last executing test programs: 13.375095588s ago: executing program 4 (id=47): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13.054627516s ago: executing program 4 (id=51): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000001300)) 12.802771998s ago: executing program 4 (id=53): syslog(0x3, &(0x7f0000000180)=""/61, 0x3d) 12.259727374s ago: executing program 4 (id=59): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 11.986764027s ago: executing program 4 (id=64): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xffffffffffffff8f, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.436329175s ago: executing program 4 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f00000002c0)="81723676", 0x4) 4.355839629s ago: executing program 3 (id=98): r0 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x400000000c0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) openat$uhid(0xffffff9c, 0x0, 0x2, 0x0) gettid() getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timerfd_create(0x7, 0x80800) getpid() socket$kcm(0x10, 0x0, 0x0) poll(0x0, 0x0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x230, 0x3a8, 0x3a8, 0x230, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x124, 0x0, {0x0, 0x1800}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], 0x0, 0x0, 0x0, 0x0, 0x383dfde5, 0x376, 0x0, 0x4}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x354) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b0, &(0x7f0000001100)={0x0}) 4.098653664s ago: executing program 3 (id=100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305839, &(0x7f0000000240)) 3.613915274s ago: executing program 2 (id=104): r0 = socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000700)="1a", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fb00) 3.359146261s ago: executing program 2 (id=106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.238765083s ago: executing program 0 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 3.238526125s ago: executing program 1 (id=108): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000600)='fd/4\x00') fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 3.024735906s ago: executing program 1 (id=109): r0 = io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x80000001}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_GET_NESTED_STATE(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) 2.084819984s ago: executing program 0 (id=110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r1 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r1, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 2.024854107s ago: executing program 2 (id=111): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9a44d5b30be82726}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000180)) close(0xffffffffffffffff) 2.01904024s ago: executing program 3 (id=112): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.438376545s ago: executing program 3 (id=113): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000340)={0x1}) 1.202622188s ago: executing program 1 (id=114): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) r1 = creat(&(0x7f0000000080)='./bus\x00', 0xa) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) 1.149313653s ago: executing program 0 (id=116): r0 = socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000700)="1a", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fb00) 1.101897154s ago: executing program 3 (id=117): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="aba732e9970a72a4", 0x8}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) 978.833699ms ago: executing program 1 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 835.29304ms ago: executing program 2 (id=119): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 822.774846ms ago: executing program 0 (id=120): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0x2, 0x2, 0x437, 0x3, 0xfffa, 0x6, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 638.764161ms ago: executing program 1 (id=121): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x62) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 613.956512ms ago: executing program 0 (id=122): socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9b30e07600380000100ffef86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0xa3, &(0x7f0000000500)=""/163, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) 525.665411ms ago: executing program 2 (id=123): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 274.786534ms ago: executing program 1 (id=124): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="15060000000000000000030000002800018014000400ff0200000000000000000000000000010600050000000000060001000a000000080003000200000034000680080006000400000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="05000200a900000008000600040000000800060000000000080003"], 0x80}, 0x5}, 0x0) 257.036068ms ago: executing program 2 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d200"], 0x0, 0x0, 0x0, 0x0}, 0x0) 94.576854ms ago: executing program 3 (id=126): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001680), 0x20) 0s ago: executing program 0 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x5, 0x0, 0xfc}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. [ 73.570263][ T30] audit: type=1400 audit(1723367450.030:88): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 73.578242][ T5209] cgroup: Unknown subsys name 'net' [ 73.593285][ T30] audit: type=1400 audit(1723367450.030:89): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.621324][ T30] audit: type=1400 audit(1723367450.060:90): avc: denied { unmount } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.790532][ T5209] cgroup: Unknown subsys name 'rlimit' [ 73.908812][ T30] audit: type=1400 audit(1723367450.360:91): avc: denied { setattr } for pid=5209 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.945200][ T30] audit: type=1400 audit(1723367450.370:92): avc: denied { create } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.976028][ T30] audit: type=1400 audit(1723367450.370:93): avc: denied { write } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.997932][ T30] audit: type=1400 audit(1723367450.370:94): avc: denied { read } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.019780][ T30] audit: type=1400 audit(1723367450.380:95): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 74.044856][ T30] audit: type=1400 audit(1723367450.380:96): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 74.068558][ T30] audit: type=1400 audit(1723367450.420:97): avc: denied { read } for pid=4884 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 74.076078][ T5211] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 75.443779][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.141892][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 79.141911][ T30] audit: type=1400 audit(1723367455.600:103): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 79.261028][ T30] audit: type=1400 audit(1723367455.600:104): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 79.284821][ T30] audit: type=1400 audit(1723367455.600:105): avc: denied { create } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.303493][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.315982][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.329958][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.364450][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.365696][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.382110][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.389961][ T56] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.390491][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.404395][ T30] audit: type=1400 audit(1723367455.600:106): avc: denied { read write } for pid=5219 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.433239][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.442269][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.462924][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.470592][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.479442][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.507627][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.521598][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.538920][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.550237][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.557336][ T30] audit: type=1400 audit(1723367455.600:107): avc: denied { open } for pid=5219 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.582069][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.595136][ T30] audit: type=1400 audit(1723367455.670:108): avc: denied { ioctl } for pid=5219 comm="syz-executor" path="socket:[4158]" dev="sockfs" ino=4158 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.630903][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.642758][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.652065][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.652497][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.668049][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.668929][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.678430][ T30] audit: type=1400 audit(1723367455.920:109): avc: denied { read } for pid=5219 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.686231][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.704453][ T30] audit: type=1400 audit(1723367455.920:110): avc: denied { open } for pid=5219 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.713029][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.735390][ T30] audit: type=1400 audit(1723367455.920:111): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.744911][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.773751][ T5222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.781703][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.790104][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.263827][ T30] audit: type=1400 audit(1723367456.720:112): avc: denied { module_request } for pid=5228 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.399394][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 80.515415][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 80.566209][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 80.763473][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 80.788333][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.796520][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.805041][ T5228] bridge_slave_0: entered allmulticast mode [ 80.812313][ T5228] bridge_slave_0: entered promiscuous mode [ 80.855155][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.862749][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.871426][ T5228] bridge_slave_1: entered allmulticast mode [ 80.879376][ T5228] bridge_slave_1: entered promiscuous mode [ 81.000732][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.008036][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.016741][ T5219] bridge_slave_0: entered allmulticast mode [ 81.024081][ T5219] bridge_slave_0: entered promiscuous mode [ 81.044779][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.052576][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.060206][ T5223] bridge_slave_0: entered allmulticast mode [ 81.067240][ T5223] bridge_slave_0: entered promiscuous mode [ 81.076725][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.084018][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.092480][ T5223] bridge_slave_1: entered allmulticast mode [ 81.100313][ T5223] bridge_slave_1: entered promiscuous mode [ 81.126466][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.134559][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.142260][ T5219] bridge_slave_1: entered allmulticast mode [ 81.149654][ T5219] bridge_slave_1: entered promiscuous mode [ 81.160997][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.185861][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 81.257000][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.294139][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.308970][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.326276][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.333699][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.342017][ T5232] bridge_slave_0: entered allmulticast mode [ 81.349044][ T5232] bridge_slave_0: entered promiscuous mode [ 81.401518][ T5228] team0: Port device team_slave_0 added [ 81.426020][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.434091][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.442264][ T5232] bridge_slave_1: entered allmulticast mode [ 81.451257][ T5232] bridge_slave_1: entered promiscuous mode [ 81.462121][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.488062][ T5228] team0: Port device team_slave_1 added [ 81.529906][ T4608] Bluetooth: hci0: command tx timeout [ 81.543079][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.593594][ T5223] team0: Port device team_slave_0 added [ 81.610247][ T4608] Bluetooth: hci1: command tx timeout [ 81.646883][ T5219] team0: Port device team_slave_0 added [ 81.668242][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.675534][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.703655][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.715788][ T4608] Bluetooth: hci2: command tx timeout [ 81.727087][ T5223] team0: Port device team_slave_1 added [ 81.738378][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.751633][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.762968][ T5219] team0: Port device team_slave_1 added [ 81.798715][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.806074][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.834139][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.849327][ T4608] Bluetooth: hci4: command tx timeout [ 81.849652][ T5222] Bluetooth: hci3: command tx timeout [ 81.931157][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.938334][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.946149][ T5231] bridge_slave_0: entered allmulticast mode [ 81.955233][ T5231] bridge_slave_0: entered promiscuous mode [ 81.981721][ T5232] team0: Port device team_slave_0 added [ 81.988772][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.995958][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.022454][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.036707][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.045026][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.052372][ T5231] bridge_slave_1: entered allmulticast mode [ 82.059631][ T5231] bridge_slave_1: entered promiscuous mode [ 82.079951][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.087040][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.113991][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.128377][ T5232] team0: Port device team_slave_1 added [ 82.153687][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.160950][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.187308][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.235916][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.243556][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.269546][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.327577][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.352243][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.378078][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.387621][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.424256][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.480751][ T5219] hsr_slave_0: entered promiscuous mode [ 82.487766][ T5219] hsr_slave_1: entered promiscuous mode [ 82.504588][ T5228] hsr_slave_0: entered promiscuous mode [ 82.512840][ T5228] hsr_slave_1: entered promiscuous mode [ 82.522870][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.531360][ T5228] Cannot create hsr debugfs directory [ 82.609044][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.616364][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.649895][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.718325][ T5231] team0: Port device team_slave_0 added [ 82.734523][ T5231] team0: Port device team_slave_1 added [ 82.964370][ T5232] hsr_slave_0: entered promiscuous mode [ 82.973357][ T5232] hsr_slave_1: entered promiscuous mode [ 82.980171][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.987782][ T5232] Cannot create hsr debugfs directory [ 83.009761][ T5223] hsr_slave_0: entered promiscuous mode [ 83.016624][ T5223] hsr_slave_1: entered promiscuous mode [ 83.023434][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.031313][ T5223] Cannot create hsr debugfs directory [ 83.043964][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.051297][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.077962][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.091592][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.098580][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.126491][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.331689][ T5231] hsr_slave_0: entered promiscuous mode [ 83.339497][ T5231] hsr_slave_1: entered promiscuous mode [ 83.346022][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.354936][ T5231] Cannot create hsr debugfs directory [ 83.609431][ T5222] Bluetooth: hci0: command tx timeout [ 83.694223][ T5222] Bluetooth: hci1: command tx timeout [ 83.769999][ T5222] Bluetooth: hci2: command tx timeout [ 83.789997][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.836131][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.856490][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.901368][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.929227][ T5222] Bluetooth: hci3: command tx timeout [ 83.929302][ T4608] Bluetooth: hci4: command tx timeout [ 83.962144][ T5219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.982312][ T5219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.996249][ T5219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.021705][ T5219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.144742][ T5223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.173777][ T5223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.185949][ T5223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.212540][ T5223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.338808][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.367899][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.385586][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.398734][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.583371][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.608113][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.619033][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.633863][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.652298][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.673803][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.719769][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.768966][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.776548][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.794112][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.801359][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.857489][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.901213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.908512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.005362][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.012817][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.078434][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.165117][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.176050][ T30] audit: type=1400 audit(1723367461.630:113): avc: denied { sys_module } for pid=5228 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.302861][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.353956][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.382355][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.389695][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.407217][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.446742][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.454018][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.470601][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.478040][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.545144][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.553166][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.573600][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.627931][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.652061][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.659430][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.689593][ T4608] Bluetooth: hci0: command tx timeout [ 85.707503][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.714764][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.780639][ T4608] Bluetooth: hci1: command tx timeout [ 85.850550][ T4608] Bluetooth: hci2: command tx timeout [ 85.926895][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.011105][ T4608] Bluetooth: hci4: command tx timeout [ 86.012850][ T5232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.016556][ T4608] Bluetooth: hci3: command tx timeout [ 86.043254][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.104911][ T5228] veth0_vlan: entered promiscuous mode [ 86.290728][ T5228] veth1_vlan: entered promiscuous mode [ 86.322909][ T5219] veth0_vlan: entered promiscuous mode [ 86.395410][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.470502][ T5219] veth1_vlan: entered promiscuous mode [ 86.614741][ T5228] veth0_macvtap: entered promiscuous mode [ 86.645792][ T5219] veth0_macvtap: entered promiscuous mode [ 86.663779][ T5228] veth1_macvtap: entered promiscuous mode [ 86.688251][ T5223] veth0_vlan: entered promiscuous mode [ 86.726883][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.742042][ T5219] veth1_macvtap: entered promiscuous mode [ 86.754115][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.766357][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.793804][ T5223] veth1_vlan: entered promiscuous mode [ 86.837540][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.952883][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.966540][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.977884][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.987226][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006932][ T5223] veth0_macvtap: entered promiscuous mode [ 87.019958][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.032562][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.046854][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.076768][ T5232] veth0_vlan: entered promiscuous mode [ 87.113707][ T5223] veth1_macvtap: entered promiscuous mode [ 87.123657][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.135262][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.148376][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.162696][ T5219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.172368][ T5219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.184659][ T5219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.193841][ T5219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.258101][ T5232] veth1_vlan: entered promiscuous mode [ 87.358764][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.370458][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.384017][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.395172][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.407544][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.466976][ T53] cfg80211: failed to load regulatory.db [ 87.535750][ T5232] veth0_macvtap: entered promiscuous mode [ 87.570341][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.578486][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.588374][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.599052][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.609639][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.620529][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.637313][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.658772][ T5223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.668134][ T5223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.677683][ T5223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.686878][ T5223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.713599][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.722409][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.742999][ T5232] veth1_macvtap: entered promiscuous mode [ 87.769568][ T4608] Bluetooth: hci0: command tx timeout [ 87.844902][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.857514][ T4608] Bluetooth: hci1: command tx timeout [ 87.860750][ T5231] veth0_vlan: entered promiscuous mode [ 87.875862][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.888188][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.896722][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.913200][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.926332][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.930994][ T4608] Bluetooth: hci2: command tx timeout [ 87.942847][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.954386][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.966073][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.977172][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.992102][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.015552][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.027800][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.037955][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.048598][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.058615][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.069536][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.083722][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.090212][ T4608] Bluetooth: hci3: command tx timeout [ 88.092227][ T5222] Bluetooth: hci4: command tx timeout [ 88.116768][ T5231] veth1_vlan: entered promiscuous mode [ 88.128468][ T30] audit: type=1400 audit(1723367464.580:114): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.0IeHdE/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 88.161197][ T30] audit: type=1400 audit(1723367464.600:115): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.0IeHdE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.203288][ T30] audit: type=1400 audit(1723367464.600:116): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 88.227278][ T30] audit: type=1400 audit(1723367464.620:117): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.231840][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.260838][ T30] audit: type=1400 audit(1723367464.650:118): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.269678][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281020][ T30] audit: type=1400 audit(1723367464.660:119): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 88.298937][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.315149][ T30] audit: type=1400 audit(1723367464.660:120): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.331711][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.388307][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.413430][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.526949][ T30] audit: type=1400 audit(1723367464.980:121): avc: denied { read write } for pid=5219 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.606700][ T30] audit: type=1400 audit(1723367465.010:122): avc: denied { open } for pid=5219 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.647057][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.657718][ T5231] veth0_macvtap: entered promiscuous mode [ 88.666589][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.682964][ T5231] veth1_macvtap: entered promiscuous mode [ 88.816403][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.853184][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.887520][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.957647][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.985777][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.998262][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.021067][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.032056][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.042357][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.058293][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.078442][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.709667][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.807359][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.817528][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.845265][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.876351][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.889538][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.903074][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.919166][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.983745][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.139209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.253588][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 90.253610][ T30] audit: type=1400 audit(1723367466.660:139): avc: denied { watch } for pid=5310 comm="syz.2.3" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.255687][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.273240][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.346291][ T30] audit: type=1400 audit(1723367466.800:140): avc: denied { watch_reads } for pid=5310 comm="syz.2.3" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.370535][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.375007][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.403097][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.425403][ T30] audit: type=1400 audit(1723367466.800:141): avc: denied { create } for pid=5302 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.478611][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.576098][ T30] audit: type=1400 audit(1723367466.850:142): avc: denied { read } for pid=5310 comm="syz.2.3" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.665219][ T30] audit: type=1400 audit(1723367466.850:143): avc: denied { open } for pid=5310 comm="syz.2.3" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.697337][ T30] audit: type=1400 audit(1723367466.980:144): avc: denied { create } for pid=5316 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.742152][ T30] audit: type=1400 audit(1723367466.990:145): avc: denied { mounton } for pid=5232 comm="syz-executor" path="/root/syzkaller.cFmegp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.849527][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.989492][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.369969][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.052315][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.191345][ T30] audit: type=1400 audit(1723367469.260:146): avc: denied { prog_run } for pid=5331 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.220962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 93.267866][ T30] audit: type=1400 audit(1723367469.300:147): avc: denied { create } for pid=5330 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.287962][ T30] audit: type=1400 audit(1723367469.310:148): avc: denied { accept } for pid=5330 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.359839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.719663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.729222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.363310][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 95.363331][ T30] audit: type=1400 audit(1723367471.800:170): avc: denied { create } for pid=5358 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.390029][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.280254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.442702][ T5365] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 96.698630][ T5366] overlayfs: failed to resolve './file0': -2 [ 98.649531][ T30] audit: type=1400 audit(1723367473.970:171): avc: denied { ioctl } for pid=5352 comm="syz.1.13" path="mnt:[4026533113]" dev="nsfs" ino=4026533113 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.674052][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.830035][ T30] audit: type=1400 audit(1723367474.720:172): avc: denied { setcheckreqprot } for pid=5352 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.899322][ T5370] netlink: 'syz.2.14': attribute type 4 has an invalid length. [ 100.469484][ T30] audit: type=1400 audit(1723367476.270:173): avc: denied { unlink } for pid=5374 comm="syz.4.15" name="#1" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.731279][ T5384] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 100.833384][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 100.843254][ T5385] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 101.074998][ T30] audit: type=1400 audit(1723367476.280:174): avc: denied { mount } for pid=5374 comm="syz.4.15" name="/" dev="overlay" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 101.920542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.155489][ T30] audit: type=1400 audit(1723367478.600:175): avc: denied { read write } for pid=5396 comm="syz.4.20" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 102.183415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 102.292235][ T30] audit: type=1400 audit(1723367478.600:176): avc: denied { open } for pid=5396 comm="syz.4.20" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 103.153317][ T30] audit: type=1400 audit(1723367478.700:177): avc: denied { mounton } for pid=5396 comm="syz.4.20" path="/2/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.307212][ T30] audit: type=1400 audit(1723367479.520:178): avc: denied { ioctl } for pid=5396 comm="syz.4.20" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 103.369586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.466050][ T30] audit: type=1400 audit(1723367479.740:179): avc: denied { unmount } for pid=5231 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.514337][ T30] audit: type=1400 audit(1723367479.960:180): avc: denied { create } for pid=5406 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.543607][ T30] audit: type=1400 audit(1723367479.990:181): avc: denied { setopt } for pid=5406 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.581762][ T30] audit: type=1400 audit(1723367480.350:182): avc: denied { map_read map_write } for pid=5408 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.689577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.495409][ T5439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 106.504873][ T5439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.978930][ T5441] netlink: 'syz.2.30': attribute type 4 has an invalid length. [ 107.369563][ T5444] fuse: Bad value for 'fd' [ 107.492000][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 107.492019][ T30] audit: type=1400 audit(1723367483.940:185): avc: denied { create } for pid=5446 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.517252][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.698708][ T5445] Zero length message leads to an empty skb [ 107.790881][ T5449] mmap: syz.2.32 (5449) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.820148][ T5449] program syz.2.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.022643][ T30] audit: type=1400 audit(1723367484.270:186): avc: denied { read } for pid=5446 comm="syz.2.32" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.110137][ T30] audit: type=1400 audit(1723367484.270:187): avc: denied { open } for pid=5446 comm="syz.2.32" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.133951][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.423385][ T30] audit: type=1400 audit(1723367484.290:188): avc: denied { read } for pid=5446 comm="syz.2.32" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.668317][ T5455] netlink: 'syz.1.33': attribute type 4 has an invalid length. [ 109.381727][ T30] audit: type=1400 audit(1723367484.290:189): avc: denied { open } for pid=5446 comm="syz.2.32" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 109.405405][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.634426][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 110.135073][ T5465] program syz.1.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.814696][ T5472] FAULT_INJECTION: forcing a failure. [ 111.814696][ T5472] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.559978][ T5472] CPU: 1 UID: 0 PID: 5472 Comm: syz.0.38 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 112.570632][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.580887][ T5472] Call Trace: [ 112.584169][ T5472] [ 112.587090][ T5472] dump_stack_lvl+0x16c/0x1f0 [ 112.591786][ T5472] should_fail_ex+0x497/0x5b0 [ 112.596482][ T5472] _copy_from_iter+0x2a1/0x1150 [ 112.601350][ T5472] ? __pfx__copy_from_iter+0x10/0x10 [ 112.606631][ T5472] ? __phys_addr+0xbc/0x150 [ 112.611125][ T5472] ? __phys_addr+0xc6/0x150 [ 112.615615][ T5472] ? __check_object_size+0x18c/0x720 [ 112.620892][ T5472] ? const_folio_flags.constprop.0+0x56/0x150 [ 112.626947][ T5472] ? __phys_addr_symbol+0x30/0x80 [ 112.631978][ T5472] ? __check_object_size+0x497/0x720 [ 112.637295][ T5472] sk_msg_memcopy_from_iter+0x3f1/0x560 [ 112.642861][ T5472] tcp_bpf_sendmsg+0x4b8/0x1bd0 [ 112.647715][ T5472] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 112.652990][ T5472] ? __pfx___lock_acquire+0x10/0x10 [ 112.658177][ T5472] ? find_held_lock+0x2d/0x110 [ 112.662960][ T5472] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 112.669854][ T5472] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 112.675135][ T5472] inet6_sendmsg+0x119/0x140 [ 112.679718][ T5472] ____sys_sendmsg+0x692/0xc90 [ 112.684475][ T5472] ? copy_msghdr_from_user+0x10b/0x160 [ 112.689935][ T5472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.695225][ T5472] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 112.701915][ T5472] ___sys_sendmsg+0x135/0x1e0 [ 112.706594][ T5472] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.711782][ T5472] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.717670][ T5472] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.722862][ T5472] ? __fget_light+0x173/0x210 [ 112.727557][ T5472] __sys_sendmsg+0x117/0x1f0 [ 112.732137][ T5472] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.737236][ T5472] ? __pfx___schedule+0x10/0x10 [ 112.742079][ T5472] do_syscall_64+0xcd/0x250 [ 112.746600][ T5472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.752503][ T5472] RIP: 0033:0x7fdcc85779f9 [ 112.756909][ T5472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.776622][ T5472] RSP: 002b:00007fdcc92bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.785031][ T5472] RAX: ffffffffffffffda RBX: 00007fdcc8705f80 RCX: 00007fdcc85779f9 [ 112.792996][ T5472] RDX: 0000000000000000 RSI: 0000000020001100 RDI: 0000000000000003 [ 112.800956][ T5472] RBP: 00007fdcc92bd090 R08: 0000000000000000 R09: 0000000000000000 [ 112.808912][ T5472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.816869][ T5472] R13: 0000000000000000 R14: 00007fdcc8705f80 R15: 00007ffd1c740648 [ 112.824828][ T5472] [ 113.083669][ T30] audit: type=1400 audit(1723367489.540:190): avc: denied { setopt } for pid=5476 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.159268][ T30] audit: type=1400 audit(1723367489.570:191): avc: denied { name_bind } for pid=5476 comm="syz.1.39" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.222238][ T5481] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.259742][ T30] audit: type=1400 audit(1723367489.660:192): avc: denied { write } for pid=5479 comm="syz.4.41" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.372170][ T30] audit: type=1400 audit(1723367489.660:193): avc: denied { open } for pid=5479 comm="syz.4.41" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.428444][ T30] audit: type=1400 audit(1723367489.680:194): avc: denied { ioctl } for pid=5479 comm="syz.4.41" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.465884][ T30] audit: type=1400 audit(1723367489.880:195): avc: denied { read } for pid=5487 comm="syz.1.42" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.825996][ T5491] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 113.848973][ T30] audit: type=1400 audit(1723367490.300:196): avc: denied { ioctl } for pid=5493 comm="syz.2.43" path="socket:[7597]" dev="sockfs" ino=7597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.067847][ T30] audit: type=1400 audit(1723367490.520:197): avc: denied { sys_module } for pid=5487 comm="syz.1.42" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.209729][ T30] audit: type=1400 audit(1723367490.520:198): avc: denied { create } for pid=5500 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.292056][ T30] audit: type=1400 audit(1723367490.520:199): avc: denied { write } for pid=5500 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.440647][ T5515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.50'. [ 115.520872][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 115.660641][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 116.874788][ T5587] ALSA: seq fatal error: cannot create timer (-22) [ 118.529476][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 118.529493][ T30] audit: type=1400 audit(1723367494.990:234): avc: denied { setopt } for pid=5612 comm="syz.1.82" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.659218][ T30] audit: type=1400 audit(1723367495.010:235): avc: denied { audit_write } for pid=5611 comm="syz.0.81" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.757700][ T30] audit: type=1107 audit(1723367495.010:236): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='*' [ 119.161873][ T30] audit: type=1400 audit(1723367495.620:237): avc: denied { mounton } for pid=5630 comm="syz.1.87" path="/20/file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.888758][ T30] audit: type=1400 audit(1723367498.340:238): avc: denied { bind } for pid=5657 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.964670][ T30] audit: type=1400 audit(1723367498.420:239): avc: denied { setopt } for pid=5657 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.007847][ T30] audit: type=1400 audit(1723367498.420:240): avc: denied { accept } for pid=5657 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.424405][ T5688] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.471520][ T30] audit: type=1400 audit(1723367499.920:241): avc: denied { ioctl } for pid=5686 comm="syz.0.101" path="socket:[8715]" dev="sockfs" ino=8715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.293487][ T30] audit: type=1400 audit(1723367501.750:242): avc: denied { create } for pid=5712 comm="syz.1.109" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.438184][ T30] audit: type=1400 audit(1723367501.890:243): avc: denied { create } for pid=5716 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.679614][ T30] audit: type=1400 audit(1723367501.930:244): avc: denied { write } for pid=5716 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.892097][ T30] audit: type=1400 audit(1723367503.350:245): avc: denied { create } for pid=5746 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 126.930314][ T5747] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.982607][ T30] audit: type=1400 audit(1723367503.440:246): avc: denied { ioctl } for pid=5746 comm="syz.0.122" path="socket:[8155]" dev="sockfs" ino=8155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.029982][ T5747] macvlan2: entered allmulticast mode [ 127.066691][ T5747] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 127.079448][ T5747] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 127.106135][ T5747] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 127.238742][ T4608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.258214][ T4608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.281518][ T4608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.299997][ T4608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.319388][ T4608] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 127.328573][ T4608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.342705][ T30] audit: type=1400 audit(1723367503.800:247): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.393521][ T5758] ------------[ cut here ]------------ [ 127.399472][ T5758] kernel BUG at drivers/android/binder.c:1173! [ 127.405856][ T5758] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 127.412828][ T5758] CPU: 0 UID: 0 PID: 5758 Comm: syz.0.127 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 127.423445][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 127.433515][ T5758] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 127.439954][ T5758] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 d2 47 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba d2 47 f9 e9 ae fc ff ff e8 e0 9c ea f8 90 <0f> 0b e8 68 d3 47 f9 e9 15 fb ff ff 4c 89 e7 e8 3b d2 47 f9 e9 32 [ 127.459760][ T5758] RSP: 0018:ffffc900033e7920 EFLAGS: 00010287 [ 127.465931][ T5758] RAX: 0000000000001edd RBX: ffff88807c3f6410 RCX: ffffc90004281000 [ 127.473911][ T5758] RDX: 0000000000040000 RSI: ffffffff889fded0 RDI: 0000000000000004 [ 127.481963][ T5758] RBP: ffffc900033e79b0 R08: 0000000000000004 R09: 0000000000000000 [ 127.489942][ T5758] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802d237b00 [ 127.497910][ T5758] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 127.505880][ T5758] FS: 00007fdcc92bd6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 127.514816][ T5758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.521406][ T5758] CR2: 000000110c31ce8b CR3: 000000005a61c000 CR4: 00000000003506f0 [ 127.529384][ T5758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.537360][ T5758] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.545416][ T5758] Call Trace: [ 127.548711][ T5758] [ 127.551638][ T5758] ? show_regs+0x8c/0xa0 [ 127.555897][ T5758] ? die+0x36/0xa0 [ 127.559625][ T5758] ? do_trap+0x232/0x430 [ 127.563871][ T5758] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 127.569687][ T5758] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 127.575500][ T5758] ? do_error_trap+0xf4/0x230 [ 127.580184][ T5758] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 127.585997][ T5758] ? handle_invalid_op+0x34/0x40 [ 127.590940][ T5758] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 127.596750][ T5758] ? exc_invalid_op+0x2e/0x50 [ 127.601433][ T5758] ? asm_exc_invalid_op+0x1a/0x20 [ 127.606474][ T5758] ? binder_inc_ref_for_node+0x1050/0x11f0 [ 127.612372][ T5758] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 127.618189][ T5758] ? __pfx___might_resched+0x10/0x10 [ 127.623579][ T5758] binder_thread_write+0x248d/0x3ac0 [ 127.628881][ T5758] ? __pfx_binder_thread_write+0x10/0x10 [ 127.634522][ T5758] ? find_held_lock+0x2d/0x110 [ 127.639298][ T5758] ? __might_fault+0x13b/0x190 [ 127.644059][ T5758] ? binder_debug+0xdf/0x1b0 [ 127.648662][ T5758] ? __pfx_binder_debug+0x10/0x10 [ 127.653783][ T5758] ? __might_fault+0xe3/0x190 [ 127.658462][ T5758] binder_ioctl+0x2250/0x6b10 [ 127.663151][ T5758] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.669056][ T5758] ? do_vfs_ioctl+0x515/0x1ad0 [ 127.673830][ T5758] ? __pfx_binder_ioctl+0x10/0x10 [ 127.678868][ T5758] ? ioctl_has_perm.constprop.0.isra.0+0x2f0/0x470 [ 127.685462][ T5758] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 127.691963][ T5758] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 127.698903][ T5758] ? selinux_file_ioctl+0x180/0x270 [ 127.704103][ T5758] ? selinux_file_ioctl+0xb4/0x270 [ 127.709218][ T5758] ? __pfx_binder_ioctl+0x10/0x10 [ 127.714268][ T5758] __x64_sys_ioctl+0x193/0x220 [ 127.719058][ T5758] do_syscall_64+0xcd/0x250 [ 127.723672][ T5758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.729581][ T5758] RIP: 0033:0x7fdcc85779f9 [ 127.733997][ T5758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.753609][ T5758] RSP: 002b:00007fdcc92bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.762196][ T5758] RAX: ffffffffffffffda RBX: 00007fdcc8705f80 RCX: 00007fdcc85779f9 [ 127.770174][ T5758] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 127.778157][ T5758] RBP: 00007fdcc85e58ee R08: 0000000000000000 R09: 0000000000000000 [ 127.786130][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.794100][ T5758] R13: 0000000000000000 R14: 00007fdcc8705f80 R15: 00007ffd1c740648 [ 127.802080][ T5758] [ 127.805093][ T5758] Modules linked in: [ 127.813158][ T5758] ---[ end trace 0000000000000000 ]--- [ 127.822009][ T5758] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 127.828484][ T5758] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 d2 47 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba d2 47 f9 e9 ae fc ff ff e8 e0 9c ea f8 90 <0f> 0b e8 68 d3 47 f9 e9 15 fb ff ff 4c 89 e7 e8 3b d2 47 f9 e9 32 [ 127.848967][ T5758] RSP: 0018:ffffc900033e7920 EFLAGS: 00010287 [ 127.855084][ T5758] RAX: 0000000000001edd RBX: ffff88807c3f6410 RCX: ffffc90004281000 [ 127.863066][ T5758] RDX: 0000000000040000 RSI: ffffffff889fded0 RDI: 0000000000000004 [ 127.871160][ T5758] RBP: ffffc900033e79b0 R08: 0000000000000004 R09: 0000000000000000 [ 127.879160][ T5758] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802d237b00 [ 127.887128][ T5758] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 127.895102][ T5758] FS: 00007fdcc92bd6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 127.904063][ T5758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.910798][ T5758] CR2: 000000110c31ce8b CR3: 000000005a61c000 CR4: 00000000003506f0 [ 127.918756][ T5758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.927400][ T5758] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.935832][ T5758] Kernel panic - not syncing: Fatal exception [ 127.942138][ T5758] Kernel Offset: disabled [ 127.946452][ T5758] Rebooting in 86400 seconds..