0x150 [ 49.833085][ T5871] kernfs_fop_write_iter+0x3e0/0x5f0 [ 49.834913][ T5871] vfs_write+0x6af/0x1050 [ 49.836429][ T5871] ksys_write+0x12a/0x250 [ 49.837893][ T5871] do_syscall_64+0x123/0x790 [ 49.839448][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.841405][ T5871] [ 49.841405][ T5871] -> #0 (kn->active#5){++++}-{0:0}: [ 49.843626][ T5871] check_prev_add+0xeb/0xe60 [ 49.845180][ T5871] __lock_acquire+0x1528/0x1f40 [ 49.846789][ T5871] lock_acquire+0x1d1/0x380 [ 49.848377][ T5871] kernfs_drain+0x4eb/0x600 [ 49.849996][ T5871] __kernfs_remove+0x34c/0xbc0 [ 49.851670][ T5871] kernfs_remove_by_name_ns+0x7c/0x120 [ 49.853549][ T5871] device_del+0x361/0x9b0 [ 49.855082][ T5871] device_unregister+0x1d/0xe0 [ 49.856775][ T5871] unregister_cpu+0xa0/0x140 [ 49.858383][ T5871] acpi_processor_post_eject+0x16f/0x390 [ 49.860335][ T5871] acpi_device_hotplug+0x9df/0xbe0 [ 49.862097][ T5871] acpi_hotplug_work_fn+0x5e/0x90 [ 49.863819][ T5871] process_one_work+0xac7/0x1b10 [ 49.865532][ T5871] worker_thread+0x5ef/0xe50 [ 49.867133][ T5871] kthread+0x373/0x450 [ 49.868592][ T5871] ret_from_fork+0x730/0xd60 [ 49.870226][ T5871] ret_from_fork_asm+0x1a/0x30 [ 49.871886][ T5871] [ 49.871886][ T5871] other info that might help us debug this: [ 49.871886][ T5871] [ 49.874962][ T5871] Chain exists of: [ 49.874962][ T5871] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 49.874962][ T5871] [ 49.878905][ T5871] Possible unsafe locking scenario: [ 49.878905][ T5871] [ 49.881228][ T5871] CPU0 CPU1 [ 49.882890][ T5871] ---- ---- [ 49.884560][ T5871] lock(cpu_hotplug_lock); [ 49.885989][ T5871] lock(cpu_add_remove_lock); [ 49.888245][ T5871] lock(cpu_hotplug_lock); [ 49.890436][ T5871] lock(kn->active#5); [ 49.891743][ T5871] [ 49.891743][ T5871] *** DEADLOCK *** [ 49.891743][ T5871] [ 49.894257][ T5871] locks held by kworker/u32:3/5871: 6, last CPU#3: [ 49.896258][ T5871] #0: ffff88802488d148 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 49.899493][ T5871] #1: ffffc9000490fd08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 49.902836][ T5871] #2: ffffffff9104f660 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x7e/0xbe0 [ 49.905989][ T5871] #3: ffffffff90d1de00 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x8c/0xbe0 [ 49.908999][ T5871] #4: ffffffff8fe7a420 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 49.912344][ T5871] #5: ffffffff8fe7a370 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 49.916398][ T5871] [ 49.916398][ T5871] stack backtrace: [ 49.918732][ T5871] CPU: 3 UID: 0 PID: 5871 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 49.922504][ T5871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.926455][ T5871] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 49.928936][ T5871] Call Trace: [ 49.930299][ T5871] [ 49.931483][ T5871] dump_stack_lvl+0x100/0x190 [ 49.933370][ T5871] print_circular_bug.cold+0x178/0x1be [ 49.935532][ T5871] check_noncircular+0x146/0x160 [ 49.937521][ T5871] check_prev_add+0xeb/0xe60 [ 49.939350][ T5871] __lock_acquire+0x1528/0x1f40 [ 49.941300][ T5871] lock_acquire+0x1d1/0x380 [ 49.943109][ T5871] ? __kernfs_remove+0x34c/0xbc0 [ 49.945094][ T5871] ? kernfs_drain+0x4c2/0x600 [ 49.946961][ T5871] kernfs_drain+0x4eb/0x600 [ 49.948769][ T5871] ? __kernfs_remove+0x34c/0xbc0 [ 49.950746][ T5871] ? __pfx_kernfs_drain+0x10/0x10 [ 49.952764][ T5871] ? find_held_lock+0x2b/0x80 [ 49.954628][ T5871] ? __kernfs_remove+0x224/0xbc0 [ 49.956620][ T5871] ? __kernfs_remove+0x224/0xbc0 [ 49.958589][ T5871] ? up_write+0x2dc/0x5b0 [ 49.960314][ T5871] __kernfs_remove+0x34c/0xbc0 [ 49.962241][ T5871] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 49.964694][ T5871] kernfs_remove_by_name_ns+0x7c/0x120 [ 49.966847][ T5871] device_del+0x361/0x9b0 [ 49.968581][ T5871] ? __pfx_device_del+0x10/0x10 [ 49.970514][ T5871] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 49.972961][ T5871] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 49.975172][ T5871] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 49.977628][ T5871] device_unregister+0x1d/0xe0 [ 49.979527][ T5871] unregister_cpu+0xa0/0x140 [ 49.981402][ T5871] acpi_processor_post_eject+0x16f/0x390 [ 49.983623][ T5871] acpi_device_hotplug+0x9df/0xbe0 [ 49.985655][ T5871] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 49.987866][ T5871] acpi_hotplug_work_fn+0x5e/0x90 [ 49.989870][ T5871] process_one_work+0xac7/0x1b10 [ 49.991840][ T5871] ? __pfx_process_one_work+0x10/0x10 [ 49.993965][ T5871] ? lock_acquire+0x1d1/0x380 [ 49.995847][ T5871] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 49.998103][ T5871] worker_thread+0x5ef/0xe50 [ 49.999930][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 50.001969][ T5871] ? kthread+0x13a/0x450 [ 50.003656][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 50.005684][ T5871] kthread+0x373/0x450 [ 50.007305][ T5871] ? __pfx_kthread+0x10/0x10 [ 50.009152][ T5871] ret_from_fork+0x730/0xd60 [ 50.011006][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 50.013034][ T5871] ? __switch_to+0x800/0x10e0 [ 50.014906][ T5871] ? __pfx_kthread+0x10/0x10 [ 50.016577][ T5871] ret_from_fork_asm+0x1a/0x30 [ 50.018190][ T5871] [ 50.862037][ T5798] Bluetooth: hci3: command tx timeout [ 50.862057][ T5798] Bluetooth: hci0: command tx timeout [ 50.862066][ T5798] Bluetooth: hci1: command tx timeout [ 50.862122][ T5793] Bluetooth: hci2: command tx timeout [ 52.952192][ T5793] Bluetooth: hci2: command tx timeout [ 52.952221][ T5793] Bluetooth: hci0: command tx timeout [ 52.952254][ T5798] Bluetooth: hci3: command tx timeout [ 52.952307][ T5802] Bluetooth: hci1: command tx timeout [ 55.022056][ T5142] Bluetooth: hci1: command tx timeout [ 55.022087][ T5142] Bluetooth: hci0: command tx timeout [ 55.022102][ T5142] Bluetooth: hci3: command tx timeout [ 55.022117][ T5142] Bluetooth: hci2: command tx timeout [ 58.210663][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.238433][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 58.238451][ T43] audit: type=1400 audit(1793860661.561:211): avc: denied { write } for pid=5993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.282288][ T43] audit: type=1400 audit(1793860661.611:212): avc: denied { write } for pid=5996 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1