last executing test programs: 3.009890008s ago: executing program 3 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x48}}, 0x0) 3.009625579s ago: executing program 3 (id=26): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x136, [0x78, 0xc8, 0x0, 0x0, 0x188], 0x0, 0x0, &(0x7f0000000078)=[{0x0, '\x00', 0x0, 0xfffffffe, 0x1, [{0x1, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @empty, [], @empty, [], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffe}}}}]}, {0x0, '\x00', 0x0, 0xfffffffe}, {0x0, '\x00', 0x0, 0xfffffffe}]}, 0x1ae) 2.940327664s ago: executing program 3 (id=27): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000050)=0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000100)='abcdefghijklmnopqrstuvwxyz0123456789', 0x24, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x1}, &(0x7f0000000240)=0x8) 2.881335608s ago: executing program 3 (id=28): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0xa) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='1\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)="6365706820763032370a000000000000000000021a857f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffffffffffff010000000100"/418, 0x134) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2.268521096s ago: executing program 0 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_LINK={0x8, 0x5, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) (async) 1.97990246s ago: executing program 3 (id=47): syz_clone(0x40000011, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 1.640179989s ago: executing program 2 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='proc\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/net/ipv4/conf/syz_tun/rp_filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='0\n', 0x2) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000d00)={'syz_tun\x00', @ifru_mtu=0x44}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000e00)={0x0, {0x2, 0x0, @rand_addr=0x8080000}, {0x2, 0x0, @empty}, {0x2, 0x0, @rand_addr=0xffff0000}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='syz_tun\x00'}) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x1234, 0x2000, 0x40, 0x11, 0x0, @rand_addr=0xac1414bb, @rand_addr=0x8080808}, {0x0, 0x4e20, 0x58, 0x0, @opaque="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f"}}}}}, 0x0) 1.639940561s ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002f0)='./pipefs/nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 1.572403015s ago: executing program 2 (id=60): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='+tcp 2049\n\x00', 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x115c, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000024000000010000000000000002000186a300000003000000000000000700"/44, 0x28) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="0800010000000000"]}, 0x1c}}, 0x0) write(r2, &(0x7f0000000600)="15030300020100", 0x7) 1.499839587s ago: executing program 2 (id=64): r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f0000000040), 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x1) 609.249964ms ago: executing program 1 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 609.142261ms ago: executing program 3 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)='ceph v027\x00'/153, 0x99) write(r1, &(0x7f0000000080)="01ffffffffffffffff0000000000000000000000000000000001000000", 0x1d) write(r1, &(0x7f00000000c0)="0100000000000000000000000000000000290000000400000000000000100000000000010000000000000000000000572b1fb2", 0x33) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 560.234083ms ago: executing program 1 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x1000, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x124, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) sendto$inet(r1, &(0x7f0000001000)='\x00', 0x2000, 0x8001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)='\x00', 0x2000, 0x8001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000005000)='\x00', 0x2000, 0x8001, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000007000), 0x100, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 440.251536ms ago: executing program 1 (id=69): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="01154e00010000112233445588fb00010001160c00"/34, 0x22, 0x0, &(0x7f0000000040)={0x11, 0x88fb, r1, 0x0, 0x0, 0x0}, 0x14) 439.989047ms ago: executing program 1 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 390.270848ms ago: executing program 1 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000004c000000030a01040000000000000000010000000900010073797a30000000000900030073797a300000000014000480080001400000000108000240000000000b00060066696c746572000054000000060a01040000000000000000010000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a65637400001400028008000140000000020500020000000000140000001100010000000000000000000000000a"], 0xec}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 320.320043ms ago: executing program 1 (id=72): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000100)='msg1\x00', 0x5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200)='msg2\x00', 0x5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='msg3\x00', 0x5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)='msg4\x00', 0x5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) 50.256508ms ago: executing program 0 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x2, 0x1, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x6, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xb8, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect(r2, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000400)="12345678", 0x8, 0x0, 0x0, 0x0) 50.110821ms ago: executing program 2 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='10 1 1\n', 0x7) (async) r1 = io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000400)={0x1, 0x0, 0x10, 0x0, &(0x7f0000000500)={&(0x7f0000001000), 0x1000}, &(0x7f0000000600)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) 50.023608ms ago: executing program 0 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0) 49.941451ms ago: executing program 2 (id=76): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 316.105µs ago: executing program 0 (id=77): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400), 0x400}], 0x1}, 0x40) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400010301000000000000002c00"/36], 0x24}}, 0x0) 166.188µs ago: executing program 2 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 0s ago: executing program 0 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): [ 38.005694][ T42] audit: type=1400 audit(1785767970.333:120): avc: denied { rlimitinh } for pid=5660 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:62195' (ED25519) to the list of known hosts. [ 42.363396][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 42.363412][ T42] audit: type=1400 audit(1785767974.713:141): avc: denied { mounton } for pid=5704 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.375295][ T42] audit: type=1400 audit(1785767974.733:142): avc: denied { mount } for pid=5704 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.377662][ T5704] cgroup: Unknown subsys name 'net' [ 42.389088][ T42] audit: type=1400 audit(1785767974.743:143): avc: denied { unmount } for pid=5704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.599515][ T5704] cgroup: Unknown subsys name 'cpuset' [ 42.606748][ T5704] cgroup: Unknown subsys name 'rlimit' [ 42.736733][ T42] audit: type=1400 audit(1785767975.093:144): avc: denied { setattr } for pid=5704 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.745655][ T42] audit: type=1400 audit(1785767975.093:145): avc: denied { create } for pid=5704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.751966][ T42] audit: type=1400 audit(1785767975.093:146): avc: denied { write } for pid=5704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.758506][ T42] audit: type=1400 audit(1785767975.093:147): avc: denied { read } for pid=5704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.764906][ T42] audit: type=1400 audit(1785767975.103:148): avc: denied { mounton } for pid=5704 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.772418][ T42] audit: type=1400 audit(1785767975.103:149): avc: denied { mount } for pid=5704 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.779732][ T42] audit: type=1400 audit(1785767975.113:150): avc: denied { read } for pid=5450 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.791328][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.477419][ T5704] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.938860][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.940467][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.946034][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.946051][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.950653][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.952879][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.954124][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.955055][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.955445][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.955717][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.957910][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.960912][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.972351][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.975017][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.978501][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.978876][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.981349][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.983422][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.984369][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.987814][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.531200][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.534214][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.537003][ T5736] bridge_slave_0: entered allmulticast mode [ 47.540023][ T5736] bridge_slave_0: entered promiscuous mode [ 47.571335][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.573672][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.576045][ T5736] bridge_slave_1: entered allmulticast mode [ 47.578708][ T5736] bridge_slave_1: entered promiscuous mode [ 47.645904][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.648905][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.651820][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.654139][ T5738] bridge_slave_0: entered allmulticast mode [ 47.657363][ T5738] bridge_slave_0: entered promiscuous mode [ 47.660831][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.663121][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.665597][ T5738] bridge_slave_1: entered allmulticast mode [ 47.668232][ T5738] bridge_slave_1: entered promiscuous mode [ 47.671151][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.673420][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.675866][ T5737] bridge_slave_0: entered allmulticast mode [ 47.678600][ T5737] bridge_slave_0: entered promiscuous mode [ 47.689815][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.710567][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.713543][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.716362][ T5737] bridge_slave_1: entered allmulticast mode [ 47.719015][ T5737] bridge_slave_1: entered promiscuous mode [ 47.721614][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.724031][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.727366][ T5751] bridge_slave_0: entered allmulticast mode [ 47.730267][ T5751] bridge_slave_0: entered promiscuous mode [ 47.745752][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.761560][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.765243][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.767780][ T5751] bridge_slave_1: entered allmulticast mode [ 47.770464][ T5751] bridge_slave_1: entered promiscuous mode [ 47.774449][ T5736] team0: Port device team_slave_0 added [ 47.777625][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.796130][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.800829][ T5736] team0: Port device team_slave_1 added [ 47.830705][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.851620][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.856258][ T5738] team0: Port device team_slave_0 added [ 47.866683][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.869420][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.879743][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.887583][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.892356][ T5738] team0: Port device team_slave_1 added [ 47.895917][ T5737] team0: Port device team_slave_0 added [ 47.898709][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.901455][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.911834][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.942090][ T5737] team0: Port device team_slave_1 added [ 47.957359][ T5751] team0: Port device team_slave_0 added [ 47.965805][ T5751] team0: Port device team_slave_1 added [ 47.989451][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.992418][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.002970][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.025627][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.027815][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.035714][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.039550][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.041839][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.049789][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.053881][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.056450][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.064959][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.072554][ T5736] hsr_slave_0: entered promiscuous mode [ 48.076173][ T5736] hsr_slave_1: entered promiscuous mode [ 48.078975][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.081167][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.088854][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.096930][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.099597][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.109566][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.187748][ T5737] hsr_slave_0: entered promiscuous mode [ 48.190359][ T5737] hsr_slave_1: entered promiscuous mode [ 48.192747][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.195019][ T5737] Cannot create hsr debugfs directory [ 48.211131][ T5751] hsr_slave_0: entered promiscuous mode [ 48.213383][ T5751] hsr_slave_1: entered promiscuous mode [ 48.215587][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 48.217364][ T5751] Cannot create hsr debugfs directory [ 48.221930][ T5738] hsr_slave_0: entered promiscuous mode [ 48.224710][ T5738] hsr_slave_1: entered promiscuous mode [ 48.227211][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.229435][ T5738] Cannot create hsr debugfs directory [ 48.467163][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.474943][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.477658][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.482437][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.485387][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.490374][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.493213][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.497762][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.547343][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.552743][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.559811][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.563827][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.567386][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.571342][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.573964][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.578453][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.639097][ T5751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.643270][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.646765][ T5751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.651094][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.656749][ T5751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.660531][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.663232][ T5751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.667654][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.720179][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.723370][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.727475][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.731205][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.736230][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.738974][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.742785][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.748480][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.752326][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.780518][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.799156][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.802675][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.811390][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.824072][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.826804][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.854922][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.874326][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.876736][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.891691][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.894003][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.908704][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.937933][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.949004][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.952087][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.962214][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.964540][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.971595][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.984044][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.000411][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.013824][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.016125][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.030374][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.032580][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.035464][ T5741] Bluetooth: hci0: command tx timeout [ 49.044849][ T5741] Bluetooth: hci1: command tx timeout [ 49.045257][ T5754] Bluetooth: hci3: command tx timeout [ 49.046752][ T5741] Bluetooth: hci2: command tx timeout [ 49.050237][ T5751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.158790][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.197137][ T5737] veth0_vlan: entered promiscuous mode [ 49.203143][ T5737] veth1_vlan: entered promiscuous mode [ 49.214179][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.251402][ T5737] veth0_macvtap: entered promiscuous mode [ 49.257127][ T5737] veth1_macvtap: entered promiscuous mode [ 49.260860][ T5736] veth0_vlan: entered promiscuous mode [ 49.269216][ T5736] veth1_vlan: entered promiscuous mode [ 49.274202][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.283981][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.294997][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.299316][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.353719][ T5736] veth0_macvtap: entered promiscuous mode [ 49.380080][ T5738] veth0_vlan: entered promiscuous mode [ 49.383756][ T5736] veth1_macvtap: entered promiscuous mode [ 49.400191][ T5751] veth0_vlan: entered promiscuous mode [ 49.403792][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.407905][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.411224][ T5738] veth1_vlan: entered promiscuous mode [ 49.418292][ T5751] veth1_vlan: entered promiscuous mode [ 49.440214][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.449266][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.451981][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.459526][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.460370][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.460380][ T42] audit: type=1400 audit(1785767981.813:168): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.471940][ T42] audit: type=1400 audit(1785767981.813:169): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.lqryH9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.480738][ T42] audit: type=1400 audit(1785767981.813:170): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.487817][ T42] audit: type=1400 audit(1785767981.813:171): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.lqryH9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.489131][ T5738] veth0_macvtap: entered promiscuous mode [ 49.495988][ T42] audit: type=1400 audit(1785767981.823:172): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.lqryH9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.496013][ T42] audit: type=1400 audit(1785767981.823:173): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.496034][ T42] audit: type=1400 audit(1785767981.823:174): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.496056][ T42] audit: type=1400 audit(1785767981.823:175): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="gadgetfs" ino=9325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.496076][ T42] audit: type=1400 audit(1785767981.833:176): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.496097][ T42] audit: type=1400 audit(1785767981.833:177): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.525877][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.542067][ T5738] veth1_macvtap: entered promiscuous mode [ 49.553716][ T5751] veth0_macvtap: entered promiscuous mode [ 49.574350][ T5751] veth1_macvtap: entered promiscuous mode [ 49.598850][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.618593][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.622389][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.629927][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.634478][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.638382][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.658815][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.661413][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.686238][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.717971][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.721141][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.750728][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.756206][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.779358][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.782486][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.793178][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.796390][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.805297][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.811627][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.831804][ T5895] tipc: Enabling of bearer rejected, failed to enable media [ 49.845237][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.849409][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853000][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.857278][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.875033][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.875132][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.881401][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.905031][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.906328][ T5899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 49.907829][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910611][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 49.913289][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.919775][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.923895][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926960][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.945655][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.029451][ T24] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 50.032069][ T24] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 50.037755][ T24] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 50.040625][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 50.043140][ T24] usb 5-1: Product: syz [ 50.044458][ T24] usb 5-1: Manufacturer: syz [ 50.052761][ T5908] svc: failed to register lockdv1 RPC service (errno 111). [ 50.055859][ T5908] lockd_up: makesock failed, error=-111 [ 50.097485][ T5901] ceph: No mds server is up or the cluster is laggy [ 50.188866][ T24] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 50.235246][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.350409][ T5926] netlink: 'syz.3.12': attribute type 2 has an invalid length. [ 50.352914][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 50.361261][ T5926] : entered promiscuous mode [ 50.366906][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 50.391447][ T5908] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.396867][ T5908] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.400980][ T5908] failed to unregister tcp with rpcbind [ 50.403425][ T5908] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.406480][ T5908] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.408796][ T5908] failed to unregister tcp with rpcbind [ 50.497513][ T5935] Zero length message leads to an empty skb [ 50.677477][ T5947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.688510][ T5947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.765686][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.916577][ T5939] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 50.919083][ T5939] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 50.924037][ T5939] usb 6-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 50.927405][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 50.930039][ T5939] usb 6-1: Product: syz [ 50.931443][ T5939] usb 6-1: Manufacturer: syz [ 50.996349][ T5955] infiniband syz0: set active [ 50.998383][ T5955] infiniband syz0: added veth0 [ 51.009027][ T5955] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 51.013777][ T5955] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 51.019388][ T5955] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 51.044751][ T5955] RDS/IB: syz0: added [ 51.047022][ T5955] smc: adding ib device syz0 with port count 1 [ 51.049164][ T5955] smc: ib device syz0 port 1 has no pnetid [ 51.075648][ T5939] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 51.114893][ T5754] Bluetooth: hci2: command tx timeout [ 51.114986][ T5098] Bluetooth: hci3: command tx timeout [ 51.117009][ T5754] Bluetooth: hci0: command tx timeout [ 51.120360][ T5741] Bluetooth: hci1: command tx timeout [ 51.533330][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.35'. [ 51.567523][ T5990] smc: net device lo applied user defined pnetid SYZ0 [ 51.570503][ T5990] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 51.593373][ T24] usb 5-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 51.600154][ T24] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 51.621169][ T5994] veth1_macvtap: left promiscuous mode [ 51.812513][ T34] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 51.812540][ T5967] ceph: No mds server is up or the cluster is laggy [ 51.886776][ T6011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'. [ 51.891113][ T6011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'. [ 51.895803][ T6011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'. [ 52.097852][ T6023] ovs-system: entered promiscuous mode [ 52.312110][ T6043] ksmbd: Unknown IPC event: 1, ignore. [ 52.314572][ T6043] nbd: must specify at least one socket [ 52.318085][ T6042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.194881][ T5745] Bluetooth: hci2: command tx timeout [ 53.195772][ T5754] Bluetooth: hci3: command tx timeout [ 53.195942][ T5741] Bluetooth: hci1: command tx timeout [ 53.204889][ T5754] Bluetooth: hci0: command tx timeout [ 53.445523][ T6037] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.448266][ T6037] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.451192][ T6037] NFSD: starting 90-second grace period (net f0000496) [ 53.920186][ T34] ------------[ cut here ]------------ [ 53.922176][ T34] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 53.922187][ T34] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#3: kworker/3:0/34 [ 53.928919][ T34] Modules linked in: [ 53.930220][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 53.933593][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.937070][ T34] Workqueue: ceph-msgr ceph_con_workfn [ 53.938735][ T34] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 53.940655][ T34] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 53.946547][ T34] RSP: 0018:ffffc900006dfa08 EFLAGS: 00010293 [ 53.948441][ T34] RAX: 0000000000000000 RBX: ffff888027e0c88b RCX: ffffffff8b7fbff0 [ 53.950850][ T34] RDX: ffff88801f6f2540 RSI: ffffffff8b7fda6c RDI: ffff88801f6f2540 [ 53.953209][ T34] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 53.955681][ T34] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 53.958094][ T34] R13: ffff888027e0c950 R14: ffff888027e0c418 R15: dffffc0000000000 [ 53.960416][ T34] FS: 0000000000000000(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 53.963029][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.965224][ T34] CR2: 000000110c32e6bb CR3: 000000005b64f000 CR4: 0000000000352ef0 [ 53.968543][ T34] Call Trace: [ 53.969684][ T34] [ 53.970580][ T34] ? ceph_con_workfn+0x48/0x13e0 [ 53.972058][ T34] ? register_lock_class+0x40/0x560 [ 53.973638][ T34] ? do_raw_spin_lock+0x128/0x260 [ 53.975703][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 53.977626][ T34] ? __lock_acquire+0x49f/0x1a40 [ 53.979155][ T34] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 53.980841][ T34] ? debug_object_deactivate+0x2e4/0x3b0 [ 53.982506][ T34] ceph_con_workfn+0x9a5/0x13e0 [ 53.983979][ T34] process_one_work+0xa23/0x1940 [ 53.985780][ T34] ? __pfx_process_one_work+0x10/0x10 [ 53.987368][ T34] ? __pfx_ceph_con_workfn+0x10/0x10 [ 53.989005][ T34] worker_thread+0x5ef/0xe50 [ 53.990472][ T34] ? kthread+0x13a/0x450 [ 53.991756][ T34] ? __pfx_worker_thread+0x10/0x10 [ 53.993315][ T34] kthread+0x370/0x450 [ 53.995572][ T34] ? __pfx_kthread+0x10/0x10 [ 53.996988][ T34] ret_from_fork+0x72b/0xd50 [ 53.998362][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 53.999903][ T34] ? __switch_to+0x800/0x10f0 [ 54.001291][ T34] ? __pfx_kthread+0x10/0x10 [ 54.002665][ T34] ret_from_fork_asm+0x1a/0x30 [ 54.004090][ T34] [ 54.005139][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.007297][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 54.010104][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.013214][ T34] Workqueue: ceph-msgr ceph_con_workfn [ 54.014847][ T34] Call Trace: [ 54.015887][ T34] [ 54.016857][ T34] dump_stack_lvl+0x100/0x190 [ 54.018708][ T34] vpanic+0x552/0x970 [ 54.019933][ T34] ? __pfx_vpanic+0x10/0x10 [ 54.021326][ T34] panic+0xd1/0xe0 [ 54.022446][ T34] ? __pfx_panic+0x10/0x10 [ 54.023794][ T34] ? check_panic_on_warn+0x1f/0x90 [ 54.025321][ T34] check_panic_on_warn.cold+0x19/0x34 [ 54.027162][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 54.028851][ T34] __warn.cold+0x191/0x318 [ 54.030194][ T34] __report_bug+0x30f/0x440 [ 54.031568][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 54.033221][ T34] ? __pfx___report_bug+0x10/0x10 [ 54.034728][ T34] ? __pfx_tcp_recvmsg+0x10/0x10 [ 54.036252][ T34] ? inet_recvmsg+0xdc/0x4c0 [ 54.037649][ T34] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 54.039238][ T34] ? rcu_is_watching+0x12/0xc0 [ 54.040696][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 54.042325][ T34] report_bug+0xb2/0x220 [ 54.043575][ T34] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 54.045191][ T34] handle_bug+0x16a/0x2a0 [ 54.046501][ T34] exc_invalid_op+0x17/0x50 [ 54.047900][ T34] asm_exc_invalid_op+0x1a/0x20 [ 54.049385][ T34] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 54.051292][ T34] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 54.057225][ T34] RSP: 0018:ffffc900006dfa08 EFLAGS: 00010293 [ 54.059283][ T34] RAX: 0000000000000000 RBX: ffff888027e0c88b RCX: ffffffff8b7fbff0 [ 54.061912][ T34] RDX: ffff88801f6f2540 RSI: ffffffff8b7fda6c RDI: ffff88801f6f2540 [ 54.064229][ T34] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 54.066622][ T34] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 54.069103][ T34] R13: ffff888027e0c950 R14: ffff888027e0c418 R15: dffffc0000000000 [ 54.071442][ T34] ? ceph_con_v1_try_read+0x2a00/0x6ca0 [ 54.073097][ T34] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 54.074771][ T34] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 54.076478][ T34] ? ceph_con_workfn+0x48/0x13e0 [ 54.077980][ T34] ? register_lock_class+0x40/0x560 [ 54.079589][ T34] ? do_raw_spin_lock+0x128/0x260 [ 54.081105][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 54.082625][ T34] ? __lock_acquire+0x49f/0x1a40 [ 54.084114][ T34] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 54.085830][ T34] ? debug_object_deactivate+0x2e4/0x3b0 [ 54.087514][ T34] ceph_con_workfn+0x9a5/0x13e0 [ 54.088980][ T34] process_one_work+0xa23/0x1940 [ 54.090448][ T34] ? __pfx_process_one_work+0x10/0x10 [ 54.092111][ T34] ? __pfx_ceph_con_workfn+0x10/0x10 [ 54.093768][ T34] worker_thread+0x5ef/0xe50 [ 54.095377][ T34] ? kthread+0x13a/0x450 [ 54.096714][ T34] ? __pfx_worker_thread+0x10/0x10 [ 54.098262][ T34] kthread+0x370/0x450 [ 54.099485][ T34] ? __pfx_kthread+0x10/0x10 [ 54.100940][ T34] ret_from_fork+0x72b/0xd50 [ 54.102616][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 54.104119][ T34] ? __switch_to+0x800/0x10f0 [ 54.105579][ T34] ? __pfx_kthread+0x10/0x10 [ 54.107011][ T34] ret_from_fork_asm+0x1a/0x30 [ 54.108468][ T34] [ 54.109958][ T34] Kernel Offset: disabled [ 54.111394][ T34] Rebooting in 86400 seconds..