last executing test programs: 1.284230855s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='udp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n\x00', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x8008, @loopback}, 0x10) sendto(r2, &(0x7f0000000200)='12345678\x00', 0x8, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.045726188s ago: executing program 3 (id=4): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) 976.471735ms ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) 953.241812ms ago: executing program 2 (id=3): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/ \x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AQBv/K1eAAAAABAA\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 871.011847ms ago: executing program 3 (id=5): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x2}}) syz_emit_ethernet(0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000210011223344550012424203000101050100"/32], 0x0) 870.391101ms ago: executing program 3 (id=6): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x7, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 751.622672ms ago: executing program 0 (id=7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="001f000000000000"], 0x8) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 744.512506ms ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r0, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect(r1, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 740.140764ms ago: executing program 0 (id=9): unshare(0x40000000) r0 = socket$rds(0x15, 0x5, 0x0) close(r0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 621.0728ms ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='1\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 241.12965ms ago: executing program 1 (id=11): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 5.36789ms ago: executing program 3 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00\x00\x00', 0xb) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) close(r2) close(r0) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 0s ago: executing program 2 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x48, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) shutdown(r4, 0x2) close(r4) close(r5) close(r3) kernel console output (not intermixed with test programs): [ 38.032694][ T42] audit: type=1400 audit(1785136373.942:119): avc: denied { rlimitinh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.044205][ T42] audit: type=1400 audit(1785136373.942:120): avc: denied { siginh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:6259' (ED25519) to the list of known hosts. [ 41.867290][ T5712] cgroup: Unknown subsys name 'net' [ 42.032129][ T5712] cgroup: Unknown subsys name 'cpuset' [ 42.036065][ T5712] cgroup: Unknown subsys name 'rlimit' [ 42.239730][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 42.239741][ T42] audit: type=1400 audit(1785136378.172:144): avc: denied { setattr } for pid=5712 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.248532][ T42] audit: type=1400 audit(1785136378.172:145): avc: denied { create } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.254969][ T42] audit: type=1400 audit(1785136378.182:146): avc: denied { write } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.262868][ T42] audit: type=1400 audit(1785136378.182:147): avc: denied { read } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.269722][ T42] audit: type=1400 audit(1785136378.182:148): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.279674][ T42] audit: type=1400 audit(1785136378.182:149): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.287290][ T42] audit: type=1400 audit(1785136378.202:150): avc: denied { read } for pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.293566][ T42] audit: type=1400 audit(1785136378.202:151): avc: denied { read } for pid=5449 comm="dhcpcd" name="n31" dev="tmpfs" ino=1893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.300116][ T42] audit: type=1400 audit(1785136378.202:152): avc: denied { open } for pid=5449 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.303777][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.306781][ T42] audit: type=1400 audit(1785136378.202:153): avc: denied { getattr } for pid=5449 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1893 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.223352][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.876474][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.877178][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.878991][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.883087][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.885353][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.887117][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.887826][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.888793][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.889427][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.893382][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.893712][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.894510][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.895257][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.895907][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.896220][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.897885][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.900404][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.901609][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.909585][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.910661][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.489461][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.492439][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.494610][ T5738] bridge_slave_0: entered allmulticast mode [ 47.497088][ T5738] bridge_slave_0: entered promiscuous mode [ 47.501174][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.503345][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.505655][ T5738] bridge_slave_1: entered allmulticast mode [ 47.508310][ T5738] bridge_slave_1: entered promiscuous mode [ 47.536209][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.538513][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.540703][ T5736] bridge_slave_0: entered allmulticast mode [ 47.543256][ T5736] bridge_slave_0: entered promiscuous mode [ 47.554020][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.556263][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.558773][ T5739] bridge_slave_0: entered allmulticast mode [ 47.561444][ T5739] bridge_slave_0: entered promiscuous mode [ 47.581437][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.584177][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.586412][ T5736] bridge_slave_1: entered allmulticast mode [ 47.589224][ T5736] bridge_slave_1: entered promiscuous mode [ 47.597993][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.600257][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.602479][ T5739] bridge_slave_1: entered allmulticast mode [ 47.605014][ T5739] bridge_slave_1: entered promiscuous mode [ 47.613847][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.616578][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.618933][ T5737] bridge_slave_0: entered allmulticast mode [ 47.621960][ T5737] bridge_slave_0: entered promiscuous mode [ 47.637003][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.641426][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.644361][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.646613][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.649016][ T5737] bridge_slave_1: entered allmulticast mode [ 47.651747][ T5737] bridge_slave_1: entered promiscuous mode [ 47.661217][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.666061][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.677865][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.703100][ T5738] team0: Port device team_slave_0 added [ 47.707212][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.713074][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.724058][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.728274][ T5738] team0: Port device team_slave_1 added [ 47.743181][ T5736] team0: Port device team_slave_0 added [ 47.768656][ T5736] team0: Port device team_slave_1 added [ 47.799695][ T5737] team0: Port device team_slave_0 added [ 47.803163][ T5739] team0: Port device team_slave_0 added [ 47.816757][ T5739] team0: Port device team_slave_1 added [ 47.819350][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.821777][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.829573][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.835378][ T5737] team0: Port device team_slave_1 added [ 47.838260][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.840462][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.848678][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.858133][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.860330][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.868344][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.883167][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.885829][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.895757][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.932442][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.934480][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.941815][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.946295][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.948734][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.956045][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.960005][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.962865][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.972549][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.976916][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.979284][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.986969][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.023521][ T5736] hsr_slave_0: entered promiscuous mode [ 48.025790][ T5736] hsr_slave_1: entered promiscuous mode [ 48.033572][ T5738] hsr_slave_0: entered promiscuous mode [ 48.036434][ T5738] hsr_slave_1: entered promiscuous mode [ 48.040262][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.042909][ T5738] Cannot create hsr debugfs directory [ 48.084224][ T5737] hsr_slave_0: entered promiscuous mode [ 48.086740][ T5737] hsr_slave_1: entered promiscuous mode [ 48.089027][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.090879][ T5737] Cannot create hsr debugfs directory [ 48.095246][ T5739] hsr_slave_0: entered promiscuous mode [ 48.097482][ T5739] hsr_slave_1: entered promiscuous mode [ 48.099505][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.101297][ T5739] Cannot create hsr debugfs directory [ 48.423304][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.431585][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.434326][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.438952][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.442220][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.446210][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.448968][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.452909][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.515340][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.521398][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.528213][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.532474][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.535767][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.541597][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.555224][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.559508][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.598511][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.602599][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.606485][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.610448][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.615887][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.621227][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.630772][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.634908][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.699623][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.707233][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.714002][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.723362][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.730739][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.737114][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.743019][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.746413][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.753138][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.767012][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.794799][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.797239][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.809864][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.812110][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.840884][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.879701][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.891295][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.893567][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.907111][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.913716][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.915994][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.938508][ T5097] Bluetooth: hci3: command tx timeout [ 48.938693][ T5750] Bluetooth: hci1: command tx timeout [ 48.939491][ T5747] Bluetooth: hci2: command tx timeout [ 48.941448][ T5751] Bluetooth: hci0: command tx timeout [ 48.949708][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.957602][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.962331][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.964523][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.978763][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.981034][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.006693][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.018795][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.021902][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.036559][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.038881][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.210873][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.242341][ T5738] veth0_vlan: entered promiscuous mode [ 49.249058][ T5738] veth1_vlan: entered promiscuous mode [ 49.266450][ T5738] veth0_macvtap: entered promiscuous mode [ 49.274555][ T5738] veth1_macvtap: entered promiscuous mode [ 49.283153][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.290643][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.295821][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.312977][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.316058][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.324331][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.330276][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.332834][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.364587][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.375766][ T5737] veth0_vlan: entered promiscuous mode [ 49.389042][ T5737] veth1_vlan: entered promiscuous mode [ 49.402033][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.407300][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.422344][ T5736] veth0_vlan: entered promiscuous mode [ 49.433635][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.436377][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.439416][ T5739] veth0_vlan: entered promiscuous mode [ 49.441506][ T5736] veth1_vlan: entered promiscuous mode [ 49.452029][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 49.452039][ T42] audit: type=1400 audit(1785136385.382:171): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.463265][ T42] audit: type=1400 audit(1785136385.382:172): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/syzkaller.CDRPOk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.463491][ T5739] veth1_vlan: entered promiscuous mode [ 49.470809][ T42] audit: type=1400 audit(1785136385.382:173): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.478593][ T5737] veth0_macvtap: entered promiscuous mode [ 49.479940][ T42] audit: type=1400 audit(1785136385.382:174): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/syzkaller.CDRPOk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.483608][ T5737] veth1_macvtap: entered promiscuous mode [ 49.490830][ T42] audit: type=1400 audit(1785136385.382:175): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/syzkaller.CDRPOk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.499112][ T42] audit: type=1400 audit(1785136385.382:176): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.502527][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.505059][ T42] audit: type=1400 audit(1785136385.392:177): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.512871][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.516542][ T42] audit: type=1400 audit(1785136385.392:178): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="gadgetfs" ino=8054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.525199][ T5736] veth0_macvtap: entered promiscuous mode [ 49.526739][ T42] audit: type=1400 audit(1785136385.392:179): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.535540][ T42] audit: type=1400 audit(1785136385.392:180): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.537022][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.548736][ T5736] veth1_macvtap: entered promiscuous mode [ 49.559309][ T5739] veth0_macvtap: entered promiscuous mode [ 49.562985][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.565494][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.573438][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.576740][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.582067][ T5739] veth1_macvtap: entered promiscuous mode [ 49.603345][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.614205][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.619820][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.624984][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.643872][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.660345][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.662385][ T5889] svc: failed to register lockdv1 RPC service (errno 111). [ 49.663847][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.665839][ T5889] lockd_up: makesock failed, error=-111 [ 49.681462][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.684263][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.688922][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.691111][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.692210][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.694214][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.705357][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.727658][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.734111][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.766662][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.770127][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.787604][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.792735][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.813329][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.817038][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.824845][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.828195][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.951288][ T5890] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 49.988019][ T5889] svc: failed to register nfsdv3 RPC service (errno 111). [ 49.993524][ T5889] svc: failed to register nfsaclv3 RPC service (errno 111). [ 49.996581][ T5889] failed to unregister udp with rpcbind [ 49.999323][ T5889] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.001766][ T5889] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.004055][ T5889] failed to unregister udp with rpcbind [ 50.205762][ T5915] svc: failed to register lockdv1 RPC service (errno 111). [ 50.209883][ T5890] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 50.501699][ T5915] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.505499][ T5915] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.509177][ T5915] failed to unregister tcp with rpcbind [ 50.511991][ T5915] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.514930][ T5915] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.518238][ T5915] failed to unregister tcp with rpcbind [ 50.729727][ T5890] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 50.775724][ T5901] ceph: No mds server is up or the cluster is laggy [ 50.847256][ T5926] lo speed is unknown, defaulting to 1000 [ 50.847750][ T5833] ------------[ cut here ]------------ [ 50.851372][ T5926] lo speed is unknown, defaulting to 1000 [ 50.851929][ T5833] !iov_iter_count(&con->v2.in_iter) [ 50.854302][ T5833] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x1727/0x4780, CPU#3: kworker/3:4/5833 [ 50.855400][ T5926] lo speed is unknown, defaulting to 1000 [ 50.856305][ T5833] Modules linked in: [ 50.863948][ T5833] CPU: 3 UID: 0 PID: 5833 Comm: kworker/3:4 Not tainted syzkaller #0 PREEMPT(full) [ 50.866889][ T5833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.870277][ T5833] Workqueue: ceph-msgr ceph_con_workfn [ 50.872005][ T5833] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 50.873951][ T5833] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 50.880162][ T5833] RSP: 0018:ffffc90003ccf978 EFLAGS: 00010293 [ 50.882049][ T5833] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 50.884518][ T5833] RDX: ffff88802b960000 RSI: ffffffff8b8189a6 RDI: ffff88802b960000 [ 50.886994][ T5833] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 50.889662][ T5833] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000799f3e [ 50.892149][ T5833] R13: ffffc90003ccfab0 R14: ffff88805aa38698 R15: ffff88805aa38418 [ 50.894610][ T5833] FS: 0000000000000000(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 50.895695][ T5928] smc: net device lo applied user defined pnetid SYZ0 [ 50.897347][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.897358][ T5833] CR2: 000000110c3ca7df CR3: 000000005a966000 CR4: 0000000000352ef0 [ 50.897366][ T5833] Call Trace: [ 50.897384][ T5833] [ 50.897392][ T5833] ? lock_acquire+0x1b9/0x370 [ 50.897410][ T5833] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 50.910235][ T5833] ? rcu_is_watching+0x12/0xc0 [ 50.911786][ T5833] ? trace_contention_end+0x126/0x160 [ 50.913485][ T5833] ? __mutex_lock+0x26d/0x1bd0 [ 50.915001][ T5833] ? ceph_con_workfn+0x48/0x13e0 [ 50.916556][ T5833] ? register_lock_class+0x40/0x560 [ 50.918504][ T5833] ? do_raw_spin_lock+0x128/0x260 [ 50.920129][ T5833] ? do_raw_spin_unlock+0x145/0x1e0 [ 50.921742][ T5833] ? debug_object_deactivate+0x2e4/0x3b0 [ 50.923510][ T5833] ceph_con_workfn+0x360/0x13e0 [ 50.925028][ T5833] process_one_work+0xa23/0x1940 [ 50.926585][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 50.928603][ T5833] ? __pfx_ceph_con_workfn+0x10/0x10 [ 50.930284][ T5833] worker_thread+0x5ef/0xe50 [ 50.931746][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 50.933352][ T5833] ? kthread+0x13a/0x450 [ 50.934688][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 50.936274][ T5833] kthread+0x370/0x450 [ 50.939237][ T5833] ? __pfx_kthread+0x10/0x10 [ 50.940733][ T5833] ret_from_fork+0x72b/0xd50 [ 50.942282][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 50.943901][ T5833] ? __switch_to+0x800/0x10f0 [ 50.945378][ T5833] ? __pfx_kthread+0x10/0x10 [ 50.946806][ T5833] ret_from_fork_asm+0x1a/0x30 [ 50.948417][ T5833] [ 50.949420][ T5833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.951853][ T5833] CPU: 3 UID: 0 PID: 5833 Comm: kworker/3:4 Not tainted syzkaller #0 PREEMPT(full) [ 50.955250][ T5833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.958906][ T5833] Workqueue: ceph-msgr ceph_con_workfn [ 50.960834][ T5833] Call Trace: [ 50.962111][ T5833] [ 50.963268][ T5833] dump_stack_lvl+0x100/0x190 [ 50.965029][ T5833] vpanic+0x552/0x970 [ 50.966594][ T5833] ? __pfx_vpanic+0x10/0x10 [ 50.968348][ T5833] panic+0xd1/0xe0 [ 50.969841][ T5833] ? __pfx_panic+0x10/0x10 [ 50.971586][ T5833] ? check_panic_on_warn+0x1f/0x90 [ 50.973580][ T5833] check_panic_on_warn.cold+0x19/0x34 [ 50.975672][ T5833] ? ceph_con_v2_try_read+0x1727/0x4780 [ 50.977805][ T5833] __warn.cold+0x191/0x318 [ 50.979554][ T5833] __report_bug+0x30f/0x440 [ 50.981295][ T5833] ? ceph_con_v2_try_read+0x1727/0x4780 [ 50.983452][ T5833] ? __pfx___report_bug+0x10/0x10 [ 50.985387][ T5833] ? __local_bh_enable_ip+0x9e/0x120 [ 50.987438][ T5833] ? lockdep_hardirqs_on+0x78/0x100 [ 50.989437][ T5833] ? tcp_recvmsg+0x14c/0x630 [ 50.991253][ T5833] ? __local_bh_enable_ip+0x9e/0x120 [ 50.993298][ T5833] ? tcp_recvmsg+0x1f8/0x630 [ 50.995080][ T5833] ? ceph_con_v2_try_read+0x1727/0x4780 [ 50.997214][ T5833] report_bug+0xb2/0x220 [ 50.998861][ T5833] ? ceph_con_v2_try_read+0x1727/0x4780 [ 51.000987][ T5833] handle_bug+0x16a/0x2a0 [ 51.002666][ T5833] exc_invalid_op+0x17/0x50 [ 51.004417][ T5833] asm_exc_invalid_op+0x1a/0x20 [ 51.006282][ T5833] RIP: 0010:ceph_con_v2_try_read+0x1727/0x4780 [ 51.008656][ T5833] Code: 08 0f 85 4d 2d 00 00 48 81 c4 38 02 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c4 c7 3c 00 4c 8b 64 24 28 e8 9a d6 88 f6 90 <0f> 0b 90 bb c3 ff ff ff e8 8c d6 88 f6 49 8d 7f 30 48 b8 00 00 00 [ 51.015953][ T5833] RSP: 0018:ffffc90003ccf978 EFLAGS: 00010293 [ 51.018297][ T5833] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b818191 [ 51.021303][ T5833] RDX: ffff88802b960000 RSI: ffffffff8b8189a6 RDI: ffff88802b960000 [ 51.024374][ T5833] RBP: 0000000000000010 R08: 0000000000000007 R09: 0000000000000000 [ 51.027381][ T5833] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000799f3e [ 51.030379][ T5833] R13: ffffc90003ccfab0 R14: ffff88805aa38698 R15: ffff88805aa38418 [ 51.033385][ T5833] ? ceph_con_v2_try_read+0xf11/0x4780 [ 51.035478][ T5833] ? ceph_con_v2_try_read+0x1726/0x4780 [ 51.037610][ T5833] ? ceph_con_v2_try_read+0x1726/0x4780 [ 51.039745][ T5833] ? lock_acquire+0x1b9/0x370 [ 51.041563][ T5833] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 51.043740][ T5833] ? rcu_is_watching+0x12/0xc0 [ 51.045301][ T5833] ? trace_contention_end+0x126/0x160 [ 51.046952][ T5833] ? __mutex_lock+0x26d/0x1bd0 [ 51.048449][ T5833] ? ceph_con_workfn+0x48/0x13e0 [ 51.050075][ T5833] ? register_lock_class+0x40/0x560 [ 51.051706][ T5833] ? do_raw_spin_lock+0x128/0x260 [ 51.053306][ T5833] ? do_raw_spin_unlock+0x145/0x1e0 [ 51.054958][ T5833] ? debug_object_deactivate+0x2e4/0x3b0 [ 51.056700][ T5833] ceph_con_workfn+0x360/0x13e0 [ 51.058224][ T5833] process_one_work+0xa23/0x1940 [ 51.059770][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 51.061442][ T5833] ? __pfx_ceph_con_workfn+0x10/0x10 [ 51.063087][ T5833] worker_thread+0x5ef/0xe50 [ 51.064547][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 51.066164][ T5833] ? kthread+0x13a/0x450 [ 51.067502][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 51.069089][ T5833] kthread+0x370/0x450 [ 51.070407][ T5833] ? __pfx_kthread+0x10/0x10 [ 51.071854][ T5833] ret_from_fork+0x72b/0xd50 [ 51.073324][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 51.074929][ T5833] ? __switch_to+0x800/0x10f0 [ 51.076400][ T5833] ? __pfx_kthread+0x10/0x10 [ 51.077841][ T5833] ret_from_fork_asm+0x1a/0x30 [ 51.079396][ T5833] [ 51.080961][ T5833] Kernel Offset: disabled [ 51.082326][ T5833] Rebooting in 86400 seconds..