last executing test programs: 31.522710183s ago: executing program 1 (id=49): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001e40)=""/4112, 0x1010}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000700)=""/219, 0xdb}], 0x6}, 0x20) 31.462807035s ago: executing program 1 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000e80)=@newqdisc={0x190, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x160, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x4, 0x0, 0x4}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_MAX_P={0x8, 0x4, 0xffffe851}]}}]}, 0x190}}, 0x0) 31.462514752s ago: executing program 1 (id=52): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x30, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0xdd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 31.412410222s ago: executing program 1 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r1) socket$inet(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xffdd) 31.412227924s ago: executing program 0 (id=56): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@ip={@local, @local, 0xff000000, 0xffffff00, '\x00', '\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{}, {0x3e8}]}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@local, @local, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x260) sendto$inet(r0, &(0x7f0000000100)="1234", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) 31.35216996s ago: executing program 0 (id=58): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4090) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40000010) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 31.351932709s ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10 1\n', 0x5) close(r0) 31.272995281s ago: executing program 0 (id=60): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000400)="0123456789abcdef", 0x10) read(r2, &(0x7f0000000500)=""/256, 0x100) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000600)=""/64, &(0x7f0000000300)=0x40) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000700)=""/64, &(0x7f0000000300)=0x40) 31.272709295s ago: executing program 0 (id=62): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x800) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @random="fe5400000002"}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000200)={@broadcast, @random="fe5400000002", @void, {@generic={0x8, "0008020273000000"}}}, 0x0) sendto$llc(r0, &(0x7f0000000300)="12345678", 0x8, 0x0, 0x0, 0x0) syz_emit_ethernet(0x17, &(0x7f0000000400)={@broadcast, @random="fe5400000002", @void, {@generic={0x9, "000902020900000000"}}}, 0x0) 31.182609112s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x3) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 30.702022847s ago: executing program 1 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x18, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x18, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) 30.612729644s ago: executing program 1 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) (async) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 28.152944095s ago: executing program 2 (id=107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x400, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x400, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) sendto$inet(r1, &(0x7f0000000900)='\x00', 0x100000, 0x40, 0x0, 0x0) r3 = syz_io_uring_setup(0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000800)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)='\x00', 0x100000, 0x100}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) close(r1) 28.052390697s ago: executing program 2 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@remote, 0x5000, 0x0, 0x1}}, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000400)="00010034010100000006002c0008000000010000500050000000000000000064ac140002ac140002ac140002", 0x34, 0x0, &(0x7f0000000500)={0x2, 0x2290, @remote}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000800450000280000200040060000ac140002ac1400021234500000000000000000005002200000000000"], &(0x7f0000000700)={0x0, 0x2, [0xe, 0x1c]}) 27.53377149s ago: executing program 2 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "00010202020202020202020202020202"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x2, 0xc, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0xa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x3, 0x3}]}}}]}]}}]}, 0x98}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000700)="0000000000010000000000028100000a08004500002000000000401100007f0000017f00000112341234000c000000000000", 0x32, 0x0, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="000000000001"}, 0x14) 27.472717793s ago: executing program 2 (id=111): r0 = socket$inet_sctp(0x2, 0x805, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_sctp(0x2, 0x805, 0x84) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) 27.472360775s ago: executing program 2 (id=113): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 27.409765661s ago: executing program 2 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) close(r1) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n\x00', 0x76) close(r2) r3 = socket(0x2, 0x1, 0x0) connect(r3, &(0x7f0000001000)=@in={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000002000)="8000005c00000001000000000000000200000000000000000000000600000024000000010000000000000001000000030000000a7465737468616e646c6500000000000600000010040400ffffffffffff0000000000000000000000040000000000000000", 0x60) nanosleep(&(0x7f0000000c00)={0x0, 0xbebc200}, 0x0) 15.581049631s ago: executing program 32 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x3) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 15.532798855s ago: executing program 33 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) (async) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x2, 0x0) 15.432749512s ago: executing program 3 (id=142): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'veth0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'veth0\x00', 0x1}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/6, 0x6}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 15.247198733s ago: executing program 3 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @loopback}, 0x10) 15.246889581s ago: executing program 3 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x100, &(0x7f0000001000), 0x1000, 0x0, 0x0, 0x0) r1 = accept$inet(r0, 0x0, 0x0) (async) write(r1, &(0x7f0000000100)="63657068207630323700000000000000007f00000100000000000000007f00000101000000000000000000000000000000000000000000000000070400000000000000000000000000000000000000000100000000000000040000000000040000000000000001000000000000000000000000006505b221", 0x90) (async) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') 14.321628927s ago: executing program 3 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x1, 0x1000001}}}, 0x18}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e00000000000000"], 0x38}}, 0x0) nanosleep(&(0x7f0000000400)={0x1, 0xbebc200}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b5000280000000000000000010000010000126700000000000000000000000011223344112233445566000000000000"}}}, 0x0) 13.44056173s ago: executing program 3 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x1}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth0\x00', {0x1}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x1}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'lo\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000021001122334455000a42420300010102010000"], 0x0) 13.417543278s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000090)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000a0)='inet 2049\n\x00', 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./rpc_pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/cache/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n\x00', 0x77) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = socket(0x2, 0x1, 0x0) connect(r3, &(0x7f0000000600)=@in={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000700)="800000c8123456780000000000000002000186a300000003000000000000000600000034000000010000000000000001000000030000000a7465737468616e646c650000000000060000001c040400ffffffffff00000000000000010000000000000000000000000000002c0000000100"/152, 0x98) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 13.416088426s ago: executing program 4 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000440)='ceph v027\x00'/397, 0x119) write(r1, &(0x7f0000000600)="01ffffffffffffffff0100000001000000000000000000000007010000000000000000000000000000040000000000040000000000000001000000000001000000000000000000000000006505b2210000000000", 0x54) mount(&(0x7f0000000400)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='ceph\x00', 0x0, &(0x7f0000000700)='ms_mode=legacy\x00') 12.497260572s ago: executing program 4 (id=148): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1f90, @empty}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x24, &(0x7f0000000300)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r2, &(0x7f0000000900), 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000500)="00000000000000040000000000000000000000000600000100000000", 0x1c, 0x0, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) sendto$inet(r3, &(0x7f0000000500)="00000000000000040000000000000000000000000700000100000000", 0x1c, 0x0, &(0x7f0000000600)={0x2, 0x1f90, @loopback}, 0x10) 12.355655561s ago: executing program 4 (id=149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a0000010000000000000000") ioctl(r0, 0x8914, &(0x7f0000000300)="76657468303a300000000000000000000100"/32) ioctl(r0, 0x890b, &(0x7f0000000000)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) 12.348788891s ago: executing program 34 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) close(r1) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 testuser\n\x00', 0x76) close(r2) r3 = socket(0x2, 0x1, 0x0) connect(r3, &(0x7f0000001000)=@in={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000002000)="8000005c00000001000000000000000200000000000000000000000600000024000000010000000000000001000000030000000a7465737468616e646c6500000000000600000010040400ffffffffffff0000000000000000000000040000000000000000", 0x60) nanosleep(&(0x7f0000000c00)={0x0, 0xbebc200}, 0x0) 12.324073071s ago: executing program 4 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000\n', 0x5d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\n', 0x2) nanosleep(&(0x7f0000000700)={0x0, 0x2faf080}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000800)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000900)="8000005c000000010000000000000002000186a300000003000000000000000600000018000000010000000000000001000000010000000401020304000000060000001c040400ffffffffff00"/96, 0x60) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 2.442287351s ago: executing program 6 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x388b) 2.37285434s ago: executing program 6 (id=218): syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400000010203010902290002010080fa0904000001ff000000070581031000010904010001ff00000007058202000201"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x1, &(0x7f0000000200)="010000000000000000000000000000000002000000000000000000000000000001000000000000000000000000000000000200000000000000000000000000000500000000000000", 0x48) bind(r0, &(0x7f0000000300)=@generic={0x8, '\x00\x00\x00\x00d\x00'}, 0x10) r1 = socket(0x8, 0x2, 0x0) ioctl(r1, 0x400861f2, &(0x7f0000000400)="0000000000000000dc0500006e61733000000000") ioctl(r0, 0x400461f1, &(0x7f0000000500)="020000006e61733000000000000000000100"/32) 1.909745509s ago: executing program 5 (id=221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0), 0x2c0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x12345678}]}}}}}}}, 0x0) 1.909513066s ago: executing program 5 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) syz_emit_ethernet(0x800, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x0, 0x1234, 0x4000, 0x40, 0x11, 0x0, @remote, @remote}, '\x00'/2000}}}}, 0x0) 1.823936548s ago: executing program 5 (id=223): unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x6, 0x1dcd6500}, 0x0) 910.421042ms ago: executing program 5 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@setlink={0x3c, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_IFNAME={0x0, 0x3, 'bridge_slave_0\x00'}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @bridge_slave={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x0, 0x8, 0x1}]}}}]}, 0x3c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write(r1, &(0x7f0000000300)="00112233445500112233445608004500001c00000000401100000a0000010a0000020001000200080000", 0x2a) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="00112233445500112233445608004500001c00000000401100000a0000010a0000020001000200080000"], 0x0) 910.17015ms ago: executing program 5 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x0, 0xd, &(0x7f0000000300)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) write(r1, &(0x7f0000000200)='hello_world_tcp_nv_test', 0x17) write(r2, &(0x7f0000000200)='hello_world_tcp_nv_test', 0x17) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 221.648655ms ago: executing program 6 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c5985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x388b) 152.623079ms ago: executing program 6 (id=227): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x260, 0x1c8, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syz_tun\x00'}) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000280)={'syz_tun\x00', @ifru_mtu=0x1f4}) syz_emit_ethernet(0x3de, &(0x7f0000000400)=ANY=[@ANYBLOB="00112233445566778899aabb0800450003d4123460004001000001020304080808080800000011220001"], 0x0) syz_emit_ethernet(0x42e, &(0x7f0000000800)=ANY=[@ANYBLOB="00112233445566778899aabb08004500042412344078400100000102030408080808"], 0x0) 76.48009ms ago: executing program 6 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "00010202020202020202020202020202"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}}}]}]}}]}, 0x98}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000700)="0000000000010000000000028100000a08004500002000000000401100007f0000017f00000112341234000c000000000000", 0x32, 0x0, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="000000000001"}, 0x14) 408.426µs ago: executing program 5 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000300)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10, @random="aaaaaaaaaa01"}, 0x10) listen(r2, 0x5) write(r0, &(0x7f0000000400)="aaaaaaaaaa01bbbbbbbbbb02000410206f", 0x11) write(r0, &(0x7f0000000500)="aaaaaaaaaa01bbbbbbbbbb02000510200101", 0x12) 0s ago: executing program 6 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/29, 0x1e) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12315' (ED25519) to the list of known hosts. [ 40.343034][ T42] audit: type=1400 audit(1785767511.303:116): avc: denied { name_bind } for pid=5647 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.382290][ T42] audit: type=1400 audit(1785767511.343:117): avc: denied { execute } for pid=5648 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.389409][ T42] audit: type=1400 audit(1785767511.343:118): avc: denied { execute_no_trans } for pid=5648 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.403812][ T42] audit: type=1400 audit(1785767511.363:119): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.450674][ T42] audit: type=1400 audit(1785767511.403:120): avc: denied { write } for pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.696535][ T42] audit: type=1400 audit(1785767511.653:121): avc: denied { write } for pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.747100][ T42] audit: type=1400 audit(1785767511.713:122): avc: denied { write } for pid=5659 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.828993][ T42] audit: type=1400 audit(1785767511.783:123): avc: denied { write } for pid=5663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.882686][ T42] audit: type=1400 audit(1785767511.843:124): avc: denied { write } for pid=5666 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.963805][ T42] audit: type=1400 audit(1785767511.923:125): avc: denied { write } for pid=5669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.024426][ T5648] cgroup: Unknown subsys name 'net' [ 43.175290][ T5648] cgroup: Unknown subsys name 'cpuset' [ 43.181788][ T5648] cgroup: Unknown subsys name 'rlimit' [ 43.377348][ T5721] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.247793][ T5648] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.901996][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 47.902009][ T42] audit: type=1400 audit(1785767518.853:158): avc: denied { execmem } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.077889][ T42] audit: type=1400 audit(1785767519.033:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.085164][ T42] audit: type=1400 audit(1785767519.033:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.093110][ T42] audit: type=1400 audit(1785767519.033:161): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.100532][ T42] audit: type=1400 audit(1785767519.043:162): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[5086]" dev="sockfs" ino=5086 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.124818][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.129033][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.136358][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.137380][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.139738][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.143160][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.144916][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.145310][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.145772][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.146218][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.147420][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.148638][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.149627][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.150210][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.150488][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.151848][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.152636][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.155912][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.160177][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.160213][ T42] audit: type=1400 audit(1785767519.123:163): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.160241][ T42] audit: type=1400 audit(1785767519.123:164): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.161136][ T42] audit: type=1400 audit(1785767519.123:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.165226][ T42] audit: type=1400 audit(1785767519.123:166): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.168833][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.192797][ T42] audit: type=1400 audit(1785767519.153:167): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.743749][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.747803][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.752082][ T5734] bridge_slave_0: entered allmulticast mode [ 48.756204][ T5734] bridge_slave_0: entered promiscuous mode [ 48.802245][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.804614][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.806907][ T5734] bridge_slave_1: entered allmulticast mode [ 48.809671][ T5734] bridge_slave_1: entered promiscuous mode [ 48.861156][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.863657][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.866053][ T5738] bridge_slave_0: entered allmulticast mode [ 48.868936][ T5738] bridge_slave_0: entered promiscuous mode [ 48.895098][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.897511][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.899893][ T5738] bridge_slave_1: entered allmulticast mode [ 48.902961][ T5738] bridge_slave_1: entered promiscuous mode [ 48.907810][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.915037][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.958020][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.960765][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.963297][ T5739] bridge_slave_0: entered allmulticast mode [ 48.966187][ T5739] bridge_slave_0: entered promiscuous mode [ 48.977174][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.987847][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.990869][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.993558][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.996265][ T5739] bridge_slave_1: entered allmulticast mode [ 48.999303][ T5739] bridge_slave_1: entered promiscuous mode [ 49.010655][ T5734] team0: Port device team_slave_0 added [ 49.012672][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.016124][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.018648][ T5737] bridge_slave_0: entered allmulticast mode [ 49.021566][ T5737] bridge_slave_0: entered promiscuous mode [ 49.046583][ T5738] team0: Port device team_slave_0 added [ 49.050397][ T5734] team0: Port device team_slave_1 added [ 49.052541][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.054907][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.057273][ T5737] bridge_slave_1: entered allmulticast mode [ 49.060080][ T5737] bridge_slave_1: entered promiscuous mode [ 49.070517][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.075484][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.079597][ T5738] team0: Port device team_slave_1 added [ 49.143222][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.146585][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.149386][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.157337][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.172412][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.174613][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.182601][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.187479][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.189898][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.198725][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.204670][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.210106][ T5739] team0: Port device team_slave_0 added [ 49.218673][ T5739] team0: Port device team_slave_1 added [ 49.221264][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.223629][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.231881][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.258763][ T5737] team0: Port device team_slave_0 added [ 49.279855][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.282151][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.290011][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.295858][ T5737] team0: Port device team_slave_1 added [ 49.316076][ T5738] hsr_slave_0: entered promiscuous mode [ 49.318873][ T5738] hsr_slave_1: entered promiscuous mode [ 49.321883][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.324104][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.332512][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.357084][ T5734] hsr_slave_0: entered promiscuous mode [ 49.359433][ T5734] hsr_slave_1: entered promiscuous mode [ 49.361822][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.363916][ T5734] Cannot create hsr debugfs directory [ 49.374268][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.377332][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.388262][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.427539][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.431234][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.442803][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.461416][ T5739] hsr_slave_0: entered promiscuous mode [ 49.463734][ T5739] hsr_slave_1: entered promiscuous mode [ 49.465798][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 49.467589][ T5739] Cannot create hsr debugfs directory [ 49.592616][ T5737] hsr_slave_0: entered promiscuous mode [ 49.594836][ T5737] hsr_slave_1: entered promiscuous mode [ 49.596948][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 49.598777][ T5737] Cannot create hsr debugfs directory [ 49.879792][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.885976][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.889098][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.893457][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.896201][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.900851][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.904802][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.909369][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.952713][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.962446][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.967050][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.972873][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.976590][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.984050][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.987755][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.995630][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.063852][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.069372][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.072260][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.076201][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.079371][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.083440][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.086579][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.090118][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.180050][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.185440][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.192018][ T5736] Bluetooth: hci1: command tx timeout [ 50.192296][ T5745] Bluetooth: hci0: command tx timeout [ 50.192367][ T5096] Bluetooth: hci3: command tx timeout [ 50.194604][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.196151][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.208455][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.212505][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.217570][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.221554][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.226852][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.260916][ T5745] Bluetooth: hci2: command tx timeout [ 50.265846][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.278388][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.299896][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.302474][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.315362][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.322673][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.325783][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.339527][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.342657][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.362858][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.365179][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.432484][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.469461][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.491107][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.496895][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.507407][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.510506][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.519698][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.522261][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.533838][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.536925][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.543372][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.546445][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.605317][ T5739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.608686][ T5739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.793337][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.802106][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.838868][ T5738] veth0_vlan: entered promiscuous mode [ 50.864656][ T5738] veth1_vlan: entered promiscuous mode [ 50.874897][ T5734] veth0_vlan: entered promiscuous mode [ 50.889180][ T5734] veth1_vlan: entered promiscuous mode [ 50.919228][ T5738] veth0_macvtap: entered promiscuous mode [ 50.928499][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.934135][ T5738] veth1_macvtap: entered promiscuous mode [ 50.947549][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.967810][ T5734] veth0_macvtap: entered promiscuous mode [ 50.975232][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.979794][ T5734] veth1_macvtap: entered promiscuous mode [ 50.989687][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.036962][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.040099][ T5739] veth0_vlan: entered promiscuous mode [ 51.055990][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.071311][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.077689][ T5737] veth0_vlan: entered promiscuous mode [ 51.086985][ T5739] veth1_vlan: entered promiscuous mode [ 51.091686][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.096697][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.109913][ T5737] veth1_vlan: entered promiscuous mode [ 51.152832][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.156200][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.193907][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.197185][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.207225][ T5739] veth0_macvtap: entered promiscuous mode [ 51.212097][ T5739] veth1_macvtap: entered promiscuous mode [ 51.220299][ T5737] veth0_macvtap: entered promiscuous mode [ 51.224524][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.234241][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.238430][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.244564][ T5737] veth1_macvtap: entered promiscuous mode [ 51.266120][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.266671][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.270998][ T120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.276968][ T120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.280360][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.294578][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.309597][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.355154][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.360395][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.364067][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.381103][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.402603][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.410027][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.412921][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.420410][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.421137][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.446594][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.450990][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.476320][ T120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.479641][ T120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.491979][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.497956][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.504346][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508261][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.533210][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.536655][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.550796][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.686158][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 51.686161][ T5920] netlink: 'syz.0.17': attribute type 46 has an invalid length. [ 51.692004][ T5920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 51.801285][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 51.856163][ T5947] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.30'. [ 51.869020][ T5950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'. [ 51.875007][ T5950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32'. [ 51.944913][ T5962] netlink: 'syz.2.38': attribute type 2 has an invalid length. [ 51.949277][ T5962] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 52.088078][ T5975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.44'. [ 52.127048][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.49'. [ 52.135171][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.49'. [ 52.203101][ T5993] netlink: 'syz.1.52': attribute type 11 has an invalid length. [ 52.205602][ T5993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.52'. [ 52.224683][ T5996] netlink: 'syz.0.53': attribute type 46 has an invalid length. [ 52.227093][ T5996] netlink: 'syz.0.53': attribute type 28 has an invalid length. [ 52.227179][ T5997] warning: `syz.3.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.253821][ T5999] syzkaller0: entered promiscuous mode [ 52.256205][ T5999] syzkaller0: entered allmulticast mode [ 52.261568][ T5745] Bluetooth: hci3: command tx timeout [ 52.270907][ T5745] Bluetooth: hci0: command tx timeout [ 52.273495][ T5736] Bluetooth: hci1: command tx timeout [ 52.350874][ T5736] Bluetooth: hci2: command tx timeout [ 52.351581][ T5813] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.966268][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 52.966281][ T42] audit: type=1400 audit(1785767523.923:226): avc: denied { create } for pid=6026 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.975672][ T42] audit: type=1400 audit(1785767523.923:227): avc: denied { ioctl } for pid=6026 comm="syz.2.67" path="socket:[9849]" dev="sockfs" ino=9849 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.985453][ T42] audit: type=1400 audit(1785767523.933:228): avc: denied { bind } for pid=6026 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.992211][ T42] audit: type=1400 audit(1785767523.943:229): avc: denied { write } for pid=6026 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.029209][ T42] audit: type=1400 audit(1785767523.983:230): avc: denied { relabelfrom } for pid=6031 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 53.036119][ T42] audit: type=1400 audit(1785767523.983:231): avc: denied { relabelto } for pid=6031 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 53.126548][ T42] audit: type=1400 audit(1785767524.083:232): avc: denied { name_bind } for pid=6037 comm="syz.2.72" src=20480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.165422][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6042 comm=syz.2.73 [ 53.172382][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6042 comm=syz.2.73 [ 53.177707][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6042 comm=syz.2.73 [ 53.214533][ T6044] smc: net device veth0 applied user defined pnetid SYZ0 [ 53.218558][ T42] audit: type=1400 audit(1785767524.173:233): avc: denied { create } for pid=6043 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.225952][ T42] audit: type=1400 audit(1785767524.173:234): avc: denied { bind } for pid=6043 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.234175][ T42] audit: type=1400 audit(1785767524.173:235): avc: denied { listen } for pid=6043 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.340875][ T5736] Bluetooth: hci1: command tx timeout [ 54.343202][ T5745] Bluetooth: hci0: command tx timeout [ 54.343225][ T5096] Bluetooth: hci3: command tx timeout [ 54.422253][ T5745] Bluetooth: hci2: command tx timeout [ 54.834973][ T6083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6083 comm=syz.2.91 [ 55.002504][ T6089] rdma_op ffff8880570de9f0 conn xmit_rdma 0000000000000000 [ 55.331330][ T6109] syzkaller0: create flow: hash 1489930538 index 2 [ 55.362759][ T6109] syzkaller0: delete flow: hash 1489930538 index 2 [ 55.662287][ T9] IPVS: starting estimator thread 0... [ 55.750768][ T6129] IPVS: using max 44 ests per chain, 105600 per kthread [ 56.088001][ T6131] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 1, id = 0 [ 56.421939][ T5745] Bluetooth: hci1: command tx timeout [ 56.422361][ T5736] Bluetooth: hci0: command tx timeout [ 56.430766][ T5736] Bluetooth: hci3: command tx timeout [ 56.500744][ T5736] Bluetooth: hci2: command tx timeout [ 57.115027][ T6155] __nla_validate_parse: 6 callbacks suppressed [ 57.115046][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 57.162927][ T6157] Zero length message leads to an empty skb [ 57.338387][ T6161] infiniband syz0: set active [ 57.340681][ T6161] infiniband syz0: added veth0 [ 57.354155][ T6161] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 57.359460][ T6161] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 57.365507][ T6161] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 57.383128][ T6161] RDS/IB: syz0: added [ 57.384659][ T6161] smc: adding ib device syz0 with port count 1 [ 57.386648][ T6161] smc: ib device syz0 port 1 has no pnetid [ 58.040344][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 58.040363][ T42] audit: type=1400 audit(1785767528.993:274): avc: denied { read write } for pid=6166 comm="syz.3.121" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.050954][ T42] audit: type=1400 audit(1785767528.993:275): avc: denied { open } for pid=6166 comm="syz.3.121" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.059112][ T42] audit: type=1400 audit(1785767528.993:276): avc: denied { ioctl } for pid=6166 comm="syz.3.121" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.280728][ T1046] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.433738][ T1046] usb 8-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 0.00 [ 58.437633][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.753781][ T5828] usb 8-1: USB disconnect, device number 2 [ 59.476345][ T42] audit: type=1400 audit(1785767530.433:277): avc: denied { bind } for pid=6179 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.482969][ T42] audit: type=1400 audit(1785767530.433:278): avc: denied { node_bind } for pid=6179 comm="syz.3.125" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.426568][ T29] libceph: try_read bad tag 1 [ 60.428516][ T29] libceph: mon0 (1)127.0.0.1:6789 protocol error, garbage tag [ 61.250065][ T29] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 61.251165][ T6189] ceph: No mds server is up or the cluster is laggy [ 61.253663][ T6190] ceph: No mds server is up or the cluster is laggy [ 61.376853][ T42] audit: type=1400 audit(1785767532.333:279): avc: denied { listen } for pid=6199 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.862092][ T42] audit: type=1400 audit(1785767533.823:280): avc: denied { accept } for pid=6209 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.093621][ T42] audit: type=1400 audit(1785767539.053:281): avc: denied { execute } for pid=6217 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.103620][ T42] audit: type=1400 audit(1785767539.053:282): avc: denied { execute_no_trans } for pid=6217 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.131805][ T42] audit: type=1400 audit(1785767539.093:283): avc: denied { create } for pid=6219 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.139912][ T42] audit: type=1400 audit(1785767539.093:284): avc: denied { setopt } for pid=6219 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.148388][ T42] audit: type=1400 audit(1785767539.103:285): avc: denied { bind } for pid=6219 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.163402][ T42] audit: type=1400 audit(1785767539.123:286): avc: denied { read write } for pid=6221 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.169124][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.172426][ T42] audit: type=1400 audit(1785767539.123:287): avc: denied { open } for pid=6221 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.187333][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.193222][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.199911][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.204028][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.205725][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.211777][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.212912][ T5745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.220794][ T5745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.223460][ T5736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.248620][ T42] audit: type=1400 audit(1785767539.203:288): avc: denied { sys_module } for pid=6221 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.402729][ T6250] ipt_REJECT: TCP_RESET invalid for non-tcp [ 68.402794][ T42] audit: type=1400 audit(1785767539.363:289): avc: denied { setopt } for pid=6249 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.738954][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.746059][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.749103][ T6221] bridge_slave_0: entered allmulticast mode [ 68.753144][ T6221] bridge_slave_0: entered promiscuous mode [ 68.764363][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.767239][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.770291][ T6221] bridge_slave_1: entered allmulticast mode [ 68.774230][ T6221] bridge_slave_1: entered promiscuous mode [ 68.804346][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.813630][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.829228][ T6221] team0: Port device team_slave_0 added [ 68.832490][ T6221] team0: Port device team_slave_1 added [ 68.848912][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.851185][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.859052][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.863389][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.865610][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.874152][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.943965][ T6221] hsr_slave_0: entered promiscuous mode [ 68.947073][ T6221] hsr_slave_1: entered promiscuous mode [ 68.949474][ T6221] debugfs: 'hsr0' already exists in 'hsr' [ 68.951456][ T6221] Cannot create hsr debugfs directory [ 69.026089][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.029806][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.033267][ T6226] bridge_slave_0: entered allmulticast mode [ 69.038151][ T6226] bridge_slave_0: entered promiscuous mode [ 69.048098][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.051309][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.054393][ T6226] bridge_slave_1: entered allmulticast mode [ 69.058409][ T6226] bridge_slave_1: entered promiscuous mode [ 69.090757][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.100288][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.140392][ T6226] team0: Port device team_slave_0 added [ 69.145753][ T6226] team0: Port device team_slave_1 added [ 69.181062][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.184055][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.194317][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.200768][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.203735][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.213904][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.258116][ T6226] hsr_slave_0: entered promiscuous mode [ 69.260441][ T6226] hsr_slave_1: entered promiscuous mode [ 69.263123][ T6226] debugfs: 'hsr0' already exists in 'hsr' [ 69.265194][ T6226] Cannot create hsr debugfs directory [ 69.267452][ T6221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.267546][ T29] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 69.267991][ T6256] ceph: No mds server is up or the cluster is laggy [ 69.278272][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.281472][ T6221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.288581][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.291618][ T6221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.302706][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.314489][ T6221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.324042][ T6221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.330137][ T6274] tipc: Started in network mode [ 69.334053][ T6274] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 69.337189][ T6274] tipc: Enabled bearer , priority 0 [ 69.411136][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.413811][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.416715][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.418834][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.485433][ T6226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.489758][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.493995][ T6226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.498840][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.502757][ T6226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.507626][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.512952][ T6226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.517537][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.526385][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.537072][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.542345][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.559203][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.567830][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.570084][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.581835][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.584152][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.645033][ T6226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.662988][ T6226] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.670329][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.673104][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.682829][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.685769][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.876581][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.971802][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.064297][ T6221] veth0_vlan: entered promiscuous mode [ 70.070835][ T6221] veth1_vlan: entered promiscuous mode [ 70.084102][ T6221] veth0_macvtap: entered promiscuous mode [ 70.092170][ T6221] veth1_macvtap: entered promiscuous mode [ 70.100348][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.110237][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.166942][ T6226] veth0_vlan: entered promiscuous mode [ 70.172518][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.178924][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.191041][ T6226] veth1_vlan: entered promiscuous mode [ 70.203203][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.206123][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.235022][ T6226] veth0_macvtap: entered promiscuous mode [ 70.238934][ T6321] 8021q: VLANs not supported on lo [ 70.244553][ T6226] veth1_macvtap: entered promiscuous mode [ 70.258914][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.261274][ T5736] Bluetooth: hci5: command tx timeout [ 70.265739][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.270726][ T5736] Bluetooth: hci4: command tx timeout [ 70.276982][ T5813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.282387][ T5813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.298691][ T5835] libceph: try_read bad tag 1 [ 70.301030][ T5835] libceph: mon0 (1)127.0.0.1:6789 protocol error, garbage tag [ 70.301390][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.345794][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.348664][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.368328][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.370912][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.380852][ T5786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.390732][ T5786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.394564][ T5786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.397912][ T5786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.400539][ T5786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.462452][ T5851] tipc: Node number set to 43690 [ 71.124254][ T6323] ceph: No mds server is up or the cluster is laggy [ 71.124343][ T5828] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 71.126793][ T6327] ceph: No mds server is up or the cluster is laggy [ 71.304300][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.307059][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.423006][ T5096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.427922][ T5096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.432069][ T5096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.435634][ T5096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.438374][ T5096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.544838][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.157'. [ 71.548624][ T6368] netlink: 48 bytes leftover after parsing attributes in process `syz.5.157'. [ 71.919154][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.922426][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.925395][ T6351] bridge_slave_0: entered allmulticast mode [ 71.930147][ T6351] bridge_slave_0: entered promiscuous mode [ 71.934892][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.937884][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.941143][ T6351] bridge_slave_1: entered allmulticast mode [ 71.945073][ T6351] bridge_slave_1: entered promiscuous mode [ 71.970991][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.977961][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.003308][ T6351] team0: Port device team_slave_0 added [ 72.008382][ T6351] team0: Port device team_slave_1 added [ 72.030006][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.033112][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.043330][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.049211][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.052169][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.062144][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.103104][ T6351] hsr_slave_0: entered promiscuous mode [ 72.105516][ T6351] hsr_slave_1: entered promiscuous mode [ 72.108994][ T6351] debugfs: 'hsr0' already exists in 'hsr' [ 72.111354][ T6351] Cannot create hsr debugfs directory [ 72.225431][ T6351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 72.229470][ T6351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.232455][ T6351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.237156][ T6351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.240406][ T6351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.245183][ T6351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.247900][ T6351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.251752][ T6351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.268176][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.270644][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.273006][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.275510][ T6351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.305274][ T6351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.315865][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.319375][ T203] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.326847][ T6351] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.337458][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.339795][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.341272][ T5096] Bluetooth: hci4: command tx timeout [ 72.342750][ T5736] Bluetooth: hci5: command tx timeout [ 72.352021][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.354305][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.619161][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.751576][ T6351] veth0_vlan: entered promiscuous mode [ 72.757927][ T6351] veth1_vlan: entered promiscuous mode [ 72.774558][ T6351] veth0_macvtap: entered promiscuous mode [ 72.779412][ T6351] veth1_macvtap: entered promiscuous mode [ 72.789557][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.797871][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.822309][ T5786] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.826641][ T5786] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.831398][ T5786] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838867][ T5786] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.853963][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.857215][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.873178][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.876463][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.473301][ T5736] Bluetooth: hci6: command tx timeout [ 74.421002][ T5736] Bluetooth: hci5: command tx timeout [ 74.430690][ T5736] Bluetooth: hci4: command tx timeout [ 75.003305][ T42] audit: type=1400 audit(1785767545.963:290): avc: denied { setopt } for pid=6430 comm="syz.6.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.543710][ T5736] Bluetooth: hci6: command tx timeout [ 76.461917][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.177'. [ 76.465361][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.177'. [ 76.468951][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.177'. [ 76.472309][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.177'. [ 76.476283][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.177'. [ 76.483400][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.177'. [ 76.501435][ T5736] Bluetooth: hci4: command tx timeout [ 76.501503][ T5096] Bluetooth: hci5: command tx timeout [ 76.514681][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.178'. [ 76.564989][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.6.179'. [ 77.198839][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.183'. [ 77.207461][ T6469] netlink: 124 bytes leftover after parsing attributes in process `syz.6.183'. [ 77.357726][ T5813] syzkaller0: tun_net_xmit 76 [ 77.361019][ T5813] syzkaller0: tun_net_xmit 48 [ 77.381723][ T9] syzkaller0: tun_net_xmit 76 [ 77.621103][ T5096] Bluetooth: hci6: command tx timeout [ 78.987914][ T6501] tipc: Started in network mode [ 78.990367][ T6501] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 78.994781][ T6501] tipc: Enabled bearer , priority 10 [ 78.999258][ T6501] tipc: Disabling bearer [ 79.297427][ T42] audit: type=1400 audit(1785767550.253:291): avc: denied { bind } for pid=6513 comm="syz.6.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.305427][ T42] audit: type=1400 audit(1785767550.253:292): avc: denied { connect } for pid=6513 comm="syz.6.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.700719][ T5096] Bluetooth: hci6: command tx timeout [ 80.006614][ T6523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.205'. [ 80.141562][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.206'. [ 80.144475][ T6526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.206'. [ 81.510739][ T5828] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 81.547365][ T34] cfg80211: failed to load regulatory.db [ 81.648293][ T6558] tipc: Started in network mode [ 81.650322][ T6558] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 81.653386][ T6558] tipc: Enabled bearer , priority 0 [ 81.663697][ T5828] usb 11-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 81.666308][ T5828] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.668768][ T5828] usb 11-1: Product: syz [ 81.670117][ T5828] usb 11-1: Manufacturer: syz [ 81.672961][ T5828] usb 11-1: SerialNumber: syz [ 81.939583][ T42] audit: type=1400 audit(1785767552.893:293): avc: denied { create } for pid=6555 comm="syz.6.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 82.772753][ T5851] tipc: Node number set to 43690 [ 82.889661][ T5828] usb 11-1: selecting invalid altsetting 1 [ 82.893414][ T5828] speedtch 11-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 82.896707][ T5828] speedtch 11-1:1.0: usbatm_usb_probe: bind failed: -22! [ 82.898959][ T5828] speedtch 11-1:1.0: probe with driver speedtch failed with error -22 [ 82.918545][ T5828] usb 11-1: selecting invalid altsetting 1 [ 82.920806][ T5828] speedtch 11-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 82.925588][ T5828] speedtch 11-1:1.1: usbatm_usb_probe: bind failed: -22! [ 82.931694][ T5828] speedtch 11-1:1.1: probe with driver speedtch failed with error -22 [ 82.943635][ T5828] usb 11-1: USB disconnect, device number 2 [ 83.580087][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.228'. [ 83.590992][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.228'. [ 83.713880][ T34] ------------[ cut here ]------------ [ 83.716253][ T34] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 83.716269][ T34] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#3: kworker/3:0/34 [ 83.724401][ T34] Modules linked in: [ 83.726856][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 83.730341][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.734728][ T34] Workqueue: ceph-msgr ceph_con_workfn [ 83.737381][ T34] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 83.739886][ T34] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 83.747919][ T34] RSP: 0018:ffffc900006dfa08 EFLAGS: 00010293 [ 83.750439][ T34] RAX: 0000000000000000 RBX: ffff88805bb5488b RCX: ffffffff8b7fbff0 [ 83.754077][ T34] RDX: ffff88801f6ca540 RSI: ffffffff8b7fda6c RDI: ffff88801f6ca540 [ 83.757277][ T34] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 83.761308][ T34] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 83.764440][ T34] R13: ffff88805bb54950 R14: ffff88805bb54418 R15: dffffc0000000000 [ 83.767693][ T34] FS: 0000000000000000(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 83.772381][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.775478][ T34] CR2: 000000110c3326bb CR3: 000000002f396000 CR4: 0000000000352ef0 [ 83.778478][ T34] Call Trace: [ 83.779586][ T34] [ 83.781190][ T34] ? ceph_con_workfn+0x48/0x13e0 [ 83.784045][ T34] ? register_lock_class+0x40/0x560 [ 83.786175][ T34] ? do_raw_spin_lock+0x128/0x260 [ 83.788281][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 83.790344][ T34] ? __lock_acquire+0x49f/0x1a40 [ 83.792817][ T34] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 83.795152][ T34] ? debug_object_deactivate+0x2e4/0x3b0 [ 83.797409][ T34] ceph_con_workfn+0x9a5/0x13e0 [ 83.799339][ T34] process_one_work+0xa23/0x1940 [ 83.801424][ T34] ? __pfx_process_one_work+0x10/0x10 [ 83.803558][ T34] ? __pfx_ceph_con_workfn+0x10/0x10 [ 83.805736][ T34] worker_thread+0x5ef/0xe50 [ 83.807687][ T34] ? kthread+0x13a/0x450 [ 83.809448][ T34] ? __pfx_worker_thread+0x10/0x10 [ 83.811518][ T34] kthread+0x370/0x450 [ 83.813249][ T34] ? __pfx_kthread+0x10/0x10 [ 83.815233][ T34] ret_from_fork+0x72b/0xd50 [ 83.817103][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 83.819304][ T34] ? __switch_to+0x800/0x10f0 [ 83.821415][ T34] ? __pfx_kthread+0x10/0x10 [ 83.823351][ T34] ret_from_fork_asm+0x1a/0x30 [ 83.825382][ T34] [ 83.826659][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.829573][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 83.833313][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.837386][ T34] Workqueue: ceph-msgr ceph_con_workfn [ 83.839574][ T34] Call Trace: [ 83.840755][ T34] [ 83.841963][ T34] dump_stack_lvl+0x100/0x190 [ 83.843855][ T34] vpanic+0x552/0x970 [ 83.845459][ T34] ? __pfx_vpanic+0x10/0x10 [ 83.847255][ T34] panic+0xd1/0xe0 [ 83.848809][ T34] ? __pfx_panic+0x10/0x10 [ 83.850639][ T34] ? check_panic_on_warn+0x1f/0x90 [ 83.852668][ T34] check_panic_on_warn.cold+0x19/0x34 [ 83.854884][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 83.857228][ T34] __warn.cold+0x191/0x318 [ 83.858934][ T34] __report_bug+0x30f/0x440 [ 83.860844][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 83.863110][ T34] ? __pfx___report_bug+0x10/0x10 [ 83.865125][ T34] ? __pfx_tcp_recvmsg+0x10/0x10 [ 83.867117][ T34] ? inet_recvmsg+0xdc/0x4c0 [ 83.868930][ T34] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 83.871002][ T34] ? rcu_is_watching+0x12/0xc0 [ 83.872912][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 83.875197][ T34] report_bug+0xb2/0x220 [ 83.876986][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 83.879302][ T34] handle_bug+0x16a/0x2a0 [ 83.881126][ T34] exc_invalid_op+0x17/0x50 [ 83.883017][ T34] asm_exc_invalid_op+0x1a/0x20 [ 83.885058][ T34] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 83.887583][ T34] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 83.895323][ T34] RSP: 0018:ffffc900006dfa08 EFLAGS: 00010293 [ 83.897722][ T34] RAX: 0000000000000000 RBX: ffff88805bb5488b RCX: ffffffff8b7fbff0 [ 83.900780][ T34] RDX: ffff88801f6ca540 RSI: ffffffff8b7fda6c RDI: ffff88801f6ca540 [ 83.903743][ T34] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 83.906864][ T34] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 83.910003][ T34] R13: ffff88805bb54950 R14: ffff88805bb54418 R15: dffffc0000000000 [ 83.912849][ T34] ? ceph_con_v1_try_read+0x2a00/0x6ca0 [ 83.915038][ T34] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 83.917353][ T34] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 83.919568][ T34] ? ceph_con_workfn+0x48/0x13e0 [ 83.921533][ T34] ? register_lock_class+0x40/0x560 [ 83.923665][ T34] ? do_raw_spin_lock+0x128/0x260 [ 83.925774][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 83.927878][ T34] ? __lock_acquire+0x49f/0x1a40 [ 83.929937][ T34] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 83.932318][ T34] ? debug_object_deactivate+0x2e4/0x3b0 [ 83.934632][ T34] ceph_con_workfn+0x9a5/0x13e0 [ 83.936672][ T34] process_one_work+0xa23/0x1940 [ 83.938734][ T34] ? __pfx_process_one_work+0x10/0x10 [ 83.940962][ T34] ? __pfx_ceph_con_workfn+0x10/0x10 [ 83.943084][ T34] worker_thread+0x5ef/0xe50 [ 83.945049][ T34] ? kthread+0x13a/0x450 [ 83.946834][ T34] ? __pfx_worker_thread+0x10/0x10 [ 83.948985][ T34] kthread+0x370/0x450 [ 83.950679][ T34] ? __pfx_kthread+0x10/0x10 [ 83.952576][ T34] ret_from_fork+0x72b/0xd50 [ 83.954409][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 83.956537][ T34] ? __switch_to+0x800/0x10f0 [ 83.958522][ T34] ? __pfx_kthread+0x10/0x10 [ 83.960466][ T34] ret_from_fork_asm+0x1a/0x30 [ 83.962481][ T34] [ 83.964514][ T34] Kernel Offset: disabled [ 83.966349][ T34] Rebooting in 86400 seconds..