last executing test programs: 2m17.8936916s ago: executing program 2 (id=21): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="00000000000000020200", 0xa) read(r2, &(0x7f000000030c), 0xa) write(r3, &(0x7f0000000600)="00100000000000010000000000000001010101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x40) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 2m17.521877707s ago: executing program 2 (id=22): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) connect$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/8, 0x8}], 0x1, &(0x7f0000000500)=[@fadd={0x0, 0x114, 0x6, {{}, &(0x7f0000000700), 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1234}}]}, 0x0) close(r1) 2m4.398808671s ago: executing program 32 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2m4.366461248s ago: executing program 33 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/all/use_tempaddr\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='2\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/default/use_tempaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='2\n\x00', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='2\n\x00', 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 2m3.62425217s ago: executing program 34 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='100\x00', 0x3) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) write(r0, &(0x7f0000000140)='100\x00', 0x3) sendto$inet(r2, &(0x7f0000000300)="11223344", 0x4, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) 2m2.577889239s ago: executing program 35 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x64, 0x64, 0x64, 0x10, 0x1, 0x1, 0x64, 0x1, 0x10}}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x32, 0x32, 0x32, 0x8, 0x1, 0x1, 0x32, 0x1, 0x8}}}}]}, 0x34}}, 0x0) 2m1.539600814s ago: executing program 36 (id=22): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) connect$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)=""/8, 0x8}], 0x1, &(0x7f0000000500)=[@fadd={0x0, 0x114, 0x6, {{}, &(0x7f0000000700), 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1234}}]}, 0x0) close(r1) 1m2.187748276s ago: executing program 8 (id=491): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@dev, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@dev, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 1m1.203521389s ago: executing program 8 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0e0002006f76735f76706f7274000000"]}, 0x28}}, 0x0) 1m1.015362259s ago: executing program 8 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x1010101}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x1010101}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x1010202}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x1010202}]}, 0x28}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10) listen(r1, 0x5) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) bind$rds(r2, &(0x7f0000000500)={0x2, 0x1235, @rand_addr=0x1010101}, 0x10) connect$rds(r2, &(0x7f0000000700)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10) sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000700)={0x2, 0x1234, @rand_addr=0x1010202}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000900)=""/4, 0x8}], 0x1}, 0x0) poll(&(0x7f0000000a00)=[{r1, 0x1}], 0x1, 0x64) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) 1m0.788205286s ago: executing program 8 (id=503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, [@algo_crypt={0x28, 0x2, {{'cbc(aes)\x00'}, 0x80, "00112233445566778899aabbccddeeff"}}, @replay_esn_val={0x20, 0x15, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x168}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) 1m0.634887299s ago: executing program 8 (id=504): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, 0x0, 0x0) write(r1, &(0x7f0000000300), 0x100) close(r1) close(r0) 59.483102131s ago: executing program 8 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) (async) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000600), 0x1000) 57.643646178s ago: executing program 6 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10101}]}]}, 0x20}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffffffffe540000000188ca0101000000000028000000000000010200000102000000010000000100000000fe54000000020000000000000000"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x1b, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, 0x2c}}, 0x0) 57.366934308s ago: executing program 6 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1c000000100001000100000000000000030100000b00020073756e7270630000", 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='nfsd 127.0.0.1 2000000000 test\n', 0x1f) read(r1, &(0x7f0000000a00)=""/4096, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r2, &(0x7f0000000c00)=""/4096, 0x1000) sendmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)="1400000019000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001500)="140000001a000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001800)="140000001b000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001b00)="140000001c000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001e00)="140000001d000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)="140000001e000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002400)="140000001f000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002700)="1400000020000103020000000000000002010000", 0x14}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4096, 0x1000, 0x40, 0x0, 0x0) 57.260898051s ago: executing program 6 (id=533): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, 0x0, 0x0) write(r1, &(0x7f0000000300), 0x100) close(r1) close(r0) 56.965790279s ago: executing program 6 (id=535): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendto$inet6(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 56.825545998s ago: executing program 6 (id=538): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in=@private=0xa010101, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x32}, {@in=@private=0xa010101, 0x1234, 0x2}, @in=@private=0xa010102, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="940000002900010000000000000000000a01010100000000000000000000000012340000020032000a0101030000000000000000000000000a01010400000000000000000000000000000000000000000a0101010000000000000000000000000a0101020000000000000000000000000000000000000200202032000000000000000000000000000200020002000000"], 0x94}], 0x1}, 0x0) 56.742436551s ago: executing program 6 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='./rec\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 55.469330843s ago: executing program 5 (id=555): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, 0x0, 0x0) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 54.922618135s ago: executing program 9 (id=564): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000100)=0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000100)=0x84) 54.766254609s ago: executing program 9 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00112233445508004500004200004000401132ba7f0000017f00000111271127002e0000380000000000000000000000010000012000001800"/78], 0x0) 54.583105847s ago: executing program 5 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1c000000100001000100000000000000030100000b00020073756e7270630000", 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='nfsd 127.0.0.1 2000000000 test\n', 0x1f) read(r1, &(0x7f0000000a00)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000f00)="1400000018000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)="1400000019000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001500)="140000001a000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001800)="140000001b000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001b00)="140000001c000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001e00)="140000001d000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)="140000001e000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002400)="140000001f000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002700)="1400000020000103020000000000000002010000", 0x14}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4096, 0x1000, 0x40, 0x0, 0x0) 54.459522766s ago: executing program 9 (id=569): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000400)={0x0, 0x10, 0x1, 0x0, 0x0, {0x1b}, [@nested={0x0, 0x1, 0x0, 0x1, [@typed={0x0, 0x2, 0x0, 0x0, @str='lo\x00'}]}]}, 0x40}}, 0x0) 54.458024155s ago: executing program 5 (id=570): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, 0x0, 0x0) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) 54.383446818s ago: executing program 9 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/addip_noauth\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) 54.35780878s ago: executing program 7 (id=572): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, 0x0, 0x0) close(r1) close(r0) 54.313942624s ago: executing program 9 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_newroute={0x3c, 0x18, 0x501, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x1, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x1, 0x1}}]}, 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa010100}, @generic={0x63, 0xa, 0x2, 0xffd4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x22, 0x64, &(0x7f0000000800)="00000000000000000000000008004500003c0000000040013cce0a0101010a010100", &(0x7f0000000900)=""/100, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 54.219885547s ago: executing program 9 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='+3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 53.573094672s ago: executing program 5 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000700), 0x4) 53.482312897s ago: executing program 7 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800008}]}, 0x30}}, 0x0) 53.468507285s ago: executing program 5 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 2\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='120\n', 0x4) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001200010001000000000000000000000000000000000000000000000009000300657468310000000008001d0001000000"], 0x34}}, 0x0) 53.359780476s ago: executing program 7 (id=578): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, 0x0, 0x0) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 53.359467691s ago: executing program 5 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) 52.518487925s ago: executing program 7 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(&(0x7f0000000060)=@filename='none\x00', &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) close(r0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0) 52.486447963s ago: executing program 7 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="1c000000100001000100000000000000030100000b00020073756e7270630000", 0x1c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='nfsd 127.0.0.1 2000000000 test\n', 0x1f) read(r1, &(0x7f0000000a00)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000f00)="1400000018000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001200)="1400000019000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001500)="140000001a000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001800)="140000001b000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001b00)="140000001c000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001e00)="140000001d000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002100)="140000001e000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002400)="140000001f000103020000000000000002010000", 0x14}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002700)="1400000020000103020000000000000002010000", 0x14}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4096, 0x1000, 0x40, 0x0, 0x0) 52.435974659s ago: executing program 7 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000300)={0x6}, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 44.452713397s ago: executing program 37 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) (async) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000000000000000000002000186a30000000400000001000000010000002000"/56, 0x38) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000600), 0x1000) 41.438481666s ago: executing program 38 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='./rec\n\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 38.92653808s ago: executing program 39 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='+3 -4.0 -4.1\n', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000003000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 38.301975468s ago: executing program 40 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) 36.625464412s ago: executing program 41 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) nanosleep(&(0x7f0000000300)={0x6}, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 35.839496382s ago: executing program 4 (id=600): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500), 0x0) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 34.895453425s ago: executing program 4 (id=604): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x20e7, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x20e7, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000500)='hello world', 0xb, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1}, 0x0) 34.487444227s ago: executing program 4 (id=608): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000000)=@in={0x2, 0x2082, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000000)=@in={0x2, 0x2082, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) sendto(r1, &(0x7f0000000500)="15030300020200", 0x7, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/100, 0x100}], 0x1}, 0x0) 34.387841503s ago: executing program 4 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001400010600000000000000002d000000000000000500020008000000"], 0x24}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind(r2, &(0x7f0000000300)=@generic={0x2d, "00000000ff00"}, 0x10) setsockopt(r2, 0x113, 0x1, &(0x7f0000000380)="01000000", 0x4) ioctl(r2, 0x800c8904, &(0x7f0000000400)='\x00\b\x00\x00\x00') sendmsg(r2, &(0x7f0000000500)={&(0x7f0000000600)=@generic={0x2d, "00000000080100000200"}, 0x30, &(0x7f0000000700)=[{&(0x7f0000000800)="01020304", 0x4}], 0x1}, 0x0) 34.015388419s ago: executing program 4 (id=611): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500), 0x0) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 33.608405965s ago: executing program 3 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0) 33.407449244s ago: executing program 3 (id=614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8877665544332211}]}]}, 0x38}}, 0x0) 33.260069719s ago: executing program 3 (id=615): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, 0x0, 0x0) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) 33.134264022s ago: executing program 4 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2 -3 -4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x801, @loopback}, 0x10) 32.355894012s ago: executing program 3 (id=617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 32.139347712s ago: executing program 3 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10) 31.941742699s ago: executing program 3 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 28.90589996s ago: executing program 2 (id=599): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @local}], 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x2}, 0x8) 28.796322877s ago: executing program 2 (id=621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="200000003f00010001000000000000000101000000000000080001006f7673300800020000000000"], 0x20}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="440000004100010001000000000000000101000000000000240001001000040001020304050606050403020106000600080000000800030004000100"], 0x44}], 0x1}, 0x0) 28.607238289s ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/ipv6/conf/lo/ioam6_enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001000050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001100050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001200050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001300050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001400050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001500050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001600050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001700050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001800050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001b00050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001c00050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001d00050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00050001000000000000000101000008000100000100000800020000000000"], 0x24}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="1105000000000000010400000000312000000001010400008000"/44], 0x30) sendto$inet6(r3, &(0x7f0000000800)='hello\x00', 0x6, 0x0, &(0x7f0000000900)={0xa, 0x209, 0x0, @loopback}, 0x1c) 28.560647103s ago: executing program 2 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 20.570234237s ago: executing program 1 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10) 20.385362581s ago: executing program 1 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000400)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", 0x60, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) 20.231255759s ago: executing program 0 (id=677): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x33}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x33}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x33}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x0}}}}, 0x200) 20.230885431s ago: executing program 1 (id=678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) sendto$inet(r0, &(0x7f0000000100)="1a", 0x100, 0x40, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 20.190423668s ago: executing program 0 (id=679): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="010000", 0x3) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 20.139179553s ago: executing program 1 (id=680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='mon_host\x00', &(0x7f0000000180)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000300)="636570682076320a100001000000000000000100000000000000010101000000000000000000000000000000000000000000000000000000000000001c0fa1a9", 0x3a) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) close(r2) close(r1) close(r0) 19.28484645s ago: executing program 0 (id=681): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x5) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ed) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 19.175395133s ago: executing program 1 (id=682): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 18.700415344s ago: executing program 0 (id=683): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r2, 0x2) 18.611018202s ago: executing program 0 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 18.271476545s ago: executing program 0 (id=685): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) bind$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12}, 0x10) connect$llc(r0, &(0x7f0000000200)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x14, @local}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f0000000300)={@local, @local, @void, {@generic={0x3, "121573"}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000400)={@local, @local, @void, {@generic={0x4, "12140101"}}}, 0x0) 3.34968ms ago: executing program 42 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='2049\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\n', 0x2) 0s ago: executing program 1 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r0, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10) kernel console output (not intermixed with test programs): [ 110.576434][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.588601][ T5888] team0: Port device team_slave_0 added [ 110.597704][ T5888] team0: Port device team_slave_1 added [ 110.606369][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.617755][ T5871] team0: Port device team_slave_1 added [ 110.650825][ T5621] Bluetooth: hci9: command tx timeout [ 110.757057][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.828614][ T5878] hsr_slave_0: entered promiscuous mode [ 110.851884][ T5878] hsr_slave_1: entered promiscuous mode [ 110.876631][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 110.885737][ T5878] Cannot create hsr debugfs directory [ 110.924482][ T5869] team0: Port device team_slave_0 added [ 110.931085][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.939962][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.966994][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.980735][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.997257][ T85] hsr_slave_0: left promiscuous mode [ 111.004580][ T85] hsr_slave_1: left promiscuous mode [ 111.012257][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.020598][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.029407][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.037042][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.045162][ T29] audit: type=1400 audit(1785136268.530:223): avc: denied { write } for pid=5961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.069076][ T29] audit: type=1400 audit(1785136268.530:224): avc: denied { create } for pid=5961 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.099725][ T29] audit: type=1400 audit(1785136268.530:225): avc: denied { write } for pid=5961 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.126560][ T85] veth1_macvtap: left promiscuous mode [ 111.133419][ T85] veth0_macvtap: left promiscuous mode [ 111.139364][ T85] veth1_vlan: left promiscuous mode [ 111.145331][ T85] veth0_vlan: left promiscuous mode [ 111.153604][ T29] audit: type=1400 audit(1785136268.530:226): avc: denied { append } for pid=5961 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.178571][ T29] audit: type=1400 audit(1785136268.600:227): avc: denied { write } for pid=5972 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.200483][ T29] audit: type=1400 audit(1785136268.600:228): avc: denied { unlink } for pid=5972 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.350559][ T85] team0 (unregistering): Port device team_slave_1 removed [ 111.363426][ T85] team0 (unregistering): Port device team_slave_0 removed [ 111.438003][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.445045][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.471437][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.484263][ T5869] team0: Port device team_slave_1 added [ 111.490535][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.498493][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.525309][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.548286][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 111.563070][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.570071][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.596063][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.649958][ T5881] team0: Port device team_slave_0 added [ 111.664968][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.672486][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.700197][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.718448][ T5881] team0: Port device team_slave_1 added [ 111.750558][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.758612][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.785298][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.840451][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.847587][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.874590][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.897852][ T5871] hsr_slave_0: entered promiscuous mode [ 111.904455][ T5871] hsr_slave_1: entered promiscuous mode [ 111.911053][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 111.917139][ T5871] Cannot create hsr debugfs directory [ 111.953658][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.963256][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.991964][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.055208][ T5888] hsr_slave_0: entered promiscuous mode [ 112.064700][ T5888] hsr_slave_1: entered promiscuous mode [ 112.072442][ T5888] debugfs: 'hsr0' already exists in 'hsr' [ 112.078687][ T5888] Cannot create hsr debugfs directory [ 112.119042][ T5869] hsr_slave_0: entered promiscuous mode [ 112.127951][ T5869] hsr_slave_1: entered promiscuous mode [ 112.144080][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 112.150654][ T5869] Cannot create hsr debugfs directory [ 112.183686][ T29] audit: type=1400 audit(1785136269.670:229): avc: denied { write } for pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.330871][ T5881] hsr_slave_0: entered promiscuous mode [ 112.337297][ T5881] hsr_slave_1: entered promiscuous mode [ 112.343278][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 112.349260][ T5881] Cannot create hsr debugfs directory [ 112.374466][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.412104][ T85] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.524704][ T85] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.697930][ T85] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.809597][ T85] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.877953][ T5878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 112.890878][ T5878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.899146][ T5878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 112.909892][ T5878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.934150][ T5878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 112.944247][ T5878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.952925][ T5878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 112.963862][ T5878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.983904][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 113.161282][ T5871] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.181439][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.214670][ T5871] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.231179][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.240019][ T5871] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.253086][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.304772][ T85] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.322975][ T5871] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.336347][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.425429][ T85] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.463326][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 113.518779][ T85] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.532822][ T5888] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 113.542324][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.554873][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.565658][ T5888] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 113.575247][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.583228][ T5888] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 113.593778][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.602932][ T5888] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 113.612644][ T5888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.637238][ T85] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.705149][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.725262][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.732470][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.741849][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.749066][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.826469][ T5869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.841461][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.852718][ T5869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.863321][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.915707][ T5869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.931198][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.940523][ T5869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.950821][ T5869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.187141][ T85] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.215245][ T5881] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 114.228907][ T5881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.238771][ T5881] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 114.257287][ T5881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.279090][ T5881] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 114.288623][ T5881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.298876][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 114.323843][ T85] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.338134][ T5881] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 114.348179][ T5881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.379568][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.437710][ T85] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.490739][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.558995][ T85] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.596713][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.606773][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.614362][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.643367][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.650566][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.753970][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.849256][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.856433][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.911954][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.919164][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.983039][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.101364][ T85] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.173810][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.198387][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.209705][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.263206][ T85] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.299158][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 115.317879][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.325074][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.334600][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.341778][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.405101][ T85] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.481986][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.529565][ T85] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.591016][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.598211][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.669587][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.676742][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.878659][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.047766][ T85] bridge_slave_1: left allmulticast mode [ 116.057835][ T85] bridge_slave_1: left promiscuous mode [ 116.063776][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.083270][ T85] bridge_slave_0: left allmulticast mode [ 116.092633][ T85] bridge_slave_0: left promiscuous mode [ 116.098981][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.118714][ T85] bridge_slave_1: left allmulticast mode [ 116.124436][ T85] bridge_slave_1: left promiscuous mode [ 116.134193][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.150327][ T85] bridge_slave_0: left allmulticast mode [ 116.156348][ T85] bridge_slave_0: left promiscuous mode [ 116.162414][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 116.162432][ T29] audit: type=1400 audit(1785136273.650:239): avc: denied { write } for pid=6111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.194064][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.214021][ T85] bridge_slave_1: left allmulticast mode [ 116.221130][ T85] bridge_slave_1: left promiscuous mode [ 116.227781][ T29] audit: type=1400 audit(1785136273.710:240): avc: denied { write } for pid=6128 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.251082][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.273242][ T85] bridge_slave_0: left allmulticast mode [ 116.279279][ T85] bridge_slave_0: left promiscuous mode [ 116.284923][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.301255][ T85] bridge_slave_1: left allmulticast mode [ 116.307404][ T85] bridge_slave_1: left promiscuous mode [ 116.313207][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.322204][ T85] bridge_slave_0: left allmulticast mode [ 116.328367][ T85] bridge_slave_0: left promiscuous mode [ 116.334147][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.481592][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.492726][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.504570][ T85] bond0 (unregistering): Released all slaves [ 116.581665][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.593233][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.602958][ T85] bond0 (unregistering): Released all slaves [ 116.679275][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.689823][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.699615][ T85] bond0 (unregistering): Released all slaves [ 116.769312][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.780086][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.790419][ T85] bond0 (unregistering): Released all slaves [ 116.815354][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 116.883141][ T5878] veth0_vlan: entered promiscuous mode [ 116.996151][ T5878] veth1_vlan: entered promiscuous mode [ 117.080272][ T85] tipc: Disabling bearer [ 117.143635][ T85] tipc: Left network mode [ 117.228121][ T5878] veth0_macvtap: entered promiscuous mode [ 117.387801][ T5878] veth1_macvtap: entered promiscuous mode [ 117.456051][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.592603][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.655648][ T29] audit: type=1400 audit(1785136275.140:241): avc: denied { write } for pid=6143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.696195][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.726054][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.794782][ T76] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.820760][ T76] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.832983][ T29] audit: type=1400 audit(1785136275.310:242): avc: denied { write } for pid=6169 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.921983][ T76] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.934495][ T76] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.949690][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 118.128051][ T5871] veth0_vlan: entered promiscuous mode [ 118.238707][ T5871] veth1_vlan: entered promiscuous mode [ 118.290631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.295108][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.307206][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.512156][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.520326][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.543842][ T5888] veth0_vlan: entered promiscuous mode [ 118.560887][ T5869] veth0_vlan: entered promiscuous mode [ 118.600943][ T29] audit: type=1400 audit(1785136276.090:243): avc: denied { mounton } for pid=5878 comm="syz-executor" path="/root/syzkaller.fbuRG2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.617999][ T5869] veth1_vlan: entered promiscuous mode [ 118.654878][ T5888] veth1_vlan: entered promiscuous mode [ 118.697043][ T29] audit: type=1400 audit(1785136276.190:244): avc: denied { write } for pid=6185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.745718][ T5871] veth0_macvtap: entered promiscuous mode [ 118.823439][ T5871] veth1_macvtap: entered promiscuous mode [ 118.849441][ T5888] veth0_macvtap: entered promiscuous mode [ 118.868758][ T29] audit: type=1400 audit(1785136276.360:245): avc: denied { write } for pid=6201 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.875871][ T5869] veth0_macvtap: entered promiscuous mode [ 118.985941][ T5888] veth1_macvtap: entered promiscuous mode [ 119.017248][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 119.052695][ T5869] veth1_macvtap: entered promiscuous mode [ 119.095110][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.28'. [ 119.111502][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.159581][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.181015][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.221403][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.222973][ T29] audit: type=1400 audit(1785136276.710:246): avc: denied { setopt } for pid=6207 comm="syz.7.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.260604][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.300560][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.350766][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.373538][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.419213][ T3340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.438404][ T3340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.480675][ T3340] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.524873][ T3340] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.556446][ T3340] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.569268][ T5881] veth0_vlan: entered promiscuous mode [ 119.592389][ T3340] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.604900][ T3340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.675674][ T3340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.735384][ T85] hsr_slave_0: left promiscuous mode [ 119.746617][ T85] hsr_slave_1: left promiscuous mode [ 119.752549][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.761586][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.769904][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.780046][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.807027][ T85] hsr_slave_0: left promiscuous mode [ 119.822055][ T85] hsr_slave_1: left promiscuous mode [ 119.833304][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.851493][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.862920][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.864859][ T29] audit: type=1400 audit(1785136277.350:247): avc: denied { write } for pid=6210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.874582][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.904720][ T85] hsr_slave_0: left promiscuous mode [ 119.911133][ T85] hsr_slave_1: left promiscuous mode [ 119.918860][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.927786][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.936018][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.943519][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.964432][ T85] hsr_slave_0: left promiscuous mode [ 119.974492][ T85] hsr_slave_1: left promiscuous mode [ 119.984029][ T29] audit: type=1400 audit(1785136277.470:248): avc: denied { write } for pid=6226 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.013638][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.032782][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.041552][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.050151][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.107687][ T85] veth1_macvtap: left promiscuous mode [ 120.113218][ T85] veth0_macvtap: left promiscuous mode [ 120.119878][ T85] veth1_vlan: left promiscuous mode [ 120.125157][ T85] veth0_vlan: left promiscuous mode [ 120.131280][ T85] veth1_macvtap: left promiscuous mode [ 120.137086][ T85] veth0_macvtap: left promiscuous mode [ 120.142690][ T85] veth1_vlan: left promiscuous mode [ 120.148731][ T85] veth0_vlan: left promiscuous mode [ 120.154856][ T85] veth1_macvtap: left promiscuous mode [ 120.160463][ T85] veth0_macvtap: left promiscuous mode [ 120.166610][ T85] veth1_vlan: left promiscuous mode [ 120.171865][ T85] veth0_vlan: left promiscuous mode [ 120.178311][ T85] veth1_macvtap: left promiscuous mode [ 120.183780][ T85] veth0_macvtap: left promiscuous mode [ 120.189445][ T85] veth1_vlan: left promiscuous mode [ 120.194701][ T85] veth0_vlan: left promiscuous mode [ 120.433960][ T85] team0 (unregistering): Port device team_slave_1 removed [ 120.448608][ T85] team0 (unregistering): Port device team_slave_0 removed [ 120.610490][ T85] team0 (unregistering): Port device team_slave_1 removed [ 120.624688][ T85] team0 (unregistering): Port device team_slave_0 removed [ 120.779129][ T85] team0 (unregistering): Port device team_slave_1 removed [ 120.801950][ T85] team0 (unregistering): Port device team_slave_0 removed [ 120.871637][ T12] smc: removing ib device syz0 [ 120.915441][ T12] smbdirect: ib_dev[syz0] removed [ 121.169427][ T85] team0 (unregistering): Port device team_slave_1 removed [ 121.203263][ T85] team0 (unregistering): Port device team_slave_0 removed [ 121.521366][ T3340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.541375][ T3340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.589093][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 121.599898][ T9] lo speed is unknown, defaulting to 1000 [ 121.608133][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.616902][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.627852][ T9] syz0: Port: 1 Link DOWN [ 121.666121][ T5881] veth1_vlan: entered promiscuous mode [ 121.775272][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.822167][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.859712][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.872356][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.968639][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.008262][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.083921][ T5881] veth0_macvtap: entered promiscuous mode [ 122.302317][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.316854][ T5881] veth1_macvtap: entered promiscuous mode [ 122.342531][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.484584][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.541557][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.544055][ T29] audit: type=1400 audit(1785136280.030:249): avc: denied { create } for pid=6244 comm="syz.7.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.555631][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.572207][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.634974][ T29] audit: type=1400 audit(1785136280.040:250): avc: denied { ioctl } for pid=6244 comm="syz.7.33" path="socket:[20200]" dev="sockfs" ino=20200 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.690743][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.704713][ T29] audit: type=1400 audit(1785136280.040:251): avc: denied { bind } for pid=6244 comm="syz.7.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.713106][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.766419][ T29] audit: type=1400 audit(1785136280.040:252): avc: denied { connect } for pid=6244 comm="syz.7.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.793074][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.824925][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.864648][ T6263] smc: net device lo applied user defined pnetid SYZ0 [ 122.896102][ T29] audit: type=1400 audit(1785136280.040:253): avc: denied { write } for pid=6244 comm="syz.7.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.979873][ T29] audit: type=1400 audit(1785136280.070:254): avc: denied { write } for pid=6236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.032129][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 123.064240][ T29] audit: type=1400 audit(1785136280.180:255): avc: denied { perfmon } for pid=6259 comm="syz.5.23" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.142218][ T29] audit: type=1400 audit(1785136280.180:256): avc: denied { prog_run } for pid=6259 comm="syz.5.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.164338][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.195109][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.248107][ T29] audit: type=1400 audit(1785136280.250:257): avc: denied { write } for pid=6258 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.318288][ T29] audit: type=1400 audit(1785136280.500:258): avc: denied { shutdown } for pid=6262 comm="syz.5.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.424570][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.464745][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.925041][ T6302] smc: net device lo applied user defined pnetid SYZ0 [ 123.987660][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.43'. [ 124.023269][ T6305] netlink: 116 bytes leftover after parsing attributes in process `syz.5.43'. [ 124.493787][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.8.51'. [ 124.721653][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 125.621670][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.72'. [ 125.676579][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.8.69'. [ 125.769233][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 125.913269][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.013649][ T12] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.322742][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 126.385465][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.87'. [ 127.210969][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.103'. [ 127.373807][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.383268][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.544668][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 127.930530][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 127.930552][ T29] audit: type=1400 audit(1785136285.420:302): avc: denied { setopt } for pid=6523 comm="syz.7.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.043126][ T29] audit: type=1400 audit(1785136285.460:303): avc: denied { listen } for pid=6523 comm="syz.7.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.161616][ T6540] netlink: 'syz.5.120': attribute type 4 has an invalid length. [ 128.170447][ T6540] netlink: 'syz.5.120': attribute type 2 has an invalid length. [ 128.314751][ T29] audit: type=1400 audit(1785136285.800:304): avc: denied { write } for pid=6514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.529262][ T29] audit: type=1400 audit(1785136286.020:305): avc: denied { read } for pid=6559 comm="syz.9.125" laddr=127.0.0.1 lport=49444 faddr=127.0.0.1 fport=5000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.590867][ T29] audit: type=1400 audit(1785136286.070:306): avc: denied { write } for pid=6562 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.721285][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 128.963177][ T29] audit: type=1400 audit(1785136286.450:307): avc: denied { write } for pid=6573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.014825][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.131'. [ 129.052899][ T29] audit: type=1400 audit(1785136286.540:308): avc: denied { write } for pid=6590 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.152175][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.132'. [ 129.600238][ T29] audit: type=1400 audit(1785136287.090:309): avc: denied { read } for pid=6620 comm="syz.6.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.714818][ T29] audit: type=1400 audit(1785136287.200:310): avc: denied { write } for pid=6602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.771132][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.142'. [ 129.903764][ T29] audit: type=1400 audit(1785136287.390:311): avc: denied { write } for pid=6637 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.064320][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 130.274897][ T6659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6659 comm=syz.9.151 [ 130.412346][ T42] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 130.498727][ T42] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 130.797075][ T6098] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 130.830883][ T6098] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 130.961413][ T6651] ceph: No mds server is up or the cluster is laggy [ 131.106298][ T42] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 131.301435][ T6719] netlink: 'syz.7.166': attribute type 1 has an invalid length. [ 131.346571][ T6719] netlink: 'syz.7.166': attribute type 1 has an invalid length. [ 131.356664][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.168'. [ 131.358424][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.7.166'. [ 131.416597][ T6719] netlink: 'syz.7.166': attribute type 1 has an invalid length. [ 131.436294][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.7.166'. [ 131.520971][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.171'. [ 131.577201][ T6689] ceph: No mds server is up or the cluster is laggy [ 131.752665][ T6745] tipc: Started in network mode [ 131.758238][ T6745] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 131.813434][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.968486][ T6755] FAULT_INJECTION: forcing a failure. [ 131.968486][ T6755] name fail_futex, interval 1, probability 0, space 0, times 1 [ 132.038165][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT(full) [ 132.038192][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.038203][ T6755] Call Trace: [ 132.038209][ T6755] [ 132.038217][ T6755] dump_stack_lvl+0x100/0x190 [ 132.038243][ T6755] should_fail_ex.cold+0x5/0xa [ 132.038262][ T6755] ? lockdep_hardirqs_on+0x78/0x100 [ 132.038286][ T6755] should_fail_futex+0x4c/0x60 [ 132.038310][ T6755] __x64_sys_futex+0x1f0/0x4d0 [ 132.038339][ T6755] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.038374][ T6755] do_syscall_64+0x115/0x870 [ 132.038393][ T6755] ? clear_bhb_loop+0x40/0x90 [ 132.038415][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.038432][ T6755] RIP: 0033:0x7fd0a2d9de99 [ 132.038447][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.038463][ T6755] RSP: 002b:00007ffe475da2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.038481][ T6755] RAX: ffffffffffffffda RBX: 000000000002035d RCX: 00007fd0a2d9de99 [ 132.038492][ T6755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0a3025fac [ 132.038503][ T6755] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 132.038514][ T6755] R10: 00007ffe475da3d0 R11: 0000000000000246 R12: 00007ffe475da3f0 [ 132.038525][ T6755] R13: 00007fd0a3025fac R14: 000000000002038f R15: 00007ffe475da3d0 [ 132.038556][ T6755] [ 132.043399][ T6755] FAULT_INJECTION: forcing a failure. [ 132.043399][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.205684][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT(full) [ 132.205710][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.205720][ T6755] Call Trace: [ 132.205726][ T6755] [ 132.205733][ T6755] dump_stack_lvl+0x100/0x190 [ 132.205762][ T6755] should_fail_ex.cold+0x5/0xa [ 132.205785][ T6755] _copy_from_user+0x2e/0xd0 [ 132.205811][ T6755] get_timespec64+0x8d/0x240 [ 132.205832][ T6755] ? __pfx_get_timespec64+0x10/0x10 [ 132.205853][ T6755] ? lockdep_hardirqs_on+0x78/0x100 [ 132.205878][ T6755] __x64_sys_futex+0x21a/0x4d0 [ 132.205907][ T6755] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.205942][ T6755] do_syscall_64+0x115/0x870 [ 132.205961][ T6755] ? clear_bhb_loop+0x40/0x90 [ 132.205983][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.206001][ T6755] RIP: 0033:0x7fd0a2d9de99 [ 132.206018][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.206033][ T6755] RSP: 002b:00007ffe475da2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.206049][ T6755] RAX: ffffffffffffffda RBX: 00000000000203a7 RCX: 00007fd0a2d9de99 [ 132.206059][ T6755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0a3025fac [ 132.206067][ T6755] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 132.206076][ T6755] R10: 00007ffe475da3d0 R11: 0000000000000246 R12: 00007ffe475da3f0 [ 132.206085][ T6755] R13: 00007fd0a3025fac R14: 00000000000203d9 R15: 00007ffe475da3d0 [ 132.206105][ T6755] [ 132.206310][ T6755] FAULT_INJECTION: forcing a failure. [ 132.206310][ T6755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 132.397611][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT(full) [ 132.397638][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.397649][ T6755] Call Trace: [ 132.397655][ T6755] [ 132.397662][ T6755] dump_stack_lvl+0x100/0x190 [ 132.397690][ T6755] should_fail_ex.cold+0x5/0xa [ 132.397713][ T6755] get_futex_key+0x1d2/0x14f0 [ 132.397741][ T6755] ? __pfx_get_futex_key+0x10/0x10 [ 132.397773][ T6755] futex_wake+0xf4/0x5e0 [ 132.397789][ T6755] ? futex_wait+0x11e/0x370 [ 132.397810][ T6755] ? __pfx_futex_wake+0x10/0x10 [ 132.397839][ T6755] do_futex+0x2b2/0x440 [ 132.397866][ T6755] ? __pfx_do_futex+0x10/0x10 [ 132.397891][ T6755] ? ktime_get+0x22c/0x320 [ 132.397912][ T6755] ? lockdep_hardirqs_on+0x78/0x100 [ 132.397937][ T6755] __x64_sys_futex+0x34f/0x4d0 [ 132.397965][ T6755] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.398000][ T6755] do_syscall_64+0x115/0x870 [ 132.398025][ T6755] ? clear_bhb_loop+0x40/0x90 [ 132.398048][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.398067][ T6755] RIP: 0033:0x7fd0a2d9de99 [ 132.398082][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.398100][ T6755] RSP: 002b:00007ffe475da2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.398119][ T6755] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0a2d9de99 [ 132.398131][ T6755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0a3025fa8 [ 132.398142][ T6755] RBP: 0000000000000085 R08: 0000000000000020 R09: 0000000000000000 [ 132.398152][ T6755] R10: 00007fd0a3025fa0 R11: 0000000000000246 R12: 0000000000000000 [ 132.398162][ T6755] R13: 00007fd0a3025fac R14: 00007fd0a3025fa8 R15: 00007fd0a3025fa0 [ 132.398186][ T6755] [ 132.626708][ T6755] FAULT_INJECTION: forcing a failure. [ 132.626708][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.650093][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.5.178 Not tainted syzkaller #0 PREEMPT(full) [ 132.650118][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.650128][ T6755] Call Trace: [ 132.650135][ T6755] [ 132.650141][ T6755] dump_stack_lvl+0x100/0x190 [ 132.650169][ T6755] should_fail_ex.cold+0x5/0xa [ 132.650192][ T6755] _copy_from_user+0x2e/0xd0 [ 132.650217][ T6755] get_timespec64+0x8d/0x240 [ 132.650238][ T6755] ? __pfx_get_timespec64+0x10/0x10 [ 132.650265][ T6755] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 132.650286][ T6755] ? xfd_validate_state+0x129/0x190 [ 132.650311][ T6755] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 132.650338][ T6755] do_syscall_64+0x115/0x870 [ 132.650358][ T6755] ? clear_bhb_loop+0x40/0x90 [ 132.650379][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.650397][ T6755] RIP: 0033:0x7fd0a2d5e6ce [ 132.650425][ T6755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.650441][ T6755] RSP: 002b:00007ffe475da248 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 132.650459][ T6755] RAX: ffffffffffffffda RBX: 000055557abdc500 RCX: 00007fd0a2d5e6ce [ 132.650470][ T6755] RDX: 00007ffe475da2a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.650481][ T6755] RBP: 00007fd0a3027da0 R08: 0000000000000000 R09: 0000000000000000 [ 132.650491][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000020683 [ 132.650502][ T6755] R13: 00007fd0a302609c R14: 0000000000020618 R15: 00007fd0a3026090 [ 132.650526][ T6755] [ 132.691911][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.182'. [ 132.830408][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.8.183'. [ 133.568709][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 133.568725][ T29] audit: type=1400 audit(1785136291.060:319): avc: denied { write } for pid=6798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.647030][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.9.200'. [ 133.667020][ T6110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.776870][ T29] audit: type=1400 audit(1785136291.270:320): avc: denied { write } for pid=6840 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.840044][ T6110] usb 6-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 133.871339][ T6110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.895728][ T6110] usb 6-1: Product: syz [ 133.907545][ T6110] usb 6-1: Manufacturer: syz [ 133.917348][ T6110] usb 6-1: SerialNumber: syz [ 133.936985][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 133.943447][ T6110] r8152-cfgselector 6-1: Unknown version 0x0000 [ 134.493348][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.212'. [ 134.555205][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.9.214'. [ 134.612112][ T29] audit: type=1400 audit(1785136292.100:321): avc: denied { write } for pid=6855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.737387][ T29] audit: type=1400 audit(1785136292.220:322): avc: denied { create } for pid=6895 comm="syz.7.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.806455][ T29] audit: type=1400 audit(1785136292.260:323): avc: denied { connect } for pid=6895 comm="syz.7.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.917218][ T29] audit: type=1400 audit(1785136292.400:324): avc: denied { write } for pid=6901 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.033250][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 135.190394][ T6110] r8152-cfgselector 6-1: Unknown version 0x0000 [ 135.244040][ T6110] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 135.493200][ T29] audit: type=1400 audit(1785136292.980:325): avc: denied { write } for pid=6915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.560737][ T6936] __nla_validate_parse: 3 callbacks suppressed [ 135.560757][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.227'. [ 135.675335][ T29] audit: type=1400 audit(1785136293.160:326): avc: denied { write } for pid=6938 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.829614][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 136.372295][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.242'. [ 136.986730][ T29] audit: type=1400 audit(1785136294.470:327): avc: denied { create } for pid=7017 comm="syz.5.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.055644][ T29] audit: type=1400 audit(1785136294.520:328): avc: denied { ioctl } for pid=7017 comm="syz.5.253" path="socket:[23682]" dev="sockfs" ino=23682 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.118146][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.7.256'. [ 137.168868][ T6956] NFSD: Unable to initialize client recovery tracking! (-110) [ 137.185844][ T6956] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 137.210384][ T6956] NFSD: starting 90-second grace period (net f0000a3f) [ 137.330394][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.257'. [ 137.703966][ T7054] ip_tables: iptables: counters copy to user failed while replacing table [ 138.053075][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 138.187177][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.275'. [ 138.320572][ T7077] svc: failed to register lockdv1 RPC service (errno 111). [ 138.331967][ T7077] lockd_up: makesock failed, error=-111 [ 138.539076][ T7077] svc: failed to register nfsdv3 RPC service (errno 111). [ 138.547860][ T7077] svc: failed to register nfsaclv3 RPC service (errno 111). [ 138.555428][ T7077] failed to unregister tcp with rpcbind [ 138.561908][ T7077] svc: failed to register nfsdv3 RPC service (errno 97). [ 138.569297][ T5731] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 138.575667][ T7077] svc: failed to register nfsaclv3 RPC service (errno 97). [ 138.585228][ T7077] failed to unregister tcp with rpcbind [ 138.756921][ T5731] usb 7-1: not running at top speed; connect to a high speed hub [ 138.765744][ T5731] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.776679][ T5731] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 138.790697][ T5731] usb 7-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 138.800012][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.808273][ T5731] usb 7-1: Product: syz [ 138.816904][ T5731] usb 7-1: Manufacturer: syz [ 138.822797][ T5731] usb 7-1: SerialNumber: syz [ 138.833403][ T7083] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 138.841448][ T7083] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 139.345447][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.288'. [ 139.564078][ T5731] ax88179_178a 7-1:1.0: probe with driver ax88179_178a failed with error -71 [ 139.629574][ T5731] usb 7-1: USB disconnect, device number 2 [ 139.913367][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 139.913383][ T29] audit: type=1400 audit(1785136297.400:333): avc: denied { create } for pid=7149 comm="syz.8.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.945514][ T29] audit: type=1400 audit(1785136297.400:334): avc: denied { bind } for pid=7149 comm="syz.8.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.964895][ T29] audit: type=1400 audit(1785136297.410:335): avc: denied { write } for pid=7149 comm="syz.8.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.022699][ T29] audit: type=1400 audit(1785136297.510:336): avc: denied { write } for pid=7138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.150379][ T29] audit: type=1400 audit(1785136297.640:337): avc: denied { write } for pid=7160 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.193477][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.301'. [ 140.247394][ T35] rpcbind: server 127.0.0.1 not responding, timed out [ 140.331817][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.304'. [ 140.702421][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.313'. [ 141.138970][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.321'. [ 141.415372][ T7229] netlink: 'syz.8.327': attribute type 2 has an invalid length. [ 141.573481][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.329'. [ 142.147564][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.344'. [ 142.280677][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.345'. [ 142.309203][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.345'. [ 142.416540][ T35] rpcbind: server 127.0.0.1 not responding, timed out [ 142.590370][ T29] audit: type=1400 audit(1785136300.080:338): avc: denied { setopt } for pid=7292 comm="syz.6.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.651700][ T29] audit: type=1400 audit(1785136300.080:339): avc: denied { listen } for pid=7292 comm="syz.6.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.790913][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.357'. [ 142.873101][ T29] audit: type=1400 audit(1785136300.360:340): avc: denied { mmap_zero } for pid=7308 comm="syz.8.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 143.083473][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.366'. [ 143.375127][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.373'. [ 143.835627][ T6110] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 144.018045][ T6110] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 144.027493][ T6110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 144.037682][ T6110] usb 9-1: Product: syz [ 144.041877][ T6110] usb 9-1: Manufacturer: syz [ 144.179506][ T7364] x_tables: duplicate underflow at hook 2 [ 144.319986][ T29] audit: type=1400 audit(1785136301.810:341): avc: denied { read write } for pid=7353 comm="syz.8.380" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.343448][ T29] audit: type=1400 audit(1785136301.810:342): avc: denied { open } for pid=7353 comm="syz.8.380" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.578646][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.387'. [ 144.587932][ T7381] FAULT_INJECTION: forcing a failure. [ 144.587932][ T7381] name failslab, interval 1, probability 100, space 0, times 1 [ 144.623837][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.5.389 Not tainted syzkaller #0 PREEMPT(full) [ 144.623866][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 144.623878][ T7381] Call Trace: [ 144.623885][ T7381] [ 144.623894][ T7381] dump_stack_lvl+0x100/0x190 [ 144.623923][ T7381] should_fail_ex.cold+0x5/0xa [ 144.623952][ T7381] should_failslab+0xc2/0x120 [ 144.623978][ T7381] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 144.624000][ T7381] ? __alloc_skb+0x5b7/0x710 [ 144.624022][ T7381] ? __alloc_skb+0x140/0x710 [ 144.624046][ T7381] __alloc_skb+0x140/0x710 [ 144.624067][ T7381] ? __alloc_skb+0x5b7/0x710 [ 144.624087][ T7381] ? __pfx___alloc_skb+0x10/0x10 [ 144.624109][ T7381] ? __pfx_widen_string+0x10/0x10 [ 144.624142][ T7381] alloc_skb_with_frags+0xdd/0x760 [ 144.624168][ T7381] ? widen_string+0xdb/0x2f0 [ 144.624196][ T7381] ? __pfx_widen_string+0x10/0x10 [ 144.624225][ T7381] sock_alloc_send_pskb+0x801/0x980 [ 144.624250][ T7381] ? format_decode+0x1ad/0xdd0 [ 144.624282][ T7381] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 144.624302][ T7381] ? put_dec+0x2e/0xc0 [ 144.624325][ T7381] ? put_dec_trunc8+0x28b/0x370 [ 144.624351][ T7381] ? __lock_acquire+0x49f/0x1a40 [ 144.624377][ T7381] __ip_append_data+0x20d3/0x44d0 [ 144.624403][ T7381] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 144.624421][ T7381] ? find_held_lock+0x2b/0x80 [ 144.624462][ T7381] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 144.624492][ T7381] ? __pfx___ip_append_data+0x10/0x10 [ 144.624514][ T7381] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 144.624548][ T7381] ip_make_skb+0x28b/0x310 [ 144.624570][ T7381] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 144.624590][ T7381] ? __pfx_ip_make_skb+0x10/0x10 [ 144.624611][ T7381] ? ip_route_output_key_hash+0x14c/0x2b0 [ 144.624650][ T7381] ? udp_sendmsg+0x171c/0x2720 [ 144.624668][ T7381] udp_sendmsg+0x171c/0x2720 [ 144.624695][ T7381] ? __pfx_udp_sendmsg+0x10/0x10 [ 144.624728][ T7381] ? reacquire_held_locks+0xce/0x1e0 [ 144.624751][ T7381] ? release_sock+0x21/0x280 [ 144.624775][ T7381] ? inet_autobind+0x145/0x1a0 [ 144.624794][ T7381] ? find_held_lock+0x2b/0x80 [ 144.624824][ T7381] ? lockdep_hardirqs_on+0x78/0x100 [ 144.624845][ T7381] ? inet_autobind+0x145/0x1a0 [ 144.624861][ T7381] ? __local_bh_enable_ip+0x9e/0x120 [ 144.624884][ T7381] ? inet_autobind+0x14a/0x1a0 [ 144.624902][ T7381] ? __pfx_udp_sendmsg+0x10/0x10 [ 144.624923][ T7381] inet_sendmsg+0x105/0x140 [ 144.624947][ T7381] __sys_sendto+0x453/0x4e0 [ 144.624967][ T7381] ? __pfx_inet_sendmsg+0x10/0x10 [ 144.624991][ T7381] ? __pfx___sys_sendto+0x10/0x10 [ 144.625037][ T7381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.625069][ T7381] ? xfd_validate_state+0x129/0x190 [ 144.625101][ T7381] __x64_sys_sendto+0xe0/0x1c0 [ 144.625122][ T7381] ? do_syscall_64+0x90/0x870 [ 144.625142][ T7381] ? lockdep_hardirqs_on+0x78/0x100 [ 144.625160][ T7381] do_syscall_64+0x115/0x870 [ 144.625178][ T7381] ? clear_bhb_loop+0x40/0x90 [ 144.625200][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.625218][ T7381] RIP: 0033:0x7fd0a2d9de99 [ 144.625237][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.625255][ T7381] RSP: 002b:00007fd0a3c60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.625274][ T7381] RAX: ffffffffffffffda RBX: 00007fd0a3025fa0 RCX: 00007fd0a2d9de99 [ 144.625287][ T7381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.625300][ T7381] RBP: 00007fd0a2e33eaf R08: 0000200000000300 R09: 0000000000000010 [ 144.625312][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.625324][ T7381] R13: 00007fd0a3026038 R14: 00007fd0a3025fa0 R15: 00007ffe475da168 [ 144.625348][ T7381] [ 144.693793][ T6110] speedtch 9-1:1.0: speedtch_bind: wrong device class 0 [ 145.014012][ T6110] speedtch 9-1:1.0: usbatm_usb_probe: bind failed: -19! [ 145.041251][ T6110] usb 9-1: USB disconnect, device number 2 [ 146.032960][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 146.032979][ T29] audit: type=1400 audit(1785136303.520:345): avc: denied { create } for pid=7441 comm="syz.7.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.072708][ T29] audit: type=1400 audit(1785136303.520:346): avc: denied { setopt } for pid=7441 comm="syz.7.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.103384][ T29] audit: type=1400 audit(1785136303.520:347): avc: denied { ioctl } for pid=7441 comm="syz.7.415" path="socket:[24412]" dev="sockfs" ino=24412 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.145593][ T29] audit: type=1400 audit(1785136303.520:348): avc: denied { write } for pid=7441 comm="syz.7.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 146.353708][ T7456] __nla_validate_parse: 1 callbacks suppressed [ 146.353728][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.420'. [ 146.591991][ T29] audit: type=1400 audit(1785136304.080:349): avc: denied { ioctl } for pid=7471 comm="syz.6.427" path="socket:[24464]" dev="sockfs" ino=24464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.643640][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.427'. [ 146.832359][ T5871] FAULT_INJECTION: forcing a failure. [ 146.832359][ T5871] name failslab, interval 1, probability 100, space 0, times 1 [ 146.851395][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 146.851424][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 146.851436][ T5871] Call Trace: [ 146.851442][ T5871] [ 146.851450][ T5871] dump_stack_lvl+0x100/0x190 [ 146.851485][ T5871] should_fail_ex.cold+0x5/0xa [ 146.851508][ T5871] should_failslab+0xc2/0x120 [ 146.851533][ T5871] kmem_cache_alloc_noprof+0x91/0x6a0 [ 146.851556][ T5871] ? vm_area_dup+0x27/0x8e0 [ 146.851587][ T5871] vm_area_dup+0x27/0x8e0 [ 146.851616][ T5871] dup_mmap+0x6f6/0x21b0 [ 146.851651][ T5871] ? __pfx_dup_mmap+0x10/0x10 [ 146.851674][ T5871] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 146.851702][ T5871] ? __lock_acquire+0x49f/0x1a40 [ 146.851725][ T5871] ? find_held_lock+0x2b/0x80 [ 146.851751][ T5871] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 146.851795][ T5871] copy_process+0x4588/0x8030 [ 146.851835][ T5871] ? __pfx_copy_process+0x10/0x10 [ 146.851857][ T5871] ? do_raw_spin_lock+0x128/0x260 [ 146.851889][ T5871] kernel_clone+0x176/0x9d0 [ 146.851915][ T5871] ? __pfx_kernel_clone+0x10/0x10 [ 146.851948][ T5871] ? find_held_lock+0x2b/0x80 [ 146.851973][ T5871] ? __might_fault+0xc5/0x140 [ 146.851994][ T5871] __do_sys_clone+0xd9/0x120 [ 146.852019][ T5871] ? __pfx___do_sys_clone+0x10/0x10 [ 146.852066][ T5871] do_syscall_64+0x115/0x870 [ 146.852086][ T5871] ? clear_bhb_loop+0x40/0x90 [ 146.852108][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.852127][ T5871] RIP: 0033:0x7f36e53c6912 [ 146.852143][ T5871] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 146.852159][ T5871] RSP: 002b:00007ffcea5307f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 146.852179][ T5871] RAX: ffffffffffffffda RBX: 00007ffcea5307f0 RCX: 00007f36e53c6912 [ 146.852190][ T5871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 146.852201][ T5871] RBP: 00007ffcea53097c R08: 0000000000000000 R09: 0000000000000001 [ 146.852211][ T5871] R10: 000055557049b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 146.852222][ T5871] R13: 00000000000927c0 R14: 0000000000023d14 R15: 00007ffcea5309d0 [ 146.852245][ T5871] [ 147.302678][ T29] audit: type=1400 audit(1785136304.790:350): avc: denied { write } for pid=7489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.520298][ T29] audit: type=1400 audit(1785136305.010:351): avc: denied { write } for pid=7506 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.576094][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.436'. [ 147.629707][ T85] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.844148][ T85] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.068533][ T85] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.107952][ T29] audit: type=1400 audit(1785136305.600:352): avc: denied { create } for pid=7541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.144761][ T5731] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 148.169653][ T29] audit: type=1400 audit(1785136305.660:353): avc: denied { ioctl } for pid=7541 comm="syz-executor" path="socket:[25611]" dev="sockfs" ino=25611 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.196952][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.214717][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.222952][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.230158][ T29] audit: type=1400 audit(1785136305.660:354): avc: denied { write } for pid=7514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.269998][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.278620][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.293440][ T85] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.408263][ T5802] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 148.644001][ T85] bridge_slave_1: left allmulticast mode [ 148.658415][ T85] bridge_slave_1: left promiscuous mode [ 148.667213][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.711508][ T85] bridge_slave_0: left allmulticast mode [ 148.723864][ T85] bridge_slave_0: left promiscuous mode [ 148.739736][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.909516][ T7535] ceph: No mds server is up or the cluster is laggy [ 148.962597][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'. [ 148.989802][ T7577] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.086533][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.113501][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.131941][ T85] bond0 (unregistering): Released all slaves [ 149.584690][ T85] hsr_slave_0: left promiscuous mode [ 149.613415][ T85] hsr_slave_1: left promiscuous mode [ 149.630737][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.453'. [ 149.650108][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.695357][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.715348][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.731011][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.784639][ T85] veth1_macvtap: left promiscuous mode [ 149.801308][ T85] veth0_macvtap: left promiscuous mode [ 149.838995][ T85] veth1_vlan: left promiscuous mode [ 149.860277][ T85] veth0_vlan: left promiscuous mode [ 150.091696][ T85] team0 (unregistering): Port device team_slave_1 removed [ 150.109914][ T7631] 9pnet_fd: p9_fd_create_unix (7631): problem creating socket [ 150.122524][ T85] team0 (unregistering): Port device team_slave_0 removed [ 150.329309][ T5621] Bluetooth: hci0: command tx timeout [ 150.393623][ T7639] 9pnet_fd: p9_fd_create_unix (7639): problem creating socket [ 150.420718][ T195] rpcbind: server 127.0.0.1 not responding, timed out [ 150.851011][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.7.466'. [ 150.913678][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.938140][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.959106][ T7541] bridge_slave_0: entered allmulticast mode [ 150.983077][ T7541] bridge_slave_0: entered promiscuous mode [ 151.026041][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.047967][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.057960][ T7541] bridge_slave_1: entered allmulticast mode [ 151.072424][ T7541] bridge_slave_1: entered promiscuous mode [ 151.149549][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.208117][ T7541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.332100][ T7541] team0: Port device team_slave_0 added [ 151.372161][ T7541] team0: Port device team_slave_1 added [ 151.519185][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.544170][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.603001][ T7541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.655224][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.684624][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.779943][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.818672][ T7713] syz.7.480 uses obsolete (PF_INET,SOCK_PACKET) [ 151.861941][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 151.861957][ T29] audit: type=1400 audit(1785136309.350:365): avc: denied { write } for pid=7686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.958434][ T7541] hsr_slave_0: entered promiscuous mode [ 151.965641][ T7541] hsr_slave_1: entered promiscuous mode [ 152.020244][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 152.047458][ T29] audit: type=1400 audit(1785136309.530:366): avc: denied { write } for pid=7723 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.408892][ T5621] Bluetooth: hci0: command tx timeout [ 152.643349][ T29] audit: type=1400 audit(1785136310.130:367): avc: denied { write } for pid=7736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.787430][ T29] audit: type=1400 audit(1785136310.280:368): avc: denied { write } for pid=7761 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.861974][ T7541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.872030][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.881022][ T7541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 152.891166][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.899436][ T7541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.917995][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.930365][ T7541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.944645][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.080746][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.110306][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.124843][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.132112][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.150933][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.158195][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.311598][ T29] audit: type=1400 audit(1785136310.800:369): avc: denied { write } for pid=7767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.405594][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.494'. [ 153.575000][ T29] audit: type=1400 audit(1785136311.060:370): avc: denied { write } for pid=7796 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.739569][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.498'. [ 153.746333][ T7809] lo speed is unknown, defaulting to 1000 [ 153.850552][ T7809] lo speed is unknown, defaulting to 1000 [ 153.878905][ T7818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7818 comm=syz.5.500 [ 153.882084][ T7809] lo speed is unknown, defaulting to 1000 [ 153.893614][ T7818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7818 comm=syz.5.500 [ 153.946315][ T7824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7824 comm=syz.5.500 [ 154.053940][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.337212][ T805] lo speed is unknown, defaulting to 1000 [ 154.347952][ T7809] infiniband syz0: set active [ 154.356527][ T7809] infiniband syz0: added lo [ 154.373104][ T7809] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 154.388710][ T7809] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 154.411241][ T7809] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 154.437105][ T29] audit: type=1400 audit(1785136311.930:371): avc: denied { write } for pid=7819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.473894][ T7809] RDS/IB: syz0: added [ 154.487358][ T5621] Bluetooth: hci0: command tx timeout [ 154.504129][ T7809] smc: adding ib device syz0 with port count 1 [ 154.515425][ T7809] smc: ib device syz0 port 1 has no pnetid [ 154.541262][ T805] lo speed is unknown, defaulting to 1000 [ 154.550422][ T7809] lo speed is unknown, defaulting to 1000 [ 154.584084][ T29] audit: type=1400 audit(1785136312.070:372): avc: denied { write } for pid=7853 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.615309][ T7541] veth0_vlan: entered promiscuous mode [ 154.639908][ T7541] veth1_vlan: entered promiscuous mode [ 154.745636][ T7541] veth0_macvtap: entered promiscuous mode [ 154.775458][ T7541] veth1_macvtap: entered promiscuous mode [ 154.847185][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.861984][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.506'. [ 154.893711][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.924952][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.941155][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.968096][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.993823][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.160940][ T7809] lo speed is unknown, defaulting to 1000 [ 155.216950][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.232870][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.281124][ T5848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.304975][ T5848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.369138][ T29] audit: type=1400 audit(1785136312.860:373): avc: denied { mount } for pid=7541 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 155.429526][ T29] audit: type=1400 audit(1785136312.860:374): avc: denied { write } for pid=7859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.622120][ T7809] lo speed is unknown, defaulting to 1000 [ 155.930424][ T7809] lo speed is unknown, defaulting to 1000 [ 156.360653][ T7809] lo speed is unknown, defaulting to 1000 [ 156.565708][ T5621] Bluetooth: hci0: command tx timeout [ 156.670956][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.519'. [ 156.970226][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 156.970242][ T29] audit: type=1400 audit(1785136314.460:380): avc: denied { write } for pid=7944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.119376][ T29] audit: type=1400 audit(1785136314.600:381): avc: denied { write } for pid=7956 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.262297][ T29] audit: type=1400 audit(1785136314.750:382): avc: denied { relabelfrom } for pid=7968 comm="syz.6.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.287034][ T7969] tipc: Started in network mode [ 157.293646][ T7969] tipc: Node identity 10101, cluster identity 4711 [ 157.300808][ T7969] tipc: Node number set to 65793 [ 157.306615][ T29] audit: type=1400 audit(1785136314.770:383): avc: denied { relabelto } for pid=7968 comm="syz.6.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.328141][ T7969] tipc: Enabled bearer , priority 0 [ 157.551647][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.531'. [ 157.622964][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.7.532'. [ 157.663636][ T7989] netlink: 272 bytes leftover after parsing attributes in process `syz.7.532'. [ 157.784146][ T29] audit: type=1400 audit(1785136315.270:384): avc: denied { write } for pid=7975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.838701][ T29] audit: type=1400 audit(1785136315.330:385): avc: denied { write } for pid=8003 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.048257][ T8013] tipc: Started in network mode [ 158.059363][ T8013] tipc: Node identity 7f000001, cluster identity 4711 [ 158.081049][ T8013] tipc: New replicast peer: 127.0.0.1 [ 158.109666][ T8013] tipc: Enabled bearer , priority 10 [ 158.364706][ T8031] tipc: Cannot configure node identity twice [ 158.374835][ T29] audit: type=1400 audit(1785136315.850:386): avc: denied { write } for pid=8010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.421194][ T8031] tipc: Enabling of bearer rejected, already enabled [ 158.436841][ T29] audit: type=1400 audit(1785136315.920:387): avc: denied { create } for pid=8030 comm="syz.9.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.466439][ T29] audit: type=1400 audit(1785136315.920:388): avc: denied { bind } for pid=8030 comm="syz.9.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.504438][ T29] audit: type=1400 audit(1785136315.930:389): avc: denied { setopt } for pid=8030 comm="syz.9.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.629852][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'. [ 159.127286][ T6212] tipc: Node number set to 2130706433 [ 159.292902][ T8084] bridge0: port 3(syz_tun) entered blocking state [ 159.301845][ T8084] bridge0: port 3(syz_tun) entered disabled state [ 159.308769][ T8084] syz_tun: entered allmulticast mode [ 159.314985][ T8084] syz_tun: entered promiscuous mode [ 159.320985][ T8084] bridge0: port 3(syz_tun) entered blocking state [ 159.328578][ T8084] bridge0: port 3(syz_tun) entered listening state [ 159.341440][ T35] bridge0: port 3(syz_tun) entered disabled state [ 159.574058][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.9.557'. [ 159.923020][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.563'. [ 160.068722][ T8115] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 160.084682][ T8114] FAULT_INJECTION: forcing a failure. [ 160.084682][ T8114] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.099048][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.7.565 Not tainted syzkaller #0 PREEMPT(full) [ 160.099076][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.099086][ T8114] Call Trace: [ 160.099092][ T8114] [ 160.099099][ T8114] dump_stack_lvl+0x100/0x190 [ 160.099128][ T8114] should_fail_ex.cold+0x5/0xa [ 160.099152][ T8114] get_futex_key+0x1d2/0x14f0 [ 160.099183][ T8114] ? __pfx_get_futex_key+0x10/0x10 [ 160.099208][ T8114] ? find_held_lock+0x2b/0x80 [ 160.099236][ T8114] ? find_held_lock+0x2b/0x80 [ 160.099262][ T8114] ? filemap_map_pages+0x112d/0x1fe0 [ 160.099293][ T8114] futex_wait_setup+0x91/0x540 [ 160.099319][ T8114] __futex_wait+0x19f/0x300 [ 160.099340][ T8114] ? __pfx___futex_wait+0x10/0x10 [ 160.099363][ T8114] ? __pfx_futex_wake_mark+0x10/0x10 [ 160.099385][ T8114] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 160.099410][ T8114] ? __hrtimer_setup+0x208/0x330 [ 160.099438][ T8114] ? ktime_add_safe+0x60/0x70 [ 160.099465][ T8114] futex_wait+0xe6/0x370 [ 160.099484][ T8114] ? __pfx_futex_wait+0x10/0x10 [ 160.099507][ T8114] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 160.099540][ T8114] do_futex+0x265/0x440 [ 160.099566][ T8114] ? __pfx_do_futex+0x10/0x10 [ 160.099592][ T8114] ? ktime_get+0x22c/0x320 [ 160.099612][ T8114] ? lockdep_hardirqs_on+0x78/0x100 [ 160.099642][ T8114] __x64_sys_futex+0x34f/0x4d0 [ 160.099671][ T8114] ? __pfx___x64_sys_futex+0x10/0x10 [ 160.099707][ T8114] do_syscall_64+0x115/0x870 [ 160.099726][ T8114] ? clear_bhb_loop+0x40/0x90 [ 160.099748][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.099766][ T8114] RIP: 0033:0x7fdbd6f9de99 [ 160.099782][ T8114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.099799][ T8114] RSP: 002b:00007fffe94d2598 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.099818][ T8114] RAX: ffffffffffffffda RBX: 0000000000027131 RCX: 00007fdbd6f9de99 [ 160.099830][ T8114] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdbd7225fac [ 160.099840][ T8114] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 160.099851][ T8114] R10: 00007fffe94d26a0 R11: 0000000000000246 R12: 00007fffe94d26c0 [ 160.099861][ T8114] R13: 00007fdbd7225fac R14: 0000000000027163 R15: 00007fffe94d26a0 [ 160.099882][ T8114] [ 160.114138][ T8117] tipc: Enabling of bearer rejected, already enabled [ 160.349026][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.568'. [ 162.421266][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'. [ 163.846598][ T85] rpcbind: server 127.0.0.1 not responding, timed out [ 168.965569][ C0] tipc: RX(7f000001): key[1] is activated [ 170.498592][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.510223][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.521404][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.529778][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.539449][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.709921][ T8170] lo speed is unknown, defaulting to 1000 [ 170.945076][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.952289][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.959625][ T8170] bridge_slave_0: entered allmulticast mode [ 170.967107][ T8170] bridge_slave_0: entered promiscuous mode [ 170.975087][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.984142][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.991817][ T8170] bridge_slave_1: entered allmulticast mode [ 170.999643][ T8170] bridge_slave_1: entered promiscuous mode [ 171.021013][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.032139][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.058661][ T8170] team0: Port device team_slave_0 added [ 171.066400][ T8170] team0: Port device team_slave_1 added [ 171.084763][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.091818][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.118131][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.131435][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.138456][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.165766][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.198492][ T8170] hsr_slave_0: entered promiscuous mode [ 171.204758][ T8170] hsr_slave_1: entered promiscuous mode [ 171.211014][ T8170] debugfs: 'hsr0' already exists in 'hsr' [ 171.216844][ T8170] Cannot create hsr debugfs directory [ 171.492959][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 171.492975][ T29] audit: type=1400 audit(1785136328.980:396): avc: denied { write } for pid=8188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.589656][ T29] audit: type=1400 audit(1785136329.080:397): avc: denied { write } for pid=8200 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.723928][ T8170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.733818][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.742118][ T8170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.756679][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.767117][ T8170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.777673][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.790152][ T8170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.801312][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.831592][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.840278][ T8170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.848068][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.855231][ T8170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.927558][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.934768][ T29] audit: type=1400 audit(1785136329.420:398): avc: denied { write } for pid=8202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.959897][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.973726][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.003078][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.016249][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.023399][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.033197][ T29] audit: type=1400 audit(1785136329.500:399): avc: denied { write } for pid=8219 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.075276][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.082495][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.328209][ T29] audit: type=1400 audit(1785136329.820:400): avc: denied { write } for pid=8221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.397742][ T29] audit: type=1400 audit(1785136329.890:401): avc: denied { write } for pid=8238 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.524381][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.566204][ T5621] Bluetooth: hci1: command tx timeout [ 172.584524][ T8170] veth0_vlan: entered promiscuous mode [ 172.600230][ T8170] veth1_vlan: entered promiscuous mode [ 172.639933][ T8170] veth0_macvtap: entered promiscuous mode [ 172.654104][ T8170] veth1_macvtap: entered promiscuous mode [ 172.677029][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.699093][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.713772][ T195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.715429][ T29] audit: type=1400 audit(1785136330.200:402): avc: denied { write } for pid=8243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.729221][ T195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.759226][ T195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.771387][ T195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.844604][ T29] audit: type=1400 audit(1785136330.330:403): avc: denied { write } for pid=8255 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.850716][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.884926][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.930107][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.939057][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.133853][ T29] audit: type=1400 audit(1785136330.620:404): avc: denied { write } for pid=8257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.201412][ T29] audit: type=1400 audit(1785136330.690:405): avc: denied { write } for pid=8271 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.465249][ T35] rpcbind: server 127.0.0.1 not responding, timed out [ 173.573818][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.585802][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.598814][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.610189][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.617990][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.953737][ T8287] lo speed is unknown, defaulting to 1000 [ 174.436186][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.443536][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.451364][ T8287] bridge_slave_0: entered allmulticast mode [ 174.459168][ T8287] bridge_slave_0: entered promiscuous mode [ 174.469136][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.476660][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.484019][ T8287] bridge_slave_1: entered allmulticast mode [ 174.491765][ T8287] bridge_slave_1: entered promiscuous mode [ 174.523914][ T8287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.537654][ T8287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.573975][ T8287] team0: Port device team_slave_0 added [ 174.582315][ T8287] team0: Port device team_slave_1 added [ 174.612278][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.619403][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.646520][ T8287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.657556][ T5617] Bluetooth: hci1: command tx timeout [ 174.665347][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.672607][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.699670][ T8287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.768791][ T8287] hsr_slave_0: entered promiscuous mode [ 174.775254][ T8287] hsr_slave_1: entered promiscuous mode [ 174.784329][ T8287] debugfs: 'hsr0' already exists in 'hsr' [ 174.790240][ T8287] Cannot create hsr debugfs directory [ 175.619141][ T8287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.629660][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.638123][ T8287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.648030][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.659006][ T8287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.675343][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.683800][ T8287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.696675][ T5617] Bluetooth: hci2: command tx timeout [ 175.704800][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.806640][ T8287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.830422][ T8287] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.843640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.850816][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.882824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.890025][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.119059][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.140031][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.150517][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.162685][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.173297][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.649628][ T8287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.728420][ T5617] Bluetooth: hci1: command tx timeout [ 176.753250][ T8408] lo speed is unknown, defaulting to 1000 [ 176.841895][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 176.841915][ T29] audit: type=1400 audit(1785136334.330:420): avc: denied { write } for pid=8411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.917333][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.932328][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.944552][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.957072][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.977017][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.122834][ T29] audit: type=1400 audit(1785136334.610:421): avc: denied { write } for pid=8454 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.359203][ T8287] veth0_vlan: entered promiscuous mode [ 177.438162][ T8287] veth1_vlan: entered promiscuous mode [ 177.613072][ T29] audit: type=1400 audit(1785136335.100:422): avc: denied { write } for pid=8461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.639718][ T8449] lo speed is unknown, defaulting to 1000 [ 177.647356][ T8287] veth0_macvtap: entered promiscuous mode [ 177.681789][ T8287] veth1_macvtap: entered promiscuous mode [ 177.727552][ T29] audit: type=1400 audit(1785136335.220:423): avc: denied { write } for pid=8482 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.752413][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.766118][ T5617] Bluetooth: hci2: command tx timeout [ 177.793016][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.827812][ T85] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.872160][ T85] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.919167][ T85] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.934030][ T85] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.042320][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.055948][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.064819][ T8408] bridge_slave_0: entered allmulticast mode [ 178.079837][ T8408] bridge_slave_0: entered promiscuous mode [ 178.089581][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.096824][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.104038][ T8408] bridge_slave_1: entered allmulticast mode [ 178.113322][ T8408] bridge_slave_1: entered promiscuous mode [ 178.153182][ T29] audit: type=1400 audit(1785136335.640:424): avc: denied { write } for pid=8485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.170506][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.246538][ T5617] Bluetooth: hci3: command tx timeout [ 178.266575][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.292469][ T29] audit: type=1400 audit(1785136335.780:425): avc: denied { write } for pid=8501 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.413327][ T8408] team0: Port device team_slave_0 added [ 178.450618][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.455461][ T8408] team0: Port device team_slave_1 added [ 178.466092][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.534874][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.545863][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.555410][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.563311][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.579756][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.584051][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.614140][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.614182][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.679787][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.692034][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.721246][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.722770][ T29] audit: type=1400 audit(1785136336.210:426): avc: denied { write } for pid=8504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.756996][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.775769][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.806188][ T5617] Bluetooth: hci1: command tx timeout [ 178.871099][ T29] audit: type=1400 audit(1785136336.360:427): avc: denied { write } for pid=8521 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.964147][ T8408] hsr_slave_0: entered promiscuous mode [ 178.991546][ T8408] hsr_slave_1: entered promiscuous mode [ 179.009079][ T8408] debugfs: 'hsr0' already exists in 'hsr' [ 179.022618][ T8408] Cannot create hsr debugfs directory [ 179.046179][ T5617] Bluetooth: hci4: command tx timeout [ 179.433367][ T8510] lo speed is unknown, defaulting to 1000 [ 179.463973][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.499124][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.524049][ T8449] bridge_slave_0: entered allmulticast mode [ 179.534539][ T8449] bridge_slave_0: entered promiscuous mode [ 179.567954][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.578714][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.594212][ T8449] bridge_slave_1: entered allmulticast mode [ 179.616614][ T8449] bridge_slave_1: entered promiscuous mode [ 179.702276][ T29] audit: type=1400 audit(1785136337.190:428): avc: denied { write } for pid=8533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.747336][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.790014][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.847206][ T5617] Bluetooth: hci2: command tx timeout [ 179.912952][ T29] audit: type=1400 audit(1785136337.400:429): avc: denied { write } for pid=8565 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.972807][ T8449] team0: Port device team_slave_0 added [ 180.058179][ T8573] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=8573 comm=syz.3.605 [ 180.231402][ T8449] team0: Port device team_slave_1 added [ 180.325633][ T5617] Bluetooth: hci3: command tx timeout [ 180.347928][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.365424][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.420005][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.489661][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.519168][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.545729][ T8588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.569639][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.582418][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.610908][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.622372][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.631680][ T8592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.693572][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 180.727417][ T5617] Bluetooth: hci6: command tx timeout [ 180.862570][ T8449] hsr_slave_0: entered promiscuous mode [ 180.872969][ T8449] hsr_slave_1: entered promiscuous mode [ 180.881287][ T8449] debugfs: 'hsr0' already exists in 'hsr' [ 180.887869][ T8449] Cannot create hsr debugfs directory [ 181.128638][ T5617] Bluetooth: hci4: command tx timeout [ 181.385202][ T8629] tipc: Started in network mode [ 181.396103][ T8629] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 181.509455][ T8408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.523508][ T8408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.533166][ T8408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.544669][ T8408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.552704][ T8408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.572968][ T8408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.580601][ T8637] tipc: Cannot configure node identity twice [ 181.587680][ T8637] tipc: Cannot configure node identity twice [ 181.637129][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.657646][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.675760][ T8510] bridge_slave_0: entered allmulticast mode [ 181.682726][ T8510] bridge_slave_0: entered promiscuous mode [ 181.808614][ T8408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.822736][ T8408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.834655][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.842140][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.852858][ T8510] bridge_slave_1: entered allmulticast mode [ 181.861054][ T8510] bridge_slave_1: entered promiscuous mode [ 181.925685][ T5617] Bluetooth: hci2: command tx timeout [ 181.971412][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.993376][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.083881][ T8510] team0: Port device team_slave_0 added [ 182.110980][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 182.110996][ T29] audit: type=1400 audit(1785136339.600:439): avc: denied { write } for pid=8652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.114989][ T8510] team0: Port device team_slave_1 added [ 182.182726][ T29] audit: type=1400 audit(1785136339.670:440): avc: denied { write } for pid=8671 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.195982][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.214653][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.242181][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.302673][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.311708][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.340097][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.421811][ T5617] Bluetooth: hci3: command tx timeout [ 182.468930][ T8510] hsr_slave_0: entered promiscuous mode [ 182.475722][ T8510] hsr_slave_1: entered promiscuous mode [ 182.498687][ T8510] debugfs: 'hsr0' already exists in 'hsr' [ 182.504461][ T8510] Cannot create hsr debugfs directory [ 182.621371][ T29] audit: type=1400 audit(1785136340.110:441): avc: denied { write } for pid=8673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.757730][ T29] audit: type=1400 audit(1785136340.230:442): avc: denied { write } for pid=8686 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.759539][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.806256][ T5617] Bluetooth: hci6: command tx timeout [ 182.902523][ T8449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.913557][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.931394][ T8449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.943387][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.970410][ T8449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.988739][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.002103][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.012749][ T8449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.023311][ T8449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.074770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.081933][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.101239][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.108468][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.206211][ T5617] Bluetooth: hci4: command tx timeout [ 183.344776][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.375260][ T8449] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.400268][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.407457][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.424680][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.431892][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.652162][ T8510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.663513][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.675284][ T8510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.700060][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.724848][ T8510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.755295][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.785141][ T8510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.798862][ T8510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.948882][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.978578][ T29] audit: type=1400 audit(1785136341.470:443): avc: denied { write } for pid=8703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.041178][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.081958][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.083181][ T29] audit: type=1400 audit(1785136341.570:444): avc: denied { write } for pid=8730 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.104974][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.117752][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.164533][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.171704][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.219998][ T8408] veth0_vlan: entered promiscuous mode [ 184.272926][ T8408] veth1_vlan: entered promiscuous mode [ 184.369004][ T8408] veth0_macvtap: entered promiscuous mode [ 184.396481][ T8408] veth1_macvtap: entered promiscuous mode [ 184.467543][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.489290][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.498655][ T5617] Bluetooth: hci3: command tx timeout [ 184.518612][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.547557][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.557696][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.593654][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.613679][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.623448][ T29] audit: type=1400 audit(1785136342.100:445): avc: denied { write } for pid=8734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.687875][ T29] audit: type=1400 audit(1785136342.180:446): avc: denied { write } for pid=8753 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.764903][ T8449] veth0_vlan: entered promiscuous mode [ 184.820796][ T8449] veth1_vlan: entered promiscuous mode [ 184.838240][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.859719][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.887278][ T5617] Bluetooth: hci6: command tx timeout [ 184.942260][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.960247][ T8449] veth0_macvtap: entered promiscuous mode [ 184.975105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.001483][ T8449] veth1_macvtap: entered promiscuous mode [ 185.069871][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.109983][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.155416][ T3340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.171865][ T3340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.184906][ T3340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.225324][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.235252][ T3340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.262000][ T29] audit: type=1400 audit(1785136342.750:447): avc: denied { write } for pid=8756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.291148][ T5617] Bluetooth: hci4: command tx timeout [ 185.360430][ T29] audit: type=1400 audit(1785136342.850:448): avc: denied { write } for pid=8776 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.419914][ T8510] veth0_vlan: entered promiscuous mode [ 185.426963][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.439117][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.454640][ T8510] veth1_vlan: entered promiscuous mode [ 185.490051][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.512866][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.550462][ T8510] veth0_macvtap: entered promiscuous mode [ 185.574555][ T8510] veth1_macvtap: entered promiscuous mode [ 185.632101][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.663475][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.696698][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.719290][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.728530][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.741144][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.868530][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.889967][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.922654][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.934049][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.153135][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 186.172397][ T8803] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.965628][ T5617] Bluetooth: hci6: command tx timeout [ 187.404176][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 187.404193][ T29] audit: type=1400 audit(1785136344.890:457): avc: denied { write } for pid=8853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.492048][ T29] audit: type=1400 audit(1785136344.980:458): avc: denied { write } for pid=8872 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.760313][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 187.784297][ T8886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.636'. [ 187.932538][ T29] audit: type=1400 audit(1785136345.420:459): avc: denied { write } for pid=8876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.008237][ T29] audit: type=1400 audit(1785136345.500:460): avc: denied { write } for pid=8897 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.270417][ T29] audit: type=1400 audit(1785136345.760:461): avc: denied { write } for pid=8901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.336771][ T29] audit: type=1400 audit(1785136345.830:462): avc: denied { write } for pid=8912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.531548][ T29] audit: type=1400 audit(1785136346.020:463): avc: denied { write } for pid=8914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.593133][ T29] audit: type=1400 audit(1785136346.080:464): avc: denied { write } for pid=8925 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.816566][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.823378][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.853207][ T29] audit: type=1400 audit(1785136346.340:465): avc: denied { write } for pid=8927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.953334][ T29] audit: type=1400 audit(1785136346.440:466): avc: denied { write } for pid=8940 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.189662][ T8942] infiniband syz1: set active [ 189.194627][ T8942] infiniband syz1: added veth0 [ 189.222073][ T8942] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 189.237454][ T8942] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 189.256292][ T8942] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 189.318834][ T8942] RDS/IB: syz1: added [ 189.331780][ T8942] smc: adding ib device syz1 with port count 1 [ 189.338468][ T8942] smc: ib device syz1 port 1 has no pnetid [ 190.609244][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 190.619735][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 191.034043][ T9025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.650'. [ 191.077991][ T9025] atomic_op ffff88803554d198 conn xmit_atomic 0000000000000000 [ 191.159989][ T9031] netlink: 72 bytes leftover after parsing attributes in process `syz.0.651'. [ 191.962477][ T9062] syz1: rxe_newlink: already configured on veth0 [ 192.185970][ T9073] rdma_rxe: rxe_newlink: failed to add veth0 [ 192.279340][ T9078] tipc: Started in network mode [ 192.297706][ T9078] tipc: Node identity 1000001, cluster identity 4711 [ 192.330607][ T9078] tipc: Node number set to 16777217 [ 192.342491][ T9083] tipc: Enabled bearer , priority 1 [ 192.481946][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 192.481963][ T29] audit: type=1400 audit(1785136349.970:481): avc: denied { write } for pid=9077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.625083][ T29] audit: type=1400 audit(1785136350.110:482): avc: denied { write } for pid=9096 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.012669][ T29] audit: type=1400 audit(1785136350.500:483): avc: denied { write } for pid=9109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.072025][ T29] audit: type=1400 audit(1785136350.560:484): avc: denied { write } for pid=9127 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.273695][ T29] audit: type=1400 audit(1785136350.760:485): avc: denied { write } for pid=9129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.328628][ T29] audit: type=1400 audit(1785136350.820:486): avc: denied { write } for pid=9140 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.509283][ T29] audit: type=1400 audit(1785136351.000:487): avc: denied { write } for pid=9142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.570052][ T29] audit: type=1400 audit(1785136351.060:488): avc: denied { write } for pid=9153 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.797980][ T29] audit: type=1400 audit(1785136351.290:489): avc: denied { write } for pid=9157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.862055][ T29] audit: type=1400 audit(1785136351.350:490): avc: denied { write } for pid=9168 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.647488][ T9270] siw: device registration error -23 [ 195.712627][ T5724] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 195.990569][ T6110] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 196.527234][ T9274] ceph: No mds server is up or the cluster is laggy [ 196.541778][ T6110] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 303.995433][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 304.002397][ C1] rcu: 0-...!: (3 ticks this GP) idle=ff7c/1/0x4000000000000000 softirq=45147/45147 fqs=2 [ 304.013007][ C1] rcu: (detected by 1, t=10502 jiffies, g=37109, q=4322 ncpus=2) [ 304.020812][ C1] Sending NMI from CPU 1 to CPUs 0: [ 304.020839][ C0] NMI backtrace for cpu 0 [ 304.020852][ C0] CPU: 0 UID: 0 PID: 5724 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 304.020869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 304.020880][ C0] Workqueue: events_power_efficient gc_worker [ 304.020902][ C0] RIP: 0010:trace_hrtimer_start+0x9/0x220 [ 304.020924][ C0] Code: cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 41 55 41 89 f5 41 54 <49> 89 fc 55 89 d5 53 e8 1b 85 14 00 66 90 e8 14 85 14 00 65 8b 1d [ 304.020937][ C0] RSP: 0018:ffffc90000007e48 EFLAGS: 00000046 [ 304.020949][ C0] RAX: 0000000000000000 RBX: ffff8880b8428540 RCX: 0000000000000000 [ 304.020958][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802b85a300 [ 304.020967][ C0] RBP: ffff88802b85a300 R08: 0000000000000000 R09: fffff52000000fb2 [ 304.020978][ C0] R10: ffffffff9b9181eb R11: 0000000000000000 R12: 0000000000000000 [ 304.020987][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8428590 [ 304.020996][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 304.021011][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.021021][ C0] CR2: 00007efe6763a6b0 CR3: 000000000e994000 CR4: 00000000003526f0 [ 304.021030][ C0] Call Trace: [ 304.021035][ C0] [ 304.021042][ C0] enqueue_hrtimer+0x84/0x2f0 [ 304.021062][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 304.021089][ C0] hrtimer_interrupt+0x3e5/0x940 [ 304.021106][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 304.021127][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 304.021143][ C0] [ 304.021147][ C0] [ 304.021152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.021168][ C0] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 304.021186][ C0] Code: c0 75 0f 65 8b 05 fc 57 a9 08 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 54 55 53 48 83 ec 08 65 8b 1d d5 15 a9 08 65 f7 05 c6 15 a9 08 [ 304.021198][ C0] RSP: 0018:ffffc9000494fab0 EFLAGS: 00000283 [ 304.021209][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 304.021217][ C0] RDX: 0000000000000000 RSI: ffffffff8c401500 RDI: ffffffff8c401540 [ 304.021227][ C0] RBP: ffffffff8ebe8180 R08: 0000000000000000 R09: 0000000000000000 [ 304.021235][ C0] R10: 0000000000040000 R11: 0000000000000000 R12: 0000000000000002 [ 304.021243][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.021256][ C0] rcu_is_watching+0x12/0xc0 [ 304.021277][ C0] lock_acquire+0x301/0x370 [ 304.021293][ C0] ? __pfx___might_resched+0x10/0x10 [ 304.021309][ C0] ? gc_worker+0xc71/0x1a10 [ 304.021325][ C0] gc_worker+0x22b/0x1a10 [ 304.021341][ C0] ? gc_worker+0x21a/0x1a10 [ 304.021360][ C0] ? __pfx_gc_worker+0x10/0x10 [ 304.021376][ C0] ? rcu_is_watching+0x12/0xc0 [ 304.021396][ C0] process_one_work+0xa23/0x1940 [ 304.021415][ C0] ? __pfx_process_one_work+0x10/0x10 [ 304.021433][ C0] ? __pfx_gc_worker+0x10/0x10 [ 304.021449][ C0] worker_thread+0x5ef/0xe50 [ 304.021466][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.021480][ C0] ? kthread+0x13a/0x450 [ 304.021492][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.021505][ C0] kthread+0x370/0x450 [ 304.021517][ C0] ? __pfx_kthread+0x10/0x10 [ 304.021530][ C0] ret_from_fork+0x72b/0xd50 [ 304.021549][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 304.021567][ C0] ? __switch_to+0x800/0x10f0 [ 304.021581][ C0] ? __pfx_kthread+0x10/0x10 [ 304.021594][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.021618][ C0] [ 304.021834][ C1] rcu: rcu_preempt kthread starved for 8917 jiffies! g37109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 304.384294][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 304.394251][ C1] rcu: RCU grace-period kthread stack dump: [ 304.400124][ C1] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 304.413612][ C1] Call Trace: [ 304.416878][ C1] [ 304.419802][ C1] __schedule+0x125c/0x6730 [ 304.424317][ C1] ? __pfx___schedule+0x10/0x10 [ 304.429156][ C1] ? find_held_lock+0x2b/0x80 [ 304.433831][ C1] ? schedule+0x225/0x2c0 [ 304.438153][ C1] schedule+0xdd/0x2c0 [ 304.442210][ C1] schedule_timeout+0x127/0x280 [ 304.447061][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 304.452430][ C1] ? __pfx_process_timeout+0x10/0x10 [ 304.457710][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 304.463506][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 304.468964][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 304.473721][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 304.479018][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 304.483966][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 304.489163][ C1] ? rcu_is_watching+0x12/0xc0 [ 304.493923][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 304.499718][ C1] rcu_gp_kthread+0x179/0x230 [ 304.504387][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.509575][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 304.515372][ C1] ? __kthread_parkme+0x18c/0x230 [ 304.520395][ C1] ? kthread+0x13a/0x450 [ 304.524625][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 304.529814][ C1] kthread+0x370/0x450 [ 304.533873][ C1] ? __pfx_kthread+0x10/0x10 [ 304.538456][ C1] ret_from_fork+0x72b/0xd50 [ 304.543056][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 304.548162][ C1] ? __switch_to+0x800/0x10f0 [ 304.552828][ C1] ? __pfx_kthread+0x10/0x10 [ 304.557410][ C1] ret_from_fork_asm+0x1a/0x30 [ 304.562182][ C1] [ 304.565188][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 304.571496][ C1] CPU: 1 UID: 0 PID: 8408 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 304.580937][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 304.590980][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 304.597660][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 304.617260][ C1] RSP: 0000:ffffc9000734f5f8 EFLAGS: 00000293 [ 304.623319][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdc702 [ 304.631276][ C1] RDX: ffff888053760000 RSI: ffffffff81fdc6dc RDI: ffff888053760000 [ 304.639233][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 304.647190][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 304.655151][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 304.663112][ C1] FS: 000055557d819500(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 304.672032][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.678606][ C1] CR2: 00007f2573b75070 CR3: 000000006a16c000 CR4: 00000000003526f0 [ 304.686569][ C1] Call Trace: [ 304.689835][ C1] [ 304.692757][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 304.697971][ C1] ? trace_contention_end+0x126/0x160 [ 304.703338][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 304.709659][ C1] ? ldt_dup_context+0x45/0x300 [ 304.714505][ C1] ? find_held_lock+0x2b/0x80 [ 304.719192][ C1] ? ldt_dup_context+0x1a4/0x300 [ 304.724153][ C1] ? ldt_dup_context+0x1a4/0x300 [ 304.729093][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 304.734293][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 304.739400][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 304.744531][ C1] ? dup_mmap+0x12ec/0x21b0 [ 304.749028][ C1] ? dup_mmap+0x12ec/0x21b0 [ 304.753530][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 304.759071][ C1] ? up_write+0x2e5/0x5c0 [ 304.763395][ C1] dup_mmap+0x1307/0x21b0 [ 304.767730][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 304.772399][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 304.778198][ C1] ? __lock_acquire+0x49f/0x1a40 [ 304.783132][ C1] ? find_held_lock+0x2b/0x80 [ 304.787809][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 304.793713][ C1] copy_process+0x4588/0x8030 [ 304.798411][ C1] ? __pfx_copy_process+0x10/0x10 [ 304.803435][ C1] ? do_raw_spin_lock+0x128/0x260 [ 304.808469][ C1] kernel_clone+0x176/0x9d0 [ 304.812968][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 304.817994][ C1] ? find_held_lock+0x2b/0x80 [ 304.822665][ C1] ? __might_fault+0xc5/0x140 [ 304.827336][ C1] __do_sys_clone+0xd9/0x120 [ 304.831936][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 304.837155][ C1] do_syscall_64+0x115/0x870 [ 304.841735][ C1] ? clear_bhb_loop+0x40/0x90 [ 304.846407][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.852289][ C1] RIP: 0033:0x7f3da9fc6912 [ 304.856692][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 304.876286][ C1] RSP: 002b:00007fffa956cfb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 304.884686][ C1] RAX: ffffffffffffffda RBX: 00007fffa956cfb0 RCX: 00007f3da9fc6912 [ 304.892644][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 304.900602][ C1] RBP: 00007fffa956d13c R08: 0000000000000000 R09: 0000000000000001 [ 304.908559][ C1] R10: 000055557d8197d0 R11: 0000000000000246 R12: 0000000000000001 [ 304.916517][ C1] R13: 00000000000927c0 R14: 000000000002ff97 R15: 00007fffa956d190 [ 304.924493][ C1]