last executing test programs: 13.22735543s ago: executing program 1 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000600), 0x1000) 11.607190034s ago: executing program 1 (id=164): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.644711216s ago: executing program 0 (id=194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000240)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 7.548050069s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000550)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000650)='100', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r4, &(0x7f0000000850)='4', 0x1) sendto$inet(r3, &(0x7f0000000700)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000750)={0x2, 0x1234, @loopback}, 0x10) 6.860925781s ago: executing program 3 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={&(0x7f0000000000), 0xc, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100300000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100310000000c00"], 0xc0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000014c0)={&(0x7f0000000000), 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001004a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001004b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001004c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001004d0000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={&(0x7f0000000000), 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001004e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001004f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100500000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100510000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002000)={&(0x7f0000000000), 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0) 6.6417109s ago: executing program 3 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 6.419472058s ago: executing program 0 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="00000000010000", 0x7) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000700), 0x4) 6.34436782s ago: executing program 3 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello', 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) 6.175689221s ago: executing program 0 (id=205): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 5.912084744s ago: executing program 4 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000020)={&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, {0x3}, [@typed={0xb, 0x2, 0x0, 0x0, @str='nlctrl\x00'}]}, 0x20}}, 0x0) 5.743843543s ago: executing program 3 (id=208): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0x0, 0x1c, 0x0, @val=@iter={&(0x7f0000000400)=@cgroup={0x0, 0x0}, 0x10}}, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8) read(r2, &(0x7f0000000600), 0x100) 5.587537527s ago: executing program 4 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'dvmrp0\x00', 0x1}) r2 = socket(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000100)={'dvmrp0\x00', 0x0, 0x1}) 5.504600183s ago: executing program 3 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='3\n', 0x2) write(r1, &(0x7f0000000200)='4\n', 0x2) write(r1, &(0x7f0000000240)='5\n', 0x2) write(r1, &(0x7f0000000280)='6\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-2 -3\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1\n', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x801, @loopback}, 0x10) 5.224318726s ago: executing program 1 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={&(0x7f0000000000), 0xc, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100300000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100310000000c00"], 0xc0}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={&(0x7f0000000000), 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001004e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001004f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100500000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100510000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002000)={&(0x7f0000000000), 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0) 5.172455104s ago: executing program 4 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mptcp/add_addr_timeout\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) write(r4, &(0x7f0000000400)="0123456789", 0xa) read(r5, &(0x7f0000000500), 0xa) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000700)={0x3}, 0x0) 5.101077466s ago: executing program 0 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6, 0x3, '\x00\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}}, 0xf4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 4.985952966s ago: executing program 1 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}}, 0x0) 4.828245016s ago: executing program 0 (id=216): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/256, 0x100}, 0x40) 4.747052622s ago: executing program 1 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newqdisc={0x90, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x1}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x0) 4.532192885s ago: executing program 1 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3 -4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) 4.434776691s ago: executing program 0 (id=220): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000700)=@in={0x2, 0x2382, @local}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000800)={0x2, 0x2382, @local}, 0x10) r5 = accept(r3, 0x0, 0x0) shutdown(r4, 0x2) shutdown(r5, 0x2) close(r5) close(r4) close(r3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0) 4.085832903s ago: executing program 4 (id=221): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x80) 3.908416928s ago: executing program 4 (id=222): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2.990809008s ago: executing program 4 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 2.092566419s ago: executing program 2 (id=234): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000010)={&(0x7f0000000020)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000001142420300"/33], 0x0) 1.848134266s ago: executing program 2 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca2000002800000001010000010100000200"/50, 0x32) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca2000002800000002010000010100000200"/50, 0x32) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x3e8, 0x1}}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)='hello world', 0xb}], 0x1}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca200000280000000001000001010000020000000000000000000000000000000100010000", 0x32) 1.189081961s ago: executing program 2 (id=236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000)=nil, 0x1000, 0x3, 0x32, 0xffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{0xfffffffffffffffd, 0x1000}, 0x1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000001200)=""/4, &(0x7f0000001100)=0x4) (async) read(r1, &(0x7f0000000300), 0x20) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000400)={{0xfffffffffffffffd, 0x1000}}) 308.530964ms ago: executing program 2 (id=237): r0 = socket(0x8, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40046102, &(0x7f0000000100)="0100") 124.312755ms ago: executing program 2 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10) 0s ago: executing program 2 (id=239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): _t tclass=dir permissive=1 [ 52.491922][ T30] audit: type=1400 audit(1785136432.649:124): avc: denied { write } for pid=5555 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.802580][ T30] audit: type=1400 audit(1785136432.959:125): avc: denied { write } for pid=5559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.896320][ T30] audit: type=1400 audit(1785136433.059:126): avc: denied { write } for pid=5570 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.191020][ T30] audit: type=1400 audit(1785136433.349:127): avc: denied { write } for pid=5573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.280989][ T30] audit: type=1400 audit(1785136433.439:128): avc: denied { write } for pid=5584 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 61.257879][ T30] audit: type=1400 audit(1785136441.419:129): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.281622][ T30] audit: type=1400 audit(1785136441.439:130): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.284723][ T5595] cgroup: Unknown subsys name 'net' [ 61.310547][ T30] audit: type=1400 audit(1785136441.469:131): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.410695][ T5595] cgroup: Unknown subsys name 'cpuset' [ 61.418487][ T5595] cgroup: Unknown subsys name 'rlimit' [ 61.545100][ T30] audit: type=1400 audit(1785136441.699:132): avc: denied { setattr } for pid=5595 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.578941][ T30] audit: type=1400 audit(1785136441.709:133): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.599663][ T30] audit: type=1400 audit(1785136441.709:134): avc: denied { write } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.627872][ T30] audit: type=1400 audit(1785136441.709:135): avc: denied { read } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.648820][ T30] audit: type=1400 audit(1785136441.719:136): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.658243][ T5597] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.674094][ T30] audit: type=1400 audit(1785136441.719:137): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.706626][ T30] audit: type=1400 audit(1785136441.849:138): avc: denied { relabelto } for pid=5597 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.656715][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.876996][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.883327][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.318340][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 66.318356][ T30] audit: type=1400 audit(1785136446.479:143): avc: denied { create } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.369653][ T30] audit: type=1400 audit(1785136446.479:144): avc: denied { create } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.391273][ T30] audit: type=1400 audit(1785136446.479:145): avc: denied { read write } for pid=5609 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.408789][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.421761][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.424088][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.434708][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.437613][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.444855][ T30] audit: type=1400 audit(1785136446.479:146): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.452336][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.475467][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.482304][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.489511][ T30] audit: type=1400 audit(1785136446.499:147): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="socket:[5058]" dev="sockfs" ino=5058 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.496935][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.527305][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.527843][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.537151][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.549667][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.549830][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.556993][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.565121][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.571395][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.581313][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.586494][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.592379][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.599126][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.606185][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.618221][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.627783][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.635724][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.646915][ T30] audit: type=1400 audit(1785136446.789:148): avc: denied { read } for pid=5609 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.678176][ T30] audit: type=1400 audit(1785136446.789:149): avc: denied { open } for pid=5609 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.724790][ T30] audit: type=1400 audit(1785136446.799:150): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.760701][ T30] audit: type=1400 audit(1785136446.809:151): avc: denied { module_request } for pid=5610 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.784741][ T30] audit: type=1400 audit(1785136446.809:152): avc: denied { module_request } for pid=5609 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.908397][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.916604][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.924164][ T5609] bridge_slave_0: entered allmulticast mode [ 67.931979][ T5609] bridge_slave_0: entered promiscuous mode [ 67.958423][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.966133][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.973312][ T5609] bridge_slave_1: entered allmulticast mode [ 67.980083][ T5609] bridge_slave_1: entered promiscuous mode [ 68.021918][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.029059][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.036401][ T5608] bridge_slave_0: entered allmulticast mode [ 68.043027][ T5608] bridge_slave_0: entered promiscuous mode [ 68.072950][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.080175][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.087418][ T5608] bridge_slave_1: entered allmulticast mode [ 68.094146][ T5608] bridge_slave_1: entered promiscuous mode [ 68.110219][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.145454][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.197514][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.212776][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.219992][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.227149][ T5621] bridge_slave_0: entered allmulticast mode [ 68.233778][ T5621] bridge_slave_0: entered promiscuous mode [ 68.241931][ T5609] team0: Port device team_slave_0 added [ 68.255156][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.270412][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.277569][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.284761][ T5621] bridge_slave_1: entered allmulticast mode [ 68.291613][ T5621] bridge_slave_1: entered promiscuous mode [ 68.299338][ T5609] team0: Port device team_slave_1 added [ 68.305025][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.312708][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.320245][ T5607] bridge_slave_0: entered allmulticast mode [ 68.327509][ T5607] bridge_slave_0: entered promiscuous mode [ 68.335982][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.343051][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.350308][ T5607] bridge_slave_1: entered allmulticast mode [ 68.357842][ T5607] bridge_slave_1: entered promiscuous mode [ 68.370783][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.377867][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.384979][ T5610] bridge_slave_0: entered allmulticast mode [ 68.391860][ T5610] bridge_slave_0: entered promiscuous mode [ 68.424443][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.431663][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.439182][ T5610] bridge_slave_1: entered allmulticast mode [ 68.445977][ T5610] bridge_slave_1: entered promiscuous mode [ 68.472645][ T5608] team0: Port device team_slave_0 added [ 68.479861][ T5608] team0: Port device team_slave_1 added [ 68.493276][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.503158][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.510250][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.536158][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.550045][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.573531][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.583302][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.590354][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.616253][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.628392][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.646074][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.676127][ T5626] Bluetooth: hci1: command tx timeout [ 68.678055][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.688674][ T4928] Bluetooth: hci4: command tx timeout [ 68.689008][ T5626] Bluetooth: hci2: command tx timeout [ 68.694071][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.694092][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.697478][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.755988][ T5626] Bluetooth: hci0: command tx timeout [ 68.756000][ T4928] Bluetooth: hci3: command tx timeout [ 68.773621][ T5621] team0: Port device team_slave_0 added [ 68.787352][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.794422][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.820488][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.848863][ T5621] team0: Port device team_slave_1 added [ 68.856410][ T5607] team0: Port device team_slave_0 added [ 68.869014][ T5610] team0: Port device team_slave_0 added [ 68.888974][ T5607] team0: Port device team_slave_1 added [ 68.903442][ T5610] team0: Port device team_slave_1 added [ 68.912557][ T5609] hsr_slave_0: entered promiscuous mode [ 68.919101][ T5609] hsr_slave_1: entered promiscuous mode [ 68.933492][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.940544][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.966544][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.004490][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.011534][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.037857][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.049117][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.056072][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.082792][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.100857][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.107897][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.134014][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.159440][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.166622][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.192959][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.208833][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.215885][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.242106][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.257174][ T5608] hsr_slave_0: entered promiscuous mode [ 69.263435][ T5608] hsr_slave_1: entered promiscuous mode [ 69.269612][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 69.275459][ T5608] Cannot create hsr debugfs directory [ 69.354242][ T5621] hsr_slave_0: entered promiscuous mode [ 69.360382][ T5621] hsr_slave_1: entered promiscuous mode [ 69.366967][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 69.372693][ T5621] Cannot create hsr debugfs directory [ 69.412537][ T5610] hsr_slave_0: entered promiscuous mode [ 69.418648][ T5610] hsr_slave_1: entered promiscuous mode [ 69.424501][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 69.430290][ T5610] Cannot create hsr debugfs directory [ 69.446956][ T5607] hsr_slave_0: entered promiscuous mode [ 69.453193][ T5607] hsr_slave_1: entered promiscuous mode [ 69.459355][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 69.465086][ T5607] Cannot create hsr debugfs directory [ 69.783072][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.793711][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.801709][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.811588][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.819819][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.829120][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.837050][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.846835][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.910552][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.920625][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.929122][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.939233][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.946972][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.955716][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.963275][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.973162][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.042293][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.052386][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.061617][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.071104][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.079193][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.087782][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.096167][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.105056][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.198486][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.207712][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.216841][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.231325][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.240906][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.249958][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.259637][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.268440][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.278094][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.321627][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.341282][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.348789][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.375980][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.383062][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.407189][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.416806][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.424531][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.434429][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.442626][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.451157][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.460381][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.473835][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.483004][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.534628][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.547130][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.563942][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.571069][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.607727][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.616957][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.624077][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.700308][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.733868][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.741017][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.755924][ T5626] Bluetooth: hci2: command tx timeout [ 70.755996][ T5619] Bluetooth: hci1: command tx timeout [ 70.767685][ T4928] Bluetooth: hci4: command tx timeout [ 70.769892][ T5608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.784067][ T5608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.808356][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.815442][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.832932][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.839933][ T4928] Bluetooth: hci0: command tx timeout [ 70.845544][ T5619] Bluetooth: hci3: command tx timeout [ 70.912080][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.970408][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.977549][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.997659][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.032432][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.039595][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.083048][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.117388][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.124588][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.193431][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.200600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.416840][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.481066][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.558054][ T5609] veth0_vlan: entered promiscuous mode [ 71.600686][ T5609] veth1_vlan: entered promiscuous mode [ 71.682302][ T5609] veth0_macvtap: entered promiscuous mode [ 71.740127][ T5609] veth1_macvtap: entered promiscuous mode [ 71.819673][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.851592][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.898576][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.946413][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.969662][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.988960][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.000874][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018574][ T5610] veth0_vlan: entered promiscuous mode [ 72.061246][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.092769][ T5610] veth1_vlan: entered promiscuous mode [ 72.130148][ T5608] veth0_vlan: entered promiscuous mode [ 72.168982][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.182963][ T5608] veth1_vlan: entered promiscuous mode [ 72.183418][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.200605][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.236645][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.247166][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.249616][ T5610] veth0_macvtap: entered promiscuous mode [ 72.262221][ T5621] veth0_vlan: entered promiscuous mode [ 72.282122][ T5610] veth1_macvtap: entered promiscuous mode [ 72.286133][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 72.286146][ T30] audit: type=1400 audit(1785136452.449:154): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.kODyVZ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.300259][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.323737][ T30] audit: type=1400 audit(1785136452.489:155): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.351820][ T30] audit: type=1400 audit(1785136452.489:156): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.kODyVZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.385152][ T5621] veth1_vlan: entered promiscuous mode [ 72.395572][ T30] audit: type=1400 audit(1785136452.489:157): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.419957][ T30] audit: type=1400 audit(1785136452.489:158): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.kODyVZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.426135][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.451645][ T30] audit: type=1400 audit(1785136452.489:159): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/root/syzkaller.kODyVZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.456273][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.481687][ T30] audit: type=1400 audit(1785136452.489:160): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.518385][ T30] audit: type=1400 audit(1785136452.539:161): avc: denied { mounton } for pid=5609 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.534387][ T5608] veth0_macvtap: entered promiscuous mode [ 72.543842][ T30] audit: type=1400 audit(1785136452.539:162): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="gadgetfs" ino=7497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.570264][ T30] audit: type=1400 audit(1785136452.539:163): avc: denied { mount } for pid=5609 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.584822][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.601725][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.622407][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.642513][ T5608] veth1_macvtap: entered promiscuous mode [ 72.672339][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.703609][ T5607] veth0_vlan: entered promiscuous mode [ 72.719662][ T5621] veth0_macvtap: entered promiscuous mode [ 72.735022][ T5607] veth1_vlan: entered promiscuous mode [ 72.769876][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.782236][ T5621] veth1_macvtap: entered promiscuous mode [ 72.804260][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.837888][ T4928] Bluetooth: hci4: command tx timeout [ 72.838400][ T5619] Bluetooth: hci1: command tx timeout [ 72.843989][ T4928] Bluetooth: hci2: command tx timeout [ 72.859875][ T5607] veth0_macvtap: entered promiscuous mode [ 72.881013][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907465][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.916276][ T4928] Bluetooth: hci0: command tx timeout [ 72.916747][ T5619] Bluetooth: hci3: command tx timeout [ 72.933911][ T5810] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6'. [ 72.950066][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959092][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969949][ T5607] veth1_macvtap: entered promiscuous mode [ 73.003702][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.026130][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.034611][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.054704][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.093176][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.103695][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.114674][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.141917][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.151662][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.179662][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.189689][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.198478][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.201744][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.227725][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.239193][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.261719][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.261851][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273995][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.387828][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.401613][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.432320][ T189] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 73.463774][ T189] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 73.473911][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.483057][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.515440][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.530297][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.583946][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.592716][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.611214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.619709][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.736921][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 74.238731][ T5839] NFSD: Failed to start, no listeners configured. [ 74.242562][ T5817] ceph: No mds server is up or the cluster is laggy [ 74.259929][ T189] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 74.434539][ T5856] tipc: Started in network mode [ 74.447063][ T5856] tipc: Node identity , cluster identity 4711 [ 74.465116][ T5856] tipc: Failed to set node id, please configure manually [ 74.492095][ T5856] tipc: Enabling of bearer rejected, failed to enable media [ 74.690096][ T5859] NFSD: Failed to start, no listeners configured. [ 74.804267][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 74.884545][ T5885] Zero length message leads to an empty skb [ 74.915694][ T5619] Bluetooth: hci1: command tx timeout [ 74.915700][ T4928] Bluetooth: hci4: command tx timeout [ 74.925518][ T4928] Bluetooth: hci2: command tx timeout [ 74.995816][ T4928] Bluetooth: hci3: command tx timeout [ 74.995823][ T5619] Bluetooth: hci0: command tx timeout [ 75.644108][ T1149] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.659567][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 75.739483][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29'. [ 75.885386][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 76.015392][ T5863] NFSD: Unable to initialize client recovery tracking! (-110) [ 76.025530][ T5863] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 76.035185][ T5863] NFSD: starting 90-second grace period (net f000045a) [ 76.437401][ T5945] tipc: Started in network mode [ 76.442357][ T5945] tipc: Node identity 1001001, cluster identity 4711 [ 76.449414][ T5945] tipc: Node number set to 16781313 [ 76.456349][ T5945] tipc: New replicast peer: 127.0.0.1 [ 76.462082][ T5945] tipc: Enabled bearer , priority 10 [ 76.581886][ T5875] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.590424][ T5875] svc: failed to register nfsaclv3 RPC service (errno 111). [ 76.611134][ T5875] failed to unregister udp with rpcbind [ 76.625428][ T5875] svc: failed to register nfsdv3 RPC service (errno 97). [ 76.633397][ T5875] svc: failed to register nfsaclv3 RPC service (errno 97). [ 76.640938][ T5875] failed to unregister udp with rpcbind [ 76.830118][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 77.107463][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 77.118408][ T5975] netlink: 268 bytes leftover after parsing attributes in process `syz.2.50'. [ 77.130011][ T5976] bridge0: port 3(syz_tun) entered blocking state [ 77.137737][ T5976] bridge0: port 3(syz_tun) entered disabled state [ 77.151109][ T5976] syz_tun: entered allmulticast mode [ 77.172996][ T5976] syz_tun: entered promiscuous mode [ 77.181941][ T5976] bridge0: port 3(syz_tun) entered blocking state [ 77.189954][ T5976] bridge0: port 3(syz_tun) entered listening state [ 77.200993][ T1149] bridge0: port 3(syz_tun) entered disabled state [ 77.431423][ T5991] tipc: Started in network mode [ 77.437279][ T5991] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 77.763168][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 77.763184][ T30] audit: type=1400 audit(1785136457.919:225): avc: denied { map_create } for pid=6003 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.790118][ T30] audit: type=1400 audit(1785136457.919:226): avc: denied { map_read map_write } for pid=6003 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.842450][ T30] audit: type=1400 audit(1785136457.999:227): avc: denied { read write } for pid=6007 comm="syz.1.63" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.867579][ T30] audit: type=1400 audit(1785136457.999:228): avc: denied { open } for pid=6007 comm="syz.1.63" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.892196][ T30] audit: type=1400 audit(1785136457.999:229): avc: denied { ioctl } for pid=6007 comm="syz.1.63" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.916944][ T5957] NFSD: Unable to initialize client recovery tracking! (-110) [ 77.916975][ T5957] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 77.916985][ T5957] NFSD: starting 90-second grace period (net f000045a) [ 77.996467][ T30] audit: type=1400 audit(1785136458.159:230): avc: denied { create } for pid=6010 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.018557][ T30] audit: type=1400 audit(1785136458.159:231): avc: denied { ioctl } for pid=6010 comm="syz.4.64" path="socket:[9314]" dev="sockfs" ino=9314 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.063064][ T30] audit: type=1400 audit(1785136458.159:232): avc: denied { write } for pid=6010 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.128952][ T189] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.174611][ T30] audit: type=1400 audit(1785136458.329:233): avc: denied { create } for pid=6017 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.178309][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 78.195374][ T30] audit: type=1400 audit(1785136458.339:234): avc: denied { write } for pid=6017 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.208397][ T6018] openvswitch: netlink: Message has 4 unknown bytes. [ 78.321020][ T189] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.336728][ T5610] svc: failed to register nfsdv3 RPC service (errno 111). [ 78.345958][ T189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.360429][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.363082][ T5610] svc: failed to register nfsaclv3 RPC service (errno 111). [ 78.368851][ T189] usb 2-1: SerialNumber: syz [ 78.395316][ T5610] failed to unregister tcp with rpcbind [ 78.406539][ T5610] svc: failed to register nfsdv3 RPC service (errno 97). [ 78.419321][ T5610] svc: failed to register nfsaclv3 RPC service (errno 97). [ 78.442283][ T5610] failed to unregister tcp with rpcbind [ 78.819787][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 78.838625][ T144] rpcbind: server 127.0.0.1 not responding, timed out [ 78.972790][ T6032] infiniband syz0: set active [ 78.978073][ T6032] infiniband syz0: added veth0 [ 78.997181][ T6032] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 79.013656][ T6032] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 79.031283][ T6032] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 79.075008][ T6032] RDS/IB: syz0: added [ 79.081086][ T6032] smc: adding ib device syz0 with port count 1 [ 79.088858][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 79.095769][ T6032] smc: ib device syz0 port 1 has no pnetid [ 79.120719][ T189] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 79.147363][ T189] usb 2-1: USB disconnect, device number 2 [ 79.257715][ T6052] smc: net device lo applied user defined pnetid SYZ0 [ 79.607352][ T1220] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 79.619282][ T6041] ceph: No mds server is up or the cluster is laggy [ 79.740768][ T6051] rdma_rxe: rxe_newlink: failed to add lo [ 79.943104][ T6066] tipc: Started in network mode [ 79.949634][ T6066] tipc: Node identity 0010000000000000002, cluster identity 1 [ 79.958162][ T6037] NFSD: Unable to initialize client recovery tracking! (-110) [ 79.968587][ T6037] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 79.979121][ T6037] NFSD: starting 90-second grace period (net f000045a) [ 79.987702][ T6066] tipc: Enabling of bearer rejected, failed to enable media [ 79.995726][ T189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.173245][ T189] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 80.197085][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.218023][ T189] usb 2-1: Product: syz [ 80.226158][ T189] usb 2-1: Manufacturer: syz [ 80.230986][ T189] usb 2-1: SerialNumber: syz [ 80.526702][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 80.786930][ T5343] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 81.262802][ T9] cfg80211: failed to load regulatory.db [ 81.271717][ T6104] svc: failed to register nfsdv3 RPC service (errno 111). [ 81.291305][ T6104] svc: failed to register nfsaclv3 RPC service (errno 111). [ 81.314726][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 81.332864][ T6088] ceph: No mds server is up or the cluster is laggy [ 81.421049][ T6105] NFSD: Failed to start, no listeners configured. [ 81.462379][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 81.488492][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 82.025889][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 82.295927][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 82.394729][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 82.413847][ T6148] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 82.480910][ T189] ax88179_178a 2-1:1.0: probe with driver ax88179_178a failed with error -71 [ 82.508930][ T189] usb 2-1: USB disconnect, device number 3 [ 82.664745][ T1222] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 82.805902][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 82.845633][ T6132] ceph: No mds server is up or the cluster is laggy [ 82.999267][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 83.010161][ T6162] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.174237][ T6144] ceph: No mds server is up or the cluster is laggy [ 83.196166][ T1222] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 83.401482][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 83.401498][ T30] audit: type=1400 audit(1785136463.549:248): avc: denied { create } for pid=6174 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.484647][ T30] audit: type=1400 audit(1785136463.599:249): avc: denied { setopt } for pid=6174 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.518991][ T30] audit: type=1400 audit(1785136463.599:250): avc: denied { bind } for pid=6174 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.547549][ T30] audit: type=1400 audit(1785136463.599:251): avc: denied { write } for pid=6174 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.612764][ T30] audit: type=1400 audit(1785136463.769:252): avc: denied { setopt } for pid=6186 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.655025][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 83.868823][ T6153] NFSD: Unable to initialize client recovery tracking! (-110) [ 83.880348][ T6153] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 83.895845][ T6153] NFSD: starting 90-second grace period (net f000045a) [ 83.942912][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.133'. [ 84.620083][ T6236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.149'. [ 84.659107][ T30] audit: type=1400 audit(1785136464.819:253): avc: denied { create } for pid=6237 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.680695][ T30] audit: type=1400 audit(1785136464.819:254): avc: denied { ioctl } for pid=6237 comm="syz.4.150" path="socket:[10658]" dev="sockfs" ino=10658 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.722656][ T30] audit: type=1400 audit(1785136464.839:255): avc: denied { bind } for pid=6237 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.759402][ T30] audit: type=1400 audit(1785136464.839:256): avc: denied { connect } for pid=6237 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.786695][ T30] audit: type=1400 audit(1785136464.839:257): avc: denied { write } for pid=6237 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.891673][ T6246] FAULT_INJECTION: forcing a failure. [ 84.891673][ T6246] name failslab, interval 1, probability 0, space 0, times 1 [ 84.906118][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.4.154 Not tainted syzkaller #0 PREEMPT(full) [ 84.906143][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 84.906153][ T6246] Call Trace: [ 84.906159][ T6246] [ 84.906168][ T6246] dump_stack_lvl+0x100/0x190 [ 84.906195][ T6246] should_fail_ex.cold+0x5/0xa [ 84.906217][ T6246] should_failslab+0xc2/0x120 [ 84.906241][ T6246] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.906261][ T6246] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 84.906288][ T6246] ? ptlock_alloc+0x1f/0x70 [ 84.906319][ T6246] ptlock_alloc+0x1f/0x70 [ 84.906344][ T6246] pte_alloc_one+0x82/0x3d0 [ 84.906362][ T6246] do_fault+0x86c/0x1750 [ 84.906390][ T6246] __handle_mm_fault+0x187d/0x2a00 [ 84.906422][ T6246] ? reacquire_held_locks+0xce/0x1e0 [ 84.906445][ T6246] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.906476][ T6246] ? lock_vma_under_rcu+0x17c/0x590 [ 84.906516][ T6246] handle_mm_fault+0x37b/0xa30 [ 84.906547][ T6246] do_user_addr_fault+0x5a3/0x12f0 [ 84.906581][ T6246] exc_page_fault+0x6f/0xd0 [ 84.906601][ T6246] asm_exc_page_fault+0x26/0x30 [ 84.906618][ T6246] RIP: 0033:0x7f8b2c8727b6 [ 84.906634][ T6246] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 84.906650][ T6246] RSP: 002b:00007ffd8c210960 EFLAGS: 00010246 [ 84.906664][ T6246] RAX: 000000110c404000 RBX: ffffffff8b706e45 RCX: 0000000000000000 [ 84.906675][ T6246] RDX: 0000000000000e45 RSI: 00000000000001b9 RDI: 0000000000000001 [ 84.906685][ T6246] RBP: 0000000000000000 R08: 00007f8b2cc10000 R09: 00007f8b2cc12000 [ 84.906695][ T6246] R10: 000000008b706e49 R11: 0000000000000009 R12: 00007f8b2cc26038 [ 84.906704][ T6246] R13: 00000000000007e9 R14: ffffffff8b70600d R15: 00007f8b2d755720 [ 84.906715][ T6246] ? cfg802154_netdev_notifier_call+0x1d/0xad0 [ 84.906738][ T6246] ? wpan_phy_unregister+0x205/0x410 [ 84.906765][ T6246] [ 84.906903][ T6246] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 85.655304][ T6232] NFSD: Unable to initialize client recovery tracking! (-110) [ 85.667944][ T6232] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 85.677470][ T6232] NFSD: starting 90-second grace period (net f00003c6) [ 85.684256][ T6255] rdma_rxe: rxe_newlink: failed to add lo [ 85.777295][ T6260] rdma_rxe: rxe_newlink: failed to add lo [ 86.070284][ T6268] NFSD: Failed to start, no listeners configured. [ 86.078654][ T6270] rdma_rxe: rxe_newlink: failed to add lo [ 86.144801][ T6277] bridge0: port 3(veth1_to_bridge) entered blocking state [ 86.157221][ T6277] bridge0: port 3(veth1_to_bridge) entered disabled state [ 86.165616][ T6277] veth1_to_bridge: entered allmulticast mode [ 86.188946][ T6277] veth1_to_bridge: entered promiscuous mode [ 86.201122][ T6277] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.238910][ T6277] bridge0: port 3(veth1_to_bridge) entered blocking state [ 86.247346][ T6277] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 86.297385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.311067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.324002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.327697][ T6270] smc: removing ib device syz0 [ 86.336282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.337035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.365848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.378222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.390516][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.402957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.415301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.512336][ T6289] tipc: Enabled bearer , priority 10 [ 86.528510][ T6291] tipc: Disabling bearer [ 86.735297][ T1220] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.896308][ T1220] usb 5-1: not running at top speed; connect to a high speed hub [ 86.931714][ T1220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 86.971765][ T6270] smbdirect: ib_dev[syz0] removed [ 87.011704][ T1220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 87.090869][ T1220] usb 5-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 87.153335][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.208132][ T1220] usb 5-1: Product: syz [ 87.237578][ T1220] usb 5-1: Manufacturer: syz [ 87.284247][ T1220] usb 5-1: SerialNumber: syz [ 87.377352][ T6292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.418210][ T6292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.720521][ T6292] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 87.825692][ T6315] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 87.875638][ T6292] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 87.969817][ T6316] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 88.005047][ T6292] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 88.053918][ T6292] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 88.149856][ T6292] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 88.166710][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 88.190499][ T1220] ax88179_178a 5-1:1.0: probe with driver ax88179_178a failed with error -71 [ 88.348860][ T1220] usb 5-1: USB disconnect, device number 2 [ 89.085141][ T6332] bridge0: port 3(syz_tun) entered blocking state [ 89.256145][ T6332] bridge0: port 3(syz_tun) entered disabled state [ 89.334638][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 89.334653][ T30] audit: type=1400 audit(1785136469.489:264): avc: denied { getopt } for pid=6339 comm="syz.0.188" laddr=127.0.0.1 lport=60155 faddr=127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.374967][ T6332] syz_tun: entered allmulticast mode [ 89.458145][ T6332] syz_tun: entered promiscuous mode [ 89.505843][ T6332] bridge0: port 3(syz_tun) entered blocking state [ 89.512470][ T6332] bridge0: port 3(syz_tun) entered listening state [ 89.594606][ T6335] bridge0: port 3(syz_tun) entered disabled state [ 90.299251][ T30] audit: type=1400 audit(1785136470.459:265): avc: denied { mount } for pid=6360 comm="syz.3.196" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.362784][ T6360] FAULT_INJECTION: forcing a failure. [ 90.362784][ T6360] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.433952][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 90.433977][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.433987][ T6360] Call Trace: [ 90.433992][ T6360] [ 90.434008][ T6360] dump_stack_lvl+0x100/0x190 [ 90.434034][ T6360] should_fail_ex.cold+0x5/0xa [ 90.434057][ T6360] get_futex_key+0x1d2/0x14f0 [ 90.434084][ T6360] ? __pfx_get_futex_key+0x10/0x10 [ 90.434116][ T6360] futex_wait_setup+0x91/0x540 [ 90.434142][ T6360] __futex_wait+0x19f/0x300 [ 90.434162][ T6360] ? __pfx___futex_wait+0x10/0x10 [ 90.434183][ T6360] ? __pfx_futex_wake_mark+0x10/0x10 [ 90.434204][ T6360] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 90.434228][ T6360] ? __hrtimer_setup+0x208/0x330 [ 90.434255][ T6360] ? ktime_add_safe+0x60/0x70 [ 90.434282][ T6360] futex_wait+0xe6/0x370 [ 90.434300][ T6360] ? __pfx_futex_wait+0x10/0x10 [ 90.434322][ T6360] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 90.434354][ T6360] do_futex+0x265/0x440 [ 90.434380][ T6360] ? __pfx_do_futex+0x10/0x10 [ 90.434404][ T6360] ? ktime_get+0x22c/0x320 [ 90.434424][ T6360] ? lockdep_hardirqs_on+0x78/0x100 [ 90.434447][ T6360] __x64_sys_futex+0x34f/0x4d0 [ 90.434476][ T6360] ? __pfx___x64_sys_futex+0x10/0x10 [ 90.434516][ T6360] do_syscall_64+0x115/0x870 [ 90.434535][ T6360] ? clear_bhb_loop+0x40/0x90 [ 90.434556][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.434574][ T6360] RIP: 0033:0x7fd32959de99 [ 90.434590][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.434605][ T6360] RSP: 002b:00007ffcc0773728 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.434622][ T6360] RAX: ffffffffffffffda RBX: 00000000000160d7 RCX: 00007fd32959de99 [ 90.434633][ T6360] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd329825fac [ 90.434643][ T6360] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 90.434653][ T6360] R10: 00007ffcc0773830 R11: 0000000000000246 R12: 00007ffcc0773850 [ 90.434663][ T6360] R13: 00007fd329825fac R14: 0000000000016109 R15: 00007ffcc0773830 [ 90.434685][ T6360] [ 90.721935][ T30] audit: type=1400 audit(1785136470.879:266): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 91.290372][ T6382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.201'. [ 91.305328][ C0] net_ratelimit: 17857 callbacks suppressed [ 91.305347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.323636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.335999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.339364][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 91.348319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.368997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.381373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.393778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.406049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.414809][ T6382] tipc: Enabled bearer , priority 10 [ 91.418293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.436585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.439342][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 91.471048][ T30] audit: type=1400 audit(1785136471.629:267): avc: denied { bind } for pid=6380 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.536412][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 91.551260][ T30] audit: type=1400 audit(1785136471.679:268): avc: denied { write } for pid=6380 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.664871][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 92.527694][ T1220] tipc: Node number set to 3145728 [ 92.620835][ T30] audit: type=1400 audit(1785136472.779:269): avc: denied { create } for pid=6409 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.743251][ T30] audit: type=1400 audit(1785136472.809:270): avc: denied { setopt } for pid=6409 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.860879][ T30] audit: type=1400 audit(1785136472.839:271): avc: denied { ioctl } for pid=6409 comm="syz.2.212" path="socket:[11126]" dev="sockfs" ino=11126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.953634][ T30] audit: type=1400 audit(1785136472.839:272): avc: denied { bind } for pid=6409 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.974498][ T30] audit: type=1400 audit(1785136472.849:273): avc: denied { map } for pid=6409 comm="syz.2.212" path="socket:[11128]" dev="sockfs" ino=11128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.276779][ T6437] lo speed is unknown, defaulting to 1000 [ 93.296887][ T6437] lo speed is unknown, defaulting to 1000 [ 93.311096][ T6437] lo speed is unknown, defaulting to 1000 [ 93.336893][ T6438] smc: net device veth0 applied user defined pnetid SYZ0 [ 93.368782][ T6438] smc: net device lo applied user defined pnetid SYZ1 [ 93.734666][ T6443] rdma_rxe: rxe_newlink: failed to add veth0 [ 93.828848][ T6435] infiniband syz0: set active [ 93.861208][ T6435] infiniband syz0: added veth0 [ 94.023626][ T6435] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 94.128768][ T6435] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 94.173275][ T6435] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.278820][ T6435] RDS/IB: syz0: added [ 94.293228][ T6435] smc: adding ib device syz0 with port count 1 [ 94.319835][ T6435] smc: ib device syz0 port 1 has no pnetid [ 95.811966][ T6477] tipc: Enabled bearer , priority 1 [ 95.852097][ T6476] tipc: Resetting bearer [ 95.895890][ T6476] tipc: Disabling bearer [ 96.300182][ T6437] infiniband syz1: set active [ 96.304978][ T1220] lo speed is unknown, defaulting to 1000 [ 96.315283][ C0] net_ratelimit: 18232 callbacks suppressed [ 96.315302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.320520][ T6437] infiniband syz1: added lo [ 96.321544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.350044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.362414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.374799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.387083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.387562][ T6437] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 96.399431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.399690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.438893][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.451193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.453669][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 96.453682][ T30] audit: type=1400 audit(1785136476.609:276): avc: denied { create } for pid=6479 comm="syz.2.236" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.505461][ T6437] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 96.524143][ T6437] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 96.539520][ T30] audit: type=1400 audit(1785136476.659:277): avc: denied { ioctl } for pid=6479 comm="syz.2.236" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11346 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.604803][ T6437] RDS/IB: syz1: added [ 96.611976][ T6437] smc: adding ib device syz1 with port count 1 [ 96.619370][ T30] audit: type=1400 audit(1785136476.659:278): avc: denied { read } for pid=6479 comm="syz.2.236" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.644226][ T6437] smc: ib device syz1 port 1 has no pnetid [ 96.651754][ T6437] lo speed is unknown, defaulting to 1000 [ 96.661340][ T5611] lo speed is unknown, defaulting to 1000 [ 96.848232][ T6437] lo speed is unknown, defaulting to 1000 [ 97.032069][ T6437] lo speed is unknown, defaulting to 1000 [ 97.217706][ T6437] lo speed is unknown, defaulting to 1000 [ 97.315218][ C0] sched: DL replenish lagged too much [ 97.377863][ T30] audit: type=1400 audit(1785136477.539:279): avc: denied { create } for pid=6482 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 97.442995][ T30] audit: type=1400 audit(1785136477.569:280): avc: denied { read write } for pid=6482 comm="syz.2.237" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.538767][ T30] audit: type=1400 audit(1785136477.569:281): avc: denied { open } for pid=6482 comm="syz.2.237" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.613898][ T30] audit: type=1400 audit(1785136477.699:282): avc: denied { name_connect } for pid=6484 comm="syz.2.238" dest=5000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.682914][ T6437] lo speed is unknown, defaulting to 1000 [ 97.713497][ T6487] [ 97.716004][ T6487] ============================= [ 97.721714][ T6487] WARNING: suspicious RCU usage [ 97.727002][ T6487] syzkaller #0 Not tainted [ 97.731740][ T6487] ----------------------------- [ 97.736653][ T6487] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 97.744801][ T6487] [ 97.744801][ T6487] other info that might help us debug this: [ 97.744801][ T6487] [ 97.755731][ T6487] [ 97.755731][ T6487] rcu_scheduler_active = 2, debug_locks = 1 [ 97.763831][ T6487] 1 lock held by syz.2.239/6487: [ 97.768808][ T6487] #0: ffff88807c561c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 97.779330][ T6487] [ 97.779330][ T6487] stack backtrace: [ 97.785249][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.2.239 Not tainted syzkaller #0 PREEMPT(full) [ 97.785276][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.785287][ T6487] Call Trace: [ 97.785294][ T6487] [ 97.785302][ T6487] dump_stack_lvl+0x100/0x190 [ 97.785332][ T6487] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 97.785367][ T6487] xfrm_do_migrate_state+0x2463/0x2f10 [ 97.785400][ T6487] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 97.785421][ T6487] ? __asan_memset+0x23/0x50 [ 97.785440][ T6487] ? __nla_validate_parse+0x1e7/0x28b0 [ 97.785477][ T6487] ? __nla_parse+0x40/0x60 [ 97.785499][ T6487] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 97.785523][ T6487] ? xfrm_user_rcv_msg+0x483/0xd80 [ 97.785540][ T6487] xfrm_user_rcv_msg+0x483/0xd80 [ 97.785565][ T6487] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 97.785585][ T6487] ? kfree_skbmem+0x19f/0x210 [ 97.785616][ T6487] ? consume_skb+0xd6/0x110 [ 97.785669][ T6487] ? rcu_is_watching+0x12/0xc0 [ 97.785697][ T6487] ? trace_contention_end+0x126/0x160 [ 97.785723][ T6487] ? __mutex_lock+0x26d/0x1bd0 [ 97.785748][ T6487] netlink_rcv_skb+0x159/0x420 [ 97.785767][ T6487] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 97.785787][ T6487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.785832][ T6487] xfrm_netlink_rcv+0x71/0x90 [ 97.785862][ T6487] netlink_unicast+0x585/0x850 [ 97.785886][ T6487] ? __pfx_netlink_unicast+0x10/0x10 [ 97.785905][ T6487] ? __pfx_sock_has_perm+0x10/0x10 [ 97.785944][ T6487] netlink_sendmsg+0x8b0/0xda0 [ 97.785967][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.785988][ T6487] ? selinux_socket_sendmsg+0x198/0x2f0 [ 97.786018][ T6487] ____sys_sendmsg+0xa4d/0xbe0 [ 97.786045][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.786066][ T6487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.786106][ T6487] ___sys_sendmsg+0x190/0x1e0 [ 97.786138][ T6487] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.786165][ T6487] ? __lock_acquire+0x49f/0x1a40 [ 97.786216][ T6487] __sys_sendmsg+0x160/0x210 [ 97.786240][ T6487] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.786276][ T6487] do_syscall_64+0x115/0x870 [ 97.786295][ T6487] ? clear_bhb_loop+0x40/0x90 [ 97.786318][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.786337][ T6487] RIP: 0033:0x7f3db779de99 [ 97.786353][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.786372][ T6487] RSP: 002b:00007f3db8591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.786390][ T6487] RAX: ffffffffffffffda RBX: 00007f3db7a25fa0 RCX: 00007f3db779de99 [ 97.786402][ T6487] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 97.786413][ T6487] RBP: 00007f3db7833eaf R08: 0000000000000000 R09: 0000000000000000 [ 97.786424][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.786434][ T6487] R13: 00007f3db7a26038 R14: 00007f3db7a25fa0 R15: 00007fff90958998 [ 97.786458][ T6487] [ 101.325245][ C1] net_ratelimit: 28832 callbacks suppressed [ 101.325263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.325507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.331412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:a2:1a:55:a1:57, vlan:0) [ 101.343306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.355225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.367196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.379135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:a2:1a:55:a1:57, vlan:0) [ 101.391010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.402962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.414929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.335442][ C0] net_ratelimit: 24919 callbacks suppressed [ 106.335462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.335741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.341634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.353609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:a2:1a:55:a1:57, vlan:0) [ 106.365530][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.377978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.389374][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.401284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:a2:1a:55:a1:57, vlan:0) [ 106.413175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.425759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)