last executing test programs: 3.17077246s ago: executing program 2 (id=3): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f010000000000000000000624030000000905810340000000000905820208000000000905f9ab"], 0x0) ioctl$PIO_CMAP(r0, 0x4b3d, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r4 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x24}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000a40)=""/143, 0x8f}], 0x2}}], 0x40000000000004e, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x88, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x35, 0x5b, "7ad8b718311ad0010aa150d2b11f9e5fc1285365925669776ba31cb32f78edf88fa846ed4c3d20738a5bd2ec688af7b3d2"}, @NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "7a2cabb88b403a292f18afc0ae49dbc91a954428ba0d4c91a69dc4f727ad90e966077a1b9c"}]}, 0x88}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000004c0)={0xa, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) 2.699128449s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00s\x04\x879\xa24\xa9am\xde\xb2\x02\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x06\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\x1d\xcf\xf38\xe2\x80\xf5\xd7\xcd5\xd9\x1fE\xfd\xce', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x1000}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000238674e4b6d4000000000000b702000000000000850000000800000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x1d, 0x0, &(0x7f0000000040)="b800fd9b89b266e1bd546b73da0005000000000e099abda45dc2304354", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.451119335s ago: executing program 3 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.175927629s ago: executing program 3 (id=7): connect$x25(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c000004000000140001800600060080350000060020"], 0x2c}}, 0x0) 1.986227212s ago: executing program 3 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000081"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r1, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x2082) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.413290097s ago: executing program 4 (id=5): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=@newtfilter={0x34, 0x2c, 0xd277bbb4a757f903, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {}, {0x5, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 660.039533ms ago: executing program 3 (id=9): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff9c}, 0x90) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x8008550e, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000000000063111400fc00a1009500050000001f1af18b85099d230000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) mkdirat(0xffffffffffffffff, 0x0, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0xf7, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000280)=""/239, 0xef) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="96", 0x1) read$char_usb(r5, 0x0, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 635.640963ms ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x6ad56ec1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff0500240000000001"], 0x58}}, 0x0) syz_usb_connect(0x4, 0x5d, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x55) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000100), 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x37, {{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x2}, 0x9}}, {{0xa, 0x4e21, 0x1, @remote, 0x62ae000}}}, 0x104) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) read(r1, &(0x7f00000001c0)=""/4096, 0x1000) syz_open_dev$sndctrl(&(0x7f00000011c0), 0x65, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0), 0xc06620, 0x4) ioctl$UFFDIO_COPY(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) r2 = socket(0x40000000015, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000f5ff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000da82850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000001300)=0xe4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006c764e105257b97500ae01020301090212000100000000090400000008abc000"], 0x0) sendto$l2tp6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000002020207b1af8ff00000000bfa10000000000000200000000000000b70208000000b70300000000000085000000a000000095000000000000760000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000001340)=0x485b3ecb, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000007c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 395.508101ms ago: executing program 4 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0xf4, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRES16=r1], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) bind$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x1, 0x8000, 0x5, 0xfe, {{0x17, 0x4, 0x2, 0x17, 0x5c, 0x68, 0x0, 0xc, 0x29, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x71, 0x1, 0x1, [{@multicast1, 0xfffffffe}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @end, @ssrr={0x89, 0x13, 0x71, [@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @multicast1, @empty]}, @ssrr={0x89, 0x13, 0x37, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendto$inet(r4, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 367.309307ms ago: executing program 0 (id=1): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="42040c00000001000000000000001800000000"], 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c00330080000000080211000001080211"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 2 (id=11): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x84}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 101.774740][ T29] audit: type=1400 audit(1723237580.729:88): avc: denied { mounton } for pid=5217 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 101.786145][ T5217] cgroup: Unknown subsys name 'net' [ 101.797649][ T29] audit: type=1400 audit(1723237580.739:89): avc: denied { mount } for pid=5217 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.825671][ T29] audit: type=1400 audit(1723237580.769:90): avc: denied { unmount } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.052044][ T5217] cgroup: Unknown subsys name 'rlimit' [ 102.251333][ T29] audit: type=1400 audit(1723237581.209:91): avc: denied { setattr } for pid=5217 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.275681][ T29] audit: type=1400 audit(1723237581.209:92): avc: denied { create } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.306714][ T29] audit: type=1400 audit(1723237581.209:93): avc: denied { write } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.345494][ T29] audit: type=1400 audit(1723237581.209:94): avc: denied { read } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.371415][ T29] audit: type=1400 audit(1723237581.249:95): avc: denied { mounton } for pid=5217 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.396930][ T29] audit: type=1400 audit(1723237581.249:96): avc: denied { mount } for pid=5217 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.420316][ T29] audit: type=1400 audit(1723237581.289:97): avc: denied { read } for pid=4886 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 102.458350][ T5220] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 102.790819][ T8] cfg80211: failed to load regulatory.db [ 104.334547][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.267745][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 107.267768][ T29] audit: type=1400 audit(1723237586.219:103): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.346823][ T29] audit: type=1400 audit(1723237586.219:104): avc: denied { mount } for pid=5229 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.373315][ T29] audit: type=1400 audit(1723237586.219:105): avc: denied { create } for pid=5229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.393878][ T29] audit: type=1400 audit(1723237586.219:106): avc: denied { read write } for pid=5229 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.418277][ T29] audit: type=1400 audit(1723237586.219:107): avc: denied { open } for pid=5229 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.443124][ T29] audit: type=1400 audit(1723237586.279:108): avc: denied { ioctl } for pid=5229 comm="syz-executor" path="socket:[4406]" dev="sockfs" ino=4406 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.547033][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.557202][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.567021][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.570842][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.574842][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.590921][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.596489][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.597744][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.600490][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.614427][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.621806][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.628425][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.634794][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.642666][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.649272][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.655953][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.662693][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.677324][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.678162][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.686111][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.700262][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.707460][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.708753][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.722470][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.731124][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.780893][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.788987][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.798489][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.806879][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.814996][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.885459][ T29] audit: type=1400 audit(1723237586.709:109): avc: denied { read } for pid=5228 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.953403][ T29] audit: type=1400 audit(1723237586.709:110): avc: denied { open } for pid=5228 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.987454][ T29] audit: type=1400 audit(1723237586.709:111): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.568270][ T29] audit: type=1400 audit(1723237587.529:112): avc: denied { module_request } for pid=5234 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.885263][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 108.987067][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 109.008008][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 109.052085][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 109.243005][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 109.361151][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.368816][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.376262][ T5234] bridge_slave_0: entered allmulticast mode [ 109.385168][ T5234] bridge_slave_0: entered promiscuous mode [ 109.483152][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.490569][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.498583][ T5234] bridge_slave_1: entered allmulticast mode [ 109.506237][ T5234] bridge_slave_1: entered promiscuous mode [ 109.566036][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.573380][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.581131][ T5229] bridge_slave_0: entered allmulticast mode [ 109.589728][ T5229] bridge_slave_0: entered promiscuous mode [ 109.618028][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.625409][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.633185][ T5230] bridge_slave_0: entered allmulticast mode [ 109.641771][ T5230] bridge_slave_0: entered promiscuous mode [ 109.677964][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.685183][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.693366][ T5228] bridge_slave_0: entered allmulticast mode [ 109.702030][ T5228] bridge_slave_0: entered promiscuous mode [ 109.710130][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.717713][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.724966][ T5229] bridge_slave_1: entered allmulticast mode [ 109.732993][ T5229] bridge_slave_1: entered promiscuous mode [ 109.748684][ T5242] Bluetooth: hci4: command tx timeout [ 109.763639][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.771082][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.778466][ T5230] bridge_slave_1: entered allmulticast mode [ 109.786180][ T5230] bridge_slave_1: entered promiscuous mode [ 109.824521][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.832299][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.839486][ T5242] Bluetooth: hci0: command tx timeout [ 109.839529][ T5235] Bluetooth: hci2: command tx timeout [ 109.845655][ T5228] bridge_slave_1: entered allmulticast mode [ 109.851163][ T5246] Bluetooth: hci1: command tx timeout [ 109.860515][ T5228] bridge_slave_1: entered promiscuous mode [ 109.907458][ T5246] Bluetooth: hci3: command tx timeout [ 109.959573][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.013298][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.028828][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.044494][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.058949][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.100891][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.135148][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.185321][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.192712][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.200483][ T5231] bridge_slave_0: entered allmulticast mode [ 110.209334][ T5231] bridge_slave_0: entered promiscuous mode [ 110.221061][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.296357][ T5234] team0: Port device team_slave_0 added [ 110.303250][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.311873][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.319312][ T5231] bridge_slave_1: entered allmulticast mode [ 110.327792][ T5231] bridge_slave_1: entered promiscuous mode [ 110.359898][ T5229] team0: Port device team_slave_0 added [ 110.371449][ T5230] team0: Port device team_slave_0 added [ 110.382923][ T5234] team0: Port device team_slave_1 added [ 110.435415][ T5228] team0: Port device team_slave_0 added [ 110.445128][ T5229] team0: Port device team_slave_1 added [ 110.478199][ T5230] team0: Port device team_slave_1 added [ 110.524980][ T5228] team0: Port device team_slave_1 added [ 110.599301][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.630694][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.638983][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.665459][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.681063][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.688737][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.716145][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.747841][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.754853][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.781216][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.798676][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.887990][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.894985][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.921323][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.934147][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.945222][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.971800][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.004225][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.011317][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.037668][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.051797][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.059328][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.085835][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.099896][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.107732][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.134002][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.169921][ T5231] team0: Port device team_slave_0 added [ 111.196500][ T5231] team0: Port device team_slave_1 added [ 111.379204][ T5229] hsr_slave_0: entered promiscuous mode [ 111.386382][ T5229] hsr_slave_1: entered promiscuous mode [ 111.438589][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.445570][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.472313][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.493263][ T5230] hsr_slave_0: entered promiscuous mode [ 111.504409][ T5230] hsr_slave_1: entered promiscuous mode [ 111.512429][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.520818][ T5230] Cannot create hsr debugfs directory [ 111.555704][ T5228] hsr_slave_0: entered promiscuous mode [ 111.563464][ T5228] hsr_slave_1: entered promiscuous mode [ 111.572501][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.580856][ T5228] Cannot create hsr debugfs directory [ 111.594855][ T5234] hsr_slave_0: entered promiscuous mode [ 111.601892][ T5234] hsr_slave_1: entered promiscuous mode [ 111.611164][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.618835][ T5234] Cannot create hsr debugfs directory [ 111.625474][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.633659][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.660349][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.827264][ T5246] Bluetooth: hci4: command tx timeout [ 111.907083][ T5235] Bluetooth: hci2: command tx timeout [ 111.912675][ T5246] Bluetooth: hci1: command tx timeout [ 111.918438][ T5235] Bluetooth: hci0: command tx timeout [ 111.987336][ T5246] Bluetooth: hci3: command tx timeout [ 112.082251][ T5231] hsr_slave_0: entered promiscuous mode [ 112.093795][ T5231] hsr_slave_1: entered promiscuous mode [ 112.100499][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.108241][ T5231] Cannot create hsr debugfs directory [ 112.719111][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.733539][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.746419][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.767297][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.884250][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.908229][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.924358][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.943600][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.132431][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.232198][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.261955][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.299249][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.362142][ T5234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.383875][ T5234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.433562][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.442379][ T5234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.479737][ T5234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.641554][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.669098][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.704346][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.714684][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.736076][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.760834][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.768381][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.799403][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.899676][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.906933][ T1837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.907538][ T5246] Bluetooth: hci4: command tx timeout [ 113.951165][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.988166][ T5246] Bluetooth: hci1: command tx timeout [ 113.993647][ T5235] Bluetooth: hci0: command tx timeout [ 113.993778][ T5242] Bluetooth: hci2: command tx timeout [ 114.055359][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.062621][ T1837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.072284][ T5242] Bluetooth: hci3: command tx timeout [ 114.112005][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.119289][ T1837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.193280][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.371025][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.404924][ T29] audit: type=1400 audit(1723237593.359:113): avc: denied { sys_module } for pid=5229 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.469222][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.500934][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.508271][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.583932][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.622314][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.629623][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.716429][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.723822][ T1837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.783347][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.790697][ T1837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.884357][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.064546][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.144682][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.185340][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.193393][ T2558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.294130][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.301415][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.361119][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.400023][ T5234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.635379][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.835425][ T5230] veth0_vlan: entered promiscuous mode [ 115.969320][ T5230] veth1_vlan: entered promiscuous mode [ 115.988420][ T5242] Bluetooth: hci4: command tx timeout [ 116.039439][ T5229] veth0_vlan: entered promiscuous mode [ 116.067609][ T5242] Bluetooth: hci2: command tx timeout [ 116.073099][ T5242] Bluetooth: hci0: command tx timeout [ 116.079191][ T5235] Bluetooth: hci1: command tx timeout [ 116.144352][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.151480][ T5242] Bluetooth: hci3: command tx timeout [ 116.212030][ T5228] veth0_vlan: entered promiscuous mode [ 116.228391][ T5229] veth1_vlan: entered promiscuous mode [ 116.301462][ T5228] veth1_vlan: entered promiscuous mode [ 116.316296][ T5230] veth0_macvtap: entered promiscuous mode [ 116.331647][ T5230] veth1_macvtap: entered promiscuous mode [ 116.415261][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.468397][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.503764][ T5228] veth0_macvtap: entered promiscuous mode [ 116.561835][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.571183][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.582370][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.591545][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.617544][ T5229] veth0_macvtap: entered promiscuous mode [ 116.639154][ T5228] veth1_macvtap: entered promiscuous mode [ 116.651272][ T5234] veth0_vlan: entered promiscuous mode [ 116.691008][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.709911][ T5229] veth1_macvtap: entered promiscuous mode [ 116.733326][ T5234] veth1_vlan: entered promiscuous mode [ 116.791282][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.803226][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.815909][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.884208][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.895560][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.908859][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.028141][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.039742][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.053395][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.064021][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.125132][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.136438][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.148446][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.160198][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.172721][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.190917][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.204993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.248674][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.265126][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.282842][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.293765][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.308650][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.334225][ T5231] veth0_vlan: entered promiscuous mode [ 117.360258][ T5234] veth0_macvtap: entered promiscuous mode [ 117.377086][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.386016][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.395684][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.405050][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.453207][ T5234] veth1_macvtap: entered promiscuous mode [ 117.514637][ T5231] veth1_vlan: entered promiscuous mode [ 117.583434][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.608327][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.644708][ T29] audit: type=1400 audit(1723237596.599:114): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/root/syzkaller.SMqJgM/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 117.683258][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.692284][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.714904][ T29] audit: type=1400 audit(1723237596.599:115): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.739563][ T29] audit: type=1400 audit(1723237596.599:116): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/root/syzkaller.SMqJgM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.779341][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.794041][ T29] audit: type=1400 audit(1723237596.599:117): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.816504][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.816894][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.816922][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.816938][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.816962][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.819736][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.842516][ T29] audit: type=1400 audit(1723237596.599:118): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 117.904020][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.917031][ T29] audit: type=1400 audit(1723237596.639:119): avc: denied { mounton } for pid=5230 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 117.940363][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.940387][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.940412][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.940428][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.940450][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.943065][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.957971][ T29] audit: type=1400 audit(1723237596.669:120): avc: denied { mount } for pid=5230 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 118.071692][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.087852][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.098470][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.107393][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.169108][ T29] audit: type=1400 audit(1723237597.109:121): avc: denied { read write } for pid=5230 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.248291][ T29] audit: type=1400 audit(1723237597.119:122): avc: denied { open } for pid=5230 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.311769][ T5315] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 118.331690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.331738][ T5231] veth0_macvtap: entered promiscuous mode [ 118.352034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.400865][ T5231] veth1_macvtap: entered promiscuous mode [ 118.574645][ T1837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.601073][ T1837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.659256][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.691712][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.722791][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.736426][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.755048][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.773067][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.784076][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.797309][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.815956][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.841747][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.856194][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.895242][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.926880][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.936729][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 118.941117][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.954872][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.965895][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.976216][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.988266][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.988426][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.002350][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.020701][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 119.056821][ T8] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 119.096630][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 119.111176][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 119.123459][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 119.142081][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.151375][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.161357][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.181808][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.204799][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.221081][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.243139][ T8] usb 3-1: SerialNumber: syz [ 119.255820][ T5321] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 119.265185][ T5315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.431796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.468501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.491646][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 119.491670][ T29] audit: type=1400 audit(1723237598.449:136): avc: denied { create } for pid=5322 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.528595][ T1837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.536485][ T1837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.575295][ T29] audit: type=1400 audit(1723237598.519:137): avc: denied { write } for pid=5322 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.672761][ T29] audit: type=1400 audit(1723237598.529:138): avc: denied { create } for pid=5322 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.735013][ T29] audit: type=1400 audit(1723237598.569:139): avc: denied { write } for pid=5322 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.757079][ T29] audit: type=1400 audit(1723237598.679:140): avc: denied { mounton } for pid=5229 comm="syz-executor" path="/root/syzkaller.Mqs7Rg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.805801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.831284][ T29] audit: type=1400 audit(1723237598.789:141): avc: denied { create } for pid=5322 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.855261][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.927070][ T29] audit: type=1400 audit(1723237598.879:142): avc: denied { create } for pid=5314 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.015307][ T29] audit: type=1400 audit(1723237598.939:143): avc: denied { read write } for pid=5314 comm="syz.2.3" name="video36" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 120.044966][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.120403][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.132464][ T29] audit: type=1400 audit(1723237598.939:144): avc: denied { open } for pid=5314 comm="syz.2.3" path="/dev/video36" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 120.239681][ T29] audit: type=1400 audit(1723237598.969:145): avc: denied { read } for pid=5322 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.277254][ T5329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 120.377431][ T8] usb 3-1: USB disconnect, device number 2 [ 120.525312][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.563573][ T5329] Zero length message leads to an empty skb [ 120.588808][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.971062][ T5335] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 121.407175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.577378][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.592093][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.296879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.708205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 148.307041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 149.446866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 149.856876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.006826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 152.417026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 154.157244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.566798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 226.786517][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 226.793664][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5334/1:b..l P1837/1:b..l [ 226.803231][ C0] rcu: (detected by 0, t=10502 jiffies, g=11653, q=738 ncpus=2) [ 226.811084][ C0] task:kworker/u8:6 state:R running task stack:24672 pid:1837 tgid:1837 ppid:2 flags:0x00004000 [ 226.823796][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 226.829877][ C0] Call Trace: [ 226.833192][ C0] [ 226.836161][ C0] __schedule+0xe37/0x5490 [ 226.840645][ C0] ? fib6_walk+0x2bb/0x370 [ 226.845109][ C0] ? reacquire_held_locks+0x441/0x4c0 [ 226.850542][ C0] ? hlock_class+0x4e/0x130 [ 226.855115][ C0] ? __pfx___schedule+0x10/0x10 [ 226.860018][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 226.865376][ C0] ? fib6_walk+0x196/0x370 [ 226.869843][ C0] ? find_held_lock+0x2d/0x110 [ 226.874843][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 226.880263][ C0] preempt_schedule_common+0x44/0xc0 [ 226.885608][ C0] preempt_schedule_thunk+0x1a/0x30 [ 226.890858][ C0] ? __fib6_clean_all+0x108/0x2d0 [ 226.895946][ C0] __local_bh_enable_ip+0x107/0x120 [ 226.901217][ C0] __fib6_clean_all+0x108/0x2d0 [ 226.906130][ C0] ? __pfx_fib6_flush_trees+0x10/0x10 [ 226.911552][ C0] addrconf_dad_completed+0x8a5/0x1060 [ 226.917069][ C0] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 226.923120][ C0] ? mark_held_locks+0x9f/0xe0 [ 226.927952][ C0] ? addrconf_dad_work+0x7e8/0x1500 [ 226.933228][ C0] ? addrconf_dad_work+0x807/0x1500 [ 226.938487][ C0] addrconf_dad_work+0x807/0x1500 [ 226.943662][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 226.949179][ C0] process_one_work+0x9c5/0x1b40 [ 226.954181][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 226.959697][ C0] ? __pfx_process_one_work+0x10/0x10 [ 226.965130][ C0] ? assign_work+0x1a0/0x250 [ 226.969780][ C0] worker_thread+0x6c8/0xf20 [ 226.974433][ C0] ? __pfx_worker_thread+0x10/0x10 [ 226.979604][ C0] kthread+0x2c1/0x3a0 [ 226.983739][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.988993][ C0] ? __pfx_kthread+0x10/0x10 [ 226.993634][ C0] ret_from_fork+0x45/0x80 [ 226.998118][ C0] ? __pfx_kthread+0x10/0x10 [ 227.002783][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.007645][ C0] [ 227.010715][ C0] task:syz.3.9 state:R running task stack:25856 pid:5334 tgid:5333 ppid:5228 flags:0x00004002 [ 227.022525][ C0] Call Trace: [ 227.025844][ C0] [ 227.028811][ C0] __schedule+0xe37/0x5490 [ 227.033304][ C0] ? __pfx_mark_lock+0x10/0x10 [ 227.038137][ C0] ? __pfx_mark_lock+0x10/0x10 [ 227.042961][ C0] ? page_table_check_set+0x8fd/0x9d0 [ 227.048404][ C0] ? __pfx___schedule+0x10/0x10 [ 227.053316][ C0] ? mark_held_locks+0x9f/0xe0 [ 227.058135][ C0] preempt_schedule_irq+0x51/0x90 [ 227.063240][ C0] irqentry_exit+0x36/0x90 [ 227.067714][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.073791][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 227.079152][ C0] Code: c1 05 aa 11 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 227.098826][ C0] RSP: 0018:ffffc90003b1f678 EFLAGS: 00000206 [ 227.104949][ C0] RAX: dffffc0000000000 RBX: 1ffff92000763ed1 RCX: 0000000000000001 [ 227.112963][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc800 RDI: ffffffff8bb08a80 [ 227.120979][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c5ad8 [ 227.128990][ C0] R10: ffffffff9462d6c7 R11: 0000000000000000 R12: 0000000000000000 [ 227.137007][ C0] R13: 0000000000000000 R14: ffffffff8ddb5ca0 R15: 0000000000000000 [ 227.145034][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 227.150128][ C0] count_memcg_event_mm.part.0+0x37/0x340 [ 227.155905][ C0] ? count_memcg_event_mm.part.0+0x31/0x340 [ 227.161855][ C0] handle_mm_fault+0x1b5/0x7b0 [ 227.166680][ C0] __get_user_pages+0x475/0x15c0 [ 227.171698][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 227.177155][ C0] __gup_longterm_locked+0x22e/0x1b30 [ 227.182605][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 227.187714][ C0] ? __pfx___gup_longterm_locked+0x10/0x10 [ 227.193595][ C0] ? rwsem_read_trylock+0x12d/0x250 [ 227.198856][ C0] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 227.204467][ C0] ? sanity_check_pinned_pages+0x384/0x1220 [ 227.210425][ C0] pin_user_pages_remote+0xee/0x150 [ 227.215691][ C0] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 227.221562][ C0] ? down_read+0xc9/0x330 [ 227.225954][ C0] ? unpin_user_pages_dirty_lock+0x45d/0x4e0 [ 227.231995][ C0] ? copy_page_to_iter+0x160/0x180 [ 227.237183][ C0] process_vm_rw_core.constprop.0+0x439/0xa10 [ 227.243340][ C0] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 227.250092][ C0] ? copy_iovec_from_user+0x77/0x170 [ 227.255452][ C0] process_vm_rw+0x301/0x360 [ 227.260118][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 227.265314][ C0] ? find_held_lock+0x2d/0x110 [ 227.270240][ C0] ? xfd_validate_state+0x5d/0x180 [ 227.275423][ C0] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 227.281130][ C0] ? do_syscall_64+0x91/0x250 [ 227.285868][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.291120][ C0] do_syscall_64+0xcd/0x250 [ 227.295684][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.301717][ C0] RIP: 0033:0x7f4ec8b779f9 [ 227.306176][ C0] RSP: 002b:00007f4ec98bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 227.314638][ C0] RAX: ffffffffffffffda RBX: 00007f4ec8d05f80 RCX: 00007f4ec8b779f9 [ 227.322916][ C0] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000000c [ 227.330931][ C0] RBP: 00007f4ec8be58ee R08: 0000000000000286 R09: 0000000000000000 [ 227.338944][ C0] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 227.346966][ C0] R13: 0000000000000000 R14: 00007f4ec8d05f80 R15: 00007ffff95d9ea8 [ 227.354991][ C0] [ 227.358100][ C0] rcu: rcu_preempt kthread starved for 10482 jiffies! g11653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 227.369348][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 227.379355][ C0] rcu: RCU grace-period kthread stack dump: [ 227.385272][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 227.397068][ C0] Call Trace: [ 227.400398][ C0] [ 227.403368][ C0] __schedule+0xe37/0x5490 [ 227.407851][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 227.413127][ C0] ? __pfx___schedule+0x10/0x10 [ 227.418041][ C0] ? schedule+0x298/0x350 [ 227.422420][ C0] ? __pfx_lock_release+0x10/0x10 [ 227.427504][ C0] ? __pfx___mod_timer+0x10/0x10 [ 227.432514][ C0] ? lock_acquire+0x1b1/0x560 [ 227.437258][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 227.442778][ C0] schedule+0xe7/0x350 [ 227.446902][ C0] schedule_timeout+0x136/0x2a0 [ 227.451803][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 227.457226][ C0] ? __pfx_process_timeout+0x10/0x10 [ 227.462566][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 227.468425][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 227.473944][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 227.478763][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 227.484103][ C0] ? rcu_gp_init+0xc82/0x1630 [ 227.488829][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.494167][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 227.500028][ C0] rcu_gp_kthread+0x271/0x380 [ 227.504759][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.510011][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.515267][ C0] ? __kthread_parkme+0x148/0x220 [ 227.520360][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.525607][ C0] kthread+0x2c1/0x3a0 [ 227.529722][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.534972][ C0] ? __pfx_kthread+0x10/0x10 [ 227.539613][ C0] ret_from_fork+0x45/0x80 [ 227.544099][ C0] ? __pfx_kthread+0x10/0x10 [ 227.548733][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.553565][ C0] [ 227.556617][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 227.563012][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 227.573404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 227.583505][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 227.588854][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 28 b7 f1 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d d8 ce a9 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 227.608508][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 227.614622][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b1206f9 [ 227.622634][ C0] RDX: 0000000000000001 RSI: ffff888019ed3000 RDI: ffff888019ed3064 [ 227.630646][ C0] RBP: ffff888019ed3064 R08: 0000000000000001 R09: ffffed1017246fd9 [ 227.638653][ C0] R10: ffff8880b9237ecb R11: 0000000000000000 R12: ffff88801b7da800 [ 227.646665][ C0] R13: ffffffff8e9518c0 R14: 0000000000000000 R15: 0000000000000000 [ 227.654673][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 227.663654][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.670280][ C0] CR2: 0000001b32d10ff8 CR3: 0000000029ea0000 CR4: 00000000003506f0 [ 227.678296][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.686312][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.694327][ C0] Call Trace: [ 227.697638][ C0] [ 227.700513][ C0] ? show_regs+0x8c/0xa0 [ 227.704821][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 227.711199][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 227.716456][ C0] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 227.721978][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 227.727676][ C0] ? __asan_memcpy+0x3c/0x60 [ 227.732313][ C0] ? __asan_memcpy+0x3c/0x60 [ 227.736954][ C0] ? update_process_times+0x175/0x220 [ 227.742387][ C0] ? __pfx_update_process_times+0x10/0x10 [ 227.748256][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 227.753780][ C0] ? update_wall_time+0x1c/0x40 [ 227.758681][ C0] ? tick_nohz_handler+0x376/0x530 [ 227.763861][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 227.769383][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 227.774817][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 227.780599][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 227.786730][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 227.791917][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 227.798126][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 227.803982][ C0] [ 227.806960][ C0] [ 227.809927][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.816154][ C0] ? ct_kernel_exit+0x139/0x190 [ 227.821064][ C0] ? acpi_safe_halt+0x1a/0x20 [ 227.825801][ C0] acpi_idle_enter+0xc5/0x160 [ 227.830549][ C0] cpuidle_enter_state+0x85/0x500 [ 227.835630][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 227.841508][ C0] cpuidle_enter+0x4e/0xa0 [ 227.845986][ C0] do_idle+0x313/0x3f0 [ 227.850291][ C0] ? __pfx_do_idle+0x10/0x10 [ 227.854940][ C0] cpu_startup_entry+0x4f/0x60 [ 227.859761][ C0] rest_init+0x16b/0x2b0 [ 227.864066][ C0] ? acpi_subsystem_init+0x133/0x180 [ 227.869402][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 227.875006][ C0] start_kernel+0x3df/0x4c0 [ 227.879569][ C0] x86_64_start_reservations+0x18/0x30 [ 227.885078][ C0] x86_64_start_kernel+0xb2/0xc0 [ 227.890061][ C0] common_startup_64+0x13e/0x148 [ 227.895054][ C0] [ 229.032165][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 229.042149][ T8] usb 2-1: device descriptor read/all, error -61 [ 229.057072][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 229.057093][ T29] audit: type=1400 audit(1723237707.429:165): avc: denied { write } for pid=5332 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.084201][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.128916][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.143452][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.156879][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.196935][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 229.257346][ T25] usb 4-1: Using ep0 maxpacket: 8 SYZFAIL: failed to send rpc fd=3 want=148696 sent=0 n=-1 (errno 32: Broken pipe) [ 233.051485][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 233.051518][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 233.057726][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 233.063646][ T5247] Bluetooth: hci0: command 0x0406 tx timeout [ 233.069713][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 234.346355][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.363379][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 234.399395][ T25] usb 4-1: can't read configurations, error -71 [ 234.509954][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.751014][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.833654][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.973240][ T29] audit: type=1400 audit(1723237713.929:166): avc: denied { search } for pid=4886 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.067667][ T11] bridge_slave_1: left allmulticast mode [ 235.074086][ T11] bridge_slave_1: left promiscuous mode [ 235.081915][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.129502][ T11] bridge_slave_0: left allmulticast mode [ 235.135232][ T11] bridge_slave_0: left promiscuous mode [ 235.147716][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.314058][ T29] audit: type=1400 audit(1723237714.269:167): avc: denied { read } for pid=5368 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.382090][ T29] audit: type=1400 audit(1723237714.269:168): avc: denied { open } for pid=5368 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.414521][ T29] audit: type=1400 audit(1723237714.269:169): avc: denied { getattr } for pid=5368 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.762869][ T29] audit: type=1400 audit(1723237714.719:170): avc: denied { write } for pid=5367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.818521][ T29] audit: type=1400 audit(1723237714.719:171): avc: denied { add_name } for pid=5367 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.934449][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.939322][ T29] audit: type=1400 audit(1723237714.889:172): avc: denied { remove_name } for pid=5378 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.985998][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.001565][ T11] bond0 (unregistering): Released all slaves [ 236.485086][ T11] hsr_slave_0: left promiscuous mode [ 236.512164][ T11] hsr_slave_1: left promiscuous mode [ 236.520230][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.534174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.544054][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.560685][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.613928][ T11] veth1_macvtap: left promiscuous mode [ 236.628367][ T11] veth0_macvtap: left promiscuous mode [ 236.634337][ T11] veth1_vlan: left promiscuous mode [ 236.646003][ T11] veth0_vlan: left promiscuous mode