last executing test programs: 30.54597615s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 30.301379064s ago: executing program 1 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) 30.301264396s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) close(r3) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000070123456780000000000000002000186a300000004000000000000000600000024000000010000000100000001000000020000000401000000000000060000000800000001000000000000000100000020040405ff00000000000000000000000100"/116, 0x74) read(r4, &(0x7f0000000800)=""/100, 0x100) close(r4) 30.208715272s ago: executing program 2 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 30.167770691s ago: executing program 1 (id=9): r0 = socket$inet(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='3\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./exp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='* ./exp 10000 0 0 0\n\x00', 0x14) mount$nfs4(&(0x7f0000000f00)='127.0.0.1:./exp\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)={[{'addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1', 0x31}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/file0\x00', 0x0, 0x0) 30.06805268s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_net\x00', 0x777) mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='./proc_net\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_net/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_net/sys/net/ipv6/conf/default/ioam6_enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc_net/sys/net/ipv6/conf/lo/ioam6_enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'syz_tun\x00', 0x1001}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_net/sys/net/ipv6/conf/syz_tun/ioam6_enabled\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\n', 0x2) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="33330000000100112233445586dd60000000001a0040fe800000000000000000000000000001ff0200000000000000000000000000013b020100311000000100000000010200001234123400080000"], 0x0) 30.030946099s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0,timeo=1,retrans=1,soft\x00') 29.675345269s ago: executing program 2 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x2, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x2, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x2, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) 29.62404529s ago: executing program 2 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000000)=@in={0x2, 0x808, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='port\x00', &(0x7f0000000700)='2056\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000900)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='xprtsec\x00', &(0x7f0000000b00)='tls\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000c00), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000d00)=@gcm_128={{0x303}, "1122334455667788", "11223344556677889900112233445566", "11223344", "0000000000000001"}, 0x28) sendto(r2, &(0x7f0000000e00)="15030300020200", 0x7, 0x0, 0x0, 0x0) 28.772663141s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n', 0x2) 28.667622267s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) read(r4, &(0x7f0000000700)=""/256, 0x100) 28.386630005s ago: executing program 1 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d00000002000000050002000a000000"], 0x1d}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000002d0000000000000001000000050001000a0000000c000f8008000200f40100000800040002000000"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0) 27.896375253s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0011223344550800450000420000400040113cf97f0000017f00000111271127002e0000380000000000000000000000010000012000001800"/78], 0x0) 27.845085157s ago: executing program 0 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x0, "0000010b11123400"}}, 0x10) 27.636551754s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/9/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/14/smp_affinity\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/15/smp_affinity\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/16/smp_affinity\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/18/smp_affinity\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/19/smp_affinity\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/20/smp_affinity\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='1\x00', 0x2) 27.588289678s ago: executing program 0 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'tunl0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x1010101, @rand_addr=0x2020202}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'sit0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1010101}}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500001c00000000400474d902020202010101010000000000000000"], 0x1c) 23.747998826s ago: executing program 0 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x4a) 23.561235169s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10) sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 13.489332293s ago: executing program 32 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n', 0x2) 13.466842759s ago: executing program 33 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4.0\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="013030303030302032303030303030303030206b726235203120003030303030307f303030303030003030303030303030303030303030123030303030300030303030303030303030303030303030303030303030303030303030303020746573740a00", 0x76) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x108, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000074123456780000000000000002000186a00000000200000000000000060000003800000001000000010000000000000000000000000000000401000000000000010000000300000000000000000000001802010400"/104, 0x78) read(r4, &(0x7f0000000700)=""/256, 0x100) 12.485773859s ago: executing program 34 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d00000002000000050002000a000000"], 0x1d}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000002d0000000000000001000000050001000a0000000c000f8008000200f40100000800040002000000"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0) 11.389997712s ago: executing program 5 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='2\x00', 0x1) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 11.349768078s ago: executing program 5 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/0/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) 11.329523742s ago: executing program 4 (id=23): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x20, 0x14, 0x601, 0x0, 0x0, "", [@generic="23000000010000000500020000000000"]}, 0x20}], 0x1}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, &(0x7f0000000300), 0x10) sendto$phonet(r1, &(0x7f0000000400)="01010000000000000000", 0xa, 0x0, &(0x7f0000000500)={0x23, 0x1}, 0x10) recvfrom$phonet(r1, &(0x7f0000000600)=""/256, 0x100, 0x0, 0x0, 0x0) 11.25898404s ago: executing program 5 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) 11.258104028s ago: executing program 4 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x9) write(r0, &(0x7f0000000140)='tcp 2049\x00', 0x9) 11.24988325s ago: executing program 5 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 3600\n', 0x14) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="1400"/16, 0x10}], 0x1}, 0x0) 11.180453638s ago: executing program 5 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) 11.180235748s ago: executing program 5 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='8\n\x00', 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x8008, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000028000000010000000000000002000186a30000000300"/44, 0x2c) 8.479558367s ago: executing program 35 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x8008, @loopback}, 0x10) sendto(r3, &(0x7f0000000280)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.226316721s ago: executing program 7 (id=93): mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) 3.161582248s ago: executing program 7 (id=94): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @loopback}}, 0x1e) 3.161450165s ago: executing program 7 (id=95): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x10, 0x2c, 0x1, "0100000000000000"}], 0x18}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000700)="0000000100000001000000010000000100000001010500000000", 0x1c, 0x0, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) 3.088922095s ago: executing program 7 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtclass={0x48, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x2710, 0x2710, 0x3e8}}]}}]}, 0x48}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000340)={0x11, 0x3, r3}, 0x14) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.088780504s ago: executing program 6 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x601, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, 0x1}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x104, 0x10, 0x601, 0x0, 0x0, {{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3c}, {@in6=@local, 0x0, 0x3c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0x9, @in6=@empty}]}, 0x104}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x2c, 0x11, 0x40, @remote, @local, {[@dstopts={0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}], {0x4e20, 0x4e20, 0xc, 0x0, @opaque="11223344"}}}}}}, 0x0) 3.04114443s ago: executing program 6 (id=99): r0 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000050)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='tls\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) 3.040900187s ago: executing program 6 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/slab/skbuff_head_cache/failslab\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000550)='1', 0x1) 2.980504632s ago: executing program 6 (id=101): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89d0, &(0x7f0000000000)='\x00\x00\x00') sendto(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)=@generic={0x2d, "000001010800"}, 0x10) 2.980376675s ago: executing program 6 (id=102): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) 2.931657821s ago: executing program 6 (id=103): r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) 236.295µs ago: executing program 7 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000002}], 0x10) 0s ago: executing program 7 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00'/20, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000800)={0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36174' (ED25519) to the list of known hosts. [ 42.508769][ T5716] cgroup: Unknown subsys name 'net' [ 42.619306][ T5716] cgroup: Unknown subsys name 'cpuset' [ 42.623218][ T5716] cgroup: Unknown subsys name 'rlimit' [ 42.806131][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 42.806144][ T42] audit: type=1400 audit(1785135675.701:144): avc: denied { setattr } for pid=5716 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.816954][ T42] audit: type=1400 audit(1785135675.701:145): avc: denied { create } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.824134][ T42] audit: type=1400 audit(1785135675.701:146): avc: denied { write } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.831818][ T42] audit: type=1400 audit(1785135675.701:147): avc: denied { read } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.839526][ T42] audit: type=1400 audit(1785135675.711:148): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.848466][ T42] audit: type=1400 audit(1785135675.711:149): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.857412][ T42] audit: type=1400 audit(1785135675.721:150): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.865349][ T42] audit: type=1400 audit(1785135675.731:151): avc: denied { read } for pid=5452 comm="dhcpcd" name="n31" dev="tmpfs" ino=1893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.870995][ T5731] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.873721][ T42] audit: type=1400 audit(1785135675.731:152): avc: denied { open } for pid=5452 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.885794][ T42] audit: type=1400 audit(1785135675.731:153): avc: denied { getattr } for pid=5452 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.587536][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.332949][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.333170][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.336496][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.340492][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.343187][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.345023][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.348392][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.349756][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.353065][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.355283][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.358196][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.359411][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.359721][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.367192][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.369068][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.372029][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.373742][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.374980][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.376018][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.384177][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.960292][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.963078][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.966608][ T5747] bridge_slave_0: entered allmulticast mode [ 47.969309][ T5747] bridge_slave_0: entered promiscuous mode [ 47.989574][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.991845][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.994285][ T5747] bridge_slave_1: entered allmulticast mode [ 47.997285][ T5747] bridge_slave_1: entered promiscuous mode [ 48.039775][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.042410][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.045018][ T5740] bridge_slave_0: entered allmulticast mode [ 48.047719][ T5740] bridge_slave_0: entered promiscuous mode [ 48.064345][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.067176][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.069824][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.072070][ T5740] bridge_slave_1: entered allmulticast mode [ 48.075136][ T5740] bridge_slave_1: entered promiscuous mode [ 48.093215][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.120250][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.122536][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.125420][ T5748] bridge_slave_0: entered allmulticast mode [ 48.128667][ T5748] bridge_slave_0: entered promiscuous mode [ 48.151901][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.154915][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.157275][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.159536][ T5748] bridge_slave_1: entered allmulticast mode [ 48.162124][ T5748] bridge_slave_1: entered promiscuous mode [ 48.166203][ T5747] team0: Port device team_slave_0 added [ 48.169322][ T5747] team0: Port device team_slave_1 added [ 48.171231][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.173622][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.176008][ T5741] bridge_slave_0: entered allmulticast mode [ 48.178567][ T5741] bridge_slave_0: entered promiscuous mode [ 48.182484][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.184726][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.187066][ T5741] bridge_slave_1: entered allmulticast mode [ 48.189681][ T5741] bridge_slave_1: entered promiscuous mode [ 48.194630][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.243601][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.255364][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.259436][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.261501][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.268831][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.274149][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.283543][ T5740] team0: Port device team_slave_0 added [ 48.286680][ T5740] team0: Port device team_slave_1 added [ 48.289618][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.303673][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.306112][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.315188][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.360578][ T5741] team0: Port device team_slave_0 added [ 48.365231][ T5748] team0: Port device team_slave_0 added [ 48.367688][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.369918][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.377663][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.382371][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.384735][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.392165][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.396632][ T5741] team0: Port device team_slave_1 added [ 48.400046][ T5748] team0: Port device team_slave_1 added [ 48.460498][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.462538][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.471393][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.475587][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.477693][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.487707][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.491420][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.493861][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.503151][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.516924][ T5747] hsr_slave_0: entered promiscuous mode [ 48.519771][ T5747] hsr_slave_1: entered promiscuous mode [ 48.526636][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.529414][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.539252][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.549064][ T5740] hsr_slave_0: entered promiscuous mode [ 48.552227][ T5740] hsr_slave_1: entered promiscuous mode [ 48.555380][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.557801][ T5740] Cannot create hsr debugfs directory [ 48.642839][ T5748] hsr_slave_0: entered promiscuous mode [ 48.646263][ T5748] hsr_slave_1: entered promiscuous mode [ 48.649241][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 48.651485][ T5748] Cannot create hsr debugfs directory [ 48.678884][ T5741] hsr_slave_0: entered promiscuous mode [ 48.681048][ T5741] hsr_slave_1: entered promiscuous mode [ 48.683021][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.684950][ T5741] Cannot create hsr debugfs directory [ 48.956484][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.962316][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.968237][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.974159][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.978243][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.982915][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.987145][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.992369][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.038881][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.044450][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.047490][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.051581][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.054656][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.059890][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.062978][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.068148][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.124236][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.128791][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.131634][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.135771][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.140431][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.145094][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.147687][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.151509][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.192539][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.219767][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.225132][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.227823][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.231546][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.240499][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.244454][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.250358][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.254976][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.263908][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.280839][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.284193][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.299815][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.309589][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.311839][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.358982][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.375248][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.377954][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.386540][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.389322][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.422596][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.445542][ T5750] Bluetooth: hci0: command tx timeout [ 49.447950][ T5751] Bluetooth: hci3: command tx timeout [ 49.448768][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.453726][ T5751] Bluetooth: hci2: command tx timeout [ 49.455703][ T5751] Bluetooth: hci1: command tx timeout [ 49.465772][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.477324][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.479420][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.488723][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.496983][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.499746][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.502840][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.505005][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.520169][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.523033][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.677652][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.714766][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.718847][ T5747] veth0_vlan: entered promiscuous mode [ 49.732134][ T5747] veth1_vlan: entered promiscuous mode [ 49.758912][ T5741] veth0_vlan: entered promiscuous mode [ 49.764791][ T5747] veth0_macvtap: entered promiscuous mode [ 49.768350][ T5741] veth1_vlan: entered promiscuous mode [ 49.773240][ T5747] veth1_macvtap: entered promiscuous mode [ 49.784960][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.796789][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.803752][ T5741] veth0_macvtap: entered promiscuous mode [ 49.809851][ T5741] veth1_macvtap: entered promiscuous mode [ 49.817015][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.827009][ T5590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.831004][ T5590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.838248][ T5590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.841363][ T5590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.855476][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.872897][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.887633][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.895841][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.909041][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.911619][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.937808][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.937882][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.940450][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.944110][ T5740] veth0_vlan: entered promiscuous mode [ 49.972013][ T5740] veth1_vlan: entered promiscuous mode [ 49.972061][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.976266][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.993446][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 49.993457][ T42] audit: type=1400 audit(1785135682.881:170): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.994456][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.998058][ T42] audit: type=1400 audit(1785135682.891:171): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.2TSVsL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.001425][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.003909][ T42] audit: type=1400 audit(1785135682.891:172): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.019678][ T42] audit: type=1400 audit(1785135682.891:173): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.2TSVsL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.028100][ T42] audit: type=1400 audit(1785135682.901:174): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.2TSVsL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.032984][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.037866][ T5740] veth0_macvtap: entered promiscuous mode [ 50.040499][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.040966][ T42] audit: type=1400 audit(1785135682.901:175): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.049039][ T42] audit: type=1400 audit(1785135682.911:176): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.049944][ T5740] veth1_macvtap: entered promiscuous mode [ 50.055686][ T42] audit: type=1400 audit(1785135682.911:177): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="gadgetfs" ino=10266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 50.064082][ T42] audit: type=1400 audit(1785135682.911:178): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.070373][ T42] audit: type=1400 audit(1785135682.911:179): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.077421][ T5748] veth0_vlan: entered promiscuous mode [ 50.083887][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.092750][ T5748] veth1_vlan: entered promiscuous mode [ 50.100630][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.109445][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.123504][ T5590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.126113][ T5590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.130946][ T5590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133987][ T5590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.152141][ T5748] veth0_macvtap: entered promiscuous mode [ 50.165906][ T5748] veth1_macvtap: entered promiscuous mode [ 50.179350][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.198110][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.210810][ T5590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.210885][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.213987][ T5590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.216475][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.227222][ T5590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.229942][ T5590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.244782][ T5895] tipc: Started in network mode [ 50.246648][ T5895] tipc: Node identity 1000001, cluster identity 4711 [ 50.248825][ T5895] tipc: Node number set to 16777217 [ 50.251658][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.253736][ T5895] tipc: Enabled bearer , priority 1 [ 50.254118][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.269154][ T5893] tipc: Resetting bearer [ 50.278608][ T5893] tipc: Disabling bearer [ 50.305507][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.308493][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.336027][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.341675][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.377641][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5'. [ 50.380936][ T5898] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5'. [ 50.386172][ T5898] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5'. [ 50.468132][ T5905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.537909][ T5905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.616514][ T5905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.696559][ T5905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.954752][ T55] rpcbind: server 127.0.0.1 not responding, timed out [ 50.992311][ T5926] netlink: 'syz.2.12': attribute type 4 has an invalid length. [ 50.994935][ T5926] netlink: 'syz.2.12': attribute type 2 has an invalid length. [ 51.523435][ T5751] Bluetooth: hci2: command tx timeout [ 51.534094][ T5751] Bluetooth: hci1: command tx timeout [ 51.534201][ T5750] Bluetooth: hci3: command tx timeout [ 51.535121][ T5098] Bluetooth: hci0: command tx timeout [ 51.563379][ T5901] NFSD: Unable to initialize client recovery tracking! (-110) [ 51.566138][ T5901] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 51.569592][ T5901] NFSD: starting 90-second grace period (net f0000498) [ 52.007852][ T5920] NFSD: Failed to start, no listeners configured. [ 52.736047][ T5590] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.779666][ T5936] tipc: Started in network mode [ 52.781481][ T5936] tipc: Node identity 1000001, cluster identity 4369 [ 52.783879][ T5936] tipc: Node number set to 16777217 [ 52.786242][ T5936] tipc: Cannot configure node identity twice [ 52.790407][ T5936] tipc: New replicast peer: 127.0.0.1 [ 52.792876][ T5936] tipc: Enabled bearer , priority 10 [ 52.939236][ T5938] X25: received unknown 00 with LCI 000 [ 53.604464][ T5751] Bluetooth: hci1: command tx timeout [ 53.606497][ T5750] Bluetooth: hci2: command tx timeout [ 53.613502][ T5750] Bluetooth: hci3: command tx timeout [ 53.613678][ T5751] Bluetooth: hci0: command tx timeout [ 55.683681][ T5751] Bluetooth: hci0: command tx timeout [ 55.683937][ T5750] Bluetooth: hci1: command tx timeout [ 55.684001][ T5098] Bluetooth: hci3: command tx timeout [ 55.684031][ T5098] Bluetooth: hci2: command tx timeout [ 57.099233][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 57.099250][ T42] audit: type=1400 audit(1785135689.991:223): avc: denied { read } for pid=5981 comm="syz.0.22" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 67.161010][ T42] audit: type=1400 audit(1785135700.051:224): avc: denied { execute } for pid=5988 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.172419][ T42] audit: type=1400 audit(1785135700.051:225): avc: denied { execute_no_trans } for pid=5988 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.238716][ T42] audit: type=1400 audit(1785135700.131:226): avc: denied { read write } for pid=5990 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.246359][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.247135][ T42] audit: type=1400 audit(1785135700.131:227): avc: denied { open } for pid=5990 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.248412][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.249953][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.256994][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.260270][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.262041][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.264856][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.266487][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.268192][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.270215][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.292641][ T42] audit: type=1400 audit(1785135700.181:228): avc: denied { sys_module } for pid=5991 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.652400][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.655059][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.657310][ T5991] bridge_slave_0: entered allmulticast mode [ 67.660087][ T5991] bridge_slave_0: entered promiscuous mode [ 67.663345][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.665595][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.667786][ T5991] bridge_slave_1: entered allmulticast mode [ 67.670716][ T5991] bridge_slave_1: entered promiscuous mode [ 67.714847][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.726194][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.737573][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.740125][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.742469][ T5990] bridge_slave_0: entered allmulticast mode [ 67.745516][ T5990] bridge_slave_0: entered promiscuous mode [ 67.755289][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.757525][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.759875][ T5990] bridge_slave_1: entered allmulticast mode [ 67.763229][ T5990] bridge_slave_1: entered promiscuous mode [ 67.793903][ T5991] team0: Port device team_slave_0 added [ 67.797102][ T5991] team0: Port device team_slave_1 added [ 67.800608][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.806259][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.832523][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.834806][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.842550][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.847243][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.850161][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.858354][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.862912][ T5990] team0: Port device team_slave_0 added [ 67.866335][ T5990] team0: Port device team_slave_1 added [ 67.887386][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.890157][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.898156][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.908048][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.910201][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.918129][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.936054][ T5991] hsr_slave_0: entered promiscuous mode [ 67.938299][ T5991] hsr_slave_1: entered promiscuous mode [ 67.940351][ T5991] debugfs: 'hsr0' already exists in 'hsr' [ 67.942107][ T5991] Cannot create hsr debugfs directory [ 67.982355][ T5990] hsr_slave_0: entered promiscuous mode [ 67.985706][ T5990] hsr_slave_1: entered promiscuous mode [ 67.988525][ T5990] debugfs: 'hsr0' already exists in 'hsr' [ 67.990871][ T5990] Cannot create hsr debugfs directory [ 68.166609][ T5991] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.174690][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.177471][ T5991] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.181285][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.185146][ T5991] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.191842][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.205318][ T5991] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.209775][ T5991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.241830][ T5751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.245786][ T5751] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.248799][ T5751] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.251752][ T5751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.256990][ T5751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.261077][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.263705][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.267472][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.269663][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.286528][ T5990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.293951][ T5990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.299087][ T5990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.305182][ T5990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.308998][ T5990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.316222][ T5990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.319860][ T5990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.325821][ T5990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.346483][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.348727][ T5990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.351138][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.353849][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.372800][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.387108][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.389705][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.393283][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.396116][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.402881][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.410731][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.413824][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.428061][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.431104][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.459881][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.480582][ T5990] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.501644][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.503912][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.524280][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.526601][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.671071][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.673366][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.675706][ T6033] bridge_slave_0: entered allmulticast mode [ 68.678525][ T6033] bridge_slave_0: entered promiscuous mode [ 68.681912][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.684261][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.686516][ T6033] bridge_slave_1: entered allmulticast mode [ 68.689201][ T6033] bridge_slave_1: entered promiscuous mode [ 68.707630][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.712247][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.728851][ T6033] team0: Port device team_slave_0 added [ 68.731936][ T6033] team0: Port device team_slave_1 added [ 68.745907][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.748111][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.756120][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.761654][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.765435][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.767872][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.775787][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.797857][ T6033] hsr_slave_0: entered promiscuous mode [ 68.800203][ T6033] hsr_slave_1: entered promiscuous mode [ 68.802291][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 68.805760][ T6033] Cannot create hsr debugfs directory [ 68.831899][ T5990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.934741][ T6033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.938851][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.941955][ T6033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.945739][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.948524][ T6033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.952431][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.958728][ T5991] veth0_vlan: entered promiscuous mode [ 68.961467][ T6033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.968551][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.984135][ T5991] veth1_vlan: entered promiscuous mode [ 69.005732][ T5991] veth0_macvtap: entered promiscuous mode [ 69.019683][ T5991] veth1_macvtap: entered promiscuous mode [ 69.030591][ T5990] veth0_vlan: entered promiscuous mode [ 69.039901][ T5990] veth1_vlan: entered promiscuous mode [ 69.042919][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.049697][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.060831][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.065450][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.071315][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.074768][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.092560][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.106407][ T5990] veth0_macvtap: entered promiscuous mode [ 69.111275][ T5990] veth1_macvtap: entered promiscuous mode [ 69.116796][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.128256][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.130702][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.145466][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.147796][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.161454][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.164682][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.167143][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.167930][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.191132][ T5590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.194425][ T5590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.201056][ T5590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.204182][ T5590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.211809][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.214501][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.215078][ T6033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.269319][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.271776][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.283902][ T5751] Bluetooth: hci5: command tx timeout [ 69.284514][ T5098] Bluetooth: hci4: command tx timeout [ 69.295262][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.297713][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.341963][ T42] audit: type=1400 audit(1785135702.231:229): avc: denied { create } for pid=6104 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.350779][ T42] audit: type=1400 audit(1785135702.231:230): avc: denied { bind } for pid=6104 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.359724][ T42] audit: type=1400 audit(1785135702.231:231): avc: denied { write } for pid=6104 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.368915][ T42] audit: type=1400 audit(1785135702.231:232): avc: denied { read } for pid=6104 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.384113][ T42] audit: type=1400 audit(1785135702.281:233): avc: denied { name_bind } for pid=6109 comm="syz.5.27" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 69.444548][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.560332][ T6033] veth0_vlan: entered promiscuous mode [ 69.568824][ T6033] veth1_vlan: entered promiscuous mode [ 69.582922][ T6033] veth0_macvtap: entered promiscuous mode [ 69.587452][ T6033] veth1_macvtap: entered promiscuous mode [ 69.596522][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.602492][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.608747][ T5590] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.613265][ T5590] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.616247][ T5590] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.619607][ T5590] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.651279][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.654185][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.665473][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.668027][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.323515][ T5098] Bluetooth: hci6: command tx timeout [ 71.126501][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.129801][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.363627][ T5098] Bluetooth: hci4: command tx timeout [ 71.373442][ T5098] Bluetooth: hci5: command tx timeout [ 71.898632][ T6178] Zero length message leads to an empty skb [ 72.236042][ T5751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.241144][ T5751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.247688][ T5751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.252544][ T5751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.255311][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 72.255324][ T42] audit: type=1400 audit(1785135705.141:257): avc: denied { create } for pid=6194 comm="syz.6.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.261974][ T5751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.266989][ T42] audit: type=1400 audit(1785135705.141:258): avc: denied { write } for pid=6194 comm="syz.6.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.275924][ T42] audit: type=1400 audit(1785135705.141:259): avc: denied { nlmsg_write } for pid=6194 comm="syz.6.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.404030][ T5751] Bluetooth: hci6: command tx timeout [ 72.438439][ T42] audit: type=1400 audit(1785135705.331:260): avc: denied { accept } for pid=6216 comm="syz.6.55" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.593974][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.596291][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.599220][ T6192] bridge_slave_0: entered allmulticast mode [ 72.603067][ T6192] bridge_slave_0: entered promiscuous mode [ 72.608380][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.611497][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.619771][ T6192] bridge_slave_1: entered allmulticast mode [ 72.624896][ T6192] bridge_slave_1: entered promiscuous mode [ 72.652492][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.659889][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.686037][ T6192] team0: Port device team_slave_0 added [ 72.690015][ T6192] team0: Port device team_slave_1 added [ 72.703451][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.705599][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.712977][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.718112][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.720166][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.727626][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.750581][ T6192] hsr_slave_0: entered promiscuous mode [ 72.752884][ T6192] hsr_slave_1: entered promiscuous mode [ 72.756015][ T6192] debugfs: 'hsr0' already exists in 'hsr' [ 72.757855][ T6192] Cannot create hsr debugfs directory [ 72.851451][ T6192] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.857898][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.861665][ T6192] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.867393][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.871092][ T6192] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.877590][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.880406][ T6192] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.884380][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.898768][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.900977][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.903204][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.905384][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.933094][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.941026][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.944662][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.952687][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.960360][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.962890][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.969580][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.972040][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.012140][ T42] audit: type=1400 audit(1785135705.901:261): avc: denied { create } for pid=6237 comm="syz.6.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.018069][ T42] audit: type=1400 audit(1785135705.901:262): avc: denied { setopt } for pid=6237 comm="syz.6.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.025950][ T42] audit: type=1400 audit(1785135705.901:263): avc: denied { bind } for pid=6237 comm="syz.6.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.032401][ T42] audit: type=1400 audit(1785135705.911:264): avc: denied { connect } for pid=6237 comm="syz.6.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.040228][ T42] audit: type=1400 audit(1785135705.911:265): avc: denied { write } for pid=6237 comm="syz.6.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.169945][ T42] audit: type=1400 audit(1785135706.061:266): avc: denied { create } for pid=6246 comm="syz.6.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.210421][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.221151][ T6251] lo speed is unknown, defaulting to 1000 [ 73.224706][ T6251] lo speed is unknown, defaulting to 1000 [ 73.228037][ T6251] lo speed is unknown, defaulting to 1000 [ 73.312787][ T6247] infiniband syz0: set active [ 73.315285][ T6247] infiniband syz0: added veth0 [ 73.337339][ T6247] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 73.342250][ T6247] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 73.349239][ T6247] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 73.362887][ T6192] veth0_vlan: entered promiscuous mode [ 73.363165][ T6247] RDS/IB: syz0: added [ 73.366303][ T6247] smc: adding ib device syz0 with port count 1 [ 73.368269][ T6192] veth1_vlan: entered promiscuous mode [ 73.368277][ T6247] smc: ib device syz0 port 1 has no pnetid [ 73.393707][ T6192] veth0_macvtap: entered promiscuous mode [ 73.397521][ T6192] veth1_macvtap: entered promiscuous mode [ 73.406004][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.411777][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.419671][ T5844] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.423493][ T5844] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.427586][ T5844] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.430446][ T5844] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.444181][ T5098] Bluetooth: hci4: command tx timeout [ 73.445991][ T5751] Bluetooth: hci5: command tx timeout [ 73.471963][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.474710][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.499537][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.502661][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.619401][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.60'. [ 74.204001][ T6251] infiniband syz1: set active [ 74.205871][ T5891] lo speed is unknown, defaulting to 1000 [ 74.207757][ T6251] infiniband syz1: added lo [ 74.210145][ T6251] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 74.211800][ T6251] infiniband syz1: Couldn't open port 1 [ 74.217380][ T6251] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.223016][ T6251] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.229211][ T6251] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.250489][ T6251] RDS/IB: syz1: added [ 74.253609][ T6251] smc: adding ib device syz1 with port count 1 [ 74.255611][ T6251] smc: ib device syz1 port 1 has no pnetid [ 74.258063][ T6251] lo speed is unknown, defaulting to 1000 [ 74.260981][ T5891] lo speed is unknown, defaulting to 1000 [ 74.323817][ T5751] Bluetooth: hci7: command tx timeout [ 74.391029][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.64'. [ 74.398909][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.64'. [ 74.461987][ T6251] lo speed is unknown, defaulting to 1000 [ 74.484127][ T5751] Bluetooth: hci6: command tx timeout [ 74.547664][ T6251] lo speed is unknown, defaulting to 1000 [ 74.678540][ T6287] tipc: Started in network mode [ 74.680606][ T6287] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 74.702250][ T6251] lo speed is unknown, defaulting to 1000 [ 74.799521][ T6251] lo speed is unknown, defaulting to 1000 [ 74.890661][ T6251] lo speed is unknown, defaulting to 1000 [ 74.978877][ T6251] lo speed is unknown, defaulting to 1000 [ 75.064743][ T6251] lo speed is unknown, defaulting to 1000 [ 75.370720][ T6296] ip_tables: iptables: counters copy to user failed while replacing table [ 75.523832][ T5751] Bluetooth: hci5: command tx timeout [ 75.523968][ T5098] Bluetooth: hci4: command tx timeout [ 76.403789][ T5098] Bluetooth: hci7: command tx timeout [ 76.563952][ T5098] Bluetooth: hci6: command tx timeout [ 76.632350][ T6325] FAULT_INJECTION: forcing a failure. [ 76.632350][ T6325] name fail_futex, interval 1, probability 0, space 0, times 1 [ 76.638281][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.7.84 Not tainted syzkaller #0 PREEMPT(full) [ 76.638299][ T6325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.638306][ T6325] Call Trace: [ 76.638310][ T6325] [ 76.638314][ T6325] dump_stack_lvl+0x100/0x190 [ 76.638344][ T6325] should_fail_ex.cold+0x5/0xa [ 76.638360][ T6325] get_futex_key+0x1d2/0x14f0 [ 76.638379][ T6325] ? __pfx_get_futex_key+0x10/0x10 [ 76.638395][ T6325] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.638409][ T6325] ? hrtimer_try_to_cancel.part.0+0x194/0x600 [ 76.638431][ T6325] futex_wake+0xf4/0x5e0 [ 76.638441][ T6325] ? futex_wait+0x11e/0x370 [ 76.638455][ T6325] ? __pfx_futex_wake+0x10/0x10 [ 76.638472][ T6325] do_futex+0x2b2/0x440 [ 76.638490][ T6325] ? __pfx_do_futex+0x10/0x10 [ 76.638507][ T6325] ? ktime_get+0x22c/0x320 [ 76.638521][ T6325] ? lockdep_hardirqs_on+0x78/0x100 [ 76.638537][ T6325] __x64_sys_futex+0x34f/0x4d0 [ 76.638556][ T6325] ? __pfx___x64_sys_futex+0x10/0x10 [ 76.638579][ T6325] do_syscall_64+0x115/0x870 [ 76.638591][ T6325] ? clear_bhb_loop+0x40/0x90 [ 76.638604][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.638616][ T6325] RIP: 0033:0x7f4ee139de99 [ 76.638625][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.638635][ T6325] RSP: 002b:00007ffc99e1bb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.638647][ T6325] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4ee139de99 [ 76.638653][ T6325] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ee1625fa8 [ 76.638660][ T6325] RBP: 0000000000001e51 R08: 0000000000000005 R09: 0000000000000000 [ 76.638666][ T6325] R10: 00007f4ee1625fa0 R11: 0000000000000246 R12: 0000000000000000 [ 76.638672][ T6325] R13: 00007f4ee1625fac R14: 00007f4ee1625fa8 R15: 00007f4ee1625fa0 [ 76.638686][ T6325] [ 76.745947][ T5590] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.755427][ T5590] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.338435][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.89'. [ 77.363136][ T6341] tipc: Started in network mode [ 77.364912][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 77.364922][ T42] audit: type=1400 audit(1785135710.251:284): avc: denied { mount } for pid=6340 comm="syz.7.91" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.375218][ T6341] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 77.378735][ T6341] tipc: New replicast peer: 127.0.0.1 [ 77.379003][ T42] audit: type=1400 audit(1785135710.271:285): avc: denied { unmount } for pid=6192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.380527][ T6341] tipc: Enabled bearer , priority 10 [ 77.393398][ T42] audit: type=1400 audit(1785135710.281:286): avc: denied { create } for pid=6339 comm="syz.6.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.400486][ T42] audit: type=1400 audit(1785135710.291:287): avc: denied { bind } for pid=6339 comm="syz.6.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.407676][ T42] audit: type=1400 audit(1785135710.291:288): avc: denied { setopt } for pid=6339 comm="syz.6.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.414652][ T42] audit: type=1400 audit(1785135710.291:289): avc: denied { accept } for pid=6339 comm="syz.6.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.421419][ T42] audit: type=1400 audit(1785135710.291:290): avc: denied { write } for pid=6339 comm="syz.6.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.429365][ T42] audit: type=1400 audit(1785135710.291:291): avc: denied { read } for pid=6339 comm="syz.6.90" path="socket:[12961]" dev="sockfs" ino=12961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.438318][ T42] audit: type=1400 audit(1785135710.311:292): avc: denied { shutdown } for pid=6343 comm="syz.7.92" laddr=127.0.0.1 lport=20000 faddr=127.0.0.1 fport=42494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.466879][ T42] audit: type=1400 audit(1785135710.361:293): avc: denied { create } for pid=6347 comm="syz.7.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.523095][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.96'. [ 77.526905][ T6354] netlink: 52 bytes leftover after parsing attributes in process `syz.6.96'. [ 77.531331][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.96'. [ 77.549706][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.97'. [ 77.552884][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.7.97'. [ 77.923648][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 78.483608][ T5098] Bluetooth: hci7: command tx timeout [ 78.494537][ T6094] tipc: Node number set to 3210880763 [ 80.563389][ T5098] Bluetooth: hci7: command tx timeout [ 80.678076][ T5889] ------------[ cut here ]------------ [ 80.680905][ T5889] !iov_iter_count(&con->v2.in_iter) [ 80.680916][ T5889] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#0: kworker/0:4/5889 [ 80.685978][ T5889] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.687588][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 80.690854][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.694172][ T5889] Workqueue: ceph-msgr ceph_con_workfn [ 80.696027][ T5889] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 80.698042][ T5889] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 80.705339][ T5889] RSP: 0018:ffffc9000384f978 EFLAGS: 00010293 [ 80.715162][ T5889] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 80.717786][ T5889] RDX: ffff8880309f0000 RSI: ffffffff8b8189a6 RDI: ffff8880309f0000 [ 80.720158][ T5889] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 80.723141][ T5889] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000709f3e [ 80.730271][ T5889] R13: ffffc9000384fab0 R14: ffff88802c25c698 R15: ffff88802c25c418 [ 80.734526][ T5889] FS: 0000000000000000(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 80.737982][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.740475][ T5889] CR2: 000000110c3d137a CR3: 000000010d471000 CR4: 0000000000352ef0 [ 80.743387][ T5889] Call Trace: [ 80.744477][ T5889] [ 80.745441][ T5889] ? lock_acquire+0x1b9/0x370 [ 80.746909][ T5889] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 80.748760][ T5889] ? rcu_is_watching+0x12/0xc0 [ 80.750653][ T5889] ? trace_contention_end+0x126/0x160 [ 80.750828][ T6377] ceph: No mds server is up or the cluster is laggy [ 80.752730][ T5889] ? __mutex_lock+0x26d/0x1bd0 [ 80.757030][ T5889] ? ceph_con_workfn+0x48/0x13e0 [ 80.759052][ T5889] ? register_lock_class+0x40/0x560 [ 80.761333][ T5889] ? do_raw_spin_lock+0x128/0x260 [ 80.763511][ T5889] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.765675][ T5889] ? debug_object_deactivate+0x2e4/0x3b0 [ 80.767947][ T5889] ceph_con_workfn+0x360/0x13e0 [ 80.769931][ T5889] process_one_work+0xa23/0x1940 [ 80.771858][ T5889] ? __pfx_process_one_work+0x10/0x10 [ 80.774144][ T5889] ? __pfx_ceph_con_workfn+0x10/0x10 [ 80.776269][ T5889] worker_thread+0x5ef/0xe50 [ 80.778148][ T5889] ? kthread+0x13a/0x450 [ 80.779888][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 80.781940][ T5889] kthread+0x370/0x450 [ 80.783655][ T5889] ? __pfx_kthread+0x10/0x10 [ 80.785572][ T5889] ret_from_fork+0x72b/0xd50 [ 80.787457][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 80.789543][ T5889] ? __switch_to+0x800/0x10f0 [ 80.791497][ T5889] ? __pfx_kthread+0x10/0x10 [ 80.793486][ T5889] ret_from_fork_asm+0x1a/0x30 [ 80.795457][ T5889] [ 80.796726][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.799241][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 80.802031][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.805037][ T5889] Workqueue: ceph-msgr ceph_con_workfn [ 80.806706][ T5889] Call Trace: [ 80.808096][ T5889] [ 80.809338][ T5889] dump_stack_lvl+0x100/0x190 [ 80.811302][ T5889] vpanic+0x552/0x970 [ 80.813013][ T5889] ? __pfx_vpanic+0x10/0x10 [ 80.814972][ T5889] panic+0xd1/0xe0 [ 80.816494][ T5889] ? __pfx_panic+0x10/0x10 [ 80.818360][ T5889] ? check_panic_on_warn+0x1f/0x90 [ 80.820464][ T5889] check_panic_on_warn.cold+0x19/0x34 [ 80.822684][ T5889] ? ceph_con_v2_try_read+0x1727/0x4780 [ 80.824981][ T5889] __warn.cold+0x191/0x318 [ 80.826793][ T5889] __report_bug+0x30f/0x440 [ 80.828633][ T5889] ? ceph_con_v2_try_read+0x1727/0x4780 [ 80.830925][ T5889] ? __pfx___report_bug+0x10/0x10 [ 80.832996][ T5889] ? __local_bh_enable_ip+0x9e/0x120 [ 80.835199][ T5889] ? lockdep_hardirqs_on+0x78/0x100 [ 80.837293][ T5889] ? tcp_recvmsg+0x14c/0x630 [ 80.839184][ T5889] ? __local_bh_enable_ip+0x9e/0x120 [ 80.841364][ T5889] ? tcp_recvmsg+0x1f8/0x630 [ 80.843266][ T5889] ? ceph_con_v2_try_read+0x1727/0x4780 [ 80.845582][ T5889] report_bug+0xb2/0x220 [ 80.847333][ T5889] ? ceph_con_v2_try_read+0x1727/0x4780 [ 80.849617][ T5889] handle_bug+0x16a/0x2a0 [ 80.851422][ T5889] exc_invalid_op+0x17/0x50 [ 80.853262][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 80.855054][ T5889] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 80.857247][ T5889] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 80.863341][ T5889] RSP: 0018:ffffc9000384f978 EFLAGS: 00010293 [ 80.865486][ T5889] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 80.867880][ T5889] RDX: ffff8880309f0000 RSI: ffffffff8b8189a6 RDI: ffff8880309f0000 [ 80.870355][ T5889] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 80.872699][ T5889] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000709f3e [ 80.875046][ T5889] R13: ffffc9000384fab0 R14: ffff88802c25c698 R15: ffff88802c25c418 [ 80.877382][ T5889] ? ceph_con_v2_try_read+0xf11/0x4780 [ 80.878977][ T5889] ? ceph_con_v2_try_read+0x1726/0x4780 [ 80.880627][ T5889] ? ceph_con_v2_try_read+0x1726/0x4780 [ 80.882251][ T5889] ? lock_acquire+0x1b9/0x370 [ 80.883598][ T5889] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 80.885145][ T5889] ? rcu_is_watching+0x12/0xc0 [ 80.886491][ T5889] ? trace_contention_end+0x126/0x160 [ 80.888089][ T5889] ? __mutex_lock+0x26d/0x1bd0 [ 80.889513][ T5889] ? ceph_con_workfn+0x48/0x13e0 [ 80.890969][ T5889] ? register_lock_class+0x40/0x560 [ 80.892512][ T5889] ? do_raw_spin_lock+0x128/0x260 [ 80.894039][ T5889] ? do_raw_spin_unlock+0x145/0x1e0 [ 80.895581][ T5889] ? debug_object_deactivate+0x2e4/0x3b0 [ 80.897228][ T5889] ceph_con_workfn+0x360/0x13e0 [ 80.898674][ T5889] process_one_work+0xa23/0x1940 [ 80.900208][ T5889] ? __pfx_process_one_work+0x10/0x10 [ 80.901828][ T5889] ? __pfx_ceph_con_workfn+0x10/0x10 [ 80.903366][ T5889] worker_thread+0x5ef/0xe50 [ 80.904797][ T5889] ? kthread+0x13a/0x450 [ 80.906056][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 80.907601][ T5889] kthread+0x370/0x450 [ 80.908869][ T5889] ? __pfx_kthread+0x10/0x10 [ 80.910305][ T5889] ret_from_fork+0x72b/0xd50 [ 80.911750][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 80.913346][ T5889] ? __switch_to+0x800/0x10f0 [ 80.914804][ T5889] ? __pfx_kthread+0x10/0x10 [ 80.916158][ T5889] ret_from_fork_asm+0x1a/0x30 [ 80.917572][ T5889] [ 80.919260][ T5889] Kernel Offset: disabled [ 80.920531][ T5889] Rebooting in 86400 seconds..