last executing test programs: 514.484032ms ago: executing program 0 (id=1): r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffb, 0x141c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000014) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 458.463065ms ago: executing program 2 (id=3): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 402.852938ms ago: executing program 3 (id=4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x4, 0xfffe, 0x9, 0x8}, 0x4d, [0x1, 0x401, 0x1, 0x0, 0x7, 0x3, 0x10000, 0xfffffffd, 0xbcbe, 0x7, 0x810, 0x5, 0x2, 0x6, 0x5, 0x1, 0x5, 0x6, 0x1, 0x7fff, 0x200, 0x8001, 0xe, 0x8, 0x80, 0x7, 0x5b997a73, 0x6, 0x7, 0x9, 0x2d, 0x800, 0xd, 0x7, 0xd9, 0xfffffff0, 0x80000000, 0x3, 0x9, 0x2, 0x9, 0x4, 0x5, 0xfffff590, 0xfffffffd, 0x800, 0x2, 0x3, 0x8, 0x7, 0x5, 0x7, 0xe, 0xffff, 0x3, 0x2, 0x0, 0x8001, 0x4, 0x51a2, 0xfffffffd, 0x9, 0x7, 0x3], [0x3, 0x5, 0x7, 0x7, 0x67, 0x6, 0x7, 0x0, 0x0, 0x7f, 0x3, 0xc, 0x4, 0xd118, 0x4, 0x5, 0x200, 0x8, 0xc4, 0xfff, 0x0, 0x4, 0xff, 0xff0000, 0x0, 0xb084, 0xc3d0, 0x7fff, 0x6, 0x4, 0x0, 0x2, 0xab, 0x200, 0x0, 0x101, 0x3, 0x45ce, 0x80, 0x5, 0x80000000, 0xff, 0x7, 0x9, 0xffffff45, 0x9, 0x400, 0xfffffffa, 0x7a3badfd, 0x1, 0x9, 0x9, 0x1, 0x2, 0xff, 0x5, 0xfffffff8, 0x2, 0x9, 0xfffffffa, 0xb, 0x3, 0x0, 0xf411], [0x5, 0x8, 0x10000, 0xd2, 0xdd, 0x7ff, 0x3, 0x0, 0x80, 0xf8, 0x3, 0x7, 0x4, 0x5, 0x4, 0xf2a3, 0x1, 0x4b, 0x101, 0x8, 0x8, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x5, 0x8, 0x7, 0xfffff801, 0x1, 0x8, 0x1, 0x5, 0x2, 0x86, 0x8, 0x2, 0x5, 0xfffffffe, 0x16e5, 0x286ddae5, 0x9, 0xc, 0x9, 0x4, 0x0, 0x2, 0x1, 0x0, 0xb, 0x9, 0x4, 0x4, 0xdd1, 0x3, 0x7, 0x4, 0x80, 0xfffffff9, 0x6, 0x3, 0x20000000, 0x6], [0x2, 0x7fffffff, 0x5, 0x8, 0x4, 0x3942, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x1000, 0x4, 0x0, 0x200, 0x6, 0x0, 0x1, 0x4e65, 0xfffffff7, 0xfffffbff, 0x5, 0x7ff, 0xb, 0x7fffffff, 0x1, 0xfffff4f7, 0x9, 0xed, 0x3, 0xfffffff8, 0x5, 0x5, 0x0, 0x4db94602, 0xb18, 0x4, 0x5, 0x80, 0x4, 0x2d2, 0x1, 0x3, 0x2, 0x1f7c37b2, 0x9, 0x1, 0x0, 0x7f, 0x10001, 0x6, 0x4fdb, 0x6, 0x4, 0x9, 0x3, 0x9, 0xc, 0x1, 0x3, 0x3, 0x9, 0xfffffff7, 0x66]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000002dc0)={'syz1\x00', {0x100, 0x7fff, 0x1, 0xfff1}, 0xa, [0x9, 0x4, 0x7, 0x3, 0x1000, 0x9, 0x5, 0x0, 0x7fffffff, 0x5, 0x5, 0x0, 0x719c, 0xde02, 0x2, 0xe4b2, 0x8, 0x10001, 0x401, 0x800, 0x2, 0x0, 0x7, 0xf1a, 0x8, 0x5, 0xbc6e, 0x7, 0x59e4cca, 0x7, 0x40, 0x5, 0x3, 0x3, 0x2, 0xe, 0x1dbb, 0xfe, 0xfff, 0x100, 0x9, 0x8, 0x6, 0xfffffffc, 0x5, 0x3, 0x4, 0x5, 0x7fff, 0x7fff, 0x3, 0x8, 0x7, 0x8000, 0x8, 0x2, 0xf, 0x42c, 0x3, 0xb, 0x6, 0x2, 0x8, 0x1b], [0x1ff, 0x3ff, 0x5, 0xfffffffe, 0x1, 0x4, 0x0, 0x989, 0x86, 0x7, 0x8, 0x3, 0x7ff, 0xffffffd8, 0xdd, 0x10001, 0xc7, 0xf2a, 0x1, 0x0, 0x26, 0x6, 0x5, 0x100, 0xec4, 0x6, 0xa4, 0x0, 0x7, 0xfffffff2, 0x2, 0x8, 0x100, 0x3, 0x0, 0x401, 0x6, 0xfffffff9, 0x0, 0xffffffff, 0x7, 0x200, 0x9, 0xc00, 0xc, 0x9a, 0x40, 0xd0000000, 0x8, 0x4, 0xa1f9, 0x400, 0x0, 0x5, 0x0, 0x6, 0x1520, 0x4, 0x2, 0x8001, 0x690, 0x9, 0x7, 0x1], [0x6, 0x0, 0x1, 0x7, 0x2, 0x6, 0xffffffff, 0x400, 0x400, 0x6, 0x10001, 0xb, 0x4, 0x9, 0x9, 0x7, 0x200, 0xfffffff8, 0x4, 0xb, 0x1ff, 0x9, 0x5, 0x2, 0x401, 0x4bca, 0x0, 0x1000, 0x1, 0xfffffff8, 0xfffffffc, 0xe, 0x67af, 0x8, 0x8001, 0x1, 0xf2d, 0xa433, 0x40, 0x2, 0x2, 0x7fff, 0x82, 0x4, 0x0, 0x8, 0x1, 0x5b, 0xf762, 0xff, 0x1, 0x8000, 0x2, 0x9, 0x5, 0x1, 0x9, 0x3, 0x0, 0xfffffffe, 0x0, 0x7, 0x8, 0x1], [0x3, 0x7ff, 0xdbf, 0x2, 0x7, 0x8, 0xea8, 0x0, 0x8, 0x58873655, 0x100, 0x3, 0x7fffffff, 0x8001, 0xcce, 0x4, 0x8, 0x4, 0x1, 0x200, 0x10, 0x6, 0xff, 0x9, 0x6, 0x1, 0xc, 0x2, 0x4, 0xe0b, 0x0, 0x15af200, 0xb4, 0x9, 0x7, 0xc, 0x5, 0x8, 0xb5, 0xf110, 0x8, 0x1, 0x9, 0x8, 0x7, 0x6, 0x10000000, 0x8, 0x10000, 0x4d, 0x3, 0x400, 0xa, 0x4, 0x7, 0x9, 0x3, 0x1, 0x40a, 0xe, 0x1, 0xa0, 0x4]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz0\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105, 0x3, 0x0, 0x80008], [0x10, 0xffffffff, 0x7, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x40000002, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x3, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x2, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x51, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0xa9c5, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x80, 0x20000, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x6, 0x7, 0xffffeffd, 0x2, 0x0, 0x0, 0x3, 0x4, 0x88, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffe, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3, 0x3]}, 0x45c) 220.369968ms ago: executing program 0 (id=6): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x7192346c17744cfa) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 56.670494ms ago: executing program 3 (id=7): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)="b1", 0x1}]) 52.494845ms ago: executing program 0 (id=8): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x34, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x42100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 0 (id=9): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xd935) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() unshare(0x2c020400) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getattr(r1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 52.004003][ T30] audit: type=1400 audit(1766321712.227:62): avc: denied { mounton } for pid=5794 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.029987][ T30] audit: type=1400 audit(1766321712.247:63): avc: denied { mount } for pid=5794 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.034954][ T5794] cgroup: Unknown subsys name 'net' [ 52.061420][ T30] audit: type=1400 audit(1766321712.277:64): avc: denied { unmount } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.204156][ T5794] cgroup: Unknown subsys name 'cpuset' [ 52.211574][ T5794] cgroup: Unknown subsys name 'rlimit' [ 52.350570][ T30] audit: type=1400 audit(1766321712.567:65): avc: denied { setattr } for pid=5794 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.375975][ T30] audit: type=1400 audit(1766321712.567:66): avc: denied { create } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.396512][ T30] audit: type=1400 audit(1766321712.567:67): avc: denied { write } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.435281][ T30] audit: type=1400 audit(1766321712.567:68): avc: denied { read } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.455873][ T30] audit: type=1400 audit(1766321712.597:69): avc: denied { mounton } for pid=5794 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 52.482846][ T30] audit: type=1400 audit(1766321712.597:70): avc: denied { mount } for pid=5794 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.501913][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.516730][ T30] audit: type=1400 audit(1766321712.737:71): avc: denied { relabelto } for pid=5802 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.435205][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.248341][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.256605][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.274280][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.281944][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.292102][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.299808][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.307299][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.315587][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.315944][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.323304][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.330984][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.337675][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.352382][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.356694][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.359755][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.374181][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.375388][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.388889][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.396828][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.403529][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.411234][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.412856][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.425844][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.433288][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.436277][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.897403][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 55.943177][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 55.985330][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 56.006192][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 56.109687][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 56.167682][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.175570][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.182910][ T5814] bridge_slave_0: entered allmulticast mode [ 56.189533][ T5814] bridge_slave_0: entered promiscuous mode [ 56.224139][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.231248][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.238642][ T5814] bridge_slave_1: entered allmulticast mode [ 56.245768][ T5814] bridge_slave_1: entered promiscuous mode [ 56.253057][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.260126][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.267400][ T5812] bridge_slave_0: entered allmulticast mode [ 56.274060][ T5812] bridge_slave_0: entered promiscuous mode [ 56.288273][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.295365][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.302683][ T5818] bridge_slave_0: entered allmulticast mode [ 56.309263][ T5818] bridge_slave_0: entered promiscuous mode [ 56.326127][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.333315][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.340397][ T5812] bridge_slave_1: entered allmulticast mode [ 56.347249][ T5812] bridge_slave_1: entered promiscuous mode [ 56.360190][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.367303][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.374405][ T5818] bridge_slave_1: entered allmulticast mode [ 56.380963][ T5818] bridge_slave_1: entered promiscuous mode [ 56.405064][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.412213][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.419324][ T5811] bridge_slave_0: entered allmulticast mode [ 56.426210][ T5811] bridge_slave_0: entered promiscuous mode [ 56.448761][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.465637][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.472961][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.480031][ T5811] bridge_slave_1: entered allmulticast mode [ 56.486822][ T5811] bridge_slave_1: entered promiscuous mode [ 56.508239][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.519188][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.537520][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.546693][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.554327][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.561405][ T5810] bridge_slave_0: entered allmulticast mode [ 56.568153][ T5810] bridge_slave_0: entered promiscuous mode [ 56.583236][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.601206][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.610400][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.618098][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.625247][ T5810] bridge_slave_1: entered allmulticast mode [ 56.632047][ T5810] bridge_slave_1: entered promiscuous mode [ 56.654745][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.678010][ T5814] team0: Port device team_slave_0 added [ 56.692114][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.715339][ T5814] team0: Port device team_slave_1 added [ 56.723434][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.733894][ T5812] team0: Port device team_slave_0 added [ 56.747260][ T5818] team0: Port device team_slave_0 added [ 56.760510][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.770729][ T5812] team0: Port device team_slave_1 added [ 56.784584][ T5818] team0: Port device team_slave_1 added [ 56.811710][ T5811] team0: Port device team_slave_0 added [ 56.829845][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.836962][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.863440][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.889501][ T5811] team0: Port device team_slave_1 added [ 56.903510][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.910444][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.936623][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.948418][ T5810] team0: Port device team_slave_0 added [ 56.954764][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.961712][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.988123][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.005653][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.012809][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.038928][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.057124][ T5810] team0: Port device team_slave_1 added [ 57.063945][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.070860][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.096820][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.115768][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.122842][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.148958][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.171197][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.178161][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.204393][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.219364][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.226428][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.252828][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.305489][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.312680][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.338782][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.361568][ T5814] hsr_slave_0: entered promiscuous mode [ 57.367806][ T5814] hsr_slave_1: entered promiscuous mode [ 57.387774][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.394895][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.421106][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.435134][ T5812] hsr_slave_0: entered promiscuous mode [ 57.441167][ T5812] hsr_slave_1: entered promiscuous mode [ 57.447191][ T5817] Bluetooth: hci4: command tx timeout [ 57.452215][ T5817] Bluetooth: hci2: command tx timeout [ 57.452882][ T5813] Bluetooth: hci0: command tx timeout [ 57.459665][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 57.469550][ T5812] Cannot create hsr debugfs directory [ 57.498202][ T5818] hsr_slave_0: entered promiscuous mode [ 57.504318][ T5818] hsr_slave_1: entered promiscuous mode [ 57.510118][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 57.516163][ T5818] Cannot create hsr debugfs directory [ 57.522411][ T5813] Bluetooth: hci3: command tx timeout [ 57.522423][ T5817] Bluetooth: hci1: command tx timeout [ 57.535066][ T5811] hsr_slave_0: entered promiscuous mode [ 57.541120][ T5811] hsr_slave_1: entered promiscuous mode [ 57.547032][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 57.552982][ T5811] Cannot create hsr debugfs directory [ 57.622789][ T5810] hsr_slave_0: entered promiscuous mode [ 57.628775][ T5810] hsr_slave_1: entered promiscuous mode [ 57.634958][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 57.640661][ T5810] Cannot create hsr debugfs directory [ 57.929532][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.940862][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.955097][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.964990][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.006739][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.037164][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.048544][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.064676][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.111629][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.129285][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.140318][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.150434][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.197388][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.243801][ T5812] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.257434][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.273918][ T5812] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.298782][ T5812] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.314236][ T5812] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.333376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.340498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.377923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.385000][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.394818][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.407287][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.417835][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.427258][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.436629][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.469374][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.497487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.504582][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.534816][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.541937][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.553679][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.620190][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.646704][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 58.646717][ T30] audit: type=1400 audit(1766321718.867:86): avc: denied { sys_module } for pid=5814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.654677][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.690145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.697314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.726717][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.733847][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.761060][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.797703][ T3916] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.804846][ T3916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.850512][ T3916] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.857650][ T3916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.878363][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.913278][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.921703][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.979184][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.000039][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.020114][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.027233][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.077225][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.090499][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.107234][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.114295][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.168030][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.196878][ T5818] veth0_vlan: entered promiscuous mode [ 59.214070][ T5814] veth0_vlan: entered promiscuous mode [ 59.240142][ T5818] veth1_vlan: entered promiscuous mode [ 59.305202][ T5814] veth1_vlan: entered promiscuous mode [ 59.334918][ T5811] veth0_vlan: entered promiscuous mode [ 59.375200][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.394621][ T5811] veth1_vlan: entered promiscuous mode [ 59.427381][ T5818] veth0_macvtap: entered promiscuous mode [ 59.445992][ T5818] veth1_macvtap: entered promiscuous mode [ 59.455508][ T5814] veth0_macvtap: entered promiscuous mode [ 59.476064][ T5814] veth1_macvtap: entered promiscuous mode [ 59.503777][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.515813][ T5811] veth0_macvtap: entered promiscuous mode [ 59.522369][ T5817] Bluetooth: hci4: command tx timeout [ 59.523717][ T5824] Bluetooth: hci0: command tx timeout [ 59.528147][ T5813] Bluetooth: hci2: command tx timeout [ 59.543468][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.558985][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.577101][ T5811] veth1_macvtap: entered promiscuous mode [ 59.588937][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.602350][ T5817] Bluetooth: hci1: command tx timeout [ 59.607856][ T5813] Bluetooth: hci3: command tx timeout [ 59.619988][ T3421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.631391][ T3421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.647278][ T3421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.664298][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.675984][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.683680][ T3421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.704176][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.730027][ T3467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.739922][ T3467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.755741][ T3467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.765477][ T3467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.774908][ T3467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.786606][ T5810] veth0_vlan: entered promiscuous mode [ 59.798615][ T3467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.812623][ T3467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.829639][ T3467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.865892][ T5810] veth1_vlan: entered promiscuous mode [ 59.877241][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.885666][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.961224][ T5812] veth0_vlan: entered promiscuous mode [ 59.968565][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.978100][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.986149][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.997436][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.011523][ T30] audit: type=1400 audit(1766321720.227:87): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.TX3gWJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.033328][ T5810] veth0_macvtap: entered promiscuous mode [ 60.045487][ T30] audit: type=1400 audit(1766321720.227:88): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.068082][ T5812] veth1_vlan: entered promiscuous mode [ 60.072926][ T30] audit: type=1400 audit(1766321720.227:89): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.TX3gWJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.088967][ T5810] veth1_macvtap: entered promiscuous mode [ 60.107460][ T30] audit: type=1400 audit(1766321720.227:90): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.146612][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.146957][ T30] audit: type=1400 audit(1766321720.227:91): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.TX3gWJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.162457][ T5812] veth0_macvtap: entered promiscuous mode [ 60.188856][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.189850][ T30] audit: type=1400 audit(1766321720.227:92): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.TX3gWJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.232207][ T30] audit: type=1400 audit(1766321720.267:93): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.250179][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.260541][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.262817][ T30] audit: type=1400 audit(1766321720.267:94): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.290822][ T5812] veth1_macvtap: entered promiscuous mode [ 60.299965][ T30] audit: type=1400 audit(1766321720.267:95): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.329118][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.351492][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.358787][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.367069][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.440377][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.473313][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.515789][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.548980][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.636355][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.652055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.655016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.714016][ T5929] syzkaller0: entered promiscuous mode [ 60.720622][ T5929] syzkaller0: entered allmulticast mode [ 60.730708][ T5932] input: syz1 as /devices/virtual/input/input5 [ 60.770149][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.797590][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.836105][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.962918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.424547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 61.604804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.628551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.062045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.482394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.622050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 66.031895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 168.171818][ C1] ------------[ cut here ]------------ [ 168.177676][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: swapper/1/0 [ 168.189031][ C1] Modules linked in: [ 168.193012][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 168.201910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.211935][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 168.218842][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 05 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e4 88 90 48 81 fd 00 46 3d 8e 74 5a 48 b8 00 [ 168.238414][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 168.244446][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38db0 [ 168.252384][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 168.260323][ C1] RBP: ffffffff8e3d4600 R08: 0000000000000001 R09: fffffbfff3584a58 [ 168.268260][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 168.276199][ C1] R13: 0000000000000246 R14: ffffffff8e3d4600 R15: ffff8880b853bc52 [ 168.284137][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 168.293040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.299593][ C1] CR2: 00007fc5d89733e0 CR3: 0000000077e3b000 CR4: 00000000003526f0 [ 168.307532][ C1] Call Trace: [ 168.310780][ C1] [ 168.313597][ C1] rcu_core+0x4cf/0x15f0 [ 168.317813][ C1] ? sched_clock+0x38/0x60 [ 168.322197][ C1] ? sched_clock_cpu+0x6c/0x530 [ 168.327014][ C1] ? clockevents_program_event+0x151/0x370 [ 168.332801][ C1] ? __pfx_rcu_core+0x10/0x10 [ 168.337454][ C1] ? read_tsc+0x9/0x20 [ 168.341493][ C1] ? ktime_get+0x1a7/0x310 [ 168.345877][ C1] ? find_held_lock+0x2b/0x80 [ 168.350530][ C1] handle_softirqs+0x219/0x950 [ 168.355276][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 168.360535][ C1] __irq_exit_rcu+0x109/0x170 [ 168.365181][ C1] irq_exit_rcu+0x9/0x30 [ 168.369394][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 168.374996][ C1] [ 168.377903][ C1] [ 168.380808][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.386761][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 168.392363][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 168.411942][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 168.417974][ C1] RAX: 00000000000c01b5 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 168.425910][ C1] RDX: 0000000000000000 RSI: ffffffff8dacde6c RDI: ffffffff8bf2b380 [ 168.433854][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 168.441791][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 168.449729][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 168.457673][ C1] ? ct_kernel_exit+0x139/0x190 [ 168.462510][ C1] default_idle+0x13/0x20 [ 168.466812][ C1] default_idle_call+0x6c/0xb0 [ 168.471554][ C1] do_idle+0x38d/0x510 [ 168.475600][ C1] ? __pfx_do_idle+0x10/0x10 [ 168.480166][ C1] cpu_startup_entry+0x4f/0x60 [ 168.484904][ C1] start_secondary+0x21d/0x2d0 [ 168.489640][ C1] ? __pfx_start_secondary+0x10/0x10 [ 168.494896][ C1] common_startup_64+0x13e/0x148 [ 168.499812][ C1] [ 168.502802][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.510059][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 168.518959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.528980][ C1] Call Trace: [ 168.532230][ C1] [ 168.535045][ C1] dump_stack_lvl+0x3d/0x1f0 [ 168.539610][ C1] vpanic+0x640/0x6f0 [ 168.543562][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 168.549859][ C1] panic+0xca/0xd0 [ 168.553549][ C1] ? __pfx_panic+0x10/0x10 [ 168.557938][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 168.563021][ C1] check_panic_on_warn+0xab/0xb0 [ 168.567932][ C1] __warn+0x108/0x3c0 [ 168.571885][ C1] __report_bug+0x2a0/0x520 [ 168.576358][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 168.582656][ C1] ? __pfx___report_bug+0x10/0x10 [ 168.587651][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 168.593350][ C1] ? __lock_acquire+0x436/0x2890 [ 168.598258][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 168.604554][ C1] report_bug+0xb2/0x220 [ 168.608775][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 168.615071][ C1] handle_bug+0x127/0x260 [ 168.619373][ C1] exc_invalid_op+0x17/0x50 [ 168.623849][ C1] asm_exc_invalid_op+0x1a/0x20 [ 168.628666][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 168.635570][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 b0 3a 85 00 b8 01 00 00 00 87 05 05 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 e4 88 90 48 81 fd 00 46 3d 8e 74 5a 48 b8 00 [ 168.655144][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 168.661178][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38db0 [ 168.669119][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 168.677067][ C1] RBP: ffffffff8e3d4600 R08: 0000000000000001 R09: fffffbfff3584a58 [ 168.685016][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 168.692956][ C1] R13: 0000000000000246 R14: ffffffff8e3d4600 R15: ffff8880b853bc52 [ 168.700899][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 168.707204][ C1] rcu_core+0x4cf/0x15f0 [ 168.711418][ C1] ? sched_clock+0x38/0x60 [ 168.715800][ C1] ? sched_clock_cpu+0x6c/0x530 [ 168.720619][ C1] ? clockevents_program_event+0x151/0x370 [ 168.726398][ C1] ? __pfx_rcu_core+0x10/0x10 [ 168.731046][ C1] ? read_tsc+0x9/0x20 [ 168.735096][ C1] ? ktime_get+0x1a7/0x310 [ 168.739513][ C1] ? find_held_lock+0x2b/0x80 [ 168.744164][ C1] handle_softirqs+0x219/0x950 [ 168.748903][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 168.754176][ C1] __irq_exit_rcu+0x109/0x170 [ 168.758824][ C1] irq_exit_rcu+0x9/0x30 [ 168.763037][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 168.768639][ C1] [ 168.771556][ C1] [ 168.774458][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.780405][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 168.786006][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 168.805585][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 168.811622][ C1] RAX: 00000000000c01b5 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 168.819563][ C1] RDX: 0000000000000000 RSI: ffffffff8dacde6c RDI: ffffffff8bf2b380 [ 168.827518][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 168.835458][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 168.843405][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 168.851350][ C1] ? ct_kernel_exit+0x139/0x190 [ 168.856173][ C1] default_idle+0x13/0x20 [ 168.860483][ C1] default_idle_call+0x6c/0xb0 [ 168.865221][ C1] do_idle+0x38d/0x510 [ 168.869262][ C1] ? __pfx_do_idle+0x10/0x10 [ 168.873828][ C1] cpu_startup_entry+0x4f/0x60 [ 168.878564][ C1] start_secondary+0x21d/0x2d0 [ 168.883295][ C1] ? __pfx_start_secondary+0x10/0x10 [ 168.888562][ C1] common_startup_64+0x13e/0x148 [ 168.893477][ C1] [ 169.949277][ C1] Shutting down cpus with NMI [ 169.954228][ C1] Kernel Offset: disabled [ 169.958526][ C1] Rebooting in 86400 seconds..