last executing test programs: 4.347746148s ago: executing program 3 (id=932): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 3.955952307s ago: executing program 3 (id=938): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) link(0x0, 0x0) 3.651325016s ago: executing program 1 (id=942): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) openat(0xffffffffffffff9c, 0x0, 0x18d740, 0x15) mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x3) 2.952862326s ago: executing program 3 (id=949): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000a580)={0x0, 0x0, &(0x7f000000a540)={&(0x7f00000031c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x168, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xc4, 0x7, 0x1, 0x0, "11798ce0fa6a0e2d9b1d13b3e8454863c7d7caebf99a3d6be7dc90cf335cda1a4b20cf6f410c7e45177a6062a8009f4ac68bd2b6a62af61f844e89a0f954024897b0135958f5b95f6682d99d045bc6f046c7a2baedbdbe91f7f931fdd6eb672779b930f2a53d9a2464a3f7f7b35ccb7e9fcb863885982391849cd22ed0bcc33ee1d3331fb34fc0811f4dc7e10caf969c897c427740dd65e6cd7bc8ed92c33681fa26034524a7669f55ab41cd6fd9152fe30d6bc92faa762e3fa73d34ad569f76"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x5a, 0x7, 0x1, 0x0, "81c7e5a4e84db88d3507013c4479bd85a5518c8ba3bd2135e7cf73ce02045e0b868d76ffd01a1e832bc9fbcf4557275a02f1416aa9cc671521dadffb0786707a42e4975dcd539b411b76017ba32492c37099536ba511"}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x50}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e8}, 0x1, 0x0, 0x0, 0x30000894}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@map_fd={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0xcc}, @generic={0x5, 0x0, 0xa, 0x1, 0x2d}, @generic={0x8, 0x7, 0x1, 0x39, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x1ff, 0x2a, &(0x7f0000000440)=""/42, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xe, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000900)=[{0x5, 0x1, 0xc, 0x3}, {0x5, 0x3, 0x10}, {0x2, 0x2, 0x2, 0xc}, {0x3, 0x4, 0x5, 0xc}, {0x4, 0x4, 0x0, 0xa}, {0x5, 0x5, 0xa, 0x94622400f1ce1a54}, {0x5, 0x2, 0x3, 0x8}], 0x10, 0xd982}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.912714857s ago: executing program 2 (id=950): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x98}}, 0x4014000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 2.869323984s ago: executing program 4 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.697281339s ago: executing program 1 (id=952): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) close_range(r0, 0xffffffffffffffff, 0x0) 2.082785716s ago: executing program 1 (id=953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@llc={0x4, {@snap={0xab, 0x0, ']', "097895", 0x90f8}}}}}, 0x0) 1.9376399s ago: executing program 4 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, '\n'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) 1.910254088s ago: executing program 3 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_mtu}) 1.908258121s ago: executing program 1 (id=956): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) lseek(r1, 0x7ff, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000014}) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 1.867290949s ago: executing program 0 (id=957): unshare(0x28000600) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040880) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x40004) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r1, &(0x7f0000000400)='./file0/../file0/file0/file0\x00', 0x8800, &(0x7f0000000000)={0x1, 0xa, 0x40000, {r1}}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x34}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.810803981s ago: executing program 2 (id=958): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0300", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e23, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b5a8a2bf2a124dc2eeec0ffffed720b6d59027f", "d646c07fcfc20300000000000000000000000000000000000200"}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_gettime(0x7, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 1.744699227s ago: executing program 4 (id=959): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0/file0'}, 0x11) r2 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fstatfs(r2, &(0x7f0000000140)=""/160) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) 1.722038369s ago: executing program 0 (id=960): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 1.614826707s ago: executing program 3 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x4c002, 0x0) write(r0, &(0x7f0000000300)="87", 0x1) 1.368259892s ago: executing program 3 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) openat(0xffffffffffffff9c, 0x0, 0x18d740, 0x15) mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x3) 898.412635ms ago: executing program 0 (id=963): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 716.750006ms ago: executing program 0 (id=964): syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0xda0c, 0x8, 0x8080, 0x3}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000040)=0x0) munmap$IORING_OFF_SQES(r0, 0x10000) 682.248598ms ago: executing program 4 (id=965): setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0) 633.151125ms ago: executing program 2 (id=966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@llc={0x4, {@snap={0xab, 0x0, ']', "097895", 0x90f8}}}}}, 0x0) 434.736461ms ago: executing program 0 (id=967): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 407.486737ms ago: executing program 4 (id=968): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x682, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0x10) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 372.304491ms ago: executing program 2 (id=969): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 238.236838ms ago: executing program 2 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, '\n'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) 207.917949ms ago: executing program 0 (id=971): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x4, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffe}, 0x50) 128.406833ms ago: executing program 1 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 127.13682ms ago: executing program 4 (id=973): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 1.544912ms ago: executing program 1 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=975): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x800100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x21) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 58.918409][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 58.918666][ T30] audit: type=1400 audit(1788691475.387:129): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.926674][ T30] audit: type=1400 audit(1788691475.397:130): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.928775][ T5595] cgroup: Unknown subsys name 'net' [ 58.930466][ T30] audit: type=1400 audit(1788691475.397:131): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.098933][ T5595] cgroup: Unknown subsys name 'cpuset' [ 59.106793][ T5595] cgroup: Unknown subsys name 'rlimit' [ 59.213699][ T30] audit: type=1400 audit(1788691475.677:132): avc: denied { setattr } for pid=5595 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.215229][ T30] audit: type=1400 audit(1788691475.677:133): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.215264][ T30] audit: type=1400 audit(1788691475.677:134): avc: denied { write } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.215293][ T30] audit: type=1400 audit(1788691475.677:135): avc: denied { read } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.321882][ T5597] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.322836][ T30] audit: type=1400 audit(1788691475.787:136): avc: denied { relabelto } for pid=5597 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.323391][ T30] audit: type=1400 audit(1788691475.787:137): avc: denied { write } for pid=5597 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.361144][ T30] audit: type=1400 audit(1788691475.827:138): avc: denied { read } for pid=5595 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.298571][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.349140][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.354303][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.355431][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.355874][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.357277][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.357916][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.358090][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.358782][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.359289][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.359798][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.360540][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.361009][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.362521][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.363497][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.363843][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.365013][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.365703][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.366203][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.392321][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.392460][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.395200][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.395904][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.396598][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.404831][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.404966][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.513962][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.514510][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.515121][ T5608] bridge_slave_0: entered allmulticast mode [ 63.516540][ T5608] bridge_slave_0: entered promiscuous mode [ 63.556835][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.556969][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.557053][ T5608] bridge_slave_1: entered allmulticast mode [ 63.558168][ T5608] bridge_slave_1: entered promiscuous mode [ 63.653356][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.655899][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.739218][ T5608] team0: Port device team_slave_0 added [ 63.769724][ T5608] team0: Port device team_slave_1 added [ 63.799488][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.799583][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.799669][ T5607] bridge_slave_0: entered allmulticast mode [ 63.800807][ T5607] bridge_slave_0: entered promiscuous mode [ 63.803372][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.803501][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.803589][ T5607] bridge_slave_1: entered allmulticast mode [ 63.805171][ T5607] bridge_slave_1: entered promiscuous mode [ 63.806065][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.806126][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.806825][ T5609] bridge_slave_0: entered allmulticast mode [ 63.808041][ T5609] bridge_slave_0: entered promiscuous mode [ 63.810444][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.810506][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.810584][ T5609] bridge_slave_1: entered allmulticast mode [ 63.811720][ T5609] bridge_slave_1: entered promiscuous mode [ 63.813175][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.813185][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.813203][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.841749][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.841763][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.841780][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.905931][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.906048][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.906258][ T5620] bridge_slave_0: entered allmulticast mode [ 63.911381][ T5620] bridge_slave_0: entered promiscuous mode [ 63.918064][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.921342][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.923539][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.929463][ T5608] hsr_slave_0: entered promiscuous mode [ 63.930236][ T5608] hsr_slave_1: entered promiscuous mode [ 63.931055][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.931538][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.931783][ T5620] bridge_slave_1: entered allmulticast mode [ 63.933044][ T5620] bridge_slave_1: entered promiscuous mode [ 63.945375][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.998040][ T5607] team0: Port device team_slave_0 added [ 64.025780][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.028473][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.061687][ T5607] team0: Port device team_slave_1 added [ 64.072484][ T5609] team0: Port device team_slave_0 added [ 64.109530][ T5609] team0: Port device team_slave_1 added [ 64.110893][ T5620] team0: Port device team_slave_0 added [ 64.141809][ T5620] team0: Port device team_slave_1 added [ 64.154393][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.154416][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.154672][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.156551][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.156561][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.156580][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.180414][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.180427][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.180444][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.219286][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.219300][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.219317][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.255478][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.255492][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.255509][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.286557][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.286628][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.286870][ T5610] bridge_slave_0: entered allmulticast mode [ 64.289578][ T5610] bridge_slave_0: entered promiscuous mode [ 64.293633][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.293644][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.293661][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.433150][ T5615] Bluetooth: hci1: command tx timeout [ 64.433148][ T5612] Bluetooth: hci3: command tx timeout [ 64.433573][ T52] Bluetooth: hci4: command tx timeout [ 64.468957][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.469086][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.469169][ T5610] bridge_slave_1: entered allmulticast mode [ 64.470321][ T5610] bridge_slave_1: entered promiscuous mode [ 64.504881][ T52] Bluetooth: hci0: command tx timeout [ 64.515092][ T52] Bluetooth: hci2: command tx timeout [ 64.523892][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.529093][ T5607] hsr_slave_0: entered promiscuous mode [ 64.529725][ T5607] hsr_slave_1: entered promiscuous mode [ 64.530141][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 64.530200][ T5607] Cannot create hsr debugfs directory [ 64.535707][ T5609] hsr_slave_0: entered promiscuous mode [ 64.536325][ T5609] hsr_slave_1: entered promiscuous mode [ 64.537152][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 64.537166][ T5609] Cannot create hsr debugfs directory [ 64.583630][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.608212][ T5610] team0: Port device team_slave_0 added [ 64.633931][ T5610] team0: Port device team_slave_1 added [ 64.646329][ T5620] hsr_slave_0: entered promiscuous mode [ 64.646970][ T5620] hsr_slave_1: entered promiscuous mode [ 64.647391][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 64.647405][ T5620] Cannot create hsr debugfs directory [ 64.682247][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.682357][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.682376][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.731768][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.731825][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.731844][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.850944][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.860824][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.874123][ T5610] hsr_slave_0: entered promiscuous mode [ 64.874740][ T5610] hsr_slave_1: entered promiscuous mode [ 64.875550][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 64.875565][ T5610] Cannot create hsr debugfs directory [ 64.907745][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.917423][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.918159][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.928256][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.961762][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.969903][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.099263][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.107903][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.123401][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.132650][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.137555][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.148771][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.150795][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.158566][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.217358][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.228040][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.238093][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.247381][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.248001][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.257514][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.259374][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.263836][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.338825][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.347638][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.361545][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.370455][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.371032][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.380587][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.388096][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.401953][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.411796][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.426398][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.449096][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.449200][ T4082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.493827][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.493905][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.532906][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.538457][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.543205][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.545817][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.548829][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.560733][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.563457][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.587691][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.597098][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.604032][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.630794][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.640470][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.640811][ T4082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.661258][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.661334][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.726104][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.753235][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.764580][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.764670][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.790513][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.790588][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.817794][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.817886][ T4027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.880848][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.917532][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.917623][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.921429][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.921499][ T4027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.003973][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.075921][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.100362][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.100490][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.143608][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.143696][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.411138][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.508319][ T52] Bluetooth: hci4: command tx timeout [ 66.508335][ T5615] Bluetooth: hci3: command tx timeout [ 66.508367][ T5615] Bluetooth: hci1: command tx timeout [ 66.586168][ T5615] Bluetooth: hci0: command tx timeout [ 66.586339][ T52] Bluetooth: hci2: command tx timeout [ 66.634248][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.780097][ T5609] veth0_vlan: entered promiscuous mode [ 66.809193][ T5609] veth1_vlan: entered promiscuous mode [ 66.889711][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.890956][ T5609] veth0_macvtap: entered promiscuous mode [ 66.919431][ T5609] veth1_macvtap: entered promiscuous mode [ 66.979248][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.003247][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.023473][ T5608] veth0_vlan: entered promiscuous mode [ 67.045327][ T4082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.064685][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.082311][ T5607] veth0_vlan: entered promiscuous mode [ 67.090740][ T5608] veth1_vlan: entered promiscuous mode [ 67.119729][ T5607] veth1_vlan: entered promiscuous mode [ 67.162684][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.201299][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.201335][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.215002][ T5607] veth0_macvtap: entered promiscuous mode [ 67.235312][ T5607] veth1_macvtap: entered promiscuous mode [ 67.253111][ T5608] veth0_macvtap: entered promiscuous mode [ 67.279376][ T5620] veth0_vlan: entered promiscuous mode [ 67.284277][ T5620] veth1_vlan: entered promiscuous mode [ 67.294419][ T5608] veth1_macvtap: entered promiscuous mode [ 67.294733][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.294746][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.323957][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.329624][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.334974][ T4082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.335572][ T4082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.335600][ T4082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.372767][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 67.372800][ T30] audit: type=1400 audit(1788691483.837:150): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.Z4wKiU/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.384618][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.385799][ T4082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.385834][ T4082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.385862][ T4082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.385888][ T4082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.389108][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.403723][ T30] audit: type=1400 audit(1788691483.867:151): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.403761][ T30] audit: type=1400 audit(1788691483.867:152): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.Z4wKiU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.403791][ T30] audit: type=1400 audit(1788691483.867:153): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.420549][ T30] audit: type=1400 audit(1788691483.877:154): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.Z4wKiU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.420595][ T30] audit: type=1400 audit(1788691483.887:155): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.Z4wKiU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.455437][ T30] audit: type=1400 audit(1788691483.907:156): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.455477][ T30] audit: type=1400 audit(1788691483.917:157): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.456971][ T30] audit: type=1400 audit(1788691483.927:158): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=6980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.468144][ T30] audit: type=1400 audit(1788691483.937:159): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.498550][ T5620] veth0_macvtap: entered promiscuous mode [ 67.511438][ T5610] veth0_vlan: entered promiscuous mode [ 67.523193][ T5620] veth1_macvtap: entered promiscuous mode [ 67.609144][ T4027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.609476][ T4027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.609581][ T4027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.615297][ T5610] veth1_vlan: entered promiscuous mode [ 67.689561][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.691823][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.691836][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.744903][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.779174][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.815923][ T4027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.880575][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.880611][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.915816][ T4082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.916369][ T4082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.936695][ T5610] veth0_macvtap: entered promiscuous mode [ 67.977843][ T5610] veth1_macvtap: entered promiscuous mode [ 68.076738][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.085433][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.085470][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.085627][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.086400][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.086430][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.086849][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.140273][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.142053][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.142067][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.333766][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.334365][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.334409][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.334420][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.334556][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.595372][ T52] Bluetooth: hci4: command tx timeout [ 68.601553][ T52] Bluetooth: hci3: command tx timeout [ 68.601638][ T52] Bluetooth: hci1: command tx timeout [ 68.664923][ T5615] Bluetooth: hci2: command tx timeout [ 68.665420][ T5615] Bluetooth: hci0: command tx timeout [ 68.896612][ T4082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.980641][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.992721][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.146987][ T5822] process 'syz.1.10' launched '/dev/fd/4' with NULL argv: empty string added [ 69.520644][ T5819] null_blk: disk nullb1 created [ 69.586034][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.586063][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.665301][ T5615] Bluetooth: hci3: command tx timeout [ 70.665339][ T5615] Bluetooth: hci4: command tx timeout [ 70.676868][ T52] Bluetooth: hci1: command tx timeout [ 70.756606][ T5612] Bluetooth: hci2: command tx timeout [ 70.769435][ T52] Bluetooth: hci0: command tx timeout [ 72.977753][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 72.977801][ T30] audit: type=1400 audit(1788691489.447:220): avc: denied { name_bind } for pid=5903 comm="syz.2.42" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.085075][ T9] cfg80211: failed to load regulatory.db [ 76.135675][ T30] audit: type=1400 audit(1788691492.607:221): avc: denied { name_bind } for pid=5971 comm="syz.4.70" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.342303][ T30] audit: type=1400 audit(1788691492.787:222): avc: denied { mmap_zero } for pid=5980 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 77.310220][ T30] audit: type=1400 audit(1788691493.777:223): avc: denied { connect } for pid=5993 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.317704][ T30] audit: type=1400 audit(1788691493.787:224): avc: denied { setopt } for pid=5993 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.501893][ T6001] 9p: Bad value for 'wfdno' [ 77.502022][ T30] audit: type=1400 audit(1788691493.967:225): avc: denied { mounton } for pid=5998 comm="syz.1.81" path="/18/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.545741][ T30] audit: type=1400 audit(1788691494.017:226): avc: denied { setopt } for pid=6004 comm="syz.4.82" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.665653][ T30] audit: type=1400 audit(1788691495.137:227): avc: denied { create } for pid=6004 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.674713][ T30] audit: type=1400 audit(1788691495.137:228): avc: denied { connect } for pid=6004 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.941982][ T30] audit: type=1400 audit(1788691495.407:229): avc: denied { map } for pid=6003 comm="syz.2.86" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.970742][ T30] audit: type=1400 audit(1788691495.437:230): avc: denied { read write } for pid=6003 comm="syz.2.86" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.524453][ T6043] 9p: Bad value for 'wfdno' [ 80.492322][ T30] audit: type=1400 audit(1788691496.957:231): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.131934][ T6079] 9p: Bad value for 'wfdno' [ 81.611897][ T6095] FAULT_INJECTION: forcing a failure. [ 81.611897][ T6095] name failslab, interval 1, probability 0, space 0, times 1 [ 81.624643][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT(full) [ 81.624671][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 81.624683][ T6095] Call Trace: [ 81.624691][ T6095] [ 81.624699][ T6095] dump_stack_lvl+0x100/0x190 [ 81.624732][ T6095] should_fail_ex.cold+0x5/0xa [ 81.624759][ T6095] should_failslab+0xc2/0x120 [ 81.624784][ T6095] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 81.624802][ T6095] ? sock_alloc_inode+0x26/0x2c0 [ 81.624821][ T6095] ? __pfx_sock_alloc_inode+0x10/0x10 [ 81.624846][ T6095] sock_alloc_inode+0x26/0x2c0 [ 81.624861][ T6095] ? __pfx_sock_alloc_inode+0x10/0x10 [ 81.624875][ T6095] alloc_inode+0x68/0x250 [ 81.624895][ T6095] sock_alloc+0x44/0x280 [ 81.624912][ T6095] ? security_socket_create+0x7f/0x250 [ 81.624937][ T6095] __sock_create+0xc2/0x860 [ 81.624964][ T6095] __sys_socket+0x14d/0x260 [ 81.624986][ T6095] ? __pfx___sys_socket+0x10/0x10 [ 81.625014][ T6095] __x64_sys_socket+0x72/0xb0 [ 81.625036][ T6095] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.625059][ T6095] do_syscall_64+0x123/0x790 [ 81.625083][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.625100][ T6095] RIP: 0033:0x7f5cdd39e159 [ 81.625115][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.625133][ T6095] RSP: 002b:00007f5cde2e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 81.625151][ T6095] RAX: ffffffffffffffda RBX: 00007f5cdd625fa0 RCX: 00007f5cdd39e159 [ 81.625163][ T6095] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 81.625173][ T6095] RBP: 00007f5cdd435024 R08: 0000000000000000 R09: 0000000000000000 [ 81.625183][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.625192][ T6095] R13: 00007f5cdd626038 R14: 00007f5cdd625fa0 R15: 00007ffccc46d2b8 [ 81.625214][ T6095] [ 81.935066][ T6095] socket: no more sockets [ 83.150998][ T30] audit: type=1400 audit(1788691499.617:232): avc: denied { create } for pid=6134 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.178441][ T30] audit: type=1400 audit(1788691499.647:233): avc: denied { ioctl } for pid=6134 comm="syz.2.135" path="socket:[9051]" dev="sockfs" ino=9051 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.971198][ T6158] FAULT_INJECTION: forcing a failure. [ 83.971198][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 84.022020][ T6160] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.144'. [ 84.070469][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) [ 84.070499][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 84.070511][ T6158] Call Trace: [ 84.070518][ T6158] [ 84.070526][ T6158] dump_stack_lvl+0x100/0x190 [ 84.070561][ T6158] should_fail_ex.cold+0x5/0xa [ 84.070588][ T6158] should_failslab+0xc2/0x120 [ 84.070612][ T6158] kmem_cache_alloc_noprof+0x92/0x6a0 [ 84.070632][ T6158] ? __pfx_map_id_range_down+0x10/0x10 [ 84.070650][ T6158] ? rcu_is_watching+0x13/0xc0 [ 84.070670][ T6158] ? security_inode_alloc+0x3b/0x2c0 [ 84.070700][ T6158] security_inode_alloc+0x3b/0x2c0 [ 84.070726][ T6158] inode_init_always_gfp+0xc6f/0xfb0 [ 84.070753][ T6158] alloc_inode+0x8e/0x250 [ 84.070781][ T6158] sock_alloc+0x44/0x280 [ 84.070800][ T6158] ? security_socket_create+0x7f/0x250 [ 84.070829][ T6158] __sock_create+0xc2/0x860 [ 84.070857][ T6158] __sys_socket+0x14d/0x260 [ 84.070883][ T6158] ? __pfx___sys_socket+0x10/0x10 [ 84.070915][ T6158] __x64_sys_socket+0x72/0xb0 [ 84.070939][ T6158] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.070961][ T6158] do_syscall_64+0x123/0x790 [ 84.070986][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.071007][ T6158] RIP: 0033:0x7ff52279e159 [ 84.071023][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.071040][ T6158] RSP: 002b:00007ff523679028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 84.071059][ T6158] RAX: ffffffffffffffda RBX: 00007ff522a25fa0 RCX: 00007ff52279e159 [ 84.071072][ T6158] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 84.071083][ T6158] RBP: 00007ff522835024 R08: 0000000000000000 R09: 0000000000000000 [ 84.071095][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.071106][ T6158] R13: 00007ff522a26038 R14: 00007ff522a25fa0 R15: 00007fffa68ce2d8 [ 84.071129][ T6158] [ 84.096192][ T6158] socket: no more sockets [ 84.279466][ T30] audit: type=1400 audit(1788691500.727:234): avc: denied { read } for pid=6165 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.411950][ T6176] 9p: Bad value for 'wfdno' [ 85.234871][ T6196] FAULT_INJECTION: forcing a failure. [ 85.234871][ T6196] name failslab, interval 1, probability 0, space 0, times 0 [ 85.248004][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.3.160 Not tainted syzkaller #0 PREEMPT(full) [ 85.248033][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 85.248045][ T6196] Call Trace: [ 85.248052][ T6196] [ 85.248060][ T6196] dump_stack_lvl+0x100/0x190 [ 85.248095][ T6196] should_fail_ex.cold+0x5/0xa [ 85.248123][ T6196] should_failslab+0xc2/0x120 [ 85.248147][ T6196] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 85.248167][ T6196] ? sock_alloc_inode+0x26/0x2c0 [ 85.248193][ T6196] ? __pfx_sock_alloc_inode+0x10/0x10 [ 85.248216][ T6196] sock_alloc_inode+0x26/0x2c0 [ 85.248238][ T6196] ? __pfx_sock_alloc_inode+0x10/0x10 [ 85.248258][ T6196] alloc_inode+0x68/0x250 [ 85.248287][ T6196] sock_alloc+0x44/0x280 [ 85.248306][ T6196] ? security_socket_create+0x7f/0x250 [ 85.248334][ T6196] __sock_create+0xc2/0x860 [ 85.248358][ T6196] ? irqentry_exit+0x24d/0xa10 [ 85.248383][ T6196] __sys_socket+0x14d/0x260 [ 85.248409][ T6196] ? __pfx___sys_socket+0x10/0x10 [ 85.248441][ T6196] __x64_sys_socket+0x72/0xb0 [ 85.248468][ T6196] do_syscall_64+0x123/0x790 [ 85.248493][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.248513][ T6196] RIP: 0033:0x7f0bc539e159 [ 85.248529][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.248546][ T6196] RSP: 002b:00007f0bc62ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 85.248566][ T6196] RAX: ffffffffffffffda RBX: 00007f0bc5625fa0 RCX: 00007f0bc539e159 [ 85.248578][ T6196] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 85.248589][ T6196] RBP: 00007f0bc5435024 R08: 0000000000000000 R09: 0000000000000000 [ 85.248600][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.248611][ T6196] R13: 00007f0bc5626038 R14: 00007f0bc5625fa0 R15: 00007fff69c48498 [ 85.248639][ T6196] [ 85.410132][ T6196] socket: no more sockets [ 85.594101][ T6210] 9p: Bad value for 'wfdno' [ 86.237161][ T6239] FAULT_INJECTION: forcing a failure. [ 86.237161][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 86.237210][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.0.177 Not tainted syzkaller #0 PREEMPT(full) [ 86.237233][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 86.237244][ T6239] Call Trace: [ 86.237251][ T6239] [ 86.237258][ T6239] dump_stack_lvl+0x100/0x190 [ 86.237291][ T6239] should_fail_ex.cold+0x5/0xa [ 86.237319][ T6239] should_failslab+0xc2/0x120 [ 86.237344][ T6239] kmem_cache_alloc_noprof+0x92/0x6a0 [ 86.237363][ T6239] ? __pfx_map_id_range_down+0x10/0x10 [ 86.237382][ T6239] ? rcu_is_watching+0x13/0xc0 [ 86.237407][ T6239] ? security_inode_alloc+0x3b/0x2c0 [ 86.237440][ T6239] security_inode_alloc+0x3b/0x2c0 [ 86.237469][ T6239] inode_init_always_gfp+0xc6f/0xfb0 [ 86.237496][ T6239] alloc_inode+0x8e/0x250 [ 86.237525][ T6239] sock_alloc+0x44/0x280 [ 86.237544][ T6239] ? security_socket_create+0x7f/0x250 [ 86.237573][ T6239] __sock_create+0xc2/0x860 [ 86.237602][ T6239] __sys_socket+0x14d/0x260 [ 86.237639][ T6239] ? __pfx___sys_socket+0x10/0x10 [ 86.237673][ T6239] __x64_sys_socket+0x72/0xb0 [ 86.237699][ T6239] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.237724][ T6239] do_syscall_64+0x123/0x790 [ 86.237750][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.237771][ T6239] RIP: 0033:0x7fd01eb9e159 [ 86.237788][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.237804][ T6239] RSP: 002b:00007fd01fab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 86.237823][ T6239] RAX: ffffffffffffffda RBX: 00007fd01ee25fa0 RCX: 00007fd01eb9e159 [ 86.237835][ T6239] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 86.237846][ T6239] RBP: 00007fd01ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 86.237857][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.237868][ T6239] R13: 00007fd01ee26038 R14: 00007fd01ee25fa0 R15: 00007ffd8b024a48 [ 86.237893][ T6239] [ 86.239213][ T6239] socket: no more sockets [ 86.300217][ T6242] 9p: Bad value for 'wfdno' [ 87.155311][ T30] audit: type=1400 audit(1788691503.617:235): avc: denied { write } for pid=6253 comm="syz.2.186" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.215495][ T30] audit: type=1400 audit(1788691503.647:236): avc: denied { connect } for pid=6253 comm="syz.2.186" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.351568][ T6270] 9p: Bad value for 'wfdno' [ 87.415759][ T6271] FAULT_INJECTION: forcing a failure. [ 87.415759][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 87.415805][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(full) [ 87.415826][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 87.415836][ T6271] Call Trace: [ 87.415841][ T6271] [ 87.415847][ T6271] dump_stack_lvl+0x100/0x190 [ 87.415876][ T6271] should_fail_ex.cold+0x5/0xa [ 87.415899][ T6271] should_failslab+0xc2/0x120 [ 87.415918][ T6271] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 87.415936][ T6271] ? sock_alloc_inode+0x26/0x2c0 [ 87.415959][ T6271] ? __pfx_sock_alloc_inode+0x10/0x10 [ 87.415979][ T6271] sock_alloc_inode+0x26/0x2c0 [ 87.415997][ T6271] ? __pfx_sock_alloc_inode+0x10/0x10 [ 87.416016][ T6271] alloc_inode+0x68/0x250 [ 87.416040][ T6271] sock_alloc+0x44/0x280 [ 87.416056][ T6271] ? security_socket_create+0x7f/0x250 [ 87.416080][ T6271] __sock_create+0xc2/0x860 [ 87.416104][ T6271] __sys_socket+0x14d/0x260 [ 87.416126][ T6271] ? __pfx___sys_socket+0x10/0x10 [ 87.416153][ T6271] __x64_sys_socket+0x72/0xb0 [ 87.416173][ T6271] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.416192][ T6271] do_syscall_64+0x123/0x790 [ 87.416212][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.416229][ T6271] RIP: 0033:0x7ff52279e159 [ 87.416243][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.416257][ T6271] RSP: 002b:00007ff523679028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 87.416274][ T6271] RAX: ffffffffffffffda RBX: 00007ff522a25fa0 RCX: 00007ff52279e159 [ 87.416284][ T6271] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 87.416294][ T6271] RBP: 00007ff522835024 R08: 0000000000000000 R09: 0000000000000000 [ 87.416303][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.416313][ T6271] R13: 00007ff522a26038 R14: 00007ff522a25fa0 R15: 00007fffa68ce2d8 [ 87.416339][ T6271] [ 87.416348][ T6271] socket: no more sockets [ 89.864907][ T6357] 9p: Bad value for 'wfdno' [ 90.752751][ T6387] 9p: Bad value for 'wfdno' [ 93.617927][ T6473] 9p: Bad value for 'wfdno' [ 94.885421][ T6502] 9p: Bad value for 'wfdno' [ 96.435019][ T6536] 9p: Bad value for 'wfdno' [ 97.294083][ T30] audit: type=1400 audit(1788691513.757:237): avc: denied { mount } for pid=6562 comm="syz.0.319" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.344746][ T30] audit: type=1400 audit(1788691513.807:238): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.400253][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 98.734610][ T6615] 9p: Bad value for 'wfdno' [ 100.048385][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 100.934261][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'. [ 101.621893][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 101.733136][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 101.885979][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 102.572213][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 104.707773][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 104.807808][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 105.459145][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 105.905761][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 106.054581][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 106.808957][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 109.109142][ T30] audit: type=1400 audit(1788691525.577:239): avc: denied { getopt } for pid=6950 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.767376][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 114.466551][ T30] audit: type=1400 audit(1788691530.937:240): avc: denied { create } for pid=7115 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.491244][ T30] audit: type=1400 audit(1788691530.957:241): avc: denied { ioctl } for pid=7115 comm="syz.3.558" path="socket:[13605]" dev="sockfs" ino=13605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.527948][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 114.528053][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.584317][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.066742][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 117.586696][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 118.118796][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'. [ 118.749785][ T30] audit: type=1400 audit(1788691535.217:242): avc: denied { ioctl } for pid=7231 comm="syz.2.606" path="socket:[13805]" dev="sockfs" ino=13805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.782789][ T30] audit: type=1400 audit(1788691535.247:243): avc: denied { bind } for pid=7231 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.800932][ T30] audit: type=1400 audit(1788691535.267:244): avc: denied { write } for pid=7231 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.509586][ T30] audit: type=1400 audit(1788691536.977:245): avc: denied { mount } for pid=7269 comm="syz.2.620" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 122.150229][ T30] audit: type=1400 audit(1788691538.617:246): avc: denied { read write } for pid=7325 comm="syz.1.644" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 122.261095][ T30] audit: type=1400 audit(1788691538.647:247): avc: denied { open } for pid=7325 comm="syz.1.644" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 124.687273][ T30] audit: type=1400 audit(1788691541.157:248): avc: denied { connect } for pid=7393 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.478414][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 125.890322][ T30] audit: type=1400 audit(1788691542.357:249): avc: denied { create } for pid=7435 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.892010][ T30] audit: type=1400 audit(1788691542.357:250): avc: denied { read } for pid=7435 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.956703][ T30] audit: type=1400 audit(1788691542.427:251): avc: denied { create } for pid=7437 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.008918][ T30] audit: type=1400 audit(1788691542.477:252): avc: denied { write } for pid=7437 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.319938][ T30] audit: type=1400 audit(1788691542.787:253): avc: denied { create } for pid=7454 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.343508][ T30] audit: type=1400 audit(1788691542.807:254): avc: denied { bind } for pid=7454 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.366088][ T30] audit: type=1400 audit(1788691542.837:255): avc: denied { listen } for pid=7454 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.388302][ T30] audit: type=1400 audit(1788691542.857:256): avc: denied { connect } for pid=7454 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.895010][ T30] audit: type=1400 audit(1788691543.357:257): avc: denied { listen } for pid=7466 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.052679][ T30] audit: type=1400 audit(1788691543.517:258): avc: denied { setopt } for pid=7471 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.101481][ T7474] Zero length message leads to an empty skb [ 127.227901][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.227957][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.804095][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 127.954611][ T7507] tipc: Started in network mode [ 127.954650][ T7507] tipc: Node identity ee4304119df3, cluster identity 4711 [ 127.954938][ T7507] tipc: Enabled bearer , priority 0 [ 127.978696][ T7506] tipc: Resetting bearer [ 128.041614][ T7506] tipc: Disabling bearer [ 128.099574][ T7511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 128.738902][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 128.861510][ T7536] hsr_slave_1 (unregistering): left promiscuous mode [ 129.694170][ T7541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.694288][ T7541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.747506][ T7541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.774199][ T7541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.774319][ T7541] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.795424][ T7541] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.805761][ T7541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.807393][ T7541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.822550][ T7541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.851155][ T7541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.851244][ T7541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.888912][ T7541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.900049][ T7541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.906718][ T7541] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.916140][ T7541] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.057704][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 130.885235][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 130.985151][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.433007][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 131.433060][ T30] audit: type=1400 audit(1788691547.897:277): avc: denied { mount } for pid=7642 comm="syz.2.779" name="/" dev="ramfs" ino=15531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.786518][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.865244][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.867829][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.884876][ T30] audit: type=1400 audit(1788691548.337:278): avc: denied { create } for pid=7642 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.945782][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.990701][ T30] audit: type=1400 audit(1788691548.457:279): avc: denied { accept } for pid=7642 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.318566][ T30] audit: type=1400 audit(1788691548.787:280): avc: denied { write } for pid=7666 comm="syz.1.787" path="socket:[15551]" dev="sockfs" ino=15551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.504240][ T30] audit: type=1400 audit(1788691548.967:281): avc: denied { unmount } for pid=7673 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.717794][ T7680] sctp: [Deprecated]: syz.0.794 (pid 7680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.717794][ T7680] Use struct sctp_sack_info instead [ 132.734581][ T30] audit: type=1400 audit(1788691549.187:282): avc: denied { getopt } for pid=7679 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.792562][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 132.959695][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 132.997311][ T7690] ======================================================= [ 132.997311][ T7690] WARNING: The mand mount option has been deprecated and [ 132.997311][ T7690] and is ignored by this kernel. Remove the mand [ 132.997311][ T7690] option from the mount to silence this warning. [ 132.997311][ T7690] ======================================================= [ 133.066219][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.266019][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 133.324094][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.332256][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.341761][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.357177][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.365759][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.431268][ T30] audit: type=1400 audit(1788691549.897:283): avc: denied { sys_module } for pid=7701 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.882291][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.946203][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.288870][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.297775][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.305018][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.313336][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.322030][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.487110][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.487806][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.487930][ T7701] bridge_slave_0: entered allmulticast mode [ 134.489102][ T7701] bridge_slave_0: entered promiscuous mode [ 134.530590][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.530703][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.530811][ T7701] bridge_slave_1: entered allmulticast mode [ 134.531982][ T7701] bridge_slave_1: entered promiscuous mode [ 134.592916][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.605381][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.637305][ T7701] team0: Port device team_slave_0 added [ 134.645425][ T7701] team0: Port device team_slave_1 added [ 134.672368][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.679435][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.707053][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.722313][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.722357][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.722377][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.852987][ T7701] hsr_slave_0: entered promiscuous mode [ 134.853808][ T7701] hsr_slave_1: entered promiscuous mode [ 134.855415][ T7701] debugfs: 'hsr0' already exists in 'hsr' [ 134.855430][ T7701] Cannot create hsr debugfs directory [ 135.145173][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.210838][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.220479][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.221349][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.222321][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.222771][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.223532][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.234317][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.238509][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.252166][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.252561][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.314700][ T7701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.389756][ T7701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.467992][ T5615] Bluetooth: hci2: command tx timeout [ 135.549969][ T7701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.667402][ T7701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.862010][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.862127][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.862667][ T7738] bridge_slave_0: entered allmulticast mode [ 135.865917][ T7738] bridge_slave_0: entered promiscuous mode [ 135.873293][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.873358][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.873593][ T7738] bridge_slave_1: entered allmulticast mode [ 135.879036][ T7738] bridge_slave_1: entered promiscuous mode [ 135.956006][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.996170][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.058184][ T7738] team0: Port device team_slave_0 added [ 136.079655][ T7738] team0: Port device team_slave_1 added [ 136.214528][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.214559][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.214579][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.216674][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.216685][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.216703][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.253207][ T7701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.268365][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.291875][ T7738] hsr_slave_0: entered promiscuous mode [ 136.292610][ T7738] hsr_slave_1: entered promiscuous mode [ 136.293080][ T7738] debugfs: 'hsr0' already exists in 'hsr' [ 136.293094][ T7738] Cannot create hsr debugfs directory [ 136.322306][ T7701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.329355][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.345029][ T5615] Bluetooth: hci4: command tx timeout [ 136.372970][ T7701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.376023][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.376657][ T7701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.382083][ T7701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.727549][ T7738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.781919][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.790005][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.797373][ T7759] bridge_slave_0: entered allmulticast mode [ 136.798697][ T7759] bridge_slave_0: entered promiscuous mode [ 136.800652][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.800731][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.800821][ T7759] bridge_slave_1: entered allmulticast mode [ 136.801957][ T7759] bridge_slave_1: entered promiscuous mode [ 136.864471][ T7738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.876950][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.888372][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.919750][ T7759] team0: Port device team_slave_0 added [ 136.919970][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.920065][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.920143][ T7760] bridge_slave_0: entered allmulticast mode [ 136.921878][ T7760] bridge_slave_0: entered promiscuous mode [ 136.924190][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.924254][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.924329][ T7760] bridge_slave_1: entered allmulticast mode [ 136.928310][ T7760] bridge_slave_1: entered promiscuous mode [ 136.939739][ T7759] team0: Port device team_slave_1 added [ 136.978388][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.004710][ T7738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.023719][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.036701][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.038097][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.038118][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.039699][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.039709][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.039726][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.042913][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.077419][ T7760] team0: Port device team_slave_0 added [ 137.108304][ T7760] team0: Port device team_slave_1 added [ 137.128504][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.133721][ T7759] hsr_slave_0: entered promiscuous mode [ 137.134431][ T7759] hsr_slave_1: entered promiscuous mode [ 137.136794][ T7759] debugfs: 'hsr0' already exists in 'hsr' [ 137.136809][ T7759] Cannot create hsr debugfs directory [ 137.177552][ T7738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.203068][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.203166][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.223522][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.223554][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.223573][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.226105][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.226116][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.226134][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.244932][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.245004][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.312607][ T5612] Bluetooth: hci0: command tx timeout [ 137.312947][ T5615] Bluetooth: hci3: command tx timeout [ 137.350667][ T7760] hsr_slave_0: entered promiscuous mode [ 137.352380][ T7760] hsr_slave_1: entered promiscuous mode [ 137.352845][ T7760] debugfs: 'hsr0' already exists in 'hsr' [ 137.352859][ T7760] Cannot create hsr debugfs directory [ 137.544913][ T5615] Bluetooth: hci2: command tx timeout [ 137.623660][ T7738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.637495][ T7738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.680560][ T7738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.692471][ T7738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.740663][ T7759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.758176][ T7738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.773103][ T7738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.816888][ T7738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.831286][ T7738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.863164][ T7759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.933594][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.972429][ T7759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.993967][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.004287][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.005234][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.014661][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.014733][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.100524][ T7759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.291867][ T7760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.319065][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.360943][ T7701] veth0_vlan: entered promiscuous mode [ 138.374297][ T7701] veth1_vlan: entered promiscuous mode [ 138.395054][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.403271][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.410896][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.418592][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.419413][ T7760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.426536][ T52] Bluetooth: hci4: command tx timeout [ 138.447497][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.506348][ T7701] veth0_macvtap: entered promiscuous mode [ 138.556513][ T7760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.581485][ T7701] veth1_macvtap: entered promiscuous mode [ 138.612158][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.632698][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.678514][ T7760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.704909][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.705036][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.705332][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.705390][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.852655][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.881478][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.881506][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.947887][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.947929][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.011916][ T7760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.022516][ T30] audit: type=1400 audit(1788691555.487:284): avc: denied { mounton } for pid=7701 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 139.023722][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.024291][ T7760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.059142][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.103129][ T7760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.113514][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.142929][ T7738] veth0_vlan: entered promiscuous mode [ 139.144466][ T7760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.158871][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.162138][ T30] audit: type=1400 audit(1788691555.627:285): avc: denied { create } for pid=7760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.162173][ T30] audit: type=1400 audit(1788691555.627:286): avc: denied { write } for pid=7760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.162202][ T30] audit: type=1400 audit(1788691555.627:287): avc: denied { read } for pid=7760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.271533][ T7738] veth1_vlan: entered promiscuous mode [ 139.386367][ T5612] Bluetooth: hci3: command tx timeout [ 139.386406][ T5612] Bluetooth: hci0: command tx timeout [ 139.407957][ T7759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.429841][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.459085][ T7759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.474355][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.483839][ T7759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.499672][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.516634][ T7759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.528946][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.626348][ T5615] Bluetooth: hci2: command tx timeout [ 139.629873][ T7738] veth0_macvtap: entered promiscuous mode [ 139.688905][ T7738] veth1_macvtap: entered promiscuous mode [ 139.750799][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.750946][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.751214][ T7840] bridge_slave_0: entered allmulticast mode [ 139.752729][ T7840] bridge_slave_0: entered promiscuous mode [ 139.763405][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.763472][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.763547][ T7840] bridge_slave_1: entered allmulticast mode [ 139.766844][ T7840] bridge_slave_1: entered promiscuous mode [ 139.790166][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.806271][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.810494][ T7840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.832527][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.838771][ T7840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.894241][ T7840] team0: Port device team_slave_0 added [ 139.920436][ T7840] team0: Port device team_slave_1 added [ 139.938793][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.965040][ T4027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.965807][ T4027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.965879][ T4027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.965908][ T4027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.977025][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.977037][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.977595][ T7840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.018086][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.018100][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.018118][ T7840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.061741][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.061815][ T4082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.126035][ T4082] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.126167][ T4082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.154568][ T7840] hsr_slave_0: entered promiscuous mode [ 140.157933][ T30] audit: type=1400 audit(1788691556.627:288): avc: denied { write } for pid=7893 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.160925][ T7840] hsr_slave_1: entered promiscuous mode [ 140.162038][ T7840] debugfs: 'hsr0' already exists in 'hsr' [ 140.162054][ T7840] Cannot create hsr debugfs directory [ 140.247454][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.247503][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.390317][ T4027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.390358][ T4027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.411967][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.505781][ T5612] Bluetooth: hci4: command tx timeout [ 140.505782][ T5615] Bluetooth: hci1: command tx timeout [ 140.603223][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.663872][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.663959][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.693088][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.693181][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.786202][ T7840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.909419][ T7840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.040921][ T7840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.148652][ T7840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.174496][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.273809][ T7760] veth0_vlan: entered promiscuous mode [ 141.296921][ T7760] veth1_vlan: entered promiscuous mode [ 141.327798][ T7922] tc_dump_action: action bad kind [ 141.427460][ T7760] veth0_macvtap: entered promiscuous mode [ 141.437055][ T7840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.452841][ T7840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.462649][ T7760] veth1_macvtap: entered promiscuous mode [ 141.470044][ T7840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.471116][ T5612] Bluetooth: hci0: command tx timeout [ 141.471119][ T5615] Bluetooth: hci3: command tx timeout [ 141.491569][ T7840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.509538][ T7840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.532835][ T7840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.548328][ T7840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.567839][ T7840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.602710][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.650954][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.705339][ T5615] Bluetooth: hci2: command tx timeout [ 141.709439][ T1062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.729133][ T1003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.729399][ T1003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.908527][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.908556][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.002786][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.085051][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.098101][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.108099][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.108137][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.131672][ T30] audit: type=1400 audit(1788691558.597:289): avc: denied { ioctl } for pid=7950 comm="syz.3.850" path="socket:[17337]" dev="sockfs" ino=17337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.132059][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.173248][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.173343][ T4027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.215374][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.215474][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.417996][ T7759] veth0_vlan: entered promiscuous mode [ 142.461087][ T7759] veth1_vlan: entered promiscuous mode [ 142.554165][ T7759] veth0_macvtap: entered promiscuous mode [ 142.582542][ T7759] veth1_macvtap: entered promiscuous mode [ 142.588974][ T5615] Bluetooth: hci1: command tx timeout [ 142.595348][ T5615] Bluetooth: hci4: command tx timeout [ 142.638054][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.664181][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.795087][ T4027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.928837][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.928871][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.965538][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.965602][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.965629][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.018928][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.018960][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.381018][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.546661][ T5615] Bluetooth: hci3: command tx timeout [ 143.554839][ T5615] Bluetooth: hci0: command tx timeout [ 144.044125][ T7840] veth0_vlan: entered promiscuous mode [ 144.078784][ T7840] veth1_vlan: entered promiscuous mode [ 144.198769][ T7840] veth0_macvtap: entered promiscuous mode [ 144.219051][ T7840] veth1_macvtap: entered promiscuous mode [ 144.287908][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.316398][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.355280][ T4082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.356431][ T4082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.356458][ T4082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.356483][ T4082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.430036][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 144.475043][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 144.646376][ T4082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.646407][ T4082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.664950][ T5615] Bluetooth: hci1: command tx timeout [ 144.832500][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.832542][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.690317][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 146.746525][ T5615] Bluetooth: hci1: command tx timeout [ 146.857923][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 146.904002][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 146.921930][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 147.932803][ T30] audit: type=1400 audit(1788691564.397:290): avc: denied { create } for pid=8096 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 147.975362][ T8098] ªªªªªª: renamed from vlan0 (while UP) [ 148.372949][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 148.373643][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.903'. [ 148.519606][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 148.701605][ T30] audit: type=1400 audit(1788691565.167:291): avc: denied { shutdown } for pid=8124 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.723624][ T30] audit: type=1400 audit(1788691565.187:292): avc: denied { read } for pid=8124 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.994648][ T30] audit: type=1400 audit(1788691565.457:293): avc: denied { setopt } for pid=8135 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.021048][ T30] audit: type=1400 audit(1788691565.487:294): avc: denied { create } for pid=8128 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.050616][ T30] audit: type=1400 audit(1788691565.517:295): avc: denied { bind } for pid=8128 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.053439][ T30] audit: type=1400 audit(1788691565.517:296): avc: denied { listen } for pid=8128 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.962753][ T8162] FAULT_INJECTION: forcing a failure. [ 149.962753][ T8162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.962801][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.2.922 Not tainted syzkaller #0 PREEMPT(full) [ 149.962822][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 149.962830][ T8162] Call Trace: [ 149.962835][ T8162] [ 149.962841][ T8162] dump_stack_lvl+0x100/0x190 [ 149.962869][ T8162] should_fail_ex.cold+0x5/0xa [ 149.962893][ T8162] _copy_to_user+0x32/0xd0 [ 149.962918][ T8162] bpf_verifier_vlog+0x496/0x6d0 [ 149.962946][ T8162] __btf_verifier_log+0xc3/0x100 [ 149.962968][ T8162] ? __pfx___btf_verifier_log+0x10/0x10 [ 149.962989][ T8162] ? __might_fault+0xc5/0x140 [ 149.963020][ T8162] btf_verifier_log_vsi+0x268/0x4b0 [ 149.963045][ T8162] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 149.963079][ T8162] btf_datasec_check_meta+0x56d/0x8c0 [ 149.963110][ T8162] btf_new_fd+0x1ba8/0x5bc0 [ 149.963133][ T8162] ? avc_has_perm_noaudit+0x145/0x3b0 [ 149.963163][ T8162] ? __pfx_btf_new_fd+0x10/0x10 [ 149.963186][ T8162] ? rcu_is_watching+0x13/0xc0 [ 149.963207][ T8162] ? cap_capable+0x107/0x430 [ 149.963231][ T8162] ? security_capable+0x80/0x260 [ 149.963252][ T8162] ? ns_capable+0xd2/0xf0 [ 149.963271][ T8162] __sys_bpf+0x13ef/0x4a30 [ 149.963303][ T8162] ? __pfx___sys_bpf+0x10/0x10 [ 149.963317][ T8162] ? find_held_lock+0x2b/0x80 [ 149.963340][ T8162] ? futex_wake+0x4ea/0x5e0 [ 149.963381][ T8162] ? rcu_read_lock_any_held+0x6a/0x90 [ 149.963405][ T8162] ? find_held_lock+0x2b/0x80 [ 149.963432][ T8162] ? ksys_write+0x190/0x250 [ 149.963447][ T8162] ? ksys_write+0x190/0x250 [ 149.963487][ T8162] ? __x64_sys_futex+0x34f/0x4d0 [ 149.963507][ T8162] ? __x64_sys_futex+0x358/0x4d0 [ 149.963537][ T8162] ? xfd_validate_state+0x129/0x190 [ 149.963558][ T8162] ? __x64_sys_bpf+0xce/0x140 [ 149.963574][ T8162] __x64_sys_bpf+0xce/0x140 [ 149.963592][ T8162] ? do_syscall_64+0xae/0x790 [ 149.963614][ T8162] do_syscall_64+0x123/0x790 [ 149.963639][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.963655][ T8162] RIP: 0033:0x7f4b5d39e159 [ 149.963669][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.963683][ T8162] RSP: 002b:00007f4b5e30c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.963699][ T8162] RAX: ffffffffffffffda RBX: 00007f4b5d625fa0 RCX: 00007f4b5d39e159 [ 149.963710][ T8162] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 149.963721][ T8162] RBP: 00007f4b5d435024 R08: 0000000000000000 R09: 0000000000000000 [ 149.963732][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.963742][ T8162] R13: 00007f4b5d626038 R14: 00007f4b5d625fa0 R15: 00007ffed7a00068 [ 149.963765][ T8162] [ 150.020790][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 150.317570][ T30] audit: type=1400 audit(1788691566.787:297): avc: denied { read write } for pid=8176 comm="syz.0.930" name="sg0" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.328184][ T30] audit: type=1400 audit(1788691566.787:298): avc: denied { open } for pid=8176 comm="syz.0.930" path="/dev/sg0" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.369629][ T30] audit: type=1400 audit(1788691566.837:299): avc: denied { nlmsg_write } for pid=8177 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.139637][ T8252] tipc: Started in network mode [ 152.139681][ T8252] tipc: Node identity 1e142fcebac3, cluster identity 4711 [ 152.139813][ T8252] tipc: Enabled bearer , priority 0 [ 152.142615][ T8252] syzkaller0: entered promiscuous mode [ 152.142631][ T8252] syzkaller0: entered allmulticast mode [ 152.287349][ T8259] syz.3.949 uses obsolete (PF_INET,SOCK_PACKET) [ 152.296398][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 152.579475][ T8265] tipc: Resetting bearer [ 152.592685][ T8251] tipc: Resetting bearer [ 152.657549][ T8251] tipc: Disabling bearer [ 153.087395][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 153.087435][ T30] audit: type=1400 audit(1788691569.557:307): avc: denied { block_suspend } for pid=8273 comm="syz.1.956" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.202451][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.216940][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.231593][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.245680][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.258822][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.298850][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.322032][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.343562][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.361612][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.848776][ T8282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=8282 comm=syz.2.958 [ 153.889571][ T30] audit: type=1400 audit(1788691570.357:308): avc: denied { write } for pid=8250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.230242][ T30] audit: type=1400 audit(1788691570.697:309): avc: denied { write } for pid=8306 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.256828][ T30] audit: type=1400 audit(1788691570.727:310): avc: denied { map_create } for pid=8310 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.256883][ T30] audit: type=1400 audit(1788691570.727:311): avc: denied { map_read map_write } for pid=8310 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.262516][ T30] audit: type=1400 audit(1788691570.727:312): avc: denied { prog_load } for pid=8310 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.462980][ T30] audit: type=1400 audit(1788691570.927:313): avc: denied { name_bind } for pid=8313 comm="syz.0.967" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 154.672366][ T30] audit: type=1400 audit(1788691571.137:314): avc: denied { read } for pid=8323 comm="syz.0.971" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 154.672425][ T30] audit: type=1400 audit(1788691571.137:315): avc: denied { open } for pid=8323 comm="syz.0.971" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 259.814720][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 259.821679][ C0] rcu: (detected by 0, t=10502 jiffies, g=25497, q=971 ncpus=2) [ 259.829385][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294963147-4294952645), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 259.842746][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g25497 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 259.853768][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 259.863723][ C0] rcu: RCU grace-period kthread stack dump: [ 259.869596][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 259.883084][ C0] Call Trace: [ 259.886351][ C0] [ 259.889280][ C0] __schedule+0x1259/0x6920 [ 259.893787][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 259.898731][ C0] ? lock_acquire+0x1d1/0x380 [ 259.903404][ C0] ? __pfx___schedule+0x10/0x10 [ 259.908248][ C0] ? find_held_lock+0x2b/0x80 [ 259.912927][ C0] ? schedule+0x225/0x2c0 [ 259.917253][ C0] schedule+0xdd/0x2c0 [ 259.921315][ C0] schedule_timeout+0x127/0x280 [ 259.926167][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 259.931542][ C0] ? __pfx_process_timeout+0x10/0x10 [ 259.936838][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 259.942640][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 259.948096][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 259.952853][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 259.958221][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 259.963153][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 259.968344][ C0] ? rcu_is_watching+0x13/0xc0 [ 259.973107][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.978908][ C0] rcu_gp_kthread+0x17a/0x220 [ 259.983581][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 259.988768][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.994694][ C0] ? __kthread_parkme+0x18f/0x230 [ 259.999716][ C0] ? kthread+0x13a/0x450 [ 260.003957][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 260.009144][ C0] kthread+0x373/0x450 [ 260.013210][ C0] ? __pfx_kthread+0x10/0x10 [ 260.017802][ C0] ret_from_fork+0x730/0xd60 [ 260.022387][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 260.027498][ C0] ? __switch_to+0x800/0x10f0 [ 260.032172][ C0] ? __pfx_kthread+0x10/0x10 [ 260.036764][ C0] ret_from_fork_asm+0x1a/0x30 [ 260.041795][ C0] [ 260.044801][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 260.051110][ C0] CPU: 0 UID: 0 PID: 8324 Comm: syz.0.971 Not tainted syzkaller #0 PREEMPT(full) [ 260.060292][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 260.070337][ C0] RIP: 0010:kasan_check_range+0x0/0x1e0 [ 260.075886][ C0] Code: f2 be f8 00 00 00 e9 1f f8 50 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 48 85 f6 0f 84 7a 01 00 00 48 89 f8 41 54 41 89 d0 48 [ 260.095501][ C0] RSP: 0018:ffffc90000007508 EFLAGS: 00000246 [ 260.101560][ C0] RAX: 0000000000000000 RBX: ffff88813fffb920 RCX: ffffffff8270f28c [ 260.109523][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88813fffc010 [ 260.117481][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000045bda [ 260.125444][ C0] R10: ffff88813fffbfc7 R11: ffff88813fffb900 R12: 00000000000031ca [ 260.133403][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88813fffc148 [ 260.141365][ C0] FS: 0000000000000000(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000 [ 260.150286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.156860][ C0] CR2: 000000110c321275 CR3: 0000000072f05000 CR4: 00000000003526f0 [ 260.164822][ C0] Call Trace: [ 260.168091][ C0] [ 260.170924][ C0] get_page_from_freelist+0x1ffc/0x35d0 [ 260.176482][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 260.181681][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 260.186889][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 260.192784][ C0] ? prepare_alloc_pages+0x1f0/0x5b0 [ 260.198068][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 260.203972][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 260.208909][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 260.213839][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 260.220175][ C0] ? do_raw_spin_lock+0x128/0x260 [ 260.225205][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.230401][ C0] ? __refill_objects_node+0x369/0xaa0 [ 260.235867][ C0] new_slab+0xa9/0x6e0 [ 260.239944][ C0] refill_objects+0xe3/0x410 [ 260.244544][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 260.250094][ C0] kmem_cache_alloc_node_noprof+0x4f2/0x6e0 [ 260.255979][ C0] ? __alloc_skb+0x140/0x710 [ 260.260574][ C0] __alloc_skb+0x140/0x710 [ 260.264979][ C0] ? __alloc_skb+0x5b7/0x710 [ 260.269559][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 260.274496][ C0] ? lock_acquire+0x1d1/0x380 [ 260.279171][ C0] ? __ieee80211_beacon_get+0x43/0x1ee0 [ 260.284722][ C0] __netdev_alloc_skb+0x7a/0x980 [ 260.289655][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 260.295115][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 260.300048][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 260.305520][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 260.311672][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 260.316604][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 260.322150][ C0] ? lock_acquire+0x1d1/0x380 [ 260.326819][ C0] __iterate_interfaces+0x2e6/0x650 [ 260.332101][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 260.338174][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 260.344243][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 260.351285][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 260.356503][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 260.362313][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 260.367522][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 260.372636][ C0] handle_softirqs+0x1e6/0x9d0 [ 260.377398][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 260.382673][ C0] ? _raw_spin_unlock+0x28/0x50 [ 260.387516][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 260.393171][ C0] __irq_exit_rcu+0x194/0x210 [ 260.397843][ C0] irq_exit_rcu+0x9/0x30 [ 260.402076][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 260.407735][ C0] [ 260.410669][ C0] [ 260.413600][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.419587][ C0] RIP: 0010:smp_call_function_many_cond+0x577/0x18c0 [ 260.426265][ C0] Code: e4 74 50 48 b8 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 2b c3 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 [ 260.445869][ C0] RSP: 0018:ffffc9000389f5f8 EFLAGS: 00000293 [ 260.451927][ C0] RAX: 0000000000000000 RBX: ffff8880b8541900 RCX: 0000000000000001 [ 260.459885][ C0] RDX: ffff888049110000 RSI: ffffffff81ff3ce5 RDI: ffff888049110000 [ 260.467859][ C0] RBP: ffff8880b8541908 R08: 0000000000000005 R09: 0000000000000000 [ 260.475837][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 260.483798][ C0] R13: ffffed10170a8321 R14: 0000000000000001 R15: 0000000000000001 [ 260.491789][ C0] ? smp_call_function_many_cond+0x575/0x18c0 [ 260.497859][ C0] ? smp_call_function_many_cond+0x575/0x18c0 [ 260.503931][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 260.509136][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 260.515454][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.520661][ C0] ? rcu_is_watching+0x13/0xc0 [ 260.525424][ C0] ? trace_tlb_flush+0x14b/0x1a0 [ 260.530359][ C0] flush_tlb_mm_range+0x3c9/0x1360 [ 260.535523][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 260.541136][ C0] tlb_finish_mmu+0x3fe/0x810 [ 260.545833][ C0] exit_mmap+0x454/0xa00 [ 260.550074][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 260.554829][ C0] ? rcu_is_watching+0x13/0xc0 [ 260.559596][ C0] ? find_held_lock+0x2b/0x80 [ 260.564277][ C0] ? uprobe_clear_state+0x5f/0x250 [ 260.569388][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 260.575045][ C0] __mmput+0x12a/0x410 [ 260.579106][ C0] mmput+0x67/0x80 [ 260.582818][ C0] do_exit+0x8b1/0x2ae0 [ 260.586974][ C0] ? __pfx_do_exit+0x10/0x10 [ 260.591567][ C0] ? do_raw_spin_lock+0x128/0x260 [ 260.596587][ C0] ? find_held_lock+0x2b/0x80 [ 260.601263][ C0] ? get_signal+0x7e0/0x21e0 [ 260.605849][ C0] do_group_exit+0xd5/0x2a0 [ 260.610350][ C0] get_signal+0x1ec7/0x21e0 [ 260.614854][ C0] ? __pfx_get_signal+0x10/0x10 [ 260.619698][ C0] ? do_futex+0x190/0x440 [ 260.624029][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 260.629581][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 260.635741][ C0] ? __sys_socket+0xac/0x260 [ 260.640335][ C0] exit_to_user_mode_loop+0x139/0x700 [ 260.645702][ C0] ? rcu_is_watching+0x13/0xc0 [ 260.650465][ C0] do_syscall_64+0x661/0x790 [ 260.655064][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.660947][ C0] RIP: 0033:0x7f620699e159 [ 260.665354][ C0] Code: Unable to access opcode bytes at 0x7f620699e12f. [ 260.672359][ C0] RSP: 002b:00007f620782d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.680859][ C0] RAX: fffffffffffffe00 RBX: 00007f6206c25fa8 RCX: 00007f620699e159 [ 260.688822][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6206c25fa8 [ 260.696781][ C0] RBP: 00007f6206c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 260.704742][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.712700][ C0] R13: 00007f6206c26038 R14: 00007ffd079e5390 R15: 00007ffd079e5478 [ 260.720672][ C0]