last executing test programs: 1m10.607964529s ago: executing program 1 (id=1083): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600)='\x00\x00\x00\x00', &(0x7f0000001700)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r2, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.309130252s ago: executing program 1 (id=1084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x0, 0x0}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x170, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x0, 0x0}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x5, 0xc, 0xf3, 0x81, 0xda, 0x8001, 0xe080, 0x4, 0x1c, 0xf, 0x5, 0x0, 0x5, 0xffff}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m9.993698894s ago: executing program 1 (id=1087): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) write(r0, &(0x7f00000000c0)='lo:0\x00', 0x5) pread64(r0, &(0x7f0000000400)=""/5, 0x5, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='lo\x00'}) 1m9.759915602s ago: executing program 1 (id=1089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0xc8000001}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0xc9000001}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4001, @rand_addr=0xc8000001}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 1m8.729736152s ago: executing program 1 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x3c}}, 0x0) 1m8.639132912s ago: executing program 1 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n\x00', 0x2) (async) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 53.478830003s ago: executing program 32 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n\x00', 0x2) (async) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000540)="80000040123456780000000000000002000186a3000000030000000000000006000000140000000100000001000000000000000100"/64, 0x44, 0x0, 0x0, 0x0) r6 = accept$unix(r0, 0x0, 0x0) write(r6, &(0x7f0000000580)="8000005412345678000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000", 0x58) 35.242145584s ago: executing program 5 (id=1319): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) accept4(r4, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) 33.449225693s ago: executing program 0 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/route_localnet\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) bind(0xffffffffffffffff, &(0x7f0000000280)=@in={0x2, 0x1122, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f00000002c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r3, &(0x7f0000000300)=@in={0x2, 0x1122, @loopback}, 0x10) (async) 32.493830087s ago: executing program 0 (id=1336): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x1, 0x2, 0x3, 0x4, 0x0, 0x1, 0x2, 0x3, 0x4, 0x6, 0x0, {[{{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x544}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x1f90, @loopback}, 0x10) 32.296718907s ago: executing program 0 (id=1339): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/24, &(0x7f0000000200)=0x18) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/32, &(0x7f0000000200)=0x20) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/24, &(0x7f0000000200)=0x18) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/24, &(0x7f0000000200)=0x18) 31.551980745s ago: executing program 5 (id=1343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 31.370004288s ago: executing program 5 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x0, 0x1, [@m_tunnel_key={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x0, 0x1, {{0x0, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x2, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x0, 0x3, @loopback}]}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@deltaction={0x38, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}]}, 0x38}}, 0x0) 31.325331933s ago: executing program 0 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/route_localnet\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setstatus(r3, 0x4, 0x800) bind(r3, &(0x7f0000000280)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r4, &(0x7f00000002c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r4, &(0x7f0000000300)=@in={0x2, 0x1122, @loopback}, 0x10) (async) 31.098872926s ago: executing program 5 (id=1349): add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0100000002000000ffffffff0100"/24, 0x18, 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @local}}, 0x24) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1235, @remote}}, 0x24) sendto$rxrpc(r0, &(0x7f0000000100)='test\x00', 0x4, 0x0, 0x0, 0x0) 30.809600585s ago: executing program 5 (id=1353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x200}}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 30.639080455s ago: executing program 5 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002f0)='./pipefs/nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 30.357031914s ago: executing program 0 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 29.31305185s ago: executing program 0 (id=1357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='+tcp 2049\n\x00', 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x115c, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000024000000010000000000000002000186a300000003000000000000000700"/44, 0x28) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="0800010000000000"]}, 0x1c}}, 0x0) write(r2, &(0x7f0000000600)="15030300020100", 0x7) 15.56567931s ago: executing program 33 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='0\x00', &(0x7f0000000080)='./pipefs\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='0\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002f0)='./pipefs/nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs/nfsd/cld\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) 14.214164336s ago: executing program 34 (id=1357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='+tcp 2049\n\x00', 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x115c, @loopback}, 0x10) write(r2, &(0x7f0000000300)="80000024000000010000000000000002000186a300000003000000000000000700"/44, 0x28) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="0800010000000000"]}, 0x1c}}, 0x0) write(r2, &(0x7f0000000600)="15030300020100", 0x7) 7.640982608s ago: executing program 3 (id=1450): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)=""/100, 0x64}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000e00)=""/100, 0x64}], 0x1}, 0x1) nanosleep(&(0x7f0000000f00)={0x1}, 0x0) 4.792451106s ago: executing program 3 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='proc\x00', &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/net/ipv4/conf/syz_tun/rp_filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='0\n', 0x2) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000d00)={'syz_tun\x00', @ifru_mtu=0xf4}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000e00)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='syz_tun\x00'}) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 4.723246556s ago: executing program 2 (id=1453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0x0, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x0, 0x1, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x1}]}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@newsa={0x0, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_crypt={0x0, 0x2, {{'digest_null\x00'}}}]}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)={{0x0, 0xa0a, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x0, 0x0, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x0, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x0, 0x0, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x0, 0x0}]}, @NFTA_CHAIN_TYPE={0x0, 0x0, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x0, 0x0, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x0, 0x0, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, @match={{0x0, 0x0}, @val={0x0, 0x0, 0x0, 0x1, [@NFTA_MATCH_NAME={0x0, 0x0, 'policy\x00'}, @NFTA_MATCH_REV={0x0, 0x0}, @NFTA_MATCH_INFO={0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000"}]}}}]}]}], {0x0, 0xa0b, 0x1, 0x0, 0x0, {0x2}}}}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000c00)='\x00', 0x1, 0x0, &(0x7f0000000d00)={0x2, 0x1234, @loopback}, 0x10) 4.505171233s ago: executing program 3 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 4.50497603s ago: executing program 2 (id=1455): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000040)={@local, @empty, @void, {@llc={0x4, {@llc={0x2, 0x2, 'o'}}}}}, 0x0) r1 = accept4$llc(r0, 0x0, 0x0, 0x800) getpeername$llc(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10) 3.876134664s ago: executing program 6 (id=1422): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2', 0x1) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000900)='hello', 0x5) read(r6, &(0x7f0000000a00), 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) write(r5, &(0x7f0000000900)='world', 0x5) 3.48143499s ago: executing program 3 (id=1457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) listen(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x801, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x2}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9f", 0x5, 0x0, 0x0, 0x0) shutdown(r1, 0x2) 3.467780695s ago: executing program 2 (id=1458): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) close(r2) close(r3) close(r1) 3.233239363s ago: executing program 3 (id=1460): r0 = socket(0x2, 0x2, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000100)="66696c74657200000000000000000000000000000000000000000000000000000e000000020000005801000000000000000000000000000000000000000000000000000000000000c0000000c0000000c000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c00000000000000000000000000000000000000000002800636f6e6e6c6162656c0000000000000000000000000000000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000ffffffff00000000", 0x1b8) sendto$inet(r0, &(0x7f0000000800)='hello\x00', 0x5, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) 3.174586699s ago: executing program 2 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, 0x0) syz_emit_ethernet(0x3e2, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d4, 0x5678, 0x6000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x3c0, 0x0, @opaque='\x00'/952}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.06880262s ago: executing program 4 (id=1462): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x1}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @remote, 0x1}, 0x1c) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.981289756s ago: executing program 3 (id=1463): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000380)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='3\n\x00', 0x2) write(r3, &(0x7f0000000440)='4\n\x00', 0x2) write(r3, &(0x7f0000000480)='5\n\x00', 0x2) write(r3, &(0x7f00000004c0)='6\n\x00', 0x2) 2.875005363s ago: executing program 2 (id=1464): unshare(0x40000000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\n', 0x2) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) listen(r4, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) accept4(r4, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) 2.035244984s ago: executing program 4 (id=1465): r0 = socket$inet_sctp(0x2, 0x805, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x805, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000100)='hello world', 0xb, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x1}, &(0x7f0000000240)=0x8) 1.637023235s ago: executing program 4 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000500)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) 1.081799186s ago: executing program 7 (id=1430): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x1234, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x12345678}]}}}}}}}, 0x0) 931.798283ms ago: executing program 7 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff6a}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5b4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000400)={0x2, 0x1f90, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000500)={0x2, 0x1f90, @loopback}, 0x10) 657.274632ms ago: executing program 7 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/syz_tun/route_localnet\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setstatus(r3, 0x4, 0x800) bind(r3, &(0x7f0000000280)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r4, &(0x7f00000002c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r4, &(0x7f0000000300)=@in={0x2, 0x1122, @loopback}, 0x10) (async) 656.945209ms ago: executing program 4 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000500000000000000000023000000020000000800010004000000"], 0x20}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000300)={0x23, 0x1, 0x4}, 0x10) listen(r3, 0x5) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000400)={0x23, 0x1, 0x4}, 0x10) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) r5 = accept4$phonet_pipe(r3, 0x0, 0x0, 0x800) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) sendto$phonet(r4, &(0x7f0000000500)='hello', 0x5, 0x80, 0x0, 0x0) sendto$phonet(r5, &(0x7f0000000500)='hello', 0x5, 0x80, 0x0, 0x0) 617.759662ms ago: executing program 6 (id=1470): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x800) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @random="fe5400000002"}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)={@broadcast, @random="fe5400000002", @void, {@generic={0x300, "020273"}}}, 0x0) sendto$llc(r0, &(0x7f0000000300)="12345678", 0x8, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000400)={@broadcast, @random="fe5400000002", @void, {@generic={0x400, "02020900"}}}, 0x0) 394.235314ms ago: executing program 6 (id=1471): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'lo\x00', {0x1}}) 357.535788ms ago: executing program 7 (id=1472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000600d0002032f"], 0x12) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000600d000203ff"], 0x12) 221.005371ms ago: executing program 4 (id=1473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, 0x0) syz_emit_ethernet(0x3e2, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d4, 0x5678, 0x6000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x3c0, 0x0, @opaque='\x00'/952}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 188.776636ms ago: executing program 2 (id=1474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000020)={0x2, 0x4e20, @remote}, 0x10) syz_extract_tcp_res(&(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, r2, r3, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"000600000000"}}}}}}, 0x0) 144.199597ms ago: executing program 6 (id=1475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/27, 0x1a) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 13.195519ms ago: executing program 4 (id=1476): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x605, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'veth0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) unshare(0x40000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x10, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'veth1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c00)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x1, 0x0, {0xa, 0x40, 0x2, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r6, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_LLADDR={0xa, 0x2, @random="001122334455"}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newneigh={0x3c, 0x1c, 0x605, 0x1, 0x0, {0xa, 0x0, 0x0, r2, 0x80, 0x0, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_LLADDR={0xa, 0x2, @random="001122334466"}]}, 0x3c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000700)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r7, &(0x7f0000000800)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 7 (id=1477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x7}}}}, 0x3b8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080), 0x8) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x10}], 0x1}, 0x0) kernel console output (not intermixed with test programs): sb 4-1: Product: syz [ 90.548719][ T189] usb 4-1: Manufacturer: syz [ 90.553475][ T189] usb 4-1: SerialNumber: syz [ 90.766313][ T6148] netlink: 'syz.1.131': attribute type 3 has an invalid length. [ 90.892058][ T6122] NFSD: Unable to initialize client recovery tracking! (-110) [ 90.936529][ T6122] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 90.953157][ T6122] NFSD: starting 90-second grace period (net f00005ce) [ 91.520980][ T29] audit: type=1400 audit(1785768443.716:262): avc: denied { write } for pid=6183 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.778326][ T189] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 91.788345][ T189] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -71! [ 91.795565][ T189] speedtch 4-1:1.0: probe with driver speedtch failed with error -71 [ 91.809509][ T189] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 91.818502][ T189] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -71! [ 91.825978][ T189] speedtch 4-1:1.1: probe with driver speedtch failed with error -71 [ 91.844447][ T189] usb 4-1: USB disconnect, device number 2 [ 92.531399][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 92.579943][ T6214] bridge0: port 3(veth0) entered blocking state [ 92.588474][ T6214] bridge0: port 3(veth0) entered disabled state [ 92.595310][ T6214] veth0: entered allmulticast mode [ 92.604014][ T6214] veth0: entered promiscuous mode [ 92.610161][ T6214] bridge0: port 3(veth0) entered blocking state [ 92.618495][ T6214] bridge0: port 3(veth0) entered forwarding state [ 92.746539][ T6220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.769723][ T6221] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.812048][ T6189] NFSD: Unable to initialize client recovery tracking! (-110) [ 92.824700][ T6189] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 92.835290][ T6189] NFSD: starting 90-second grace period (net f000044a) [ 92.869123][ T6220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.030386][ T6220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.119908][ T6220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.238709][ T6209] svc: failed to register lockdv1 RPC service (errno 101). [ 93.256241][ T29] audit: type=1400 audit(1785768445.456:263): avc: denied { write } for pid=6228 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.279159][ T6209] lockd_up: makesock failed, error=-101 [ 93.314682][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359468][ T29] audit: type=1400 audit(1785768445.556:264): avc: denied { bind } for pid=6230 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.397621][ T29] audit: type=1400 audit(1785768445.556:265): avc: denied { node_bind } for pid=6230 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.445106][ T47] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.507045][ T3298] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.516937][ T6209] svc: failed to register nfsdv3 RPC service (errno 512). [ 93.525021][ T3298] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.530342][ T6209] svc: failed to register nfsaclv3 RPC service (errno 512). [ 93.553905][ T6209] failed to unregister tcp with rpcbind [ 93.565497][ T6209] svc: failed to register nfsdv3 RPC service (errno 97). [ 93.587531][ T6209] svc: failed to register nfsaclv3 RPC service (errno 97). [ 93.600371][ T6209] failed to unregister tcp with rpcbind [ 93.707102][ T29] audit: type=1400 audit(1785768445.906:266): avc: denied { connect } for pid=6240 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.933025][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 94.260860][ T6274] bridge0: port 3(gretap0) entered blocking state [ 94.267886][ T6274] bridge0: port 3(gretap0) entered disabled state [ 94.276713][ T6274] gretap0: entered allmulticast mode [ 94.285604][ T6274] gretap0: entered promiscuous mode [ 94.293541][ T6274] bridge0: port 3(gretap0) entered blocking state [ 94.301035][ T6274] bridge0: port 3(gretap0) entered listening state [ 94.312493][ T6274] bridge0: port 4(erspan0) entered blocking state [ 94.319164][ T6274] bridge0: port 4(erspan0) entered disabled state [ 94.327336][ T6274] erspan0: entered allmulticast mode [ 94.333544][ T5743] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.345427][ T6274] erspan0: entered promiscuous mode [ 94.351025][ T6274] bridge0: port 4(erspan0) entered blocking state [ 94.357638][ T6274] bridge0: port 4(erspan0) entered listening state [ 94.495204][ T5743] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 94.505203][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.514679][ T5743] usb 5-1: Product: syz [ 94.519032][ T5743] usb 5-1: Manufacturer: syz [ 94.756015][ T6286] veth0: left allmulticast mode [ 94.760953][ T6286] veth0: left promiscuous mode [ 94.767401][ T6286] bridge0: port 3(veth0) entered disabled state [ 94.803421][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 94.829894][ T6289] rdma_rxe: rxe_newlink: failed to add veth0 [ 95.065942][ T6254] NFSD: Unable to initialize client recovery tracking! (-110) [ 95.086215][ T6254] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 95.115152][ T6254] NFSD: starting 90-second grace period (net f00004e9) [ 95.746678][ T5743] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 95.772841][ T5743] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 95.870819][ T5743] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 95.887123][ T5743] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 95.906797][ T5743] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 95.916466][ T5743] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 95.927873][ T5743] usb 5-1: USB disconnect, device number 3 [ 96.192128][ T87] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.306328][ T29] audit: type=1400 audit(1785768448.506:267): avc: denied { ioctl } for pid=6308 comm="syz.1.186" path="socket:[11547]" dev="sockfs" ino=11547 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.804852][ T87] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 0.00 [ 96.810499][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 96.823087][ T87] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.031541][ T6328] netlink: 'syz.2.193': attribute type 2 has an invalid length. [ 97.083621][ T6324] svc: failed to register nfsdv3 RPC service (errno 111). [ 97.114476][ T6324] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.179437][ T29] audit: type=1400 audit(1785768449.376:268): avc: denied { create } for pid=6303 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.229346][ T5814] usb 1-1: USB disconnect, device number 2 [ 97.266701][ T6329] NFSD: Failed to start, no listeners configured. [ 98.366569][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 99.464345][ T6345] NFSD: Unable to initialize client recovery tracking! (-110) [ 99.472248][ T6345] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 99.481314][ T6345] NFSD: starting 90-second grace period (net f000044a) [ 100.087754][ T29] audit: type=1400 audit(1785768452.286:269): avc: denied { name_bind } for pid=6389 comm="syz.3.214" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.110816][ T29] audit: type=1400 audit(1785768452.296:270): avc: denied { name_connect } for pid=6389 comm="syz.3.214" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 100.212629][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 100.455082][ T29] audit: type=1400 audit(1785768452.656:271): avc: denied { read write } for pid=6395 comm="syz.4.199" name="vbi7" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.515775][ T29] audit: type=1400 audit(1785768452.686:272): avc: denied { open } for pid=6395 comm="syz.4.199" path="/dev/vbi7" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 100.607536][ T6412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.220'. [ 101.339062][ T29] audit: type=1400 audit(1785768453.536:273): avc: denied { setopt } for pid=6418 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.423093][ T29] audit: type=1400 audit(1785768453.606:274): avc: denied { recv } for pid=6395 comm="syz.4.199" saddr=10.128.0.169 src=30006 daddr=10.128.0.66 dest=55338 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 102.118431][ T6435] tipc: Started in network mode [ 102.430347][ T6435] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 102.445446][ T29] audit: type=1400 audit(1785768454.636:275): avc: denied { egress } for pid=16 comm="rcu_preempt" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 102.490278][ T6435] tipc: Enabled bearer , priority 0 [ 102.500789][ T29] audit: type=1400 audit(1785768454.636:276): avc: denied { sendto } for pid=16 comm="rcu_preempt" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 102.686459][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'. [ 103.214529][ T6465] vlan2: entered promiscuous mode [ 103.219656][ T6465] dummy0: entered promiscuous mode [ 103.611440][ T189] tipc: Node number set to 43690 [ 103.626833][ T29] audit: type=1400 audit(1785768455.826:277): avc: denied { accept } for pid=6469 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.042713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.147765][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 104.210688][ T6493] bridge0: port 5(veth0) entered blocking state [ 104.218331][ T6493] bridge0: port 5(veth0) entered disabled state [ 104.231344][ T6493] veth0: entered allmulticast mode [ 104.268047][ T6493] veth0: entered promiscuous mode [ 104.284697][ T6493] bridge0: port 5(veth0) entered blocking state [ 104.286716][ T6505] x_tables: duplicate underflow at hook 2 [ 104.291130][ T6493] bridge0: port 5(veth0) entered listening state [ 104.802730][ T6514] vlan2: entered promiscuous mode [ 104.807862][ T6514] dummy0: entered promiscuous mode [ 105.296338][ T6517] netlink: 68 bytes leftover after parsing attributes in process `syz.4.259'. [ 105.772880][ T87] libceph: connect (2)127.0.0.1:20000 error -101 [ 105.815761][ T87] libceph: ceph_tcp_connect failed: -101 [ 105.835851][ T87] libceph: mon0 (2)127.0.0.1:20000 connect error [ 105.889702][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'. [ 105.963769][ T29] audit: type=1400 audit(1785768458.166:278): avc: denied { create } for pid=6547 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.001531][ T29] audit: type=1400 audit(1785768458.166:279): avc: denied { setopt } for pid=6547 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.036260][ T29] audit: type=1400 audit(1785768458.166:280): avc: denied { bind } for pid=6547 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.047717][ T6529] lo speed is unknown, defaulting to 1000 [ 106.115867][ T87] libceph: connect (2)127.0.0.1:20000 error -101 [ 106.138659][ T87] libceph: ceph_tcp_connect failed: -101 [ 106.159694][ T87] libceph: mon0 (2)127.0.0.1:20000 connect error [ 106.541454][ T6561] vlan2: entered promiscuous mode [ 106.760265][ T6531] ceph: No mds server is up or the cluster is laggy [ 106.839150][ T5814] libceph: connect (2)127.0.0.1:20000 error -101 [ 106.922155][ T5814] libceph: ceph_tcp_connect failed: -101 [ 106.943786][ T5814] libceph: mon0 (2)127.0.0.1:20000 connect error [ 107.343457][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 107.508756][ T29] audit: type=1400 audit(1785768459.706:281): avc: denied { setopt } for pid=6581 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.299823][ T6596] lo speed is unknown, defaulting to 1000 [ 108.694474][ T6609] vlan2: entered promiscuous mode [ 108.699615][ T6609] dummy0: entered promiscuous mode [ 109.230267][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 109.437293][ T6623] tipc: Started in network mode [ 109.447407][ T6623] tipc: Node identity 1, cluster identity 4711 [ 109.460793][ T6623] tipc: Node number set to 1 [ 109.466685][ C0] bridge0: port 4(erspan0) entered learning state [ 109.467776][ C0] bridge0: port 3(gretap0) entered learning state [ 109.611628][ T29] audit: type=1400 audit(1785768461.806:282): avc: denied { ioctl } for pid=6629 comm="syz.0.303" path="socket:[11163]" dev="sockfs" ino=11163 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.659212][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 110.081901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 110.126149][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 110.132039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.172469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.242046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.292191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.312112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.372053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.545054][ T29] audit: type=1400 audit(1785768463.746:283): avc: denied { lock } for pid=6671 comm="syz.3.316" path="socket:[12311]" dev="sockfs" ino=12311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.562031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.591991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.597335][ T29] audit: type=1400 audit(1785768463.766:284): avc: denied { bind } for pid=6675 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.634581][ T35] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.648038][ T29] audit: type=1400 audit(1785768463.766:285): avc: denied { listen } for pid=6675 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.723181][ T29] audit: type=1400 audit(1785768463.826:286): avc: denied { accept } for pid=6675 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.872907][ T29] audit: type=1400 audit(1785768464.066:287): avc: denied { create } for pid=6682 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.936751][ T6687] veth0: left allmulticast mode [ 111.952167][ T6687] veth0: left promiscuous mode [ 111.959451][ T6687] bridge0: port 5(veth0) entered disabled state [ 111.994676][ T29] audit: type=1400 audit(1785768464.096:288): avc: denied { bind } for pid=6682 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.225043][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.322'. [ 112.772991][ T6694] vlan2: entered promiscuous mode [ 112.778093][ T6694] dummy0: entered promiscuous mode [ 113.351145][ T6717] ipt_REJECT: TCP_RESET invalid for non-tcp [ 113.987412][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'. [ 114.006023][ T6706] lo speed is unknown, defaulting to 1000 [ 114.297632][ T29] audit: type=1400 audit(1785768466.496:289): avc: denied { listen } for pid=6745 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.348696][ T29] audit: type=1400 audit(1785768466.516:290): avc: denied { write } for pid=6745 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.371953][ T29] audit: type=1400 audit(1785768466.516:291): avc: denied { read } for pid=6745 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.817021][ T6756] rdma_rxe: rxe_newlink: failed to add veth0 [ 115.001190][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 115.498819][ T6784] sctp: [Deprecated]: syz.4.359 (pid 6784) Use of int in maxseg socket option. [ 115.498819][ T6784] Use struct sctp_assoc_value instead [ 115.736297][ T6792] rdma_rxe: rxe_newlink: failed to add lo [ 116.221221][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 116.804075][ T29] audit: type=1400 audit(1785768469.006:292): avc: denied { create } for pid=6820 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.856166][ T29] audit: type=1400 audit(1785768469.026:293): avc: denied { bind } for pid=6820 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.982122][ T29] audit: type=1400 audit(1785768469.036:294): avc: denied { listen } for pid=6820 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.003253][ T29] audit: type=1400 audit(1785768469.036:295): avc: denied { connect } for pid=6820 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.102447][ T5711] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.114229][ T6799] lo speed is unknown, defaulting to 1000 [ 117.241976][ T5711] usb 3-1: device descriptor read/64, error -71 [ 117.504031][ T5711] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.594468][ T6813] lo speed is unknown, defaulting to 1000 [ 117.661965][ T5711] usb 3-1: device descriptor read/64, error -71 [ 117.776065][ T5711] usb usb3-port1: attempt power cycle [ 118.152033][ T5711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.202300][ T5711] usb 3-1: device descriptor read/8, error -71 [ 118.391147][ T6829] lo speed is unknown, defaulting to 1000 [ 118.463254][ T5711] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.486142][ T29] audit: type=1400 audit(1785768470.686:296): avc: denied { create } for pid=6841 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.505850][ T6845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 118.533845][ T5711] usb 3-1: device descriptor read/8, error -71 [ 118.593156][ T29] audit: type=1400 audit(1785768470.686:297): avc: denied { write } for pid=6841 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.642377][ T5711] usb usb3-port1: unable to enumerate USB device [ 118.666166][ T29] audit: type=1400 audit(1785768470.726:298): avc: denied { create } for pid=6844 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.925962][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 120.219862][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 120.504535][ T6856] lo speed is unknown, defaulting to 1000 [ 120.545465][ T6879] netlink: 'syz.2.398': attribute type 3 has an invalid length. [ 120.590502][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.398'. [ 120.629726][ T6879] netlink: 'syz.2.398': attribute type 3 has an invalid length. [ 120.653259][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.398'. [ 120.729909][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 120.729926][ T29] audit: type=1400 audit(1785768472.926:301): avc: denied { create } for pid=6884 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 120.822468][ T29] audit: type=1400 audit(1785768472.966:302): avc: denied { ioctl } for pid=6884 comm="syz.3.401" path="socket:[12946]" dev="sockfs" ino=12946 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.933110][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'. [ 122.311981][ T5711] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.500311][ T5711] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 122.540472][ T5711] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.577751][ T5711] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 122.599835][ T6882] lo speed is unknown, defaulting to 1000 [ 122.605881][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.614360][ T5711] usb 4-1: Product: syz [ 122.631657][ T5711] usb 4-1: Manufacturer: syz [ 122.648632][ T5711] usb 4-1: SerialNumber: syz [ 123.401220][ T5711] ax88179_178a 4-1:1.0: probe with driver ax88179_178a failed with error -71 [ 123.501622][ T5711] usb 4-1: USB disconnect, device number 3 [ 124.572311][ T29] audit: type=1400 audit(1785768476.776:303): avc: denied { name_bind } for pid=6957 comm="syz.4.428" src=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.822115][ C0] bridge0: port 3(gretap0) entered forwarding state [ 124.829962][ C0] bridge0: topology change detected, propagating [ 124.836502][ C0] bridge0: port 4(erspan0) entered forwarding state [ 124.843145][ C0] bridge0: topology change detected, propagating [ 126.218237][ T6971] lo speed is unknown, defaulting to 1000 [ 126.739687][ T6985] lo speed is unknown, defaulting to 1000 [ 127.079665][ T7013] ceph: No source [ 127.122176][ T5711] libceph: connect (2)127.0.0.1:6789 error -101 [ 127.168361][ T5711] libceph: ceph_tcp_connect failed: -101 [ 127.212608][ T5711] libceph: mon0 (2)127.0.0.1:6789 connect error [ 127.493434][ T5711] libceph: connect (2)127.0.0.1:6789 error -101 [ 127.611649][ T5711] libceph: ceph_tcp_connect failed: -101 [ 127.626284][ T5711] libceph: mon0 (2)127.0.0.1:6789 connect error [ 128.096369][ T7009] ceph: No mds server is up or the cluster is laggy [ 128.173993][ T5711] libceph: connect (2)127.0.0.1:6789 error -101 [ 128.232682][ T5711] libceph: ceph_tcp_connect failed: -101 [ 128.260384][ T5711] libceph: mon0 (2)127.0.0.1:6789 connect error [ 129.108955][ T29] audit: type=1400 audit(1785768481.306:304): avc: denied { accept } for pid=7042 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.207112][ T29] audit: type=1400 audit(1785768481.306:305): avc: denied { write } for pid=7042 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.319325][ T29] audit: type=1400 audit(1785768481.306:306): avc: denied { shutdown } for pid=7042 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.439535][ T29] audit: type=1400 audit(1785768481.376:307): avc: denied { read } for pid=7042 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.604500][ T7060] netlink: 56 bytes leftover after parsing attributes in process `syz.1.459'. [ 130.520849][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 131.000934][ T7049] lo speed is unknown, defaulting to 1000 [ 131.504123][ T7077] lo speed is unknown, defaulting to 1000 [ 131.881822][ T7100] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 131.911109][ T7100] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 131.934426][ T7100] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 131.955848][ T7100] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 132.504413][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.514946][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.141731][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 134.726103][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.058262][ T5711] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 135.101464][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.152016][ T5711] usb 1-1: Product: syz [ 135.156476][ T5711] usb 1-1: Manufacturer: syz [ 135.172483][ T5711] usb 1-1: SerialNumber: syz [ 135.739832][ T7129] lo speed is unknown, defaulting to 1000 [ 135.913807][ T5711] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 135.951627][ T5711] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71! [ 135.971422][ T5711] speedtch 1-1:1.0: probe with driver speedtch failed with error -71 [ 136.038772][ T5711] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 136.061331][ T5711] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -71! [ 136.082038][ T5711] speedtch 1-1:1.1: probe with driver speedtch failed with error -71 [ 136.151404][ T5711] usb 1-1: USB disconnect, device number 3 [ 136.625023][ T7138] lo speed is unknown, defaulting to 1000 [ 137.052231][ T7185] NFSD: Failed to start, no listeners configured. [ 137.457979][ T7171] lo speed is unknown, defaulting to 1000 [ 137.754393][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'. [ 138.091304][ T7173] lo speed is unknown, defaulting to 1000 [ 139.407531][ T7217] rdma_rxe: rxe_newlink: failed to add lo [ 140.909340][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.517'. [ 141.290279][ T29] audit: type=1400 audit(1785768493.486:308): avc: denied { mount } for pid=7233 comm="syz.2.519" name="/" dev="rpc_pipefs" ino=14818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 141.492110][ T5733] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.938133][ T5733] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 141.949735][ T5733] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 141.993404][ T5733] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 142.010265][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 142.031914][ T5733] usb 4-1: Product: syz [ 142.038020][ T5733] usb 4-1: Manufacturer: syz [ 142.199548][ T7240] lo speed is unknown, defaulting to 1000 [ 142.216439][ T5733] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 142.438933][ T7266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.488384][ T7266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.529005][ T7266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.561739][ T7266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.576464][ T7241] NFSD: Unable to initialize client recovery tracking! (-110) [ 142.589746][ T7241] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 142.608030][ T7266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.618577][ T7241] NFSD: starting 90-second grace period (net f00004e9) [ 142.660237][ T7269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'. [ 142.987552][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.529'. [ 143.056547][ T29] audit: type=1400 audit(1785768495.256:309): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 143.239598][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 143.481788][ T7279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.532'. [ 143.706371][ T5733] usb 4-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 143.752702][ T29] audit: type=1400 audit(1785768495.946:310): avc: denied { firmware_load } for pid=5733 comm="kworker/0:6" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.784655][ T5733] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 144.370947][ T7275] lo speed is unknown, defaulting to 1000 [ 145.921340][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 145.987346][ T7346] netlink: 124 bytes leftover after parsing attributes in process `syz.2.552'. [ 146.238421][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 146.262618][ T7348] netlink: 108 bytes leftover after parsing attributes in process `syz.2.553'. [ 147.528806][ T7334] lo speed is unknown, defaulting to 1000 [ 147.860700][ T7374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.563'. [ 147.900138][ T7374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.563'. [ 147.937863][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'. [ 148.416954][ T7358] lo speed is unknown, defaulting to 1000 [ 148.942444][ T29] audit: type=1400 audit(1785768501.026:311): avc: denied { write } for pid=7394 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.495346][ T7403] tipc: Started in network mode [ 149.553494][ T7403] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 149.569938][ T7403] tipc: Enabled bearer , priority 10 [ 149.587034][ T7406] tipc: Disabling bearer [ 149.796091][ T7412] __nla_validate_parse: 4 callbacks suppressed [ 149.796110][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 149.835427][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 149.908017][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 149.957221][ T7418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 150.009790][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 150.068002][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.581'. [ 150.092198][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 150.672386][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 150.724258][ T7439] netlink: 124 bytes leftover after parsing attributes in process `syz.0.586'. [ 151.589656][ T7454] tipc: Enabled bearer , priority 10 [ 151.631030][ T7454] tipc: Disabling bearer [ 151.887469][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 153.599026][ T7495] tipc: Started in network mode [ 153.625315][ T7495] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 153.650044][ T7495] tipc: Enabled bearer , priority 10 [ 153.675096][ T7495] tipc: Disabling bearer [ 154.938438][ T29] audit: type=1400 audit(1785768507.136:312): avc: denied { create } for pid=7526 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.968898][ T29] audit: type=1400 audit(1785768507.166:313): avc: denied { bind } for pid=7526 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.995844][ T29] audit: type=1400 audit(1785768507.166:314): avc: denied { connect } for pid=7526 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.052615][ T29] audit: type=1400 audit(1785768507.196:315): avc: denied { write } for pid=7526 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.095780][ T7504] lo speed is unknown, defaulting to 1000 [ 156.591237][ T7545] __nla_validate_parse: 10 callbacks suppressed [ 156.591254][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 156.681212][ T7545] netlink: 124 bytes leftover after parsing attributes in process `syz.3.623'. [ 156.789343][ T7550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.626'. [ 156.822422][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.627'. [ 156.914660][ T29] audit: type=1400 audit(1785768509.106:316): avc: denied { setopt } for pid=7554 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.958850][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.628'. [ 156.977741][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.628'. [ 158.863921][ T29] audit: type=1400 audit(1785768511.066:317): avc: denied { getopt } for pid=7587 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.909142][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 159.088325][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7592 comm=syz.1.644 [ 159.440926][ T7603] ovs-system: entered promiscuous mode [ 159.469697][ T7564] lo speed is unknown, defaulting to 1000 [ 161.305841][ T29] audit: type=1400 audit(1785768513.506:318): avc: denied { setopt } for pid=7629 comm="syz.4.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.345963][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 161.632032][ T5711] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.689581][ T7638] tipc: Started in network mode [ 161.718416][ T7638] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 161.747317][ T7638] tipc: Enabled bearer , priority 0 [ 161.797647][ T5711] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 161.826712][ T29] audit: type=1400 audit(1785768514.016:319): avc: denied { bind } for pid=7641 comm="syz.4.661" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.861972][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.880865][ T5711] usb 3-1: Product: syz [ 161.890043][ T5711] usb 3-1: Manufacturer: syz [ 161.913880][ T5711] usb 3-1: SerialNumber: syz [ 162.491261][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.670'. [ 163.215416][ T5743] tipc: Node number set to 43690 [ 163.221587][ T5711] usb 3-1: selecting invalid altsetting 1 [ 163.267418][ T5711] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 163.292692][ T5711] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 163.299800][ T5711] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 163.324918][ T5711] usb 3-1: selecting invalid altsetting 1 [ 163.455751][ T5711] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 163.490565][ T5711] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 163.547831][ T5711] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 163.640759][ T5711] usb 3-1: USB disconnect, device number 6 [ 163.705223][ T29] audit: type=1400 audit(1785768515.906:320): avc: denied { bind } for pid=7677 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.297776][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 164.582843][ T7674] lo speed is unknown, defaulting to 1000 [ 165.888706][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.686'. [ 165.914668][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.686'. [ 165.934073][ T29] audit: type=1400 audit(1785768518.136:321): avc: denied { read } for pid=7718 comm="syz.2.687" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.121358][ T5711] libceph: connect (1)127.0.0.1:6789 error -101 [ 166.139451][ T5711] libceph: mon0 (1)127.0.0.1:6789 connect error [ 166.399200][ T7678] lo speed is unknown, defaulting to 1000 [ 166.413577][ T5711] libceph: connect (1)127.0.0.1:6789 error -101 [ 166.427685][ T5711] libceph: mon0 (1)127.0.0.1:6789 connect error [ 166.842976][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.692'. [ 166.914813][ T7723] ceph: No mds server is up or the cluster is laggy [ 166.959539][ T5711] libceph: connect (1)127.0.0.1:6789 error -101 [ 166.977264][ T5711] libceph: mon0 (1)127.0.0.1:6789 connect error [ 168.032359][ T7692] lo speed is unknown, defaulting to 1000 [ 168.555835][ T7684] lo speed is unknown, defaulting to 1000 [ 169.071334][ T7770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.209268][ T7771] netdevsim netdevsim10 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.239644][ T7688] lo speed is unknown, defaulting to 1000 [ 169.577685][ T7681] lo speed is unknown, defaulting to 1000 [ 169.911017][ T7737] lo speed is unknown, defaulting to 1000 [ 170.181125][ T7758] rdma_rxe: rxe_newlink: failed to add lo [ 171.201643][ T7770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.629460][ T7770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.911118][ T7770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.677875][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 173.546793][ T6386] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.733379][ T1144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.832925][ T5712] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.862080][ T7669] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.922375][ T7669] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.134883][ T5712] usb 3-1: config 1 interface 1 altsetting 1 has a duplicate endpoint with address 0x87, skipping [ 174.152466][ T5712] usb 3-1: config 1 interface 1 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 174.176284][ T5712] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 174.269753][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 174.436003][ T5712] usb 3-1: Product: syz [ 174.489065][ T5712] usb 3-1: Manufacturer: syz [ 174.624599][ T7810] lo speed is unknown, defaulting to 1000 [ 175.864781][ T5712] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 175.915645][ T5712] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 175.950331][ T5712] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 175.963912][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.725'. [ 176.019722][ T5712] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 176.055113][ T5712] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 176.078841][ T5712] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 176.111657][ T5712] usb 3-1: USB disconnect, device number 7 [ 177.815592][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.739'. [ 177.925137][ T29] audit: type=1400 audit(1785768530.126:322): avc: denied { name_connect } for pid=7899 comm="syz.4.741" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 178.383872][ T29] audit: type=1400 audit(1785768530.586:323): avc: denied { name_bind } for pid=7909 comm="syz.2.745" src=20480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 178.513084][ T7883] lo speed is unknown, defaulting to 1000 [ 178.797961][ T7860] lo speed is unknown, defaulting to 1000 [ 179.925402][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.753'. [ 180.784228][ T7945] can0: slcan on ptm0. [ 181.000326][ T7952] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 181.017338][ T7944] can0 (unregistered): slcan off ptm0. [ 181.129348][ T29] audit: type=1400 audit(1785768533.326:324): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.229901][ T29] audit: type=1400 audit(1785768533.326:325): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.340198][ T29] audit: type=1400 audit(1785768533.326:326): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.471106][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'. [ 182.840807][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.782'. [ 183.992819][ T35] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.380474][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.794'. [ 184.618736][ T8039] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 184.648855][ T8039] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 184.688598][ T7998] lo speed is unknown, defaulting to 1000 [ 185.107580][ T8014] lo speed is unknown, defaulting to 1000 [ 186.273500][ T8064] can0: slcan on ptm0. [ 186.417860][ T29] audit: type=1400 audit(1785768538.606:327): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.459541][ T29] audit: type=1400 audit(1785768538.616:328): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.577149][ T29] audit: type=1400 audit(1785768538.616:329): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.714445][ T29] audit: type=1400 audit(1785768538.616:330): avc: denied { read } for pid=5271 comm="dhcpcd" name="n31" dev="tmpfs" ino=4163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.818953][ T29] audit: type=1400 audit(1785768538.616:331): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.914258][ T29] audit: type=1400 audit(1785768538.636:332): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=4163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.010505][ T29] audit: type=1400 audit(1785768539.076:333): avc: denied { read } for pid=8080 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.036232][ T29] audit: type=1400 audit(1785768539.076:334): avc: denied { read open } for pid=8080 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.147846][ T29] audit: type=1400 audit(1785768539.076:335): avc: denied { getattr } for pid=8080 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.194086][ T8063] can0 (unregistered): slcan off ptm0. [ 187.451056][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.813'. [ 187.580729][ T29] audit: type=1400 audit(1785768539.776:336): avc: denied { write } for pid=8079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.293332][ T8113] lo speed is unknown, defaulting to 1000 [ 190.174013][ T8117] lo speed is unknown, defaulting to 1000 [ 191.031690][ T8116] lo speed is unknown, defaulting to 1000 [ 191.440534][ T8160] lo speed is unknown, defaulting to 1000 [ 191.728023][ T8180] rdma_rxe: rxe_newlink: failed to add veth0 [ 193.051050][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.846'. [ 193.954407][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.966989][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.672432][ T8233] rdma_rxe: rxe_newlink: failed to add lo [ 194.861088][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 194.870865][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 194.994882][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 195.004923][ T8248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.861'. [ 195.023613][ T8248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.861'. [ 195.208381][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'. [ 195.546328][ T8239] lo speed is unknown, defaulting to 1000 [ 195.944286][ T8256] lo speed is unknown, defaulting to 1000 [ 196.029297][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 196.029553][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 196.036613][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 196.041337][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 196.047541][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 197.337658][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 197.506221][ T8297] rdma_rxe: rxe_newlink: failed to add lo [ 197.732804][ T8304] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 197.820115][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 197.874329][ T8302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.879'. [ 198.956948][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 199.128574][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 199.245667][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 199.613363][ T8332] lo speed is unknown, defaulting to 1000 [ 200.133713][ T8356] rdma_rxe: rxe_newlink: failed to add lo [ 200.363089][ T8363] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 201.092424][ T189] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.142997][ T8365] lo speed is unknown, defaulting to 1000 [ 201.242591][ T189] usb 2-1: device descriptor read/64, error -71 [ 201.297455][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 201.483057][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.907'. [ 201.512080][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 201.672155][ T189] usb 2-1: device descriptor read/64, error -71 [ 201.796167][ T189] usb usb2-port1: attempt power cycle [ 202.152632][ T189] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.193081][ T189] usb 2-1: device descriptor read/8, error -71 [ 202.472431][ T189] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.512991][ T189] usb 2-1: device descriptor read/8, error -71 [ 202.569044][ T8392] lo speed is unknown, defaulting to 1000 [ 202.642459][ T189] usb usb2-port1: unable to enumerate USB device [ 203.979743][ T8422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 204.230521][ T5733] usb 4-1: [UEAGLE-ATM] firmware ueagle-atm/930-fpga.bin is not available [ 204.283660][ T5733] usb 4-1: [UEAGLE-ATM] urb submission failed with error -19 [ 204.305775][ T5733] ueagle-atm 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 204.369218][ T5733] ueagle-atm 4-1:1.2: usbatm_usb_probe: bind failed: -19! [ 204.431773][ T5733] usb 4-1: USB disconnect, device number 4 [ 204.667677][ T8445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8445 comm=syz.0.926 [ 205.387777][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'. [ 205.405055][ T8427] lo speed is unknown, defaulting to 1000 [ 206.441095][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 206.810040][ T8486] lo speed is unknown, defaulting to 1000 [ 207.390575][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 207.390590][ T29] audit: type=1400 audit(1785768559.586:347): avc: denied { mount } for pid=8518 comm="syz.4.956" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 207.451918][ T29] audit: type=1400 audit(1785768559.636:348): avc: denied { read } for pid=8518 comm="syz.4.956" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 207.551112][ T8521] rdma_rxe: rxe_newlink: failed to add veth0 [ 207.594001][ T8519] NFSD: Failed to start, no listeners configured. [ 208.003136][ T29] audit: type=1400 audit(1785768560.206:349): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 208.115669][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 208.583519][ T8537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.699096][ T8539] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.888537][ T8537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.129914][ T8537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.419547][ T8550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.661788][ T8537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.894403][ T47] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.005831][ T8551] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.182417][ T444] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.284486][ T444] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.308680][ T444] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.338968][ T444] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.433985][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.972'. [ 210.487165][ T8572] lo speed is unknown, defaulting to 1000 [ 210.639440][ T29] audit: type=1400 audit(1785768562.836:350): avc: denied { read write } for pid=8577 comm="syz.4.973" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 210.704748][ T29] audit: type=1400 audit(1785768562.836:351): avc: denied { open } for pid=8577 comm="syz.4.973" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 210.762081][ T29] audit: type=1400 audit(1785768562.896:352): avc: denied { ioctl } for pid=8577 comm="syz.4.973" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 211.329188][ T8594] ipt_REJECT: TCP_RESET invalid for non-tcp [ 212.574618][ T8597] lo speed is unknown, defaulting to 1000 [ 212.677439][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 213.609214][ T8550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.809832][ T8550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.852080][ T8643] svc: failed to register lockdv1 RPC service (errno 101). [ 213.980406][ T8550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.234029][ T8643] svc: failed to register nfsdv3 RPC service (errno 101). [ 214.266376][ T8643] svc: failed to register nfsaclv3 RPC service (errno 101). [ 214.282466][ T8643] failed to unregister tcp with rpcbind [ 214.291965][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.304244][ T8643] svc: failed to register nfsdv3 RPC service (errno 97). [ 214.334132][ T8643] svc: failed to register nfsaclv3 RPC service (errno 97). [ 214.393367][ T8643] failed to unregister tcp with rpcbind [ 214.484959][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.552957][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.912101][ T8636] lo speed is unknown, defaulting to 1000 [ 214.922339][ T7669] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.964284][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.998'. [ 215.833668][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 215.890214][ T8678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1006'. [ 215.901693][ T8663] lo speed is unknown, defaulting to 1000 [ 216.362604][ T8686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'. [ 216.709669][ T8691] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1012'. [ 217.015055][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1015'. [ 217.073556][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 217.130037][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 217.324037][ T8712] netlink: 'syz.4.1019': attribute type 3 has an invalid length. [ 217.668396][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 218.390470][ T29] audit: type=1400 audit(1785768570.586:353): avc: denied { shutdown } for pid=8736 comm="syz.3.1030" lport=50075 faddr=127.0.0.1 fport=8000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.560309][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 218.769739][ T8755] syzkaller0: entered promiscuous mode [ 218.790195][ T8755] syzkaller0: entered allmulticast mode [ 219.044414][ T8742] lo speed is unknown, defaulting to 1000 [ 219.687833][ T8748] lo speed is unknown, defaulting to 1000 [ 219.931016][ T29] audit: type=1400 audit(1785768572.126:354): avc: denied { setopt } for pid=8779 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.993160][ T29] audit: type=1400 audit(1785768572.166:355): avc: denied { map } for pid=8779 comm="syz.0.1047" path="socket:[21554]" dev="sockfs" ino=21554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.746823][ T8802] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1053'. [ 220.969713][ T8792] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1052'. [ 220.989248][ T8796] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1052'. [ 221.002700][ T8799] syzkaller0: left promiscuous mode [ 221.008191][ T8799] syzkaller0: left allmulticast mode [ 221.633436][ T189] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.816480][ T189] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 221.849560][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.870817][ T189] usb 2-1: Product: syz [ 221.885258][ T189] usb 2-1: Manufacturer: syz [ 221.903196][ T189] usb 2-1: SerialNumber: syz [ 222.072493][ T8820] lo speed is unknown, defaulting to 1000 [ 222.635745][ T189] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 222.654025][ T189] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 222.675144][ T189] usb 2-1: USB disconnect, device number 7 [ 222.765914][ T8839] lo speed is unknown, defaulting to 1000 [ 223.481634][ T8845] lo speed is unknown, defaulting to 1000 [ 223.828410][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 223.890037][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 224.922895][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1084'. [ 224.952430][ T8879] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1084'. [ 225.302468][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 226.079092][ T8899] lo speed is unknown, defaulting to 1000 [ 226.797628][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 227.204465][ T29] audit: type=1400 audit(1785768579.406:356): avc: denied { mount } for pid=8943 comm="syz.3.1104" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 227.261127][ T29] audit: type=1400 audit(1785768579.426:357): avc: denied { search } for pid=8943 comm="syz.3.1104" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 227.295283][ T29] audit: type=1400 audit(1785768579.426:358): avc: denied { search } for pid=8943 comm="syz.3.1104" name="events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 227.350919][ T29] audit: type=1400 audit(1785768579.436:359): avc: denied { search } for pid=8943 comm="syz.3.1104" name="tipc" dev="tracefs" ino=22043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 227.404070][ T29] audit: type=1400 audit(1785768579.436:360): avc: denied { write } for pid=8943 comm="syz.3.1104" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 227.440278][ T29] audit: type=1400 audit(1785768579.436:361): avc: denied { open } for pid=8943 comm="syz.3.1104" path="/228/sys_mnt/events/tipc/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 227.486503][ T29] audit: type=1400 audit(1785768579.586:362): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 227.801360][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 227.853782][ T8952] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.857997][ T8951] ovs-system: entered promiscuous mode [ 228.099673][ T8947] lo speed is unknown, defaulting to 1000 [ 228.684738][ T29] audit: type=1400 audit(1785768580.886:363): avc: denied { write } for pid=8965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.898816][ T29] audit: type=1400 audit(1785768581.096:364): avc: denied { write } for pid=8984 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.922859][ T6386] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.082381][ T8964] lo speed is unknown, defaulting to 1000 [ 229.091695][ T29] audit: type=1400 audit(1785768581.286:365): avc: denied { connect } for pid=8989 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.208975][ T87] libceph: connect (1)127.0.0.1:6789 error -101 [ 231.228697][ T87] libceph: mon0 (1)127.0.0.1:6789 connect error [ 231.516038][ T87] libceph: connect (1)127.0.0.1:6789 error -101 [ 231.533863][ T87] libceph: mon0 (1)127.0.0.1:6789 connect error [ 231.728066][ T9061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9061 comm=syz.3.1131 [ 231.742737][ T9061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9061 comm=syz.3.1131 [ 231.757925][ T9061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9061 comm=syz.3.1131 [ 231.959979][ T9042] ceph: No mds server is up or the cluster is laggy [ 232.236100][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 232.236117][ T29] audit: type=1400 audit(1785768584.436:368): avc: denied { setopt } for pid=9073 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.662745][ T9094] netlink: 'syz.0.1143': attribute type 5 has an invalid length. [ 232.818236][ T9086] lo speed is unknown, defaulting to 1000 [ 234.472566][ T9136] hsr_slave_0: left promiscuous mode [ 234.479368][ T9136] hsr_slave_1: left promiscuous mode [ 234.534086][ T9141] bond0: entered promiscuous mode [ 234.549395][ T9141] bond_slave_0: entered promiscuous mode [ 234.559705][ T9141] bond_slave_1: entered promiscuous mode [ 234.586989][ T9141] bond0: left promiscuous mode [ 234.595833][ T9141] bond_slave_0: left promiscuous mode [ 234.612972][ T9141] bond_slave_1: left promiscuous mode [ 234.882965][ T9133] lo speed is unknown, defaulting to 1000 [ 235.375581][ T9140] lo speed is unknown, defaulting to 1000 [ 236.242049][ T9146] lo speed is unknown, defaulting to 1000 [ 236.664741][ T9144] lo speed is unknown, defaulting to 1000 [ 238.442481][ T9193] rdma_rxe: rxe_newlink: failed to add veth0 [ 239.496234][ T9201] lo speed is unknown, defaulting to 1000 [ 239.532487][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9216 comm=syz.4.1182 [ 239.868628][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 239.984700][ T9212] lo speed is unknown, defaulting to 1000 [ 240.162943][ T9227] can0: slcan on ptm0. [ 240.287578][ T5342] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 240.573293][ T9225] can0 (unregistered): slcan off ptm0. [ 240.676384][ T5342] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 240.695749][ T5342] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 240.730711][ T5342] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 240.755863][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.780283][ T5342] usb 5-1: Product: syz [ 240.790864][ T5342] usb 5-1: Manufacturer: syz [ 241.014848][ T5342] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 242.020558][ T29] audit: type=1400 audit(1785768594.216:369): avc: denied { write } for pid=9251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.040063][ T9268] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1198'. [ 242.133517][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1198'. [ 242.150804][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.161717][ T29] audit: type=1400 audit(1785768594.346:370): avc: denied { ioctl } for pid=9272 comm="syz-executor" path="socket:[23184]" dev="sockfs" ino=23184 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.192458][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.204539][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.218684][ T9268] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1198'. [ 242.224022][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.250977][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.422907][ T29] audit: type=1400 audit(1785768594.616:371): avc: denied { write } for pid=9279 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.454433][ T5342] usb 5-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 242.532066][ T5342] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 243.147881][ T9269] lo speed is unknown, defaulting to 1000 [ 243.471184][ T29] audit: type=1400 audit(1785768595.666:372): avc: denied { write } for pid=9297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.686825][ T29] audit: type=1400 audit(1785768595.886:373): avc: denied { write } for pid=9323 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.804383][ T9287] lo speed is unknown, defaulting to 1000 [ 244.422297][ T5619] Bluetooth: hci5: command tx timeout [ 244.578302][ T9272] lo speed is unknown, defaulting to 1000 [ 244.611417][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1215'. [ 246.502965][ T5619] Bluetooth: hci5: command tx timeout [ 246.667258][ T9356] lo speed is unknown, defaulting to 1000 [ 246.673998][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.688269][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.715695][ T9272] bridge_slave_0: entered allmulticast mode [ 246.741209][ T9272] bridge_slave_0: entered promiscuous mode [ 246.769473][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.799016][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.824834][ T9272] bridge_slave_1: entered allmulticast mode [ 246.844079][ T9272] bridge_slave_1: entered promiscuous mode [ 246.954794][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.989083][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.039367][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 247.066040][ T9387] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1228'. [ 247.095701][ T9272] team0: Port device team_slave_0 added [ 247.114664][ T9272] team0: Port device team_slave_1 added [ 247.170071][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.180723][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.229140][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.278148][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.289540][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.351592][ T9272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.569982][ T9272] hsr_slave_0: entered promiscuous mode [ 247.603560][ T9272] hsr_slave_1: entered promiscuous mode [ 248.392144][ T9272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.404111][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.414445][ T9272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.442726][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.466834][ T9272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.516456][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.551697][ T9272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.582302][ T5619] Bluetooth: hci5: command tx timeout [ 248.609820][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.001580][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.115068][ T9272] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.163445][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.170685][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.180078][ T29] audit: type=1400 audit(1785768601.366:374): avc: denied { create } for pid=9433 comm="syz.4.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 249.222374][ T9406] lo speed is unknown, defaulting to 1000 [ 249.229071][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.236286][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.904397][ T9431] lo speed is unknown, defaulting to 1000 [ 250.531199][ T9444] lo speed is unknown, defaulting to 1000 [ 250.577547][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.663755][ T5619] Bluetooth: hci5: command tx timeout [ 251.810710][ T9272] veth0_vlan: entered promiscuous mode [ 251.876482][ T9272] veth1_vlan: entered promiscuous mode [ 252.001517][ T9272] veth0_macvtap: entered promiscuous mode [ 252.076366][ T9272] veth1_macvtap: entered promiscuous mode [ 252.159687][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.192619][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.252743][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.281906][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.435421][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.493981][ T1144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.889227][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.899184][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.111221][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.150483][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.221562][ T29] audit: type=1400 audit(1785768605.416:375): avc: denied { mounton } for pid=9272 comm="syz-executor" path="/root/syzkaller.35LBG8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 253.299927][ T29] audit: type=1400 audit(1785768605.416:376): avc: denied { unmount } for pid=9272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 253.393563][ T29] audit: type=1400 audit(1785768605.466:377): avc: denied { mount } for pid=9272 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 254.405051][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 254.485168][ T9509] lo speed is unknown, defaulting to 1000 [ 254.871923][ T5712] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 254.982638][ T9520] lo speed is unknown, defaulting to 1000 [ 255.067008][ T5712] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 255.084252][ T5712] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 255.112124][ T5712] usb 6-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 255.145637][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 255.167860][ T5712] usb 6-1: Product: syz [ 255.183118][ T5712] usb 6-1: Manufacturer: syz [ 255.342849][ T5712] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 255.383729][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.393758][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.856467][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'. [ 256.867294][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 256.892787][ T9572] tipc: Enabling of bearer rejected, failed to enable media [ 257.266685][ T9576] ceph: No mds server is up or the cluster is laggy [ 257.746704][ T9604] netlink: 'syz.4.1299': attribute type 2 has an invalid length. [ 257.764621][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 257.802318][ T9604] : entered promiscuous mode [ 257.819987][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 258.054534][ T9599] lo speed is unknown, defaulting to 1000 [ 258.642045][ T87] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.819153][ T87] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 258.861591][ T87] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 258.908492][ T87] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 258.910424][ T9630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1309'. [ 258.927500][ T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 258.927549][ T87] usb 4-1: Product: syz [ 258.927588][ T87] usb 4-1: Manufacturer: syz [ 258.959624][ T9630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1309'. [ 259.104925][ T87] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 259.136319][ T9616] lo speed is unknown, defaulting to 1000 [ 259.787664][ T9645] rdma_rxe: rxe_newlink: failed to add veth0 [ 260.146359][ T5733] libceph: connect (1)127.0.0.1:6789 error -101 [ 260.163556][ T5733] libceph: mon0 (1)127.0.0.1:6789 connect error [ 260.433414][ T5733] libceph: connect (1)127.0.0.1:6789 error -101 [ 260.451505][ T5733] libceph: mon0 (1)127.0.0.1:6789 connect error [ 260.796043][ T9660] ceph: No mds server is up or the cluster is laggy [ 261.126572][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1326'. [ 261.298369][ T9655] lo speed is unknown, defaulting to 1000 [ 261.568177][ T9690] smc: net device lo applied user defined pnetid SYZ0 [ 261.590042][ T9690] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 262.348431][ T9699] veth1_macvtap: left promiscuous mode [ 263.310522][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 263.336489][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 263.361326][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 263.394735][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 263.658540][ T9723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1342'. [ 263.679736][ T9714] lo speed is unknown, defaulting to 1000 [ 263.883558][ T9727] openvswitch: ovs-system: Dropping previously announced user features [ 263.918401][ T9733] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1345'. [ 263.932704][ T9733] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1345'. [ 265.063217][ T9744] lo speed is unknown, defaulting to 1000 [ 265.437582][ T9753] lo speed is unknown, defaulting to 1000 [ 266.980673][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.037569][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.068160][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.112214][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.137405][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.161376][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.204290][ T9771] ksmbd: Unknown IPC event: 1, ignore. [ 267.224519][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.281874][ T9772] nbd: must specify at least one socket [ 267.306690][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.350872][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.374761][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 267.406363][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.688169][ T29] audit: type=1400 audit(1785768619.886:378): avc: denied { ioctl } for pid=9780 comm="syz.3.1362" path="socket:[26772]" dev="sockfs" ino=26772 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.989702][ T5713] libceph: connect (1)127.0.0.1:6789 error -101 [ 268.000997][ T5713] libceph: mon0 (1)127.0.0.1:6789 connect error [ 268.272137][ T5713] libceph: connect (1)127.0.0.1:6789 error -101 [ 268.279711][ T5713] libceph: mon0 (1)127.0.0.1:6789 connect error [ 268.777988][ T9787] ceph: No mds server is up or the cluster is laggy [ 268.792440][ T5713] libceph: connect (1)127.0.0.1:6789 error -101 [ 268.808924][ T5713] libceph: mon0 (1)127.0.0.1:6789 connect error [ 269.201986][ T9800] lo speed is unknown, defaulting to 1000 [ 269.337046][ T29] audit: type=1400 audit(1785768621.536:379): avc: denied { ioctl } for pid=9804 comm="syz.4.1370" path="socket:[26868]" dev="sockfs" ino=26868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.384535][ T9820] lo speed is unknown, defaulting to 1000 [ 272.229302][ T3104] libceph: connect (1)127.0.0.1:6789 error -101 [ 272.248745][ T3104] libceph: mon0 (1)127.0.0.1:6789 connect error [ 272.405135][ T9842] lo speed is unknown, defaulting to 1000 [ 272.532102][ T5711] libceph: connect (1)127.0.0.1:6789 error -101 [ 272.547480][ T5711] libceph: mon0 (1)127.0.0.1:6789 connect error [ 273.009251][ T9850] ceph: No mds server is up or the cluster is laggy [ 273.062376][ T5711] libceph: connect (1)127.0.0.1:6789 error -101 [ 273.079395][ T5711] libceph: mon0 (1)127.0.0.1:6789 connect error [ 273.743315][ T5814] libceph: connect (1)127.0.0.1:6789 error -101 [ 273.749919][ T5814] libceph: mon0 (1)127.0.0.1:6789 connect error [ 274.012072][ T5814] libceph: connect (1)127.0.0.1:6789 error -101 [ 274.018749][ T5814] libceph: mon0 (1)127.0.0.1:6789 connect error [ 274.398723][ T9886] lo speed is unknown, defaulting to 1000 [ 274.532107][ T5711] libceph: connect (1)127.0.0.1:6789 error -101 [ 274.554532][ T5711] libceph: mon0 (1)127.0.0.1:6789 connect error [ 274.574699][ T9879] ceph: No mds server is up or the cluster is laggy [ 275.304115][ T9907] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 275.341873][ T9907] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 275.401228][ T9907] __nla_validate_parse: 2 callbacks suppressed [ 275.401246][ T9907] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1404'. [ 275.450447][ T9907] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1404'. [ 275.520695][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 275.850345][ T9916] ip_tables: iptables: counters copy to user failed while replacing table [ 276.046807][ T9910] lo speed is unknown, defaulting to 1000 [ 277.358078][ T9928] lo speed is unknown, defaulting to 1000 [ 277.716519][ T9934] lo speed is unknown, defaulting to 1000 [ 278.782468][ T9950] rdma_rxe: rxe_newlink: failed to add lo [ 279.732595][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.745656][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.754996][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.763081][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.775583][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.288107][ T9966] lo speed is unknown, defaulting to 1000 [ 281.019706][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.030857][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.041042][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.049642][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.058738][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.522474][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.529851][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.537222][ T9966] bridge_slave_0: entered allmulticast mode [ 281.545365][ T9966] bridge_slave_0: entered promiscuous mode [ 281.555701][T10000] lo speed is unknown, defaulting to 1000 [ 281.556002][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.569016][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.576511][ T9966] bridge_slave_1: entered allmulticast mode [ 281.584497][ T9966] bridge_slave_1: entered promiscuous mode [ 281.628110][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.675674][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.810643][ T9966] team0: Port device team_slave_0 added [ 281.836369][ T9966] team0: Port device team_slave_1 added [ 281.862336][ T5618] Bluetooth: hci6: command tx timeout [ 281.914266][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.922912][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.951560][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.966209][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.981449][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.043305][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.231321][ T9966] hsr_slave_0: entered promiscuous mode [ 282.238509][ T9966] hsr_slave_1: entered promiscuous mode [ 282.253580][ T9966] debugfs: 'hsr0' already exists in 'hsr' [ 282.271384][ T9966] Cannot create hsr debugfs directory [ 282.836659][ T9993] lo speed is unknown, defaulting to 1000 [ 283.052568][ T9966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.090223][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.119843][ T9966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.142205][ T5618] Bluetooth: hci7: command tx timeout [ 283.154227][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.169987][ T9966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.234458][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.249459][ T9966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.275886][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.896734][ T9966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.941963][ T5618] Bluetooth: hci6: command tx timeout [ 283.974027][ T9966] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.027204][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 284.050721][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.057941][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.107128][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.114331][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.213251][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.223461][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.230821][ T9993] bridge_slave_0: entered allmulticast mode [ 284.243210][ T9993] bridge_slave_0: entered promiscuous mode [ 284.270739][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.279847][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.287708][ T9993] bridge_slave_1: entered allmulticast mode [ 284.297188][ T9993] bridge_slave_1: entered promiscuous mode [ 284.477221][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.519476][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.608970][T10051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1440'. [ 284.640021][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1440'. [ 284.699530][ T9993] team0: Port device team_slave_0 added [ 284.759164][ T9993] team0: Port device team_slave_1 added [ 284.937793][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.959806][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.999159][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.034727][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.043602][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.070624][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.192498][ T9993] hsr_slave_0: entered promiscuous mode [ 285.211650][ T9993] hsr_slave_1: entered promiscuous mode [ 285.222318][ T5618] Bluetooth: hci7: command tx timeout [ 285.236937][ T9993] debugfs: 'hsr0' already exists in 'hsr' [ 285.250224][ T9993] Cannot create hsr debugfs directory [ 285.592222][T10063] lo speed is unknown, defaulting to 1000 [ 285.616193][ T9966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.023831][ T5618] Bluetooth: hci6: command tx timeout [ 286.093572][ T9993] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.131132][ T9993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.154995][ T9993] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.173913][ T9993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.192966][ T9993] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.207998][ T9993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.244644][ T9993] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.259221][ T9993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.495598][ T9966] veth0_vlan: entered promiscuous mode [ 286.584955][ T9966] veth1_vlan: entered promiscuous mode [ 286.688136][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.817035][ T9966] veth0_macvtap: entered promiscuous mode [ 286.851508][ T9993] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.880429][ T9966] veth1_macvtap: entered promiscuous mode [ 286.918821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.926047][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.943953][ T35] FAULT_INJECTION: forcing a failure. [ 286.943953][ T35] name failslab, interval 1, probability 100, space 0, times 10 [ 286.943957][T10092] FAULT_INJECTION: forcing a failure. [ 286.943957][T10092] name failslab, interval 1, probability 100, space 0, times 10 [ 286.943999][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.2.1449 Not tainted syzkaller #0 PREEMPT(full) [ 286.944020][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.944037][T10092] Call Trace: [ 286.944046][T10092] [ 286.944055][T10092] dump_stack_lvl+0x100/0x190 [ 286.944108][T10092] should_fail_ex.cold+0x5/0xa [ 286.944135][T10092] should_failslab+0xc2/0x120 [ 286.944163][T10092] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 286.944191][T10092] ? __alloc_skb+0x5b7/0x710 [ 286.944215][T10092] ? __alloc_skb+0x140/0x710 [ 286.944245][T10092] __alloc_skb+0x140/0x710 [ 286.944268][T10092] ? __alloc_skb+0x5b7/0x710 [ 286.944293][T10092] ? __pfx___alloc_skb+0x10/0x10 [ 286.944327][T10092] netlink_alloc_large_skb+0x69/0x150 [ 286.944353][T10092] netlink_sendmsg+0x680/0xda0 [ 286.944381][T10092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.944407][T10092] ? selinux_socket_sendmsg+0x198/0x2f0 [ 286.944443][T10092] ____sys_sendmsg+0xa4d/0xbe0 [ 286.944475][T10092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.944500][T10092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.944549][T10092] ___sys_sendmsg+0x190/0x1e0 [ 286.944574][T10092] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.944593][T10092] ? __lock_acquire+0x49f/0x1a40 [ 286.944653][T10092] __sys_sendmsg+0x160/0x210 [ 286.944680][T10092] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.944723][T10092] do_syscall_64+0x115/0x870 [ 286.944748][T10092] ? clear_bhb_loop+0x40/0x90 [ 286.944775][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.944798][T10092] RIP: 0033:0x7f43d0f9e019 [ 286.944822][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.944844][T10092] RSP: 002b:00007f43d1ead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.944866][T10092] RAX: ffffffffffffffda RBX: 00007f43d1225fa0 RCX: 00007f43d0f9e019 [ 286.944882][T10092] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.944896][T10092] RBP: 00007f43d103500c R08: 0000000000000000 R09: 0000000000000000 [ 286.944910][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.944924][T10092] R13: 00007f43d1226038 R14: 00007f43d1225fa0 R15: 00007ffcada31708 [ 286.944954][T10092] [ 286.946304][T10091] FAULT_INJECTION: forcing a failure. [ 286.946304][T10091] name failslab, interval 1, probability 100, space 0, times 4 [ 286.958310][ T47] FAULT_INJECTION: forcing a failure. [ 286.958310][ T47] name failslab, interval 1, probability 100, space 0, times 4 [ 286.970775][ T5713] FAULT_INJECTION: forcing a failure. [ 286.970775][ T5713] name failslab, interval 1, probability 100, space 0, times 4 [ 286.982822][ T444] FAULT_INJECTION: forcing a failure. [ 286.982822][ T444] name failslab, interval 1, probability 100, space 0, times 4 [ 286.990214][ C1] FAULT_INJECTION: forcing a failure. [ 286.990214][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 286.990287][ C1] CPU: 1 UID: 0 PID: 5713 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 286.990316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.990346][ C1] Workqueue: events nsim_fib_event_work [ 286.990385][ C1] Call Trace: [ 286.990392][ C1] [ 286.990401][ C1] dump_stack_lvl+0x100/0x190 [ 286.990432][ C1] should_fail_ex.cold+0x5/0xa [ 286.990460][ C1] should_failslab+0xc2/0x120 [ 286.990486][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 286.990514][ C1] ? __alloc_skb+0x140/0x710 [ 286.990547][ C1] __alloc_skb+0x140/0x710 [ 286.990572][ C1] ? __alloc_skb+0x5b7/0x710 [ 286.990597][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 286.990625][ C1] ? lock_acquire+0x1b9/0x370 [ 286.990655][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 286.990691][ C1] wg_packet_send_keepalive+0x7a/0x300 [ 286.990729][ C1] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 286.990765][ C1] call_timer_fn+0x19a/0x610 [ 286.990792][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 286.990821][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 286.990856][ C1] ? mark_held_locks+0x40/0x70 [ 286.990885][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 286.990919][ C1] __run_timers+0x757/0xb00 [ 286.990952][ C1] ? __pfx___run_timers+0x10/0x10 [ 286.990987][ C1] ? ktime_get+0x9f/0x320 [ 286.991013][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 286.991042][ C1] run_timer_base+0x114/0x190 [ 286.991067][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 286.991103][ C1] run_timer_softirq+0x1a/0x50 [ 286.991129][ C1] handle_softirqs+0x1ea/0x9b0 [ 286.991163][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.991192][ C1] ? _raw_spin_unlock+0x28/0x50 [ 286.991213][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 286.991239][ C1] __irq_exit_rcu+0x162/0x210 [ 286.991267][ C1] irq_exit_rcu+0x9/0x30 [ 286.991294][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 286.991320][ C1] [ 286.991327][ C1] [ 286.991336][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.991362][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 286.991398][ C1] Code: 00 e8 d1 25 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf d1 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 286.991421][ C1] RSP: 0018:ffffc90004767670 EFLAGS: 00000293 [ 286.991438][ C1] RAX: ffffffff8f9aced8 RBX: ffffffff8f9ace80 RCX: ffffffff81e88b01 [ 286.991453][ C1] RDX: ffff88807e67a540 RSI: ffffffff81e88b0f RDI: ffff88807e67a540 [ 286.991468][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 286.991481][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000ea3 [ 286.991494][ C1] R13: ffffffff8f9aced8 R14: ffffc900047676f0 R15: dffffc0000000000 [ 286.991517][ C1] ? console_flush_one_record+0xab1/0xe50 [ 286.991550][ C1] ? console_flush_one_record+0xabf/0xe50 [ 286.991593][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 286.991626][ C1] ? check_prev_add+0x354/0xe60 [ 286.991658][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 286.991685][ C1] console_unlock+0x103/0x260 [ 286.991717][ C1] ? __pfx_console_unlock+0x10/0x10 [ 286.991750][ C1] ? lock_acquire+0x101/0x370 [ 286.991780][ C1] ? vprintk_emit+0x66a/0x6b0 [ 286.991819][ C1] vprintk_emit+0x407/0x6b0 [ 286.991858][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 286.991899][ C1] _printk+0xcf/0x110 [ 286.991920][ C1] ? __pfx__printk+0x10/0x10 [ 286.991947][ C1] ? __pfx____ratelimit+0x10/0x10 [ 286.991978][ C1] should_fail_ex+0x4e4/0x640 [ 286.992013][ C1] should_failslab+0xc2/0x120 [ 286.992041][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 286.992082][ C1] ? nsim_fib_event_work+0xfdd/0x6310 [ 286.992120][ C1] nsim_fib_event_work+0xfdd/0x6310 [ 286.992164][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 286.992194][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 286.992234][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.992271][ C1] process_one_work+0xa23/0x1940 [ 286.992306][ C1] ? __pfx_process_one_work+0x10/0x10 [ 286.992339][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 286.992374][ C1] worker_thread+0x5ef/0xe50 [ 286.992408][ C1] ? kthread+0x13a/0x450 [ 286.992428][ C1] ? __pfx_worker_thread+0x10/0x10 [ 286.992450][ C1] kthread+0x370/0x450 [ 286.992475][ C1] ? __pfx_kthread+0x10/0x10 [ 286.992499][ C1] ret_from_fork+0x72b/0xd50 [ 286.992531][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 286.992563][ C1] ? __switch_to+0x800/0x10f0 [ 286.992586][ C1] ? __pfx_kthread+0x10/0x10 [ 286.992609][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.992655][ C1] [ 286.992697][ C1] FAULT_INJECTION: forcing a failure. [ 286.992697][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 286.993763][ C0] FAULT_INJECTION: forcing a failure. [ 286.993763][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 286.996777][ C1] CPU: 1 UID: 0 PID: 5713 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 286.996802][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 286.996818][ C1] Workqueue: events nsim_fib_event_work [ 286.996850][ C1] Call Trace: [ 286.996858][ C1] [ 286.996866][ C1] dump_stack_lvl+0x100/0x190 [ 286.996894][ C1] should_fail_ex.cold+0x5/0xa [ 286.996922][ C1] should_failslab+0xc2/0x120 [ 286.996950][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 286.996979][ C1] ? __alloc_skb+0x140/0x710 [ 286.997010][ C1] __alloc_skb+0x140/0x710 [ 286.997034][ C1] ? __alloc_skb+0x5b7/0x710 [ 286.997060][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 286.997094][ C1] ? lock_acquire+0x1b9/0x370 [ 286.997123][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 286.997158][ C1] wg_packet_send_keepalive+0x7a/0x300 [ 286.997196][ C1] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 286.997230][ C1] call_timer_fn+0x19a/0x610 [ 286.997256][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 286.997286][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 286.997320][ C1] ? mark_held_locks+0x40/0x70 [ 286.997350][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 286.997383][ C1] __run_timers+0x757/0xb00 [ 286.997416][ C1] ? __pfx___run_timers+0x10/0x10 [ 286.997451][ C1] ? ktime_get+0x9f/0x320 [ 286.997477][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 286.997506][ C1] run_timer_base+0x114/0x190 [ 286.997532][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 286.997561][ C1] run_timer_softirq+0x1a/0x50 [ 286.997586][ C1] handle_softirqs+0x1ea/0x9b0 [ 286.997619][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.997647][ C1] ? _raw_spin_unlock+0x28/0x50 [ 286.997670][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 286.997695][ C1] __irq_exit_rcu+0x162/0x210 [ 286.997723][ C1] irq_exit_rcu+0x9/0x30 [ 286.997750][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 286.997777][ C1] [ 286.997783][ C1] [ 286.997791][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.997817][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 286.997852][ C1] Code: 00 e8 d1 25 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf d1 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 286.997873][ C1] RSP: 0018:ffffc90004767670 EFLAGS: 00000293 [ 286.997889][ C1] RAX: ffffffff8f9aced8 RBX: ffffffff8f9ace80 RCX: ffffffff81e88b01 [ 286.997904][ C1] RDX: ffff88807e67a540 RSI: ffffffff81e88b0f RDI: ffff88807e67a540 [ 286.997919][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 286.997932][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000ea3 [ 286.997945][ C1] R13: ffffffff8f9aced8 R14: ffffc900047676f0 R15: dffffc0000000000 [ 286.997967][ C1] ? console_flush_one_record+0xab1/0xe50 [ 286.998000][ C1] ? console_flush_one_record+0xabf/0xe50 [ 286.998043][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 286.998083][ C1] ? check_prev_add+0x354/0xe60 [ 286.998115][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 286.998142][ C1] console_unlock+0x103/0x260 [ 286.998174][ C1] ? __pfx_console_unlock+0x10/0x10 [ 286.998207][ C1] ? lock_acquire+0x101/0x370 [ 286.998237][ C1] ? vprintk_emit+0x66a/0x6b0 [ 286.998275][ C1] vprintk_emit+0x407/0x6b0 [ 286.998309][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 286.998350][ C1] _printk+0xcf/0x110 [ 286.998370][ C1] ? __pfx__printk+0x10/0x10 [ 286.998398][ C1] ? __pfx____ratelimit+0x10/0x10 [ 286.998428][ C1] should_fail_ex+0x4e4/0x640 [ 286.998463][ C1] should_failslab+0xc2/0x120 [ 286.998491][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 286.998527][ C1] ? nsim_fib_event_work+0xfdd/0x6310 [ 286.998566][ C1] nsim_fib_event_work+0xfdd/0x6310 [ 286.998610][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 286.998642][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 286.998682][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.998719][ C1] process_one_work+0xa23/0x1940 [ 286.998755][ C1] ? __pfx_process_one_work+0x10/0x10 [ 286.998787][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 286.998824][ C1] worker_thread+0x5ef/0xe50 [ 286.998858][ C1] ? kthread+0x13a/0x450 [ 286.998878][ C1] ? __pfx_worker_thread+0x10/0x10 [ 286.998901][ C1] kthread+0x370/0x450 [ 286.998922][ C1] ? __pfx_kthread+0x10/0x10 [ 286.998945][ C1] ret_from_fork+0x72b/0xd50 [ 286.998977][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 286.999009][ C1] ? __switch_to+0x800/0x10f0 [ 286.999031][ C1] ? __pfx_kthread+0x10/0x10 [ 286.999054][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.999105][ C1] [ 286.999843][ T12] FAULT_INJECTION: forcing a failure. [ 286.999843][ T12] name failslab, interval 1, probability 100, space 0, times 2 [ 287.001554][ C0] CPU: 0 UID: 0 PID: 444 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 287.001587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.001601][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 287.001635][ C0] Call Trace: [ 287.001643][ C0] [ 287.001651][ C0] dump_stack_lvl+0x100/0x190 [ 287.001680][ C0] should_fail_ex.cold+0x5/0xa [ 287.001709][ C0] should_failslab+0xc2/0x120 [ 287.001738][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 287.001767][ C0] ? __alloc_skb+0x140/0x710 [ 287.001799][ C0] __alloc_skb+0x140/0x710 [ 287.001828][ C0] ? __alloc_skb+0x5b7/0x710 [ 287.001852][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 287.001880][ C0] ? __lock_acquire+0x49f/0x1a40 [ 287.001913][ C0] __netdev_alloc_skb+0x7a/0x960 [ 287.001944][ C0] hsr_init_skb+0x122/0x670 [ 287.001985][ C0] send_hsr_supervision_frame+0x138/0xbc0 [ 287.002024][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 287.002058][ C0] hsr_announce+0x169/0x3e0 [ 287.002090][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 287.002131][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 287.002163][ C0] call_timer_fn+0x19a/0x610 [ 287.002189][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 287.002220][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 287.002252][ C0] ? mark_held_locks+0x40/0x70 [ 287.002281][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 287.002312][ C0] __run_timers+0x757/0xb00 [ 287.002346][ C0] ? __pfx___run_timers+0x10/0x10 [ 287.002381][ C0] ? ktime_get+0x9f/0x320 [ 287.002406][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 287.002434][ C0] run_timer_base+0x114/0x190 [ 287.002460][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 287.002490][ C0] run_timer_softirq+0x1a/0x50 [ 287.002516][ C0] handle_softirqs+0x1ea/0x9b0 [ 287.002549][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.002583][ C0] ? _raw_spin_unlock+0x28/0x50 [ 287.002605][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 287.002629][ C0] __irq_exit_rcu+0x162/0x210 [ 287.002658][ C0] irq_exit_rcu+0x9/0x30 [ 287.002685][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 287.002711][ C0] [ 287.002718][ C0] [ 287.002727][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.002753][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 287.002788][ C0] Code: 00 e8 d1 25 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf d1 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 287.002810][ C0] RSP: 0018:ffffc90003a57440 EFLAGS: 00000293 [ 287.002826][ C0] RAX: ffffffff8f9aced8 RBX: ffffffff8f9ace80 RCX: ffffffff81e88b01 [ 287.002842][ C0] RDX: ffff888022382540 RSI: ffffffff81e88b0f RDI: ffff888022382540 [ 287.002857][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 287.002869][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000ea4 [ 287.002882][ C0] R13: ffffffff8f9aced8 R14: ffffc90003a574c0 R15: dffffc0000000000 [ 287.002905][ C0] ? console_flush_one_record+0xab1/0xe50 [ 287.002938][ C0] ? console_flush_one_record+0xabf/0xe50 [ 287.002982][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 287.003016][ C0] ? __lock_acquire+0x49f/0x1a40 [ 287.003049][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 287.003076][ C0] console_unlock+0x103/0x260 [ 287.003109][ C0] ? __pfx_console_unlock+0x10/0x10 [ 287.003142][ C0] ? lock_acquire+0x101/0x370 [ 287.003172][ C0] ? vprintk_emit+0x66a/0x6b0 [ 287.003210][ C0] vprintk_emit+0x407/0x6b0 [ 287.003245][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 287.003286][ C0] _printk+0xcf/0x110 [ 287.003308][ C0] ? __pfx__printk+0x10/0x10 [ 287.003335][ C0] ? __pfx____ratelimit+0x10/0x10 [ 287.003366][ C0] should_fail_ex+0x4e4/0x640 [ 287.003401][ C0] should_failslab+0xc2/0x120 [ 287.003429][ C0] __kmalloc_noprof+0xfc/0x820 [ 287.003455][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.003485][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.003511][ C0] ? __lock_acquire+0x49f/0x1a40 [ 287.003538][ C0] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 287.003577][ C0] ? __lock_acquire+0x49f/0x1a40 [ 287.003605][ C0] ? psi_group_change+0x457/0xa20 [ 287.003631][ C0] ? find_held_lock+0x2b/0x80 [ 287.003651][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 287.003686][ C0] ? rcu_is_watching+0x12/0xc0 [ 287.003725][ C0] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 287.003762][ C0] ? do_raw_spin_lock+0x128/0x260 [ 287.003794][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 287.003842][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 287.003884][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 287.003921][ C0] process_one_work+0xa23/0x1940 [ 287.003957][ C0] ? __pfx_process_one_work+0x10/0x10 [ 287.003990][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 287.004025][ C0] worker_thread+0x5ef/0xe50 [ 287.004060][ C0] ? kthread+0x13a/0x450 [ 287.004080][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.004102][ C0] kthread+0x370/0x450 [ 287.004123][ C0] ? __pfx_kthread+0x10/0x10 [ 287.004147][ C0] ret_from_fork+0x72b/0xd50 [ 287.004179][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 287.004208][ C0] ? __switch_to+0x800/0x10f0 [ 287.004231][ C0] ? __pfx_kthread+0x10/0x10 [ 287.004254][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.004300][ C0] [ 287.004348][ C0] hsr0: HSR: Could not send supervision frame [ 287.006543][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 287.006568][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.006582][ T12] Workqueue: events_unbound linkwatch_event [ 287.006603][ T12] Call Trace: [ 287.006610][ T12] [ 287.006617][ T12] dump_stack_lvl+0x100/0x190 [ 287.006643][ T12] should_fail_ex.cold+0x5/0xa [ 287.006668][ T12] should_failslab+0xc2/0x120 [ 287.006693][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 287.006718][ T12] ? __alloc_skb+0x140/0x710 [ 287.006747][ T12] __alloc_skb+0x140/0x710 [ 287.006769][ T12] ? __alloc_skb+0x5b7/0x710 [ 287.006791][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 287.006814][ T12] ? if_nlmsg_size+0x4b/0xd80 [ 287.006849][ T12] rtmsg_ifinfo_build_skb+0x81/0x260 [ 287.006883][ T12] rtmsg_ifinfo+0xa4/0x1b0 [ 287.006916][ T12] netif_state_change+0x17f/0x380 [ 287.006945][ T12] ? __pfx_netif_state_change+0x10/0x10 [ 287.006975][ T12] ? find_held_lock+0x2b/0x80 [ 287.006993][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.007022][ T12] linkwatch_do_dev+0xe0/0x120 [ 287.007042][ T12] __linkwatch_run_queue+0x3a9/0x900 [ 287.007064][ T12] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 287.007100][ T12] linkwatch_event+0x8f/0xc0 [ 287.007119][ T12] ? __pfx_linkwatch_event+0x10/0x10 [ 287.007139][ T12] ? rcu_is_watching+0x12/0xc0 [ 287.007168][ T12] process_one_work+0xa23/0x1940 [ 287.007201][ T12] ? __pfx_process_one_work+0x10/0x10 [ 287.007231][ T12] ? __pfx_linkwatch_event+0x10/0x10 [ 287.007254][ T12] worker_thread+0x5ef/0xe50 [ 287.007285][ T12] ? kthread+0x13a/0x450 [ 287.007303][ T12] ? __pfx_worker_thread+0x10/0x10 [ 287.007323][ T12] kthread+0x370/0x450 [ 287.007341][ T12] ? __pfx_kthread+0x10/0x10 [ 287.007362][ T12] ret_from_fork+0x72b/0xd50 [ 287.007390][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 287.007418][ T12] ? __switch_to+0x800/0x10f0 [ 287.007439][ T12] ? __pfx_kthread+0x10/0x10 [ 287.007460][ T12] ret_from_fork_asm+0x1a/0x30 [ 287.007501][ T12] [ 287.007759][ T4965] FAULT_INJECTION: forcing a failure. [ 287.007759][ T4965] name failslab, interval 1, probability 100, space 0, times 1 [ 287.037855][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 287.037883][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.037897][ T35] Workqueue: events_unbound cfg80211_wiphy_work [ 287.037933][ T35] Call Trace: [ 287.037940][ T35] [ 287.037948][ T35] dump_stack_lvl+0x100/0x190 [ 287.037974][ T35] should_fail_ex.cold+0x5/0xa [ 287.038000][ T35] should_failslab+0xc2/0x120 [ 287.038026][ T35] __kmalloc_noprof+0xfc/0x820 [ 287.038050][ T35] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.038076][ T35] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.038109][ T35] ? __lock_acquire+0x49f/0x1a40 [ 287.038139][ T35] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 287.038171][ T35] ? rcu_is_watching+0x12/0xc0 [ 287.038207][ T35] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 287.038238][ T35] ? do_raw_spin_lock+0x128/0x260 [ 287.038267][ T35] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 287.038310][ T35] ieee80211_iface_work+0xa9a/0x1070 [ 287.038347][ T35] cfg80211_wiphy_work+0x2b7/0x550 [ 287.038380][ T35] process_one_work+0xa23/0x1940 [ 287.038413][ T35] ? __pfx_process_one_work+0x10/0x10 [ 287.038443][ T35] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 287.038475][ T35] worker_thread+0x5ef/0xe50 [ 287.038507][ T35] ? kthread+0x13a/0x450 [ 287.038526][ T35] ? __pfx_worker_thread+0x10/0x10 [ 287.038545][ T35] kthread+0x370/0x450 [ 287.038564][ T35] ? __pfx_kthread+0x10/0x10 [ 287.038591][ T35] ret_from_fork+0x72b/0xd50 [ 287.038619][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 287.038648][ T35] ? __switch_to+0x800/0x10f0 [ 287.038669][ T35] ? __pfx_kthread+0x10/0x10 [ 287.038689][ T35] ret_from_fork_asm+0x1a/0x30 [ 287.038732][ T35] [ 287.061862][ T444] CPU: 0 UID: 0 PID: 444 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 287.061891][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.061904][ T444] Workqueue: events_unbound cfg80211_wiphy_work [ 287.061939][ T444] Call Trace: [ 287.061945][ T444] [ 287.061953][ T444] dump_stack_lvl+0x100/0x190 [ 287.061980][ T444] should_fail_ex.cold+0x5/0xa [ 287.062005][ T444] should_failslab+0xc2/0x120 [ 287.062032][ T444] __kmalloc_noprof+0xfc/0x820 [ 287.062057][ T444] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.062084][ T444] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.062106][ T444] ? __lock_acquire+0x49f/0x1a40 [ 287.062130][ T444] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 287.062160][ T444] ? __lock_acquire+0x49f/0x1a40 [ 287.062185][ T444] ? psi_group_change+0x457/0xa20 [ 287.062208][ T444] ? find_held_lock+0x2b/0x80 [ 287.062226][ T444] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 287.062259][ T444] ? rcu_is_watching+0x12/0xc0 [ 287.062293][ T444] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 287.062325][ T444] ? do_raw_spin_lock+0x128/0x260 [ 287.062353][ T444] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 287.062396][ T444] ieee80211_iface_work+0xa9a/0x1070 [ 287.062433][ T444] cfg80211_wiphy_work+0x2b7/0x550 [ 287.062464][ T444] process_one_work+0xa23/0x1940 [ 287.062498][ T444] ? __pfx_process_one_work+0x10/0x10 [ 287.062529][ T444] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 287.062560][ T444] worker_thread+0x5ef/0xe50 [ 287.062597][ T444] ? kthread+0x13a/0x450 [ 287.062628][ T444] ? __pfx_worker_thread+0x10/0x10 [ 287.062648][ T444] kthread+0x370/0x450 [ 287.062666][ T444] ? __pfx_kthread+0x10/0x10 [ 287.062688][ T444] ret_from_fork+0x72b/0xd50 [ 287.062716][ T444] ? __pfx_ret_from_fork+0x10/0x10 [ 287.062744][ T444] ? __switch_to+0x800/0x10f0 [ 287.062766][ T444] ? __pfx_kthread+0x10/0x10 [ 287.062787][ T444] ret_from_fork_asm+0x1a/0x30 [ 287.062829][ T444] [ 287.108130][ T47] CPU: 0 UID: 0 PID: 47 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 287.108159][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.108173][ T47] Workqueue: events_unbound cfg80211_wiphy_work [ 287.108207][ T47] Call Trace: [ 287.108214][ T47] [ 287.108222][ T47] dump_stack_lvl+0x100/0x190 [ 287.108248][ T47] should_fail_ex.cold+0x5/0xa [ 287.108274][ T47] should_failslab+0xc2/0x120 [ 287.108300][ T47] __kmalloc_noprof+0xfc/0x820 [ 287.108323][ T47] ? arch_stack_walk+0x94/0xf0 [ 287.108353][ T47] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.108379][ T47] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 287.108412][ T47] ? __lock_acquire+0x49f/0x1a40 [ 287.108442][ T47] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 287.108474][ T47] ? rcu_is_watching+0x12/0xc0 [ 287.108508][ T47] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 287.108539][ T47] ? do_raw_spin_lock+0x128/0x260 [ 287.108573][ T47] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 287.108617][ T47] ieee80211_iface_work+0xa9a/0x1070 [ 287.108654][ T47] cfg80211_wiphy_work+0x2b7/0x550 [ 287.108687][ T47] process_one_work+0xa23/0x1940 [ 287.108721][ T47] ? __pfx_process_one_work+0x10/0x10 [ 287.108751][ T47] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 287.108782][ T47] worker_thread+0x5ef/0xe50 [ 287.108814][ T47] ? kthread+0x13a/0x450 [ 287.108832][ T47] ? __pfx_worker_thread+0x10/0x10 [ 287.108853][ T47] kthread+0x370/0x450 [ 287.108871][ T47] ? __pfx_kthread+0x10/0x10 [ 287.108892][ T47] ret_from_fork+0x72b/0xd50 [ 287.108921][ T47] ? __pfx_ret_from_fork+0x10/0x10 [ 287.108949][ T47] ? __switch_to+0x800/0x10f0 [ 287.108970][ T47] ? __pfx_kthread+0x10/0x10 [ 287.108991][ T47] ret_from_fork_asm+0x1a/0x30 [ 287.109033][ T47] [ 287.485741][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.2.1449 Not tainted syzkaller #0 PREEMPT(full) [ 287.485770][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.485782][T10091] Call Trace: [ 287.485789][T10091] [ 287.485796][T10091] dump_stack_lvl+0x100/0x190 [ 287.485827][T10091] should_fail_ex.cold+0x5/0xa [ 287.485853][T10091] should_failslab+0xc2/0x120 [ 287.485880][T10091] kmem_cache_alloc_noprof+0x91/0x6a0 [ 287.485903][T10091] ? __pfx_acct_collect+0x10/0x10 [ 287.485923][T10091] ? taskstats_exit+0x6d3/0xca0 [ 287.485950][T10091] taskstats_exit+0x6d3/0xca0 [ 287.485972][T10091] ? __pfx_acct_update_integrals+0x10/0x10 [ 287.485997][T10091] ? __pfx_taskstats_exit+0x10/0x10 [ 287.486021][T10091] ? rcu_read_lock_any_held+0x6a/0xa0 [ 287.486046][T10091] do_exit+0x65c/0x2ae0 [ 287.486075][T10091] ? signal_wake_up_state+0xa8/0x130 [ 287.486098][T10091] ? __pfx_do_exit+0x10/0x10 [ 287.486125][T10091] ? do_group_exit+0x1bd/0x2a0 [ 287.486145][T10091] ? rcu_is_watching+0x12/0xc0 [ 287.486177][T10091] do_group_exit+0xd5/0x2a0 [ 287.486198][T10091] __x64_sys_exit_group+0x3e/0x50 [ 287.486218][T10091] x64_sys_call+0x102c/0x1530 [ 287.486244][T10091] do_syscall_64+0x115/0x870 [ 287.486268][T10091] ? clear_bhb_loop+0x40/0x90 [ 287.486293][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.486314][T10091] RIP: 0033:0x7f43d0f9e019 [ 287.486331][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.486350][T10091] RSP: 002b:00007ffcada31a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 287.486371][T10091] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f43d0f9e019 [ 287.486385][T10091] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.486402][T10091] RBP: 00007ffcada31aac R08: 0000000000000000 R09: 00000000000927c0 [ 287.486415][T10091] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000012c [ 287.486427][T10091] R13: 00000000000927c0 R14: 0000000000046002 R15: 00007ffcada31b00 [ 287.486453][T10091] [ 287.538270][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.544961][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 287.544992][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.545006][ T5713] Workqueue: events nsim_fib_event_work [ 287.545041][ T5713] Call Trace: [ 287.545048][ T5713] [ 287.545057][ T5713] dump_stack_lvl+0x100/0x190 [ 287.545084][ T5713] should_fail_ex.cold+0x5/0xa [ 287.545110][ T5713] should_failslab+0xc2/0x120 [ 287.545137][ T5713] __kmalloc_cache_noprof+0x91/0x6c0 [ 287.545169][ T5713] ? nsim_fib_event_work+0xfdd/0x6310 [ 287.545203][ T5713] nsim_fib_event_work+0xfdd/0x6310 [ 287.545243][ T5713] ? debug_object_deactivate+0x2e4/0x3b0 [ 287.545272][ T5713] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 287.545308][ T5713] ? rcu_is_watching+0x12/0xc0 [ 287.545342][ T5713] process_one_work+0xa23/0x1940 [ 287.545376][ T5713] ? __pfx_process_one_work+0x10/0x10 [ 287.545406][ T5713] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 287.545438][ T5713] worker_thread+0x5ef/0xe50 [ 287.545470][ T5713] ? kthread+0x13a/0x450 [ 287.545488][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 287.545508][ T5713] kthread+0x370/0x450 [ 287.545526][ T5713] ? __pfx_kthread+0x10/0x10 [ 287.545548][ T5713] ret_from_fork+0x72b/0xd50 [ 287.545575][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 287.545603][ T5713] ? __switch_to+0x800/0x10f0 [ 287.545624][ T5713] ? __pfx_kthread+0x10/0x10 [ 287.545645][ T5713] ret_from_fork_asm+0x1a/0x30 [ 287.545687][ T5713] [ 287.547310][ T5618] Bluetooth: hci7: command tx timeout [ 287.552982][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.202297][ T5619] Bluetooth: hci6: command tx timeout [ 288.219792][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 288.219824][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 288.219836][ T4965] Call Trace: [ 288.219844][ T4965] [ 288.219851][ T4965] dump_stack_lvl+0x100/0x190 [ 288.219885][ T4965] should_fail_ex.cold+0x5/0xa [ 288.219912][ T4965] should_failslab+0xc2/0x120 [ 288.219940][ T4965] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 288.219965][ T4965] ? __alloc_skb+0x5b7/0x710 [ 288.219989][ T4965] ? __alloc_skb+0x140/0x710 [ 288.220017][ T4965] __alloc_skb+0x140/0x710 [ 288.220037][ T4965] ? __alloc_skb+0x5b7/0x710 [ 288.220060][ T4965] ? __pfx___alloc_skb+0x10/0x10 [ 288.220082][ T4965] ? __x64_sys_syslog+0x74/0xb0 [ 288.220110][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.220139][ T4965] alloc_skb_with_frags+0xdd/0x760 [ 288.220165][ T4965] ? find_held_lock+0x2b/0x80 [ 288.220184][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 288.220209][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 288.220237][ T4965] sock_alloc_send_pskb+0x801/0x980 [ 288.220264][ T4965] ? avc_has_perm+0x135/0x1e0 [ 288.220289][ T4965] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 288.220311][ T4965] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 288.220339][ T4965] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 288.220365][ T4965] ? kasan_quarantine_put+0x104/0x240 [ 288.220392][ T4965] unix_dgram_sendmsg+0x3c7/0x1810 [ 288.220423][ T4965] ? __pfx_syslog_print+0x10/0x10 [ 288.220447][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 288.220477][ T4965] ? selinux_socket_sendmsg+0x198/0x2f0 [ 288.220511][ T4965] __sys_sendto+0x48b/0x4e0 [ 288.220533][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 288.220559][ T4965] ? __pfx___sys_sendto+0x10/0x10 [ 288.220589][ T4965] ? do_syslog+0x18c/0x6d0 [ 288.220631][ T4965] ? xfd_validate_state+0x129/0x190 [ 288.220663][ T4965] __x64_sys_sendto+0xe0/0x1c0 [ 288.220685][ T4965] ? do_syscall_64+0x90/0x870 [ 288.220710][ T4965] ? lockdep_hardirqs_on+0x78/0x100 [ 288.220733][ T4965] do_syscall_64+0x115/0x870 [ 288.220756][ T4965] ? clear_bhb_loop+0x40/0x90 [ 288.220781][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.220802][ T4965] RIP: 0033:0x7f87d4eea407 [ 288.220821][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 288.220840][ T4965] RSP: 002b:00007ffc54bd5450 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 288.220861][ T4965] RAX: ffffffffffffffda RBX: 00007f87d4d9ac80 RCX: 00007f87d4eea407 [ 288.220875][ T4965] RDX: 0000000000000055 RSI: 00007ffc54bd5590 RDI: 0000000000000003 [ 288.220887][ T4965] RBP: 00007ffc54bd59c0 R08: 0000000000000000 R09: 0000000000000000 [ 288.220899][ T4965] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc54bd59d8 [ 288.220912][ T4965] R13: 00007ffc54bd5590 R14: 000000000000003a R15: 00007ffc54bd5590 [ 288.220937][ T4965] [ 288.239527][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.261904][ T5619] Bluetooth: hci7: command tx timeout [ 290.411740][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.575901][ T444] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.595709][ T444] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.681947][ T47] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.823471][ T47] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.958955][ T444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.982394][ T444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.038835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.055308][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.680504][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.984033][T10125] lo speed is unknown, defaulting to 1000 [ 292.753146][ T9993] veth0_vlan: entered promiscuous mode [ 292.785560][ T9993] veth1_vlan: entered promiscuous mode [ 292.800876][T10157] lo speed is unknown, defaulting to 1000 [ 292.909175][ T9993] veth0_macvtap: entered promiscuous mode [ 292.978090][ T9993] veth1_macvtap: entered promiscuous mode [ 293.068801][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.134986][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.311975][ T7669] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.376666][ T7669] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.533561][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.533701][ T7669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.569634][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.588641][ T7669] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.751745][ T7669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.768275][ T7669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.760893][ T29] audit: type=1400 audit(1785768646.956:380): avc: denied { write } for pid=10172 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=phonet_socket permissive=1 [ 294.853808][T10180] 8021q: VLANs not supported on lo [ 295.173774][ T5814] ------------[ cut here ]------------ [ 295.179304][ T5814] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 295.179323][ T5814] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#1: kworker/1:6/5814 [ 295.198396][ T5814] Modules linked in: [ 295.202793][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 295.212436][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.223424][ T5814] Workqueue: ceph-msgr ceph_con_workfn [ 295.228954][ T5814] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 295.236270][ T5814] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 295.256766][ T5814] RSP: 0018:ffffc90004a57a08 EFLAGS: 00010293 [ 295.262951][ T5814] RAX: 0000000000000000 RBX: ffff8880659e088b RCX: ffffffff8b7fbff0 [ 295.270976][ T5814] RDX: ffff8880301eca80 RSI: ffffffff8b7fda6c RDI: ffff8880301eca80 [ 295.279484][ T5814] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 295.287570][ T5814] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 295.295660][ T5814] R13: ffff8880659e0950 R14: ffff8880659e0418 R15: dffffc0000000000 [ 295.304459][ T5814] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 295.314293][ T5814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.320911][ T5814] CR2: 000000110c309a9a CR3: 0000000047d92000 CR4: 00000000003526f0 [ 295.328941][ T5814] Call Trace: [ 295.332254][ T5814] [ 295.336179][ T5814] ? ceph_con_workfn+0x48/0x13e0 [ 295.341127][ T5814] ? register_lock_class+0x40/0x560 [ 295.347088][ T5814] ? do_raw_spin_lock+0x128/0x260 [ 295.352167][ T5814] ? __pfx___mutex_lock+0x10/0x10 [ 295.357201][ T5814] ? __lock_acquire+0x49f/0x1a40 [ 295.362198][ T5814] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 295.367929][ T5814] ? debug_object_deactivate+0x2e4/0x3b0 [ 295.373859][ T5814] ceph_con_workfn+0x9a5/0x13e0 [ 295.378729][ T5814] process_one_work+0xa23/0x1940 [ 295.384404][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 295.389814][ T5814] ? __pfx_ceph_con_workfn+0x10/0x10 [ 295.395232][ T5814] worker_thread+0x5ef/0xe50 [ 295.399862][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 295.405107][ T5814] ? kthread+0x13a/0x450 [ 295.409372][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 295.414548][ T5814] kthread+0x370/0x450 [ 295.418620][ T5814] ? __pfx_kthread+0x10/0x10 [ 295.423294][ T5814] ret_from_fork+0x72b/0xd50 [ 295.427909][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 295.433117][ T5814] ? __switch_to+0x800/0x10f0 [ 295.438851][ T5814] ? __pfx_kthread+0x10/0x10 [ 295.444240][ T5814] ret_from_fork_asm+0x1a/0x30 [ 295.449069][ T5814] [ 295.452194][ T5814] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.459478][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 295.468851][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 295.478904][ T5814] Workqueue: ceph-msgr ceph_con_workfn [ 295.484375][ T5814] Call Trace: [ 295.487647][ T5814] [ 295.490568][ T5814] dump_stack_lvl+0x100/0x190 [ 295.495252][ T5814] vpanic+0x552/0x970 [ 295.499231][ T5814] ? __pfx_vpanic+0x10/0x10 [ 295.503741][ T5814] panic+0xd1/0xe0 [ 295.507453][ T5814] ? __pfx_panic+0x10/0x10 [ 295.511869][ T5814] ? check_panic_on_warn+0x1f/0x90 [ 295.516980][ T5814] check_panic_on_warn.cold+0x19/0x34 [ 295.522353][ T5814] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 295.527903][ T5814] __warn.cold+0x191/0x318 [ 295.532322][ T5814] __report_bug+0x30f/0x440 [ 295.536824][ T5814] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 295.542375][ T5814] ? __pfx___report_bug+0x10/0x10 [ 295.547408][ T5814] ? __pfx_tcp_recvmsg+0x10/0x10 [ 295.552347][ T5814] ? inet_recvmsg+0xdc/0x4c0 [ 295.556933][ T5814] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 295.562222][ T5814] ? rcu_is_watching+0x12/0xc0 [ 295.566991][ T5814] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 295.572552][ T5814] report_bug+0xb2/0x220 [ 295.576815][ T5814] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 295.582378][ T5814] handle_bug+0x16a/0x2a0 [ 295.586745][ T5814] exc_invalid_op+0x17/0x50 [ 295.591276][ T5814] asm_exc_invalid_op+0x1a/0x20 [ 295.596149][ T5814] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 295.602327][ T5814] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 295.621935][ T5814] RSP: 0018:ffffc90004a57a08 EFLAGS: 00010293 [ 295.628006][ T5814] RAX: 0000000000000000 RBX: ffff8880659e088b RCX: ffffffff8b7fbff0 [ 295.635966][ T5814] RDX: ffff8880301eca80 RSI: ffffffff8b7fda6c RDI: ffff8880301eca80 [ 295.643926][ T5814] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 295.651886][ T5814] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 295.659852][ T5814] R13: ffff8880659e0950 R14: ffff8880659e0418 R15: dffffc0000000000 [ 295.667828][ T5814] ? ceph_con_v1_try_read+0x2a00/0x6ca0 [ 295.673385][ T5814] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 295.678933][ T5814] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 295.684482][ T5814] ? ceph_con_workfn+0x48/0x13e0 [ 295.689429][ T5814] ? register_lock_class+0x40/0x560 [ 295.694643][ T5814] ? do_raw_spin_lock+0x128/0x260 [ 295.699676][ T5814] ? __pfx___mutex_lock+0x10/0x10 [ 295.704696][ T5814] ? __lock_acquire+0x49f/0x1a40 [ 295.709624][ T5814] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 295.715352][ T5814] ? debug_object_deactivate+0x2e4/0x3b0 [ 295.721011][ T5814] ceph_con_workfn+0x9a5/0x13e0 [ 295.725860][ T5814] process_one_work+0xa23/0x1940 [ 295.730800][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 295.736171][ T5814] ? __pfx_ceph_con_workfn+0x10/0x10 [ 295.741464][ T5814] worker_thread+0x5ef/0xe50 [ 295.746077][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 295.751193][ T5814] ? kthread+0x13a/0x450 [ 295.755423][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 295.760528][ T5814] kthread+0x370/0x450 [ 295.764590][ T5814] ? __pfx_kthread+0x10/0x10 [ 295.769180][ T5814] ret_from_fork+0x72b/0xd50 [ 295.773765][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 295.778870][ T5814] ? __switch_to+0x800/0x10f0 [ 295.783533][ T5814] ? __pfx_kthread+0x10/0x10 [ 295.788111][ T5814] ret_from_fork_asm+0x1a/0x30 [ 295.792883][ T5814] [ 295.796150][ T5814] Kernel Offset: disabled [ 295.800459][ T5814] Rebooting in 86400 seconds..