last executing test programs: 2.445373048s ago: executing program 1 (id=2): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 2.186300606s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x8008, @loopback}, 0x10) sendto(r2, &(0x7f0000000200)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.164023009s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) 1.906806879s ago: executing program 0 (id=6): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/ \x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AQBv/K1eAAAAABAA\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.633624177s ago: executing program 3 (id=7): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x2}}) syz_emit_ethernet(0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000210011223344550012424203000101050100"/32], 0x0) 1.555770435s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0 1', 0x3) 1.47619185s ago: executing program 1 (id=9): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) 1.475899384s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/all/use_tempaddr\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='2\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/default/use_tempaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='2\n\x00', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='2\n\x00', 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 1.160135859s ago: executing program 2 (id=14): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040001000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000100)={0x11, 0x300, 0x1}, 0x14) write(r1, &(0x7f0000000200)="00000000000000000000000086dd6000000000342b4020010db800000000000000000000000220010db8000000000000000000000001110404010100000020010db800000000000000000000000320010db800000000000000000000000430393039000c0000deadbeef", 0x6a) 1.066471041s ago: executing program 2 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000342b4020010db800000000000000000000000220010db8000000000000000000000001110404010100000020010db800000000000000000000000320010db800000000000000000000000430393039000c0000deadbeef"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 974.08308ms ago: executing program 2 (id=16): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB1234567890123456789012345678901234567=\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)='ceph v027\x00'/152, 0x91) 973.802887ms ago: executing program 0 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='key\x00', &(0x7f0000000300)='AQB1234567890123456789012345678901234567=\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)='ceph v027\x00'/152, 0x91) 125.280706ms ago: executing program 0 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000014000500000000000000000023000000020000000500020020000000"], 0x20}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000f5201001000701010101000000"], 0x10) 124.944572ms ago: executing program 2 (id=19): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412345678901234567890123456789012345678901234567890123456"}}}}, &(0x7f0000000400)={0x0, 0x2, [0x10, 0x10]}) 120.785195ms ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mountpoint\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./nonexistent\x00', &(0x7f0000000080)='./mountpoint\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000140)='trans=unix\x00') write(r0, &(0x7f0000000300)='9999999', 0x7) 89.253445ms ago: executing program 2 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) bind(r1, &(0x7f0000000200)=@in={0x2, 0x4e23, @dev={0xc0, 0xa8, 0x1, 0x1}}, 0x10) listen(r1, 0x5) write(r0, &(0x7f0000000300)="00000800450000540000400040840000c0a80102c0a8010110e24e230000000000000000010000380102030400010000000a000a00000000800200240102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20", 0x58) 61.063224ms ago: executing program 1 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 0s ago: executing program 0 (id=23): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) accept(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x7, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r2}, 0x20) write(r2, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52150' (ED25519) to the list of known hosts. [ 42.266831][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 42.266847][ T42] audit: type=1400 audit(1785136486.656:141): avc: denied { mounton } for pid=5708 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.281135][ T42] audit: type=1400 audit(1785136486.666:142): avc: denied { mount } for pid=5708 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.283165][ T5708] cgroup: Unknown subsys name 'net' [ 42.296561][ T42] audit: type=1400 audit(1785136486.686:143): avc: denied { unmount } for pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.446932][ T5708] cgroup: Unknown subsys name 'cpuset' [ 42.451048][ T5708] cgroup: Unknown subsys name 'rlimit' [ 42.597942][ T42] audit: type=1400 audit(1785136486.986:144): avc: denied { setattr } for pid=5708 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.607838][ T42] audit: type=1400 audit(1785136486.986:145): avc: denied { create } for pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.617220][ T42] audit: type=1400 audit(1785136486.986:146): avc: denied { write } for pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.624077][ T42] audit: type=1400 audit(1785136486.986:147): avc: denied { read } for pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.630592][ T42] audit: type=1400 audit(1785136486.996:148): avc: denied { mounton } for pid=5708 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.638218][ T42] audit: type=1400 audit(1785136486.996:149): avc: denied { mount } for pid=5708 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.645630][ T42] audit: type=1400 audit(1785136487.016:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.675428][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.367891][ T5708] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.721525][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.724738][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.725240][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.726436][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.729751][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.730137][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.733142][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.734573][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.735062][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.735764][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.736419][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.736703][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.739259][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.740390][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.742892][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.744109][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.748977][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.755270][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.758021][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.760514][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.321047][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.323853][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.326410][ T5737] bridge_slave_0: entered allmulticast mode [ 47.329579][ T5737] bridge_slave_0: entered promiscuous mode [ 47.338582][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.341203][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.343600][ T5737] bridge_slave_1: entered allmulticast mode [ 47.346339][ T5737] bridge_slave_1: entered promiscuous mode [ 47.372378][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.374975][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.377290][ T5739] bridge_slave_0: entered allmulticast mode [ 47.379953][ T5739] bridge_slave_0: entered promiscuous mode [ 47.399195][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.401634][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.404648][ T5739] bridge_slave_1: entered allmulticast mode [ 47.407418][ T5739] bridge_slave_1: entered promiscuous mode [ 47.430675][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.437349][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.441194][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.444303][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.447002][ T5732] bridge_slave_0: entered allmulticast mode [ 47.450878][ T5732] bridge_slave_0: entered promiscuous mode [ 47.483755][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.487496][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.490476][ T5732] bridge_slave_1: entered allmulticast mode [ 47.493855][ T5732] bridge_slave_1: entered promiscuous mode [ 47.508199][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.515838][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.562014][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.565273][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.568003][ T5731] bridge_slave_0: entered allmulticast mode [ 47.570828][ T5731] bridge_slave_0: entered promiscuous mode [ 47.576169][ T5737] team0: Port device team_slave_0 added [ 47.580376][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.590504][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.593086][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.596027][ T5731] bridge_slave_1: entered allmulticast mode [ 47.598985][ T5731] bridge_slave_1: entered promiscuous mode [ 47.607890][ T5737] team0: Port device team_slave_1 added [ 47.616734][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.620552][ T5739] team0: Port device team_slave_0 added [ 47.639875][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.642186][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.651039][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.656845][ T5739] team0: Port device team_slave_1 added [ 47.667524][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.677821][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.680480][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.689487][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.702498][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.707048][ T5732] team0: Port device team_slave_0 added [ 47.713702][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.717216][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.725523][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.746809][ T5732] team0: Port device team_slave_1 added [ 47.749407][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.751931][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.759760][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.770288][ T5731] team0: Port device team_slave_0 added [ 47.773402][ T5731] team0: Port device team_slave_1 added [ 47.790487][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.792864][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.800712][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.821023][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.823864][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.834266][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.841031][ T5737] hsr_slave_0: entered promiscuous mode [ 47.843819][ T5737] hsr_slave_1: entered promiscuous mode [ 47.853126][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.855500][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.863013][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.881805][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.884398][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.892399][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.923095][ T5739] hsr_slave_0: entered promiscuous mode [ 47.925511][ T5739] hsr_slave_1: entered promiscuous mode [ 47.927522][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.929568][ T5739] Cannot create hsr debugfs directory [ 47.940748][ T5732] hsr_slave_0: entered promiscuous mode [ 47.942888][ T5732] hsr_slave_1: entered promiscuous mode [ 47.945086][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.946822][ T5732] Cannot create hsr debugfs directory [ 48.000378][ T5731] hsr_slave_0: entered promiscuous mode [ 48.002665][ T5731] hsr_slave_1: entered promiscuous mode [ 48.004965][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.006771][ T5731] Cannot create hsr debugfs directory [ 48.244951][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.250776][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.253402][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.257890][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.260334][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.264460][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.273031][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.277875][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.317551][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.321912][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.324689][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.328131][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.330885][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.336007][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.338736][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.342777][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.391618][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.396951][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.399610][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.403456][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.406347][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.409940][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.412362][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.417219][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.484342][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.488492][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.491490][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.496320][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.502234][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.507921][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.511185][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.516412][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.535349][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.550277][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.575404][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.580942][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.589026][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.591780][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.601135][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.603741][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.610203][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.612351][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.617135][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.619561][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.666866][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.697123][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.711310][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.715391][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.717555][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.724309][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.726517][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.739690][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.749728][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.752090][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.765043][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.767221][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.774773][ T64] Bluetooth: hci3: command tx timeout [ 48.774957][ T5092] Bluetooth: hci2: command tx timeout [ 48.776589][ T5748] Bluetooth: hci1: command tx timeout [ 48.785584][ T5092] Bluetooth: hci0: command tx timeout [ 48.917892][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.933702][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.958889][ T5739] veth0_vlan: entered promiscuous mode [ 48.972130][ T5739] veth1_vlan: entered promiscuous mode [ 48.978933][ T5737] veth0_vlan: entered promiscuous mode [ 48.987614][ T5737] veth1_vlan: entered promiscuous mode [ 49.003688][ T5739] veth0_macvtap: entered promiscuous mode [ 49.010741][ T5739] veth1_macvtap: entered promiscuous mode [ 49.021355][ T5737] veth0_macvtap: entered promiscuous mode [ 49.026345][ T5737] veth1_macvtap: entered promiscuous mode [ 49.032646][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.042777][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.047191][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.057536][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.061462][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.068516][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.072405][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.078066][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.080927][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.096895][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.114754][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.118421][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.131088][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.134941][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.160668][ T5732] veth0_vlan: entered promiscuous mode [ 49.180629][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.183914][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.216355][ T5732] veth1_vlan: entered promiscuous mode [ 49.223615][ T5731] veth0_vlan: entered promiscuous mode [ 49.230866][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.234468][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.235129][ T5731] veth1_vlan: entered promiscuous mode [ 49.245865][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.245880][ T42] audit: type=1400 audit(1785136493.636:168): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.258059][ T42] audit: type=1400 audit(1785136493.636:169): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.Tt401i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.267667][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.267689][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.273345][ T42] audit: type=1400 audit(1785136493.636:170): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.286636][ T42] audit: type=1400 audit(1785136493.636:171): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.Tt401i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.290281][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.294346][ T5732] veth0_macvtap: entered promiscuous mode [ 49.295146][ T42] audit: type=1400 audit(1785136493.636:172): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.Tt401i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.308807][ T5732] veth1_macvtap: entered promiscuous mode [ 49.310639][ T42] audit: type=1400 audit(1785136493.636:173): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.318835][ T42] audit: type=1400 audit(1785136493.646:174): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.327015][ T42] audit: type=1400 audit(1785136493.646:175): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="gadgetfs" ino=8006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.328570][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.333598][ T42] audit: type=1400 audit(1785136493.646:176): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.341592][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.342635][ T42] audit: type=1400 audit(1785136493.646:177): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.356237][ T5731] veth0_macvtap: entered promiscuous mode [ 49.360344][ T5731] veth1_macvtap: entered promiscuous mode [ 49.364858][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.382727][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.391082][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.400746][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.406304][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.413138][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.416463][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.422897][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.426413][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.432294][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.435855][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.439718][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.488915][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.491304][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.515492][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.517960][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.530258][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.532833][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.546906][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.549733][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.692548][ T5893] svc: failed to register lockdv1 RPC service (errno 111). [ 49.695043][ T5893] lockd_up: makesock failed, error=-111 [ 49.854122][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 50.049854][ T5893] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.053681][ T5893] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.057113][ T5893] failed to unregister udp with rpcbind [ 50.059725][ T5893] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.061961][ T5893] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.064353][ T5893] failed to unregister udp with rpcbind [ 50.115304][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 50.215328][ T5925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.625572][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 50.678755][ T5903] ceph: No mds server is up or the cluster is laggy [ 50.856009][ T5092] Bluetooth: hci0: command tx timeout [ 50.856040][ T5748] Bluetooth: hci2: command tx timeout [ 50.865656][ T5748] Bluetooth: hci1: command tx timeout [ 50.865683][ T5092] Bluetooth: hci3: command tx timeout [ 51.178988][ T5925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.285065][ T5925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.663237][ T5955] 9pnet_fd: p9_fd_create_unix (5955): problem creating socket [ 51.770088][ T5959] [ 51.771235][ T5959] ============================= [ 51.773338][ T5959] WARNING: suspicious RCU usage SYZFAIL: failed to recv rpc [ 51.775344][ T5959] syzkaller #0 Not tainted [ 51.776989][ T5959] ----------------------------- fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.778781][ T5959] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 51.781817][ T5959] [ 51.781817][ T5959] other info that might help us debug this: [ 51.781817][ T5959] [ 51.785152][ T5959] [ 51.785152][ T5959] rcu_scheduler_active = 2, debug_locks = 1 [ 51.787779][ T5959] 1 lock held by syz.1.22/5959: [ 51.789586][ T5959] #0: ffff88802f6eead0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 51.793331][ T5959] [ 51.793331][ T5959] stack backtrace: [ 51.795647][ T5959] CPU: 3 UID: 0 PID: 5959 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT(full) [ 51.795662][ T5959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.795668][ T5959] Call Trace: [ 51.795672][ T5959] [ 51.795677][ T5959] dump_stack_lvl+0x100/0x190 [ 51.795693][ T5959] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 51.795714][ T5959] xfrm_do_migrate_state+0x2463/0x2f10 [ 51.795732][ T5959] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 51.795746][ T5959] ? __asan_memset+0x23/0x50 [ 51.795758][ T5959] ? __nla_validate_parse+0x1e7/0x28b0 [ 51.795778][ T5959] ? __nla_parse+0x40/0x60 [ 51.795788][ T5959] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 51.795801][ T5959] ? xfrm_user_rcv_msg+0x483/0xd80 [ 51.795811][ T5959] xfrm_user_rcv_msg+0x483/0xd80 [ 51.795823][ T5959] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 51.795834][ T5959] ? kfree_skbmem+0x19f/0x210 [ 51.795851][ T5959] ? consume_skb+0xd6/0x110 [ 51.795880][ T5959] ? rcu_is_watching+0x12/0xc0 [ 51.795897][ T5959] ? trace_contention_end+0x126/0x160 [ 51.795913][ T5959] ? __mutex_lock+0x26d/0x1bd0 [ 51.795928][ T5959] netlink_rcv_skb+0x159/0x420 [ 51.795939][ T5959] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 51.795950][ T5959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.795969][ T5959] xfrm_netlink_rcv+0x71/0x90 [ 51.795988][ T5959] netlink_unicast+0x585/0x850 [ 51.796001][ T5959] ? __pfx_netlink_unicast+0x10/0x10 [ 51.796012][ T5959] ? __pfx_sock_has_perm+0x10/0x10 [ 51.796029][ T5959] netlink_sendmsg+0x8b0/0xda0 [ 51.796041][ T5959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.796053][ T5959] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.796071][ T5959] ____sys_sendmsg+0xa4d/0xbe0 [ 51.796086][ T5959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.796098][ T5959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.796119][ T5959] ___sys_sendmsg+0x190/0x1e0 [ 51.796137][ T5959] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.796154][ T5959] ? __lock_acquire+0x49f/0x1a40 [ 51.796180][ T5959] __sys_sendmsg+0x160/0x210 [ 51.796194][ T5959] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.796214][ T5959] do_syscall_64+0x115/0x870 [ 51.796225][ T5959] ? clear_bhb_loop+0x40/0x90 [ 51.796239][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.796250][ T5959] RIP: 0033:0x7f6f3379de99 [ 51.796260][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.796270][ T5959] RSP: 002b:00007f6f3461f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.796281][ T5959] RAX: ffffffffffffffda RBX: 00007f6f33a25fa0 RCX: 00007f6f3379de99 [ 51.796287][ T5959] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 51.796294][ T5959] RBP: 00007f6f33833eaf R08: 0000000000000000 R09: 0000000000000000 [ 51.796300][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.796306][ T5959] R13: 00007f6f33a26038 R14: 00007f6f33a25fa0 R15: 00007ffc9d83ec18 [ 51.796318][ T5959] [ 52.666605][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.748184][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.856862][ T5925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.882148][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.934599][ T5092] Bluetooth: hci0: command tx timeout [ 52.992315][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.059136][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.199352][ T12] bridge_slave_1: left allmulticast mode [ 53.201127][ T12] bridge_slave_1: left promiscuous mode [ 53.203565][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.209596][ T12] bridge_slave_0: left allmulticast mode [ 53.211488][ T12] bridge_slave_0: left promiscuous mode [ 53.213399][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.307929][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.313679][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.319455][ T12] bond0 (unregistering): Released all slaves [ 53.473886][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.617894][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.646337][ T12] hsr_slave_0: left promiscuous mode [ 53.650075][ T12] hsr_slave_1: left promiscuous mode [ 53.652680][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.655774][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.659686][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.662527][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.670949][ T12] veth1_macvtap: left promiscuous mode [ 53.673677][ T12] veth0_macvtap: left promiscuous mode [ 53.676099][ T12] veth1_vlan: left promiscuous mode [ 53.678297][ T12] veth0_vlan: left promiscuous mode [ 53.813813][ T12] team0 (unregistering): Port device team_slave_1 removed [ 53.821511][ T12] team0 (unregistering): Port device team_slave_0 removed [ 53.898401][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.039031][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 54.469650][ T12] bridge_slave_1: left allmulticast mode [ 54.471400][ T12] bridge_slave_1: left promiscuous mode [ 54.473270][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.476729][ T12] bridge_slave_0: left allmulticast mode [ 54.478727][ T12] bridge_slave_0: left promiscuous mode [ 54.481086][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.551677][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.560256][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.563541][ T12] bond0 (unregistering): Released all slaves [ 54.982184][ T12] hsr_slave_0: left promiscuous mode [ 54.985013][ T12] hsr_slave_1: left promiscuous mode [ 54.987625][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.991268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.995117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.998142][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.004986][ T12] veth1_macvtap: left promiscuous mode [ 55.007283][ T12] veth0_macvtap: left promiscuous mode [ 55.009924][ T12] veth1_vlan: left promiscuous mode [ 55.012448][ T12] veth0_vlan: left promiscuous mode [ 55.161784][ T12] team0 (unregistering): Port device team_slave_1 removed [ 55.169353][ T12] team0 (unregistering): Port device team_slave_0 removed [ 57.436532][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.540960][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.617449][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.690088][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.821657][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.894130][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 57.894143][ T42] audit: type=1400 audit(1785136502.286:239): avc: denied { write } for pid=5995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.921691][ T12] bridge_slave_1: left allmulticast mode [ 57.924075][ T12] bridge_slave_1: left promiscuous mode [ 57.926203][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.930262][ T12] bridge_slave_0: left allmulticast mode [ 57.932452][ T12] bridge_slave_0: left promiscuous mode [ 57.935283][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.940890][ T42] audit: type=1400 audit(1785136502.326:240): avc: denied { write } for pid=5998 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.037936][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.043584][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.050088][ T12] bond0 (unregistering): Released all slaves [ 58.058113][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.125646][ T42] audit: type=1400 audit(1785136502.516:241): avc: denied { write } for pid=6001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.177515][ T42] audit: type=1400 audit(1785136502.566:242): avc: denied { write } for pid=6004 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.223102][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 58.292978][ T42] audit: type=1400 audit(1785136502.676:243): avc: denied { write } for pid=6007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.340330][ T12] hsr_slave_0: left promiscuous mode [ 58.342487][ T12] hsr_slave_1: left promiscuous mode [ 58.345810][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.346750][ T42] audit: type=1400 audit(1785136502.736:244): avc: denied { write } for pid=6010 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.348195][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.361042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.363330][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.370273][ T12] veth1_macvtap: left promiscuous mode [ 58.372287][ T12] veth0_macvtap: left promiscuous mode [ 58.374393][ T12] veth1_vlan: left promiscuous mode [ 58.376073][ T12] veth0_vlan: left promiscuous mode [ 58.496930][ T12] team0 (unregistering): Port device team_slave_1 removed [ 58.503419][ T12] team0 (unregistering): Port device team_slave_0 removed [ 58.570356][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 58.632715][ T42] audit: type=1400 audit(1785136503.016:245): avc: denied { write } for pid=6013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.670327][ T42] audit: type=1400 audit(1785136503.056:246): avc: denied { write } for pid=6016 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.700216][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 58.776505][ T42] audit: type=1400 audit(1785136503.166:247): avc: denied { write } for pid=6019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.826849][ T42] audit: type=1400 audit(1785136503.216:248): avc: denied { write } for pid=6022 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.872176][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10