last executing test programs: 1.29029939s ago: executing program 3 (id=832): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000380)=0x800004, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x400c005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1) 1.220326839s ago: executing program 3 (id=835): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.22027522s ago: executing program 2 (id=836): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05}]}) 1.149484711s ago: executing program 3 (id=839): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="071f1a12cbd30d71803f3f704018bf8856821be87e46c557968e528b7e045336a1ef4fb9760fba4de3a062cfaee569575041c4f649af83699401b2755660a9c7864e7a8203"}}}}}, 0x0) 1.090312937s ago: executing program 2 (id=841): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x44004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0xffa9}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.090080953s ago: executing program 3 (id=843): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1, 0x8, 0x81) 1.040528813s ago: executing program 1 (id=845): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={r2, 0x2009, 0x20, 0xaf9}, &(0x7f00000000c0)=0x18) 1.040435928s ago: executing program 3 (id=846): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000140)="e3f9debfd12a1b40b40b159c", 0xc) 984.201166ms ago: executing program 1 (id=848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 890.952451ms ago: executing program 2 (id=851): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='b *:'], 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 890.831698ms ago: executing program 2 (id=852): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0xa8a}, {0x2, 0xb1de}], 0x2, &(0x7f0000000080)={0x0, 0x3938700}) 700.935747ms ago: executing program 0 (id=858): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) writev(r0, &(0x7f0000002080)=[{&(0x7f0000001080)="02", 0x1}], 0x1) 651.147145ms ago: executing program 0 (id=859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Yt', 0x2}], 0x1}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) 550.806904ms ago: executing program 0 (id=860): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x28, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}}, 0x20000001) 549.69255ms ago: executing program 0 (id=861): r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x4b1, 0x2, 0x80005, 0xfffffffe, 0x6, "b3da8205ed8c029f78a9663500", 0x1, 0x40200}) 470.97417ms ago: executing program 0 (id=862): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, 0x0, 0x0) 470.83529ms ago: executing program 0 (id=863): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r0, 0x0, 0x1000, 0x20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 130.69496ms ago: executing program 3 (id=864): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 130.290326ms ago: executing program 1 (id=865): openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d05}]}) 71.256437ms ago: executing program 1 (id=866): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) 71.07975ms ago: executing program 1 (id=867): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fedbdf2500000000", @ANYRES32=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20040840) 280.766µs ago: executing program 1 (id=868): mkdir(&(0x7f0000000180)='./file0\x00', 0x1dc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000}]) 136.614µs ago: executing program 2 (id=869): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) 0s ago: executing program 2 (id=870): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 0s ago: executing program 2 (id=871): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x7, 0x18}) kernel console output (not intermixed with test programs): [ 44.219287][ T40] audit: type=1400 audit(1766029654.886:61): avc: denied { siginh } for pid=5841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:56963' (ED25519) to the list of known hosts. [ 46.444245][ T40] audit: type=1400 audit(1766029657.136:62): avc: denied { name_bind } for pid=5899 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.471551][ T40] audit: type=1400 audit(1766029657.166:63): avc: denied { execute } for pid=5900 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.478265][ T40] audit: type=1400 audit(1766029657.166:64): avc: denied { execute_no_trans } for pid=5900 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.296655][ T40] audit: type=1400 audit(1766029658.986:65): avc: denied { mounton } for pid=5900 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.307036][ T40] audit: type=1400 audit(1766029658.996:66): avc: denied { mount } for pid=5900 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.309922][ T5900] cgroup: Unknown subsys name 'net' [ 48.482859][ T5900] cgroup: Unknown subsys name 'cpuset' [ 48.488127][ T5900] cgroup: Unknown subsys name 'rlimit' [ 48.700377][ T5916] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.589128][ T5900] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.072493][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 53.072508][ T40] audit: type=1400 audit(1766029663.766:82): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.269170][ T40] audit: type=1400 audit(1766029663.966:83): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.275423][ T40] audit: type=1400 audit(1766029663.966:84): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.285413][ T40] audit: type=1400 audit(1766029663.966:85): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.292903][ T40] audit: type=1400 audit(1766029663.976:86): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[3887]" dev="sockfs" ino=3887 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.300693][ T40] audit: type=1400 audit(1766029663.976:87): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[5771]" dev="sockfs" ino=5771 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.301916][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.310291][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.313314][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.313784][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.317787][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.318447][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.318473][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.321077][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.321113][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.322634][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.325460][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.326718][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.329547][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.329634][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.330564][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.331004][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.332168][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.337960][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.348759][ T40] audit: type=1400 audit(1766029664.036:88): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.358776][ T40] audit: type=1400 audit(1766029664.036:89): avc: denied { open } for pid=5928 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.366101][ T40] audit: type=1400 audit(1766029664.036:90): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.366400][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.376775][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.568003][ T40] audit: type=1400 audit(1766029664.256:91): avc: denied { module_request } for pid=5929 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.599089][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 53.685070][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 53.718345][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 53.740469][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 53.824203][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.827276][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.830855][ T5929] bridge_slave_0: entered allmulticast mode [ 53.834696][ T5929] bridge_slave_0: entered promiscuous mode [ 53.869126][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.871432][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.873754][ T5929] bridge_slave_1: entered allmulticast mode [ 53.877166][ T5929] bridge_slave_1: entered promiscuous mode [ 53.918065][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.920720][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.923098][ T5933] bridge_slave_0: entered allmulticast mode [ 53.925881][ T5933] bridge_slave_0: entered promiscuous mode [ 53.951746][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.965881][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.968143][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.970625][ T5933] bridge_slave_1: entered allmulticast mode [ 53.973291][ T5933] bridge_slave_1: entered promiscuous mode [ 53.975642][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.977843][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.981069][ T5939] bridge_slave_0: entered allmulticast mode [ 53.983642][ T5939] bridge_slave_0: entered promiscuous mode [ 53.987735][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.996216][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.998438][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.001349][ T5928] bridge_slave_0: entered allmulticast mode [ 54.003902][ T5928] bridge_slave_0: entered promiscuous mode [ 54.012417][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.014653][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.016890][ T5939] bridge_slave_1: entered allmulticast mode [ 54.019650][ T5939] bridge_slave_1: entered promiscuous mode [ 54.042378][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.044802][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.047768][ T5928] bridge_slave_1: entered allmulticast mode [ 54.051950][ T5928] bridge_slave_1: entered promiscuous mode [ 54.065704][ T5929] team0: Port device team_slave_0 added [ 54.070071][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.082302][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.094482][ T5929] team0: Port device team_slave_1 added [ 54.097461][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.102637][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.108604][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.128149][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.158475][ T5933] team0: Port device team_slave_0 added [ 54.161848][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.164890][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.175908][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.187032][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.189675][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.197734][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.202578][ T5939] team0: Port device team_slave_0 added [ 54.205612][ T5933] team0: Port device team_slave_1 added [ 54.209271][ T5928] team0: Port device team_slave_0 added [ 54.216049][ T5928] team0: Port device team_slave_1 added [ 54.218816][ T5939] team0: Port device team_slave_1 added [ 54.258470][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.261069][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.269712][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.273715][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.275922][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.283941][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.294036][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.296203][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.304166][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.307966][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.310254][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.318162][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.322241][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.324506][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.332867][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.348930][ T5929] hsr_slave_0: entered promiscuous mode [ 54.352201][ T5929] hsr_slave_1: entered promiscuous mode [ 54.355026][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.357328][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.365857][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.427752][ T5928] hsr_slave_0: entered promiscuous mode [ 54.431398][ T5928] hsr_slave_1: entered promiscuous mode [ 54.434298][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 54.436753][ T5928] Cannot create hsr debugfs directory [ 54.448381][ T5939] hsr_slave_0: entered promiscuous mode [ 54.452407][ T5939] hsr_slave_1: entered promiscuous mode [ 54.455296][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 54.457761][ T5939] Cannot create hsr debugfs directory [ 54.515974][ T5933] hsr_slave_0: entered promiscuous mode [ 54.518262][ T5933] hsr_slave_1: entered promiscuous mode [ 54.520484][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 54.522330][ T5933] Cannot create hsr debugfs directory [ 54.804604][ T5929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.810793][ T5929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.815319][ T5929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.830484][ T5929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.867940][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.873815][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.878464][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.882905][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.935941][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.941507][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.945840][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.952533][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.015700][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.022595][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.033256][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.040097][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.043530][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.078046][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.101626][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.105169][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.108737][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.111652][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.124567][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.126900][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.146359][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.158548][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.161154][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.165805][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.173430][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.175725][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.184534][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.186800][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.196045][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.198276][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.254363][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.282655][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.292984][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.295159][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.305010][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.307212][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.367218][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.379245][ T5291] Bluetooth: hci1: command tx timeout [ 55.381251][ T5934] Bluetooth: hci0: command tx timeout [ 55.383586][ T5935] Bluetooth: hci2: command tx timeout [ 55.399556][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.421894][ T5929] veth0_vlan: entered promiscuous mode [ 55.429975][ T5929] veth1_vlan: entered promiscuous mode [ 55.448107][ T5928] veth0_vlan: entered promiscuous mode [ 55.456258][ T5928] veth1_vlan: entered promiscuous mode [ 55.458745][ T5935] Bluetooth: hci3: command tx timeout [ 55.469948][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.472358][ T5929] veth0_macvtap: entered promiscuous mode [ 55.479976][ T5929] veth1_macvtap: entered promiscuous mode [ 55.495606][ T5928] veth0_macvtap: entered promiscuous mode [ 55.501050][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.515027][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.522164][ T5928] veth1_macvtap: entered promiscuous mode [ 55.530336][ T1190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.533786][ T1190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.538430][ T1190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.547230][ T1190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.554346][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.567744][ T5939] veth0_vlan: entered promiscuous mode [ 55.575873][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.587001][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.598571][ T1190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.604255][ T5939] veth1_vlan: entered promiscuous mode [ 55.610217][ T1190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.613923][ T1190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.625145][ T1190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.664767][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.669337][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.683657][ T5933] veth0_vlan: entered promiscuous mode [ 55.705785][ T5939] veth0_macvtap: entered promiscuous mode [ 55.717077][ T5933] veth1_vlan: entered promiscuous mode [ 55.726263][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.726489][ T5939] veth1_macvtap: entered promiscuous mode [ 55.728901][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.747815][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.751417][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.769066][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.773912][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.776413][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.782526][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.783366][ T5929] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.790345][ T5933] veth0_macvtap: entered promiscuous mode [ 55.801892][ T5933] veth1_macvtap: entered promiscuous mode [ 55.813250][ T1190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.816437][ T1190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.834148][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.839015][ T1190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.844215][ T1190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.856709][ T6023] ======================================================= [ 55.856709][ T6023] WARNING: The mand mount option has been deprecated and [ 55.856709][ T6023] and is ignored by this kernel. Remove the mand [ 55.856709][ T6023] option from the mount to silence this warning. [ 55.856709][ T6023] ======================================================= [ 55.857562][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.893826][ T1154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.903172][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.908086][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.911358][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.017777][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.026874][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.039351][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.041851][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.064833][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.067341][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.096830][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.101332][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.222354][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.345764][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.350368][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.963630][ T6088] netlink: 'syz.1.27': attribute type 49 has an invalid length. [ 57.458874][ T5291] Bluetooth: hci1: command tx timeout [ 57.460117][ T5935] Bluetooth: hci2: command tx timeout [ 57.461280][ T5934] Bluetooth: hci0: command tx timeout [ 57.475585][ T6106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.548765][ T5934] Bluetooth: hci3: command tx timeout [ 58.044359][ T6150] mmap: syz.1.53 (6150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.058027][ T6131] kvm_intel: kvm [6130]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x44f1 [ 58.070405][ T6131] kvm: kvm [6130]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x6733 [ 58.094966][ T6152] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.120633][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 58.120643][ T40] audit: type=1400 audit(1766029668.816:165): avc: denied { sqpoll } for pid=6155 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.255916][ T40] audit: type=1400 audit(1766029668.946:166): avc: denied { create } for pid=6159 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.280704][ T40] audit: type=1400 audit(1766029668.976:167): avc: denied { bind } for pid=6159 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.288553][ T40] audit: type=1400 audit(1766029668.976:168): avc: denied { listen } for pid=6159 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.294784][ T40] audit: type=1400 audit(1766029668.976:169): avc: denied { connect } for pid=6159 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.301449][ T40] audit: type=1400 audit(1766029668.976:170): avc: denied { read } for pid=6159 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.309395][ T40] audit: type=1400 audit(1766029668.986:171): avc: denied { read write } for pid=6168 comm="syz.2.59" name="udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.318773][ T40] audit: type=1400 audit(1766029668.986:172): avc: denied { open } for pid=6168 comm="syz.2.59" path="/dev/udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.328148][ T40] audit: type=1400 audit(1766029668.986:173): avc: denied { ioctl } for pid=6168 comm="syz.2.59" path="/dev/udmabuf" dev="devtmpfs" ino=713 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.519845][ T40] audit: type=1400 audit(1766029669.216:174): avc: denied { connect } for pid=6176 comm="syz.2.63" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.141228][ T6194] binfmt_misc: register: failed to install interpreter file ./file0 [ 59.421161][ T6217] gretap0: entered promiscuous mode [ 59.421786][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 59.426227][ T6217] gretap0: left promiscuous mode [ 59.539353][ T5934] Bluetooth: hci0: command tx timeout [ 59.539373][ T5934] Bluetooth: hci1: command tx timeout [ 59.548934][ T5935] Bluetooth: hci2: command tx timeout [ 59.620566][ T5935] Bluetooth: hci3: command tx timeout [ 59.704930][ T6236] netlink: 'syz.1.87': attribute type 27 has an invalid length. [ 59.744795][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.747990][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.795993][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.802353][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.861575][ T1190] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.865589][ T1190] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.870068][ T1190] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.876003][ T1190] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.283126][ T6317] capability: warning: `syz.3.124' uses deprecated v2 capabilities in a way that may be insecure [ 61.338873][ T6323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.415611][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 61.619991][ T5935] Bluetooth: hci1: command tx timeout [ 61.620006][ T5934] Bluetooth: hci0: command tx timeout [ 61.628860][ T5934] Bluetooth: hci2: command tx timeout [ 61.650049][ T6347] tc_dump_action: action bad kind [ 61.699708][ T5934] Bluetooth: hci3: command tx timeout [ 62.770460][ T6414] xt_hashlimit: size too large, truncated to 1048576 [ 62.870948][ T6422] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 63.106646][ T6445] overlayfs: overlapping lowerdir path [ 63.248464][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 63.248474][ T40] audit: type=1400 audit(1766029673.936:205): avc: denied { read write } for pid=6453 comm="syz.3.183" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 63.258051][ T40] audit: type=1400 audit(1766029673.936:206): avc: denied { open } for pid=6453 comm="syz.3.183" path="/37/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 63.277498][ T6459] kvm: pic: non byte write [ 63.391835][ T6474] overlayfs: overlapping lowerdir path [ 63.499847][ T6484] ªªªªªª: renamed from vlan0 (while UP) [ 63.663747][ T40] audit: type=1400 audit(1766029674.356:207): avc: denied { create } for pid=6500 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.672823][ T40] audit: type=1400 audit(1766029674.366:208): avc: denied { bind } for pid=6500 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.683280][ T40] audit: type=1400 audit(1766029674.376:209): avc: denied { accept } for pid=6500 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.843422][ T6509] overlayfs: overlapping lowerdir path [ 64.320468][ T40] audit: type=1400 audit(1766029675.016:210): avc: denied { unlink } for pid=6543 comm="syz.2.217" name="#1" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.350267][ T40] audit: type=1400 audit(1766029675.046:211): avc: denied { read write } for pid=6547 comm="syz.0.220" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.359166][ T40] audit: type=1400 audit(1766029675.046:212): avc: denied { open } for pid=6547 comm="syz.0.220" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.366617][ T40] audit: type=1400 audit(1766029675.046:213): avc: denied { ioctl } for pid=6547 comm="syz.0.220" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.442869][ T6558] ptrace attach of "/syz-executor exec"[6560] was attempted by "/syz-executor exec"[6558] [ 64.447660][ T40] audit: type=1400 audit(1766029675.136:214): avc: denied { name_bind } for pid=6557 comm="syz.1.224" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.492070][ T6564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.610986][ T6573] kvm: pic: non byte write [ 64.620235][ T6573] kvm: pic: single mode not supported [ 64.620294][ T6573] kvm: pic: level sensitive irq not supported [ 64.632798][ T6573] kvm: pic: single mode not supported [ 64.642361][ T6573] kvm: pic: non byte write [ 64.646155][ T6573] kvm: pic: single mode not supported [ 64.646163][ T6573] kvm: pic: level sensitive irq not supported [ 64.653210][ T6573] kvm: pic: single mode not supported [ 64.658530][ T6573] kvm: pic: single mode not supported [ 64.662584][ T6573] kvm: pic: single mode not supported [ 64.672239][ T6573] kvm: pic: single mode not supported [ 64.693201][ T6573] kvm: pic: single mode not supported [ 64.695641][ T6573] kvm: pic: single mode not supported [ 64.697424][ T6573] kvm: pic: level sensitive irq not supported [ 64.699733][ T6573] kvm: pic: single mode not supported [ 64.702352][ T6573] kvm: pic: level sensitive irq not supported [ 64.705566][ T6573] kvm: pic: level sensitive irq not supported [ 64.708404][ T6573] kvm: pic: level sensitive irq not supported [ 64.711862][ T6573] kvm: pic: level sensitive irq not supported [ 64.714868][ T6573] kvm: pic: level sensitive irq not supported [ 64.718296][ T6573] kvm: pic: level sensitive irq not supported [ 64.721235][ T6573] kvm: pic: level sensitive irq not supported [ 64.723989][ T6579] Cannot find del_set index 0 as target [ 66.643667][ T6716] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.685754][ T6722] overlayfs: missing 'lowerdir' [ 67.111308][ T6779] overlay: Unknown parameter '/' [ 67.142865][ T6781] Illegal XDP return value 68 on prog (id 10) dev N/A, expect packet loss! [ 67.266780][ T6807] overlay: Unknown parameter '/' [ 68.211994][ T6876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6876 comm=syz.0.349 [ 68.388557][ T6888] evm: overlay not supported [ 68.423421][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 68.423435][ T40] audit: type=1400 audit(1766029679.116:260): avc: denied { remount } for pid=6889 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.436770][ T40] audit: type=1400 audit(1766029679.126:261): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.456518][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 68.465238][ T6897] bridge1: entered promiscuous mode [ 68.486442][ T40] audit: type=1400 audit(1766029679.176:262): avc: denied { execute } for pid=6898 comm="syz.1.359" dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.486716][ T6899] process 'syz.1.359' launched '/dev/fd/3' with NULL argv: empty string added [ 68.503136][ T40] audit: type=1400 audit(1766029679.196:263): avc: denied { execute_no_trans } for pid=6898 comm="syz.1.359" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.630735][ T40] audit: type=1400 audit(1766029679.326:264): avc: denied { setopt } for pid=6919 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.658210][ T40] audit: type=1400 audit(1766029679.346:265): avc: denied { bind } for pid=6922 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.669346][ T40] audit: type=1400 audit(1766029679.366:266): avc: denied { setopt } for pid=6922 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.678022][ T40] audit: type=1400 audit(1766029679.366:267): avc: denied { write } for pid=6922 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.717269][ T40] audit: type=1400 audit(1766029679.406:268): avc: denied { write } for pid=6930 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.940560][ T40] audit: type=1400 audit(1766029679.636:269): avc: denied { setopt } for pid=6950 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.182801][ T34] kernel read not supported for file bpf-prog (pid: 34 comm: kworker/3:0) [ 69.212003][ T6993] fuse: Bad value for 'fd' [ 70.501373][ T7067] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 70.779792][ T7110] fuse: Bad value for 'fd' [ 70.901681][ T7121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.135784][ T7133] Process accounting resumed [ 71.212466][ T7144] fuse: Bad value for 'fd' [ 71.283428][ T7152] fuse: Bad value for 'fd' [ 71.376465][ T7159] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 71.402494][ T7159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.425544][ T7159] bond1: entered allmulticast mode [ 71.553576][ T7177] bond2: down delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 71.988443][ T7246] fuse: Bad value for 'fd' [ 72.130689][ T7238] kvm: kvm [7237]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 72.328442][ T7274] kvm: kvm [7272]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 72.385297][ T7290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.387986][ T7290] overlayfs: failed to set xattr on upper [ 72.390780][ T7290] overlayfs: ...falling back to redirect_dir=nofollow. [ 72.393269][ T7290] overlayfs: ...falling back to index=off. [ 72.396122][ T7290] overlayfs: ...falling back to uuid=null. [ 72.569063][ T7301] syz.2.531 uses obsolete (PF_INET,SOCK_PACKET) [ 73.519850][ T7381] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.522458][ T7381] overlayfs: failed to set xattr on upper [ 73.524287][ T7381] overlayfs: ...falling back to redirect_dir=nofollow. [ 73.526392][ T7381] overlayfs: ...falling back to index=off. [ 73.528447][ T7381] overlayfs: ...falling back to uuid=null. [ 73.649937][ T7393] kvm: pic: non byte write [ 73.747823][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 73.747834][ T40] audit: type=1400 audit(1766029684.436:329): avc: denied { watch } for pid=7406 comm="syz.3.574" path="/121/net_prio.prioidx" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.759544][ T40] audit: type=1400 audit(1766029684.436:330): avc: denied { watch_sb watch_reads } for pid=7406 comm="syz.3.574" path="/121/net_prio.prioidx" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.787884][ T40] audit: type=1400 audit(1766029684.476:331): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.814750][ T7414] x_tables: duplicate underflow at hook 3 [ 73.858579][ T7420] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.861596][ T7420] overlayfs: failed to set xattr on upper [ 73.864706][ T7420] overlayfs: ...falling back to redirect_dir=nofollow. [ 73.864914][ T40] audit: type=1400 audit(1766029684.556:332): avc: denied { read } for pid=7411 comm="syz.3.576" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.867532][ T7420] overlayfs: ...falling back to index=off. [ 73.883153][ T7420] overlayfs: ...falling back to uuid=null. [ 73.907825][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 74.101182][ T40] audit: type=1400 audit(1766029684.796:333): avc: denied { bind } for pid=7449 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.115012][ T40] audit: type=1400 audit(1766029684.796:334): avc: denied { node_bind } for pid=7449 comm="syz.2.590" saddr=::ffff:224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 74.184247][ T7459] ipvlan1: entered promiscuous mode [ 74.186272][ T7458] ipvlan1: left promiscuous mode [ 74.952948][ T7505] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.956151][ T7505] overlayfs: failed to set xattr on upper [ 74.958027][ T7505] overlayfs: ...falling back to redirect_dir=nofollow. [ 74.960298][ T7505] overlayfs: ...falling back to index=off. [ 74.962208][ T7505] overlayfs: ...falling back to uuid=null. [ 75.323889][ T7523] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.326002][ T7523] overlayfs: failed to set xattr on upper [ 75.327919][ T7523] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.330268][ T7523] overlayfs: ...falling back to index=off. [ 75.332229][ T7523] overlayfs: ...falling back to uuid=null. [ 75.517201][ T7543] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.520243][ T7543] overlayfs: failed to set xattr on upper [ 75.522713][ T7543] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.525755][ T7543] overlayfs: ...falling back to index=off. [ 75.529273][ T7543] overlayfs: ...falling back to uuid=null. [ 75.974488][ T7577] overlayfs: failed to clone upperpath [ 76.036139][ T7581] kvm: MONITOR instruction emulated as NOP! [ 76.057865][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 76.064099][ T7586] bond0: Unable to set down delay as MII monitoring is disabled [ 76.182199][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.185213][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.299445][ T7607] overlayfs: failed to clone upperpath [ 76.470626][ T40] audit: type=1400 audit(1766029687.166:335): avc: denied { map } for pid=7619 comm="syz.2.665" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.479988][ T40] audit: type=1400 audit(1766029687.166:336): avc: denied { write } for pid=7619 comm="syz.2.665" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.555952][ T7630] overlayfs: failed to clone upperpath [ 76.686303][ T40] audit: type=1400 audit(1766029687.376:337): avc: denied { associate } for pid=7639 comm="syz.2.675" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.750634][ T7642] kvm: pic: non byte write [ 76.753011][ T7642] kvm: pic: non byte write [ 76.754970][ T7642] pic_ioport_write: 1157 callbacks suppressed [ 76.754977][ T7642] kvm: pic: single mode not supported [ 76.869202][ T40] audit: type=1400 audit(1766029687.566:338): avc: denied { ioctl } for pid=7646 comm="syz.0.678" path="socket:[21683]" dev="sockfs" ino=21683 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.092317][ T7661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.115021][ T7664] overlayfs: failed to clone upperpath [ 77.205480][ T7666] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 77.470964][ T7676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.688'. [ 77.478428][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 77.610432][ T7689] overlayfs: failed to clone upperpath [ 78.303705][ T7741] overlayfs: failed to clone upperpath [ 78.572579][ T7753] kvm: emulating exchange as write [ 78.789575][ T7768] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.792123][ T7768] overlayfs: failed to set xattr on upper [ 78.794366][ T7768] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.796548][ T7768] overlayfs: ...falling back to index=off. [ 78.799880][ T7768] overlayfs: ...falling back to uuid=null. [ 79.009323][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 79.009338][ T40] audit: type=1400 audit(1766029689.706:357): avc: denied { create } for pid=7788 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.023686][ T40] audit: type=1400 audit(1766029689.706:358): avc: denied { setopt } for pid=7788 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.141960][ T40] audit: type=1400 audit(1766029689.836:359): avc: denied { write } for pid=7800 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.228002][ T40] audit: type=1400 audit(1766029689.916:360): avc: denied { listen } for pid=7816 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.235578][ T40] audit: type=1400 audit(1766029689.916:361): avc: denied { bind } for pid=7816 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.361661][ T40] audit: type=1400 audit(1766029690.056:362): avc: denied { accept } for pid=7841 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.367680][ T40] audit: type=1400 audit(1766029690.056:363): avc: denied { shutdown } for pid=7841 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.468675][ T40] audit: type=1400 audit(1766029690.156:364): avc: denied { getopt } for pid=7857 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.662497][ T40] audit: type=1400 audit(1766029690.356:365): avc: denied { connect } for pid=7885 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.668939][ T40] audit: type=1400 audit(1766029690.356:366): avc: denied { write } for pid=7885 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.009722][ T7923] capability: warning: `syz.1.802' uses 32-bit capabilities (legacy support in use) [ 80.624637][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.627505][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.675912][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.683176][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.728821][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 80.758826][ T7964] bridge1: left promiscuous mode [ 80.772862][ T7979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.775389][ T1201] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.779419][ T1201] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.811951][ T1201] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.821694][ T7979] macvlan2: entered promiscuous mode [ 80.824025][ T7979] bond3: entered promiscuous mode [ 80.826611][ T7979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.831407][ T7979] bond3: left promiscuous mode [ 80.845114][ T1201] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.880988][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.831'. [ 81.001647][ T8006] overlayfs: failed to resolve './file1': -2 [ 81.292716][ T8032] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 81.353953][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 82.206555][ T8082] ------------[ cut here ]------------ [ 82.209221][ T8082] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#2: syz.2.871/8082 [ 82.212939][ T8082] Modules linked in: [ 82.214928][ T8082] CPU: 2 UID: 0 PID: 8082 Comm: syz.2.871 Not tainted syzkaller #0 PREEMPT(full) [ 82.219040][ T8082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.223605][ T8082] RIP: 0010:path_noexec+0x1ca/0x230 [ 82.225844][ T8082] Code: ff 83 e3 02 48 89 de e8 94 19 81 ff 48 85 db 41 0f 95 c4 e8 b8 1e 81 ff 44 89 e0 5b 5d 41 5c e9 bc 5b 3d 09 e8 a7 1e 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 f8 ea ff e9 a8 fe ff ff e8 7f f8 ea [ 82.233938][ T8082] RSP: 0018:ffffc9000341fc60 EFLAGS: 00010283 [ 82.236533][ T8082] RAX: 00000000000000cd RBX: ffff888101a901e0 RCX: ffffc9000cc04000 [ 82.239923][ T8082] RDX: 0000000000080000 RSI: ffffffff823dc7e9 RDI: 0000000000000007 [ 82.243296][ T8082] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 82.246612][ T8082] R10: 0000000000000000 R11: ffff888029a72ff0 R12: 0000200000000000 [ 82.250049][ T8082] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 82.253368][ T8082] FS: 00007fe465e226c0(0000) GS:ffff8880d6af6000(0000) knlGS:0000000000000000 [ 82.257107][ T8082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.260044][ T8082] CR2: 00007fe465e21f98 CR3: 000000002ecc9000 CR4: 0000000000352ef0 [ 82.263399][ T8082] Call Trace: [ 82.264880][ T8082] [ 82.266173][ T8082] do_mmap+0xd23/0x1210 [ 82.267984][ T8082] ? __pfx_do_mmap+0x10/0x10 [ 82.270072][ T8082] ? __pfx_down_write_killable+0x10/0x10 [ 82.272461][ T8082] ? __might_fault+0xe3/0x190 [ 82.274469][ T8082] vm_mmap_pgoff+0x29e/0x470 [ 82.276444][ T8082] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 82.278728][ T8082] ? __fget_files+0x20e/0x3c0 [ 82.280758][ T8082] ksys_mmap_pgoff+0x32c/0x5c0 [ 82.282789][ T8082] __x64_sys_mmap+0x125/0x190 [ 82.284824][ T8082] do_syscall_64+0xcd/0xf80 [ 82.286776][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.289400][ T8082] RIP: 0033:0x7fe464f8f7c9 [ 82.291311][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.299419][ T8082] RSP: 002b:00007fe465e22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.302877][ T8082] RAX: ffffffffffffffda RBX: 00007fe4651e5fa0 RCX: 00007fe464f8f7c9 [ 82.306239][ T8082] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 82.309651][ T8082] RBP: 00007fe465013f91 R08: 0000000000000005 R09: 0000000000000000 [ 82.312870][ T8082] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 82.316157][ T8082] R13: 00007fe4651e6038 R14: 00007fe4651e5fa0 R15: 00007fff7ad0cf48 [ 82.319595][ T8082] [ 82.320928][ T8082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.323872][ T8082] CPU: 2 UID: 0 PID: 8082 Comm: syz.2.871 Not tainted syzkaller #0 PREEMPT(full) [ 82.327660][ T8082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.332125][ T8082] Call Trace: [ 82.333562][ T8082] [ 82.334838][ T8082] dump_stack_lvl+0x3d/0x1f0 [ 82.336827][ T8082] vpanic+0x640/0x6f0 [ 82.338484][ T8082] ? path_noexec+0x1ca/0x230 [ 82.340444][ T8082] panic+0xca/0xd0 [ 82.341994][ T8082] ? __pfx_panic+0x10/0x10 [ 82.343879][ T8082] check_panic_on_warn+0xab/0xb0 [ 82.345962][ T8082] __warn+0x108/0x3c0 [ 82.347684][ T8082] __report_bug+0x2a0/0x520 [ 82.349522][ T8082] ? path_noexec+0x1ca/0x230 [ 82.351440][ T8082] ? __pfx___report_bug+0x10/0x10 [ 82.353586][ T8082] ? arch_get_unmapped_area_topdown+0x60b/0xa00 [ 82.356225][ T8082] ? path_noexec+0x1ca/0x230 [ 82.358206][ T8082] report_bug+0xb2/0x220 [ 82.359919][ T8082] ? path_noexec+0x1ca/0x230 [ 82.361888][ T8082] handle_bug+0x127/0x260 [ 82.363376][ T8082] exc_invalid_op+0x17/0x50 [ 82.364971][ T8082] asm_exc_invalid_op+0x1a/0x20 [ 82.367033][ T8082] RIP: 0010:path_noexec+0x1ca/0x230 [ 82.369248][ T8082] Code: ff 83 e3 02 48 89 de e8 94 19 81 ff 48 85 db 41 0f 95 c4 e8 b8 1e 81 ff 44 89 e0 5b 5d 41 5c e9 bc 5b 3d 09 e8 a7 1e 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 f8 ea ff e9 a8 fe ff ff e8 7f f8 ea [ 82.377308][ T8082] RSP: 0018:ffffc9000341fc60 EFLAGS: 00010283 [ 82.379903][ T8082] RAX: 00000000000000cd RBX: ffff888101a901e0 RCX: ffffc9000cc04000 [ 82.383290][ T8082] RDX: 0000000000080000 RSI: ffffffff823dc7e9 RDI: 0000000000000007 [ 82.386122][ T8082] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 82.389012][ T8082] R10: 0000000000000000 R11: ffff888029a72ff0 R12: 0000200000000000 [ 82.392117][ T8082] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 82.395446][ T8082] ? path_noexec+0x1c9/0x230 [ 82.397439][ T8082] do_mmap+0xd23/0x1210 [ 82.399245][ T8082] ? __pfx_do_mmap+0x10/0x10 [ 82.401229][ T8082] ? __pfx_down_write_killable+0x10/0x10 [ 82.403590][ T8082] ? __might_fault+0xe3/0x190 [ 82.405499][ T8082] vm_mmap_pgoff+0x29e/0x470 [ 82.407459][ T8082] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 82.409652][ T8082] ? __fget_files+0x20e/0x3c0 [ 82.411672][ T8082] ksys_mmap_pgoff+0x32c/0x5c0 [ 82.413230][ T8082] __x64_sys_mmap+0x125/0x190 [ 82.415219][ T8082] do_syscall_64+0xcd/0xf80 [ 82.417152][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.419631][ T8082] RIP: 0033:0x7fe464f8f7c9 [ 82.421516][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.429307][ T8082] RSP: 002b:00007fe465e22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.432776][ T8082] RAX: ffffffffffffffda RBX: 00007fe4651e5fa0 RCX: 00007fe464f8f7c9 [ 82.435914][ T8082] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 82.438992][ T8082] RBP: 00007fe465013f91 R08: 0000000000000005 R09: 0000000000000000 [ 82.442277][ T8082] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 82.445626][ T8082] R13: 00007fe4651e6038 R14: 00007fe4651e5fa0 R15: 00007fff7ad0cf48 [ 82.448962][ T8082] [ 82.450902][ T8082] Kernel Offset: disabled [ 82.452713][ T8082] Rebooting in 86400 seconds..