last executing test programs: 1.933362942s ago: executing program 1 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000600002000100"], 0x12) 1.932768837s ago: executing program 1 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, 0x0, 0x0) sendto(r1, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 1.766160878s ago: executing program 1 (id=212): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x1a, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x8022, {@llc={0x10, 0x10, 'o'}}}}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x8022, {@llc={0x10, 0x10, "0100"}}}}}, 0x0) 1.690217376s ago: executing program 1 (id=215): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket(0x8, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/atm\x00', 0x0, 0x0) 1.690030644s ago: executing program 1 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'veth1\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@null, 0x0, 'veth1\x00'}) bind$x25(r2, &(0x7f0000000500), 0x12) connect$x25(r2, &(0x7f0000000600), 0x12) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 1.486907446s ago: executing program 1 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 1.481210411s ago: executing program 3 (id=219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x170, 0x10, 0x5, 0x1, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0]}}]}, 0x170}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x5, 0x2, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x12, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000420)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, 0x0, 0x0) 1.378959329s ago: executing program 3 (id=220): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/ \x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AQBv/K1eAAAAABAA\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.050059948s ago: executing program 0 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x68, 0x2, {{0x1, [0x0, 0x1], 0x1, [0x1]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x98}}, 0x0) 978.943245ms ago: executing program 0 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0800010073797a30000000025c000000120a010400000000000000000200000a0800010073797a30000000020800020073797a300000000208000300000000073c000400080001000200000005000200110000002800038024000100140001001e0000000a0002003c00000000000000140000001100010000000000000000000200000a"], 0xa4}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000130a010000000000000000000200000a0800010073797a30000000020800020073797a30000000020800030000000007"], 0x28}}, 0x0) 746.53419ms ago: executing program 0 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, 0x0, 0x0) sendto(r1, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 700.453743ms ago: executing program 0 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x1}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x180}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0x0, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x88, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x5678, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x1d0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 700.096991ms ago: executing program 0 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c0000000040293da27f0000017f0000016000000000083a40fe800000000000000000000000000001fe8000000000000000000000000000028000000000000000"], 0x3c) 694.197597ms ago: executing program 2 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) 634.121832ms ago: executing program 0 (id=236): unshare(0x40000000) r0 = socket$rds(0x15, 0x5, 0x0) close(r0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 480.065949ms ago: executing program 3 (id=237): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0xbb06, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000020)={0x2, 0xbb06, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="009c00011a2b3c4d0002000001000100000000010000000100010001", 0x1c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="00a800011a2b3c4d0007000012340001000000010000000100010001000100000000", 0x22, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000400)="002000011a2b3c4d00080000567812340100"/32, 0x20, 0x0, 0x0, 0x0) 479.860892ms ago: executing program 2 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x10, 0x20}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x0, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 373.313074ms ago: executing program 2 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/nfs_dns\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/gssd\x00', 0x10000, 0x0) getdents64(r1, &(0x7f0000000400), 0x1000) 346.323101ms ago: executing program 3 (id=240): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x1}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x33}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) 165.113929ms ago: executing program 2 (id=241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 63.161754ms ago: executing program 3 (id=242): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='bye', 0x3}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 62.802283ms ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/syz_tun/accept_source_route\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='1\x00', 0x1) close(r5) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x4, [@private=0xa010102]}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 197.642µs ago: executing program 2 (id=244): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00\x00\x00', 0xb) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 0s ago: executing program 3 (id=245): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): [ 38.075147][ T42] audit: type=1400 audit(1785136324.831:120): avc: denied { rlimitinh } for pid=5661 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:12460' (ED25519) to the list of known hosts. [ 41.710084][ T5706] cgroup: Unknown subsys name 'net' [ 41.922863][ T5706] cgroup: Unknown subsys name 'cpuset' [ 41.928323][ T5706] cgroup: Unknown subsys name 'rlimit' [ 42.187059][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.889314][ T5706] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.364405][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.364419][ T42] audit: type=1400 audit(1785136333.141:158): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.533609][ T42] audit: type=1400 audit(1785136333.311:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.543740][ T42] audit: type=1400 audit(1785136333.311:160): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.552156][ T42] audit: type=1400 audit(1785136333.311:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.560385][ T42] audit: type=1400 audit(1785136333.321:162): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[5995]" dev="sockfs" ino=5995 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.575114][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.580260][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.580360][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.580599][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.581202][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.581812][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.582259][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.582500][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.582718][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.585059][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.585283][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.585846][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.586084][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.587538][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.588168][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.588960][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.589973][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.590510][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.590881][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.594358][ T42] audit: type=1400 audit(1785136333.371:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.597804][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.610819][ T42] audit: type=1400 audit(1785136333.371:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.639984][ T42] audit: type=1400 audit(1785136333.371:165): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.646452][ T42] audit: type=1400 audit(1785136333.381:166): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.653109][ T42] audit: type=1400 audit(1785136333.401:167): avc: denied { sys_module } for pid=5737 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.211500][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.214201][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.216478][ T5743] bridge_slave_0: entered allmulticast mode [ 47.219054][ T5743] bridge_slave_0: entered promiscuous mode [ 47.260427][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.263160][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.266138][ T5743] bridge_slave_1: entered allmulticast mode [ 47.269929][ T5743] bridge_slave_1: entered promiscuous mode [ 47.273680][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.276316][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.278924][ T5738] bridge_slave_0: entered allmulticast mode [ 47.282515][ T5738] bridge_slave_0: entered promiscuous mode [ 47.286836][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.289692][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.292639][ T5738] bridge_slave_1: entered allmulticast mode [ 47.296245][ T5738] bridge_slave_1: entered promiscuous mode [ 47.339186][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.341919][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.344532][ T5737] bridge_slave_0: entered allmulticast mode [ 47.347768][ T5737] bridge_slave_0: entered promiscuous mode [ 47.376201][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.378840][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.381683][ T5737] bridge_slave_1: entered allmulticast mode [ 47.385065][ T5737] bridge_slave_1: entered promiscuous mode [ 47.396249][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.400916][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.411798][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.414448][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.417265][ T5745] bridge_slave_0: entered allmulticast mode [ 47.421289][ T5745] bridge_slave_0: entered promiscuous mode [ 47.425154][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.428169][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.431381][ T5745] bridge_slave_1: entered allmulticast mode [ 47.434575][ T5745] bridge_slave_1: entered promiscuous mode [ 47.440751][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.445686][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.500532][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.512644][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.517396][ T5738] team0: Port device team_slave_0 added [ 47.520776][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.524768][ T5743] team0: Port device team_slave_0 added [ 47.528279][ T5743] team0: Port device team_slave_1 added [ 47.531893][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.536851][ T5738] team0: Port device team_slave_1 added [ 47.587878][ T5737] team0: Port device team_slave_0 added [ 47.597002][ T5737] team0: Port device team_slave_1 added [ 47.607961][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.610248][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.619386][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.625442][ T5745] team0: Port device team_slave_0 added [ 47.633935][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.636155][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.645513][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.649615][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.651875][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.659612][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.664719][ T5745] team0: Port device team_slave_1 added [ 47.679250][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.681715][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.689410][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.708917][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.711279][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.718918][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.730372][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.732943][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.740746][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.744971][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.747119][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.754956][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.758858][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.761626][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.771353][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.807517][ T5743] hsr_slave_0: entered promiscuous mode [ 47.810440][ T5743] hsr_slave_1: entered promiscuous mode [ 47.863503][ T5745] hsr_slave_0: entered promiscuous mode [ 47.865692][ T5745] hsr_slave_1: entered promiscuous mode [ 47.868113][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 47.870210][ T5745] Cannot create hsr debugfs directory [ 47.875275][ T5738] hsr_slave_0: entered promiscuous mode [ 47.877905][ T5738] hsr_slave_1: entered promiscuous mode [ 47.880504][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 47.883183][ T5738] Cannot create hsr debugfs directory [ 47.910314][ T5737] hsr_slave_0: entered promiscuous mode [ 47.912991][ T5737] hsr_slave_1: entered promiscuous mode [ 47.915410][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 47.917449][ T5737] Cannot create hsr debugfs directory [ 48.203474][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.210791][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.213987][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.219122][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.233089][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.239895][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.243543][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.248708][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.281061][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.287069][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.290410][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.295303][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.298624][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.303877][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.306517][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.310378][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.350454][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.354759][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.357916][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.362573][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.371558][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.377759][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.381402][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.385061][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.441678][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.447304][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.451880][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.456149][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.465075][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.469362][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.472399][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.475880][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.505723][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.549116][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.566501][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.569415][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.577779][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.594310][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.596675][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.612794][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.628212][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.630569][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.646976][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.654761][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.657671][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.670246][ T5753] Bluetooth: hci3: command tx timeout [ 48.670253][ T5741] Bluetooth: hci1: command tx timeout [ 48.679974][ T5741] Bluetooth: hci2: command tx timeout [ 48.680056][ T5753] Bluetooth: hci0: command tx timeout [ 48.694002][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.697529][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.722039][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.724317][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.730161][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.742975][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.745257][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.748441][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.750768][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.764157][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.766490][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.929453][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.951129][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.976920][ T5743] veth0_vlan: entered promiscuous mode [ 48.991186][ T5743] veth1_vlan: entered promiscuous mode [ 49.016441][ T5737] veth0_vlan: entered promiscuous mode [ 49.032030][ T5737] veth1_vlan: entered promiscuous mode [ 49.041535][ T5743] veth0_macvtap: entered promiscuous mode [ 49.051238][ T5743] veth1_macvtap: entered promiscuous mode [ 49.074750][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.078982][ T5737] veth0_macvtap: entered promiscuous mode [ 49.083064][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.092494][ T5737] veth1_macvtap: entered promiscuous mode [ 49.096649][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.105583][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.108627][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.121269][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.124029][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.137789][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.161570][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.173551][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.187229][ T5745] veth0_vlan: entered promiscuous mode [ 49.191188][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.206580][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.210531][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.221114][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.225462][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.229415][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.236074][ T5745] veth1_vlan: entered promiscuous mode [ 49.258257][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.262689][ T5738] veth0_vlan: entered promiscuous mode [ 49.264397][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.293623][ T5738] veth1_vlan: entered promiscuous mode [ 49.307518][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.311815][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.319730][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.346231][ T5745] veth0_macvtap: entered promiscuous mode [ 49.358189][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.361174][ T5745] veth1_macvtap: entered promiscuous mode [ 49.367720][ T5738] veth0_macvtap: entered promiscuous mode [ 49.370184][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.385416][ T5738] veth1_macvtap: entered promiscuous mode [ 49.399085][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.407849][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.417212][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.431523][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.435257][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.447417][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.452652][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.455402][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.481780][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.489824][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.494325][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.503123][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.537601][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.540702][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.585251][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.587988][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.602993][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.605675][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.638870][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.643240][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.746938][ T5902] 9pnet_fd: p9_fd_create_unix (5902): problem creating socket [ 49.975579][ T5922] svc: failed to register lockdv1 RPC service (errno 111). [ 49.979090][ T5922] lockd_up: makesock failed, error=-111 [ 50.273369][ T5922] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.277463][ T5922] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.281456][ T5922] failed to unregister udp with rpcbind [ 50.283451][ T5922] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.285917][ T5922] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.288250][ T5922] failed to unregister udp with rpcbind [ 50.340856][ T5738] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.345100][ T5738] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.347490][ T5738] failed to unregister tcp with rpcbind [ 50.349414][ T5738] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.353632][ T5738] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.356211][ T5738] failed to unregister tcp with rpcbind [ 50.601616][ T5957] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 50.624523][ T5961] tipc: Started in network mode [ 50.626949][ T5961] tipc: Node identity 7f000001, cluster identity 4711 [ 50.630541][ T5961] tipc: Enabled bearer , priority 10 [ 50.688297][ T5964] tipc: Disabling bearer [ 50.749825][ T5753] Bluetooth: hci0: command tx timeout [ 50.751458][ T5747] Bluetooth: hci2: command tx timeout [ 50.751468][ T5753] Bluetooth: hci1: command tx timeout [ 50.752153][ T5741] Bluetooth: hci3: command tx timeout [ 51.478779][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 51.478791][ T42] audit: type=1400 audit(1785136338.251:222): avc: denied { create } for pid=5965 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.487194][ T42] audit: type=1400 audit(1785136338.261:223): avc: denied { setopt } for pid=5965 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.494152][ T42] audit: type=1400 audit(1785136338.261:224): avc: denied { read } for pid=5965 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.598381][ T42] audit: type=1400 audit(1785136338.371:225): avc: denied { mount } for pid=5977 comm="syz.3.36" name="/" dev="rpc_pipefs" ino=11527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 51.609016][ T42] audit: type=1400 audit(1785136338.381:226): avc: denied { create } for pid=5983 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.615871][ T42] audit: type=1400 audit(1785136338.381:227): avc: denied { bind } for pid=5983 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.622842][ T42] audit: type=1400 audit(1785136338.391:228): avc: denied { connect } for pid=5983 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.702264][ T42] audit: type=1400 audit(1785136338.481:229): avc: denied { create } for pid=5997 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.703734][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 51.711848][ T42] audit: type=1400 audit(1785136338.481:230): avc: denied { write } for pid=5997 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.722107][ T5999] lo speed is unknown, defaulting to 1000 [ 51.726079][ T5999] lo speed is unknown, defaulting to 1000 [ 51.728866][ T5999] lo speed is unknown, defaulting to 1000 [ 51.759681][ T6001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6001 comm=syz.2.44 [ 51.763115][ T42] audit: type=1400 audit(1785136338.541:231): avc: denied { create } for pid=5997 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.764312][ T6001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6001 comm=syz.2.44 [ 51.778022][ T6001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6001 comm=syz.2.44 [ 51.866788][ T5999] infiniband syz0: set active [ 51.869135][ T5888] lo speed is unknown, defaulting to 1000 [ 51.869206][ T5999] infiniband syz0: added lo [ 51.885537][ T5999] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 51.893120][ T5999] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 51.899857][ T5999] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 51.921923][ T5999] RDS/IB: syz0: added [ 51.924929][ T5999] smc: adding ib device syz0 with port count 1 [ 51.927510][ T5999] smc: ib device syz0 port 1 has no pnetid [ 51.931223][ T5839] lo speed is unknown, defaulting to 1000 [ 51.934526][ T5999] lo speed is unknown, defaulting to 1000 [ 52.065889][ T5999] lo speed is unknown, defaulting to 1000 [ 52.176199][ T5999] lo speed is unknown, defaulting to 1000 [ 52.273584][ T5999] lo speed is unknown, defaulting to 1000 [ 52.829851][ T5741] Bluetooth: hci1: command tx timeout [ 52.829874][ T5747] Bluetooth: hci0: command tx timeout [ 52.840395][ T5747] Bluetooth: hci2: command tx timeout [ 52.840421][ T5741] Bluetooth: hci3: command tx timeout [ 53.588722][ T6052] tipc: Started in network mode [ 53.590430][ T6052] tipc: Node identity 10101, cluster identity 4711 [ 53.592441][ T6052] tipc: Node number set to 65793 [ 53.594826][ T6052] tipc: Enabled bearer , priority 0 [ 53.609563][ T6018] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.611811][ T6018] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.615212][ T6018] NFSD: starting 90-second grace period (net f000051f) [ 53.765250][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 53.777567][ T6066] netlink: 272 bytes leftover after parsing attributes in process `syz.0.71'. [ 53.874561][ T6072] tipc: Started in network mode [ 53.876125][ T6072] tipc: Node identity 7f000001, cluster identity 4711 [ 53.878384][ T6072] tipc: New replicast peer: 127.0.0.1 [ 53.881146][ T6072] tipc: Enabled bearer , priority 10 [ 53.913675][ T6077] tipc: Cannot configure node identity twice [ 53.916588][ T6077] tipc: Enabling of bearer rejected, already enabled [ 53.982431][ T6083] Zero length message leads to an empty skb [ 54.032861][ T6084] NFSD: Failed to start, no listeners configured. [ 54.425326][ T6104] bridge0: port 3(syz_tun) entered blocking state [ 54.427535][ T6104] bridge0: port 3(syz_tun) entered disabled state [ 54.431088][ T6104] syz_tun: entered allmulticast mode [ 54.435796][ T6104] syz_tun: entered promiscuous mode [ 54.438322][ T6104] bridge0: port 3(syz_tun) entered blocking state [ 54.441214][ T6104] bridge0: port 3(syz_tun) entered listening state [ 54.784058][ T6128] 0: reclassify loop, rule prio 0, protocol 03 [ 54.910683][ T985] tipc: Node number set to 2130706433 [ 54.912937][ T5741] Bluetooth: hci2: command tx timeout [ 54.912977][ T5747] Bluetooth: hci0: command tx timeout [ 54.913018][ T5749] Bluetooth: hci3: command tx timeout [ 54.913045][ T5749] Bluetooth: hci1: command tx timeout [ 54.983609][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 55.033565][ T6140] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 55.038295][ T6139] FAULT_INJECTION: forcing a failure. [ 55.038295][ T6139] name fail_futex, interval 1, probability 0, space 0, times 1 [ 55.042654][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(full) [ 55.042669][ T6139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.042675][ T6139] Call Trace: [ 55.042679][ T6139] [ 55.042684][ T6139] dump_stack_lvl+0x100/0x190 [ 55.042705][ T6139] should_fail_ex.cold+0x5/0xa [ 55.042720][ T6139] get_futex_key+0x1d2/0x14f0 [ 55.042738][ T6139] ? __pfx_get_futex_key+0x10/0x10 [ 55.042753][ T6139] ? __smp_call_single_queue+0x17e/0x450 [ 55.042768][ T6139] ? __pfx___smp_call_single_queue+0x10/0x10 [ 55.042785][ T6139] futex_wait_setup+0x91/0x540 [ 55.042800][ T6139] __futex_wait+0x19f/0x300 [ 55.042813][ T6139] ? __pfx___futex_wait+0x10/0x10 [ 55.042826][ T6139] ? __pfx_futex_wake_mark+0x10/0x10 [ 55.042839][ T6139] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 55.042856][ T6139] ? __hrtimer_setup+0x208/0x330 [ 55.042873][ T6139] ? ktime_add_safe+0x60/0x70 [ 55.042890][ T6139] futex_wait+0xe6/0x370 [ 55.042901][ T6139] ? __pfx_futex_wait+0x10/0x10 [ 55.042915][ T6139] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 55.042935][ T6139] do_futex+0x265/0x440 [ 55.042952][ T6139] ? __pfx_do_futex+0x10/0x10 [ 55.042968][ T6139] ? ktime_get+0x22c/0x320 [ 55.042981][ T6139] ? lockdep_hardirqs_on+0x78/0x100 [ 55.042996][ T6139] __x64_sys_futex+0x34f/0x4d0 [ 55.043014][ T6139] ? __pfx___x64_sys_futex+0x10/0x10 [ 55.043035][ T6139] do_syscall_64+0x115/0x870 [ 55.043048][ T6139] ? clear_bhb_loop+0x40/0x90 [ 55.043061][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.043073][ T6139] RIP: 0033:0x7fcfa419de99 [ 55.043082][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.043092][ T6139] RSP: 002b:00007ffce4583a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.043103][ T6139] RAX: ffffffffffffffda RBX: 000000000000d690 RCX: 00007fcfa419de99 [ 55.043110][ T6139] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcfa4425fac [ 55.043129][ T6139] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 55.043135][ T6139] R10: 00007ffce4583b60 R11: 0000000000000246 R12: 00007ffce4583b80 [ 55.043141][ T6139] R13: 00007fcfa4425fac R14: 000000000000d6c2 R15: 00007ffce4583b60 [ 55.043155][ T6139] [ 55.144097][ T6142] tipc: New replicast peer: 127.0.0.1 [ 55.146137][ T6142] tipc: Enabled bearer , priority 10 [ 55.324247][ T6153] svc: failed to register lockdv1 RPC service (errno 111). [ 55.377997][ T5817] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.388398][ T5817] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.394121][ T37] bridge0: port 3(syz_tun) entered disabled state [ 55.396514][ T37] tipc: Resetting bearer [ 55.601335][ T6153] svc: failed to register nfsdv3 RPC service (errno 111). [ 55.604334][ T6153] svc: failed to register nfsaclv3 RPC service (errno 111). [ 55.606675][ T6153] failed to unregister tcp with rpcbind [ 55.609040][ T6153] svc: failed to register nfsdv3 RPC service (errno 97). [ 55.611459][ T6153] svc: failed to register nfsaclv3 RPC service (errno 97). [ 55.613705][ T6153] failed to unregister tcp with rpcbind [ 55.644505][ T6173] NFSD: Failed to start, no listeners configured. [ 57.009641][ T6177] NFSD: Unable to initialize client recovery tracking! (-110) [ 57.012076][ T6177] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 57.014716][ T6177] NFSD: starting 90-second grace period (net f0000412) [ 57.261089][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 57.261100][ T42] audit: type=1400 audit(1785136344.041:273): avc: denied { connect } for pid=6198 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.271044][ T50] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 57.369200][ T42] audit: type=1400 audit(1785136344.141:274): avc: denied { ioctl } for pid=6209 comm="syz.0.127" path="socket:[9836]" dev="sockfs" ino=9836 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.372229][ T6210] tipc: Enabled bearer , priority 1 [ 57.392156][ T6209] tipc: Resetting bearer [ 57.404259][ T6209] tipc: Disabling bearer [ 57.422889][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 57.543333][ T50] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 57.683444][ T42] audit: type=1400 audit(1785136344.461:275): avc: denied { write } for pid=6230 comm="syz.1.134" name="netstat" dev="proc" ino=4026533193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.050179][ T50] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 58.085246][ T6194] ceph: No mds server is up or the cluster is laggy [ 58.706189][ T5745] svc: failed to register nfsdv3 RPC service (errno 111). [ 58.711941][ T5745] svc: failed to register nfsaclv3 RPC service (errno 111). [ 58.714927][ T5745] failed to unregister tcp with rpcbind [ 58.717341][ T5745] svc: failed to register nfsdv3 RPC service (errno 97). [ 58.720238][ T5745] svc: failed to register nfsaclv3 RPC service (errno 97). [ 58.723098][ T5745] failed to unregister tcp with rpcbind [ 58.786795][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 58.789859][ T6260] netlink: 116 bytes leftover after parsing attributes in process `syz.0.147'. [ 59.526198][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 59.530160][ T6275] bridge0: port 3(veth0) entered blocking state [ 59.532242][ T6275] bridge0: port 3(veth0) entered disabled state [ 59.534250][ T6275] veth0: entered allmulticast mode [ 59.536686][ T6275] veth0: entered promiscuous mode [ 59.538462][ T6275] bridge0: port 3(veth0) entered blocking state [ 59.540448][ T6275] bridge0: port 3(veth0) entered forwarding state [ 59.543657][ T6275] bridge0: port 4(veth1) entered blocking state [ 59.545701][ T6275] bridge0: port 4(veth1) entered disabled state [ 59.547589][ T6275] veth1: entered allmulticast mode [ 59.550886][ T6275] veth1: entered promiscuous mode [ 59.553602][ T6275] bridge0: port 4(veth1) entered blocking state [ 59.555681][ T6275] bridge0: port 4(veth1) entered forwarding state [ 59.745483][ T42] audit: type=1400 audit(1785136346.521:276): avc: denied { name_bind } for pid=6285 comm="syz.3.158" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 59.775962][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 59.778726][ T6288] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 59.987085][ T42] audit: type=1400 audit(1785136346.761:277): avc: denied { getopt } for pid=6302 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.289576][ T6268] NFSD: Unable to initialize client recovery tracking! (-110) [ 60.291957][ T6268] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 60.294649][ T6268] NFSD: starting 90-second grace period (net f0000412) [ 60.407615][ T42] audit: type=1400 audit(1785136347.181:278): avc: denied { mount } for pid=6318 comm="syz.1.172" name="/" dev="configfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.414581][ T42] audit: type=1400 audit(1785136347.181:279): avc: denied { search } for pid=6318 comm="syz.1.172" name="/" dev="configfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.421329][ T42] audit: type=1400 audit(1785136347.191:280): avc: denied { write search } for pid=6318 comm="syz.1.172" name="/" dev="configfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.428594][ T42] audit: type=1400 audit(1785136347.191:281): avc: denied { search } for pid=6318 comm="syz.1.172" name="/" dev="configfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.436197][ T42] audit: type=1400 audit(1785136347.191:282): avc: denied { search } for pid=6318 comm="syz.1.172" name="/" dev="configfs" ino=3145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.325982][ T6348] netlink: 'syz.1.184': attribute type 2 has an invalid length. [ 61.562639][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 61.566534][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.570038][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.573868][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 61.578247][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.582802][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.587457][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 61.591891][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.596339][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.600868][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 61.648170][ T6353] syz0: rxe_newlink: already configured on lo [ 61.810198][ T6348] : entered promiscuous mode [ 61.814826][ T6358] bridge0: port 3(veth0) entered blocking state [ 61.818890][ T6358] bridge0: port 3(veth0) entered disabled state [ 61.821067][ T6358] veth0: entered allmulticast mode [ 61.823739][ T6358] veth0: entered promiscuous mode [ 61.826032][ T6358] bridge0: port 3(veth0) entered blocking state [ 61.828444][ T6358] bridge0: port 3(veth0) entered listening state [ 61.895629][ T6355] smc: removing ib device syz0 [ 61.951836][ T6355] smbdirect: ib_dev[syz0] removed [ 62.135421][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.197'. [ 62.146517][ T6393] tipc: Enabled bearer , priority 10 [ 62.371463][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 62.371477][ T42] audit: type=1400 audit(1785136349.151:299): avc: denied { read } for pid=6392 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.618570][ T6414] tipc: Cannot configure node identity twice [ 62.704082][ T42] audit: type=1400 audit(1785136349.481:300): avc: denied { accept } for pid=6415 comm="syz.2.204" laddr=127.0.0.1 lport=5000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.738018][ T6420] tipc: Enabling of bearer rejected, already enabled [ 63.291085][ T42] audit: type=1400 audit(1785136350.071:301): avc: denied { create } for pid=6442 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 63.329786][ T42] audit: type=1400 audit(1785136350.111:302): avc: denied { create } for pid=6444 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.337590][ T42] audit: type=1400 audit(1785136350.111:303): avc: denied { ioctl } for pid=6444 comm="syz.1.216" path="socket:[10113]" dev="sockfs" ino=10113 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.347064][ T42] audit: type=1400 audit(1785136350.111:304): avc: denied { bind } for pid=6444 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.353179][ T42] audit: type=1400 audit(1785136350.111:305): avc: denied { connect } for pid=6444 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.358863][ T42] audit: type=1400 audit(1785136350.111:306): avc: denied { write } for pid=6444 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.468676][ T42] audit: type=1400 audit(1785136350.241:307): avc: denied { setopt } for pid=6451 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.642124][ T34] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 63.780530][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 63.847473][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 63.885950][ T6480] tipc: Enabling of bearer rejected, already enabled [ 63.889382][ T42] audit: type=1400 audit(1785136350.661:308): avc: denied { bind } for pid=6479 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.900757][ T34] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 63.992182][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 63.995943][ T6484] netlink: 64 bytes leftover after parsing attributes in process `syz.0.229'. [ 64.005558][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 64.121263][ C0] tipc: RX(7f000001): key[1] is activated [ 64.216072][ T6494] bridge0: port 4(syz_tun) entered blocking state [ 64.218838][ T6494] bridge0: port 4(syz_tun) entered disabled state [ 64.221714][ T6494] syz_tun: entered allmulticast mode [ 64.225226][ T6494] syz_tun: entered promiscuous mode [ 64.229399][ T6494] bridge0: port 4(syz_tun) entered blocking state [ 64.231821][ T6494] bridge0: port 4(syz_tun) entered listening state [ 64.240466][ C3] bridge0: port 4(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 64.244291][ C3] bridge0: topology change detected, propagating [ 64.410453][ T1353] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 64.441757][ T6464] ceph: No mds server is up or the cluster is laggy [ 65.005635][ T849] ------------[ cut here ]------------ [ 65.008012][ T849] !iov_iter_count(&con->v2.in_iter) [ 65.008025][ T849] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#2: kworker/2:2/849 [ 65.014542][ T849] Modules linked in: [ 65.016574][ T849] CPU: 2 UID: 0 PID: 849 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 65.020429][ T849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.024057][ T849] Workqueue: ceph-msgr ceph_con_workfn [ 65.026159][ T849] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 65.028431][ T849] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 65.035874][ T849] RSP: 0018:ffffc90004c37978 EFLAGS: 00010293 [ 65.037743][ T849] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 65.041128][ T849] RDX: ffff888027ff4a80 RSI: ffffffff8b8189a6 RDI: ffff888027ff4a80 [ 65.043812][ T849] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 65.046671][ T849] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000986f3e [ 65.050415][ T849] R13: ffffc90004c37ab0 R14: ffff888058a40698 R15: ffff888058a40418 [ 65.053672][ T849] FS: 0000000000000000(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 65.057169][ T849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.059187][ T849] CR2: 000000110c3ba232 CR3: 0000000035d8d000 CR4: 0000000000352ef0 [ 65.062744][ T849] Call Trace: [ 65.064013][ T849] [ 65.065315][ T849] ? lock_acquire+0x1b9/0x370 [ 65.067198][ T849] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 65.069083][ T849] ? rcu_is_watching+0x12/0xc0 [ 65.070917][ T849] ? trace_contention_end+0x126/0x160 [ 65.073189][ T849] ? __mutex_lock+0x26d/0x1bd0 [ 65.075148][ T849] ? ceph_con_workfn+0x48/0x13e0 [ 65.077223][ T849] ? register_lock_class+0x40/0x560 [ 65.079121][ T849] ? do_raw_spin_lock+0x128/0x260 [ 65.080933][ T849] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.082650][ T849] ? debug_object_deactivate+0x2e4/0x3b0 [ 65.084389][ T849] ceph_con_workfn+0x360/0x13e0 [ 65.085965][ T849] process_one_work+0xa23/0x1940 [ 65.087490][ T849] ? __pfx_process_one_work+0x10/0x10 [ 65.089156][ T849] ? __pfx_ceph_con_workfn+0x10/0x10 [ 65.091118][ T849] worker_thread+0x5ef/0xe50 [ 65.093000][ T849] ? __pfx_worker_thread+0x10/0x10 [ 65.095079][ T849] ? kthread+0x13a/0x450 [ 65.096837][ T849] ? __pfx_worker_thread+0x10/0x10 [ 65.098897][ T849] kthread+0x370/0x450 [ 65.100697][ T849] ? __pfx_kthread+0x10/0x10 [ 65.102607][ T849] ret_from_fork+0x72b/0xd50 [ 65.104478][ T849] ? __pfx_ret_from_fork+0x10/0x10 [ 65.106618][ T849] ? __switch_to+0x800/0x10f0 [ 65.108571][ T849] ? __pfx_kthread+0x10/0x10 [ 65.110527][ T849] ret_from_fork_asm+0x1a/0x30 [ 65.112567][ T849] [ 65.113905][ T849] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.116901][ T849] CPU: 2 UID: 0 PID: 849 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 65.120733][ T849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.124844][ T849] Workqueue: ceph-msgr ceph_con_workfn [ 65.127117][ T849] Call Trace: [ 65.128520][ T849] [ 65.129768][ T849] dump_stack_lvl+0x100/0x190 [ 65.131762][ T849] vpanic+0x552/0x970 [ 65.133461][ T849] ? __pfx_vpanic+0x10/0x10 [ 65.135374][ T849] panic+0xd1/0xe0 [ 65.136987][ T849] ? __pfx_panic+0x10/0x10 [ 65.138816][ T849] ? check_panic_on_warn+0x1f/0x90 [ 65.140957][ T849] check_panic_on_warn.cold+0x19/0x34 [ 65.143129][ T849] ? ceph_con_v2_try_read+0x1727/0x4780 [ 65.145437][ T849] __warn.cold+0x191/0x318 [ 65.147303][ T849] __report_bug+0x30f/0x440 [ 65.149196][ T849] ? ceph_con_v2_try_read+0x1727/0x4780 [ 65.151503][ T849] ? __pfx___report_bug+0x10/0x10 [ 65.153558][ T849] ? __local_bh_enable_ip+0x9e/0x120 [ 65.155758][ T849] ? lockdep_hardirqs_on+0x78/0x100 [ 65.157883][ T849] ? tcp_recvmsg+0x14c/0x630 [ 65.159824][ T849] ? __local_bh_enable_ip+0x9e/0x120 [ 65.162054][ T849] ? tcp_recvmsg+0x1f8/0x630 [ 65.164011][ T849] ? ceph_con_v2_try_read+0x1727/0x4780 [ 65.166328][ T849] report_bug+0xb2/0x220 [ 65.168124][ T849] ? ceph_con_v2_try_read+0x1727/0x4780 [ 65.170444][ T849] handle_bug+0x16a/0x2a0 [ 65.172276][ T849] exc_invalid_op+0x17/0x50 [ 65.174191][ T849] asm_exc_invalid_op+0x1a/0x20 [ 65.176214][ T849] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 65.178785][ T849] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 65.186687][ T849] RSP: 0018:ffffc90004c37978 EFLAGS: 00010293 [ 65.189215][ T849] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 65.192493][ T849] RDX: ffff888027ff4a80 RSI: ffffffff8b8189a6 RDI: ffff888027ff4a80 [ 65.195748][ T849] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 65.199008][ T849] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000986f3e [ 65.202263][ T849] R13: ffffc90004c37ab0 R14: ffff888058a40698 R15: ffff888058a40418 [ 65.205524][ T849] ? ceph_con_v2_try_read+0xf11/0x4780 [ 65.207784][ T849] ? ceph_con_v2_try_read+0x1726/0x4780 [ 65.210099][ T849] ? ceph_con_v2_try_read+0x1726/0x4780 [ 65.212400][ T849] ? lock_acquire+0x1b9/0x370 [ 65.214370][ T849] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 65.216791][ T849] ? rcu_is_watching+0x12/0xc0 [ 65.218798][ T849] ? trace_contention_end+0x126/0x160 [ 65.221045][ T849] ? __mutex_lock+0x26d/0x1bd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.223044][ T849] ? ceph_con_workfn+0x48/0x13e0 [ 65.225217][ T849] ? register_lock_class+0x40/0x560 [ 65.227382][ T849] ? do_raw_spin_lock+0x128/0x260 [ 65.229498][ T849] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.231677][ T849] ? debug_object_deactivate+0x2e4/0x3b0 [ 65.234027][ T849] ceph_con_workfn+0x360/0x13e0 [ 65.236068][ T849] process_one_work+0xa23/0x1940 [ 65.238138][ T849] ? __pfx_process_one_work+0x10/0x10 [ 65.240384][ T849] ? __pfx_ceph_con_workfn+0x10/0x10 [ 65.242581][ T849] worker_thread+0x5ef/0xe50 [ 65.244529][ T849] ? __pfx_worker_thread+0x10/0x10 [ 65.246647][ T849] ? kthread+0x13a/0x450 [ 65.248364][ T849] ? __pfx_worker_thread+0x10/0x10 [ 65.250446][ T849] kthread+0x370/0x450 [ 65.252052][ T849] ? __pfx_kthread+0x10/0x10 [ 65.253902][ T849] ret_from_fork+0x72b/0xd50 [ 65.255766][ T849] ? __pfx_ret_from_fork+0x10/0x10 [ 65.257764][ T849] ? __switch_to+0x800/0x10f0 [ 65.259383][ T849] ? __pfx_kthread+0x10/0x10 [ 65.260782][ T849] ret_from_fork_asm+0x1a/0x30 [ 65.262212][ T849] [ 65.264067][ T849] Kernel Offset: disabled [ 65.265839][ T849] Rebooting in 86400 seconds..