last executing test programs: 1.939431903s ago: executing program 2 (id=34): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x1, 0x1}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect(r1, &(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000000200)="12345678", 0x8, 0x0, 0x0, 0x0) 1.939199348s ago: executing program 2 (id=35): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@remote, 0x2000, 0x0, 0x2000, 0x0, 0x2, 0x20, 0x20}}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in=@remote}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [], @ipv4=@empty}, {@ipv4=@empty, [], @ipv4=@empty}, {@ipv4=@empty, [], @ipv4=@empty}, {@ipv4=@empty, [], @ipv4=@empty}], 0x2, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x200) sendto$inet(r0, &(0x7f0000000100)="4500001c00000000401100000c0000010c000001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x50, @loopback}, 0x10) 1.880308103s ago: executing program 2 (id=37): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x12}, 0x10) listen(r0, 0xa) syz_emit_ethernet(0x11, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x20, 'o'}}}}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r1 = accept4$llc(r0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x12, &(0x7f0000000400)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x21, "0101"}}}}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) recvfrom$llc(r1, &(0x7f0000000500), 0x100, 0x1, 0x0, 0x0) getsockopt$llc_int(r1, 0x1a, 0x1, &(0x7f0000000600), &(0x7f0000000700)=0x4) 1.729890981s ago: executing program 0 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x1234, @private=0xa010102}, 0x10) getsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) sendto$inet(r2, &(0x7f0000000300)="00112233", 0x4, 0x0, 0x0, 0x0) (async) 1.650462523s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10 1\n\x00', 0x5) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01020000000000000000050000000900030073797a30000000000900010073797a300000000008000a4000000002200000048000000002000100000000000900010065746830000000006c000000060a01040000000000000000050000000900010073797a30000000000900030073797a300000000040000004800018000007800c000100696d6d656469617465001c0002800800024000000001100001800800014000000001080002400100000018000000078008000100647570000800028008000140000000011800000007800800010064757000080002800800014000000001140000001000010000000000000000000001000a"], 0x110}}, 0x0) 1.479332585s ago: executing program 1 (id=47): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7117}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7217}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7317}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7417}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7517}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7617}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7717}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7817}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7917}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7a17}]}}}]}, 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='10 1 1\x00', 0x7) close(r1) sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@dellink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 1.049318834s ago: executing program 2 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000010), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0x0, 0x0}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000010), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xfff1}, {0x1, 0x300}}, [@filter_kind_options=@f_matchall={{0x0, 0x0}, {0x0, 0x0, [@TCA_MATCHALL_ACT={0x0, 0x0, [@m_mpls={0x0, 0x0, 0x0, 0x0, {{0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, [@TCA_MPLS_PARMS={0x0, 0x0, {{}, 0x3}}, @TCA_MPLS_LABEL={0x0, 0x0, 0x64}]}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}}}]}]}}]}, 0x90}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0011223344558847000641404500001400000000400100000a0000010a000002"], 0x26) 929.008201ms ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000a0)='inet 2049\n\x00', 0x10) 880.450555ms ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0 1\n', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0x48}}, 0x0) 880.177026ms ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='10 1\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)='10\x00', 0x3) 880.044094ms ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='0 1\n\x00', 0x4) nanosleep(&(0x7f0000000140)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0}}}, 0x48}}, 0x0) 808.872544ms ago: executing program 1 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x74, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x384}]}, 0x74}}, 0x0) 805.551947ms ago: executing program 1 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_newaddr={0x1c, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1}}, 0x20}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000600), 0x10) listen(r2, 0x5) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000700)=0x1, 0x4) connect$phonet_pipe(r3, &(0x7f0000000800), 0x10) sendto$phonet(r3, &(0x7f0000000900)='\x00', 0x1, 0x80, 0x0, 0x0) 700.499617ms ago: executing program 0 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}}, 0x0) 639.865383ms ago: executing program 0 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 639.640643ms ago: executing program 0 (id=69): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@flushsa={0x14, 0x12, 0x1, 0x0, 0x0, {0x6c}}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x0) close(r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 579.985517ms ago: executing program 1 (id=70): r0 = syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff004040b906614000000102030109023f0002010080320904000000ff0000000904000100ff0000000904010000ff0000000904010102ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x1, &(0x7f0000000080)="010000000100000001000000e8030000e8030000000200000100000001000000e8030000e80300000002000000000000", 0x2c) connect(r1, &(0x7f0000000140)=@generic={0x8}, 0x10) syz_usb_ep_write(r0, 0x81, 0x30, &(0x7f00000001c0)="0000000100"/50) 309.977375ms ago: executing program 3 (id=72): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x1, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x8}]}, 0x28}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x1d4, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0x74, 0xbc, 0x0, {}, [@common=@inet=@set3={{0x48}, {{0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x20, 0x40}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x20, 0x40}, @common=@unspec=@STANDARD={0x20, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x20, 0x40}, {0x20}}}}, 0x1d4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r2, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000600)=@in={0x2, 0x1234, @loopback}, 0x10) 309.851648ms ago: executing program 3 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040), 0x0) 249.593134ms ago: executing program 3 (id=74): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x0, 0x0, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x34ff, 0x2, 0x1}, [@algo_crypt={0x0, 0x2, {{'cbc(aes)\x00'}, 0x80, '\x00'/16}}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0x0, 0x0, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x0, 0x5, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x34ff, 0x1}]}]}}}, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000800)=0x200, 0x4) sendto(r1, &(0x7f0000000700)='\x00', 0x1000, 0x0, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) 249.328659ms ago: executing program 3 (id=75): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r1, &(0x7f0000000300)="000000010000000400000001000000010000000101010001000000010000000000000000", 0x24, 0x0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) sendto$inet(r1, &(0x7f0000000400)="00000001000000040000000000000000000000020701000100000001", 0x1c, 0x0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) sendto$inet(r1, &(0x7f0000000500)="00000001000000040000000000000000000000030701000100000001", 0x1c, 0x0, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 431.207µs ago: executing program 0 (id=76): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0a, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6666:/path\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='mon_addr\x00', &(0x7f0000000500)='127.0.0.1:6666\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)="636570682076303237000000000000000002001a0a7f0000010000000000000000000000000000000002001a0a7f00000100"/61, 0x41) read(r2, &(0x7f0000000900), 0x1d) write(r2, &(0x7f0000000a00)="0100"/25, 0x19) write(r2, &(0x7f0000000b00)="040000000000000000000000000000000000000000000000040000000000000000000000120000005d9e5b7201000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002001a0a7f00000100000000000000005d9e5b72", 0x55) write(r2, &(0x7f0000000c00)="2900000000000000000000000000000000000000000000002900000000000000000000002000000001000000010000000100"/76, 0x50) 182.083µs ago: executing program 3 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, '\x00'/24}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) 0s ago: executing program 3 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006a0)={&(0x7f00000007a0)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r4, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="14000200200100000000000000000000000000020800080020000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) kernel console output (not intermixed with test programs): [ 37.815006][ T42] audit: type=1400 audit(1785768759.326:115): avc: denied { siginh } for pid=5645 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.329403][ T42] audit: type=1400 audit(1785768760.866:116): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.405300][ T42] audit: type=1400 audit(1785768760.946:117): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.463194][ T42] audit: type=1400 audit(1785768760.996:118): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:32646' (ED25519) to the list of known hosts. [ 39.513827][ T42] audit: type=1400 audit(1785768761.046:119): avc: denied { write } for pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.530154][ T42] audit: type=1400 audit(1785768761.066:120): avc: denied { name_bind } for pid=5662 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.732179][ T5664] cgroup: Unknown subsys name 'net' [ 41.876320][ T5664] cgroup: Unknown subsys name 'cpuset' [ 41.880681][ T5664] cgroup: Unknown subsys name 'rlimit' [ 42.073765][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.789399][ T5664] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.120330][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 46.120347][ T42] audit: type=1400 audit(1785768767.656:161): avc: denied { execmem } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.327038][ T42] audit: type=1400 audit(1785768767.866:162): avc: denied { create } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.333399][ T42] audit: type=1400 audit(1785768767.866:163): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.340889][ T42] audit: type=1400 audit(1785768767.866:164): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.348456][ T42] audit: type=1400 audit(1785768767.876:165): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="socket:[3968]" dev="sockfs" ino=3968 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.362226][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.368142][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.372100][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.373665][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.375833][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.376019][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.376546][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.377017][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.377822][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.378680][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.379035][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.380460][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.383309][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.385013][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.388148][ T42] audit: type=1400 audit(1785768767.926:166): avc: denied { read } for pid=5751 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.388176][ T42] audit: type=1400 audit(1785768767.926:167): avc: denied { open } for pid=5751 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.388198][ T42] audit: type=1400 audit(1785768767.926:168): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.388287][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.389898][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.391074][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.391835][ T42] audit: type=1400 audit(1785768767.926:169): avc: denied { module_request } for pid=5751 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.392968][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.394439][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.412054][ T42] audit: type=1400 audit(1785768767.946:170): avc: denied { sys_module } for pid=5751 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.414816][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.934315][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.937373][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.939725][ T5751] bridge_slave_0: entered allmulticast mode [ 46.942466][ T5751] bridge_slave_0: entered promiscuous mode [ 46.946923][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.949259][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.951560][ T5751] bridge_slave_1: entered allmulticast mode [ 46.954518][ T5751] bridge_slave_1: entered promiscuous mode [ 46.986178][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.988533][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.990866][ T5739] bridge_slave_0: entered allmulticast mode [ 46.993558][ T5739] bridge_slave_0: entered promiscuous mode [ 46.997280][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.999619][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.001870][ T5739] bridge_slave_1: entered allmulticast mode [ 47.004581][ T5739] bridge_slave_1: entered promiscuous mode [ 47.054925][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.078658][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.084887][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.089374][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.092505][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.095184][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.097527][ T5740] bridge_slave_0: entered allmulticast mode [ 47.100083][ T5740] bridge_slave_0: entered promiscuous mode [ 47.103478][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.106005][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.108332][ T5740] bridge_slave_1: entered allmulticast mode [ 47.111027][ T5740] bridge_slave_1: entered promiscuous mode [ 47.113870][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.116112][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.118429][ T5741] bridge_slave_0: entered allmulticast mode [ 47.121072][ T5741] bridge_slave_0: entered promiscuous mode [ 47.149194][ T5739] team0: Port device team_slave_0 added [ 47.151098][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.153232][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.155711][ T5741] bridge_slave_1: entered allmulticast mode [ 47.158960][ T5741] bridge_slave_1: entered promiscuous mode [ 47.174582][ T5739] team0: Port device team_slave_1 added [ 47.193621][ T5751] team0: Port device team_slave_0 added [ 47.196702][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.205959][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.209433][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.211616][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.219674][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.225470][ T5751] team0: Port device team_slave_1 added [ 47.228686][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.239062][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.242177][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.244620][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.252863][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.290905][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.293640][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.303541][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.309572][ T5740] team0: Port device team_slave_0 added [ 47.322333][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.325350][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.336149][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.342313][ T5740] team0: Port device team_slave_1 added [ 47.345759][ T5741] team0: Port device team_slave_0 added [ 47.356441][ T5741] team0: Port device team_slave_1 added [ 47.400463][ T5739] hsr_slave_0: entered promiscuous mode [ 47.402959][ T5739] hsr_slave_1: entered promiscuous mode [ 47.413021][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.416136][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.426626][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.432209][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.434634][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.442581][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.455884][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.458112][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.466299][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.493435][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.495878][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.503944][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.512254][ T5751] hsr_slave_0: entered promiscuous mode [ 47.514927][ T5751] hsr_slave_1: entered promiscuous mode [ 47.517069][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 47.518967][ T5751] Cannot create hsr debugfs directory [ 47.544594][ T5740] hsr_slave_0: entered promiscuous mode [ 47.547342][ T5740] hsr_slave_1: entered promiscuous mode [ 47.549852][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 47.552070][ T5740] Cannot create hsr debugfs directory [ 47.634242][ T5741] hsr_slave_0: entered promiscuous mode [ 47.636944][ T5741] hsr_slave_1: entered promiscuous mode [ 47.639169][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.641034][ T5741] Cannot create hsr debugfs directory [ 47.828837][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.837263][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.853278][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.859892][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.894239][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.900208][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.919586][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.925588][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.968993][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.974124][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.976913][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.982502][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.995439][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.000654][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.003387][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.007442][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.052412][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.057386][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.061101][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.066757][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.070845][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.075997][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.078684][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.085053][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.164564][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.168640][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.171456][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.176640][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.180700][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.186521][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.190828][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.202410][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.209023][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.238195][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.251144][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.253598][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.269219][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.276390][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.278695][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.315180][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.320001][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.332634][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.334768][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.344151][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.351298][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.353631][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.361922][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.364192][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.382278][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.384537][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.412221][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.425243][ T5099] Bluetooth: hci0: command tx timeout [ 48.426677][ T5753] Bluetooth: hci2: command tx timeout [ 48.427704][ T5755] Bluetooth: hci3: command tx timeout [ 48.448798][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.465662][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.467961][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.485060][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.488094][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.505305][ T5753] Bluetooth: hci1: command tx timeout [ 48.647282][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.680980][ T5739] veth0_vlan: entered promiscuous mode [ 48.691507][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.695017][ T5739] veth1_vlan: entered promiscuous mode [ 48.727824][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.740582][ T5739] veth0_macvtap: entered promiscuous mode [ 48.752500][ T5739] veth1_macvtap: entered promiscuous mode [ 48.766314][ T5740] veth0_vlan: entered promiscuous mode [ 48.773650][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.780028][ T5740] veth1_vlan: entered promiscuous mode [ 48.791701][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.797399][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.819938][ T5751] veth0_vlan: entered promiscuous mode [ 48.861264][ T5751] veth1_vlan: entered promiscuous mode [ 48.893833][ T5741] veth0_vlan: entered promiscuous mode [ 48.896876][ T5740] veth0_macvtap: entered promiscuous mode [ 48.910601][ T5740] veth1_macvtap: entered promiscuous mode [ 48.917322][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.918609][ T5741] veth1_vlan: entered promiscuous mode [ 48.920908][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.934365][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.957061][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.967765][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.970873][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.974350][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.988027][ T5751] veth0_macvtap: entered promiscuous mode [ 48.999587][ T5751] veth1_macvtap: entered promiscuous mode [ 49.010811][ T5741] veth0_macvtap: entered promiscuous mode [ 49.022238][ T5741] veth1_macvtap: entered promiscuous mode [ 49.029891][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.048619][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.073198][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.102173][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.114634][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.126669][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.129845][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.169974][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.173025][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.204531][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.213456][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.236054][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.249957][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.252522][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.298289][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.300857][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.305438][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.308077][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.309261][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.310715][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.351579][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.361148][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.377575][ T5895] NFSD: Failed to start, no listeners configured. [ 49.384326][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.389836][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.404543][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.407856][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.444336][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.448251][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.465475][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.485051][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.487931][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.490789][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.510467][ T5910] lo speed is unknown, defaulting to 1000 [ 49.513643][ T5910] lo speed is unknown, defaulting to 1000 [ 49.516354][ T5910] lo speed is unknown, defaulting to 1000 [ 49.619807][ T5529] lo speed is unknown, defaulting to 1000 [ 49.620276][ T5910] infiniband syz0: set active [ 49.623374][ T5919] lo speed is unknown, defaulting to 1000 [ 49.625406][ T5910] infiniband syz0: added lo [ 49.635001][ T5910] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 49.640246][ T5910] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 49.646406][ T5910] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 49.663185][ T5910] RDS/IB: syz0: added [ 49.665088][ T5910] smc: adding ib device syz0 with port count 1 [ 49.667253][ T5910] smc: ib device syz0 port 1 has no pnetid [ 49.670124][ T41] lo speed is unknown, defaulting to 1000 [ 49.733431][ T5910] lo speed is unknown, defaulting to 1000 [ 49.871809][ T5917] svc: failed to register lockdv1 RPC service (errno 111). [ 49.875439][ T5917] lockd_up: makesock failed, error=-111 [ 49.903393][ T5910] lo speed is unknown, defaulting to 1000 [ 49.987223][ T5910] lo speed is unknown, defaulting to 1000 [ 50.066349][ T5910] lo speed is unknown, defaulting to 1000 [ 50.230434][ T5917] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.235653][ T5917] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.238061][ T5917] failed to unregister tcp with rpcbind [ 50.240931][ T5917] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.243231][ T5917] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.257058][ T5917] failed to unregister tcp with rpcbind [ 50.349672][ T5932] NFSD: Failed to start, no listeners configured. [ 50.504252][ T5753] Bluetooth: hci2: command tx timeout [ 50.504393][ T5755] Bluetooth: hci3: command tx timeout [ 50.509500][ T5099] Bluetooth: hci0: command tx timeout [ 50.532616][ T5953] lo speed is unknown, defaulting to 1000 [ 50.593833][ T5755] Bluetooth: hci1: command tx timeout [ 50.634206][ T5955] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 50.720120][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 50.921417][ T5978] Zero length message leads to an empty skb [ 50.924881][ T5978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.27'. [ 51.158102][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 51.158118][ T42] audit: type=1400 audit(1785768772.696:233): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.286314][ T42] audit: type=1400 audit(1785768772.826:234): avc: denied { create } for pid=6002 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.294721][ T42] audit: type=1400 audit(1785768772.826:235): avc: denied { bind } for pid=6002 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.300632][ T42] audit: type=1400 audit(1785768772.826:236): avc: denied { listen } for pid=6002 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.340196][ T6007] syz_tun: mtu less than device minimum [ 51.340929][ T42] audit: type=1400 audit(1785768772.876:237): avc: denied { accept } for pid=6002 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.563944][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.703011][ T6027] lo speed is unknown, defaulting to 1000 [ 51.781764][ T1044] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PAYLOAD) [ 51.782811][ T5980] ceph: No mds server is up or the cluster is laggy [ 51.884178][ T42] audit: type=1400 audit(1785768773.426:238): avc: denied { create } for pid=6032 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.969585][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 51.973903][ T42] audit: type=1400 audit(1785768773.516:239): avc: denied { bind } for pid=6038 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.979860][ T42] audit: type=1400 audit(1785768773.516:240): avc: denied { listen } for pid=6038 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.988135][ T42] audit: type=1400 audit(1785768773.516:241): avc: denied { setopt } for pid=6038 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.995622][ T42] audit: type=1400 audit(1785768773.516:242): avc: denied { connect } for pid=6038 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.019246][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 52.022454][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 52.026021][ T6041] tc_dump_action: action bad kind [ 52.157820][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 52.162860][ T6046] netlink: 108 bytes leftover after parsing attributes in process `syz.2.56'. [ 52.253583][ T6053] rdma_rxe: rxe_newlink: failed to add veth0 [ 52.366058][ T6059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.422290][ T6064] svc: failed to register lockdv1 RPC service (errno 111). [ 52.428907][ T6067] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.450168][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 52.494738][ T6059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.573315][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.69'. [ 52.594675][ T5755] Bluetooth: hci3: command tx timeout [ 52.594824][ T5099] Bluetooth: hci0: command tx timeout [ 52.594856][ T5753] Bluetooth: hci2: command tx timeout [ 52.624722][ T6059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.674135][ T5099] Bluetooth: hci1: command tx timeout [ 52.715158][ T6059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.762930][ T6064] svc: failed to register nfsdv3 RPC service (errno 111). [ 52.766617][ T6064] svc: failed to register nfsaclv3 RPC service (errno 111). [ 52.768867][ T6064] failed to unregister tcp with rpcbind [ 52.771087][ T6064] svc: failed to register nfsdv3 RPC service (errno 97). [ 52.773372][ T6064] svc: failed to register nfsaclv3 RPC service (errno 97). [ 52.776553][ T6064] failed to unregister tcp with rpcbind [ 52.803887][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.806973][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.814527][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.817206][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.824003][ T5529] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.851831][ T6086] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 52.854984][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 52.979557][ T5529] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 52.983131][ T5529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.986981][ T5529] usb 6-1: Product: syz [ 52.988300][ T5529] usb 6-1: Manufacturer: syz [ 52.989779][ T5529] usb 6-1: SerialNumber: syz [ 53.227387][ T41] ------------[ cut here ]------------ [ 53.229558][ T41] a->in_addr.ss_family == 512 [ 53.229568][ T41] WARNING: ./include/linux/ceph/decode.h:238 at ceph_con_v1_try_read+0x54e2/0x6ca0, CPU#3: kworker/3:1/41 [ 53.234614][ T41] Modules linked in: [ 53.236096][ T41] CPU: 3 UID: 0 PID: 41 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 53.238918][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.241943][ T41] Workqueue: ceph-msgr ceph_con_workfn [ 53.243665][ T41] RIP: 0010:ceph_con_v1_try_read+0x54e2/0x6ca0 [ 53.245651][ T41] Code: 3c 02 00 0f 85 9c 03 00 00 48 c7 c0 60 c7 48 8d e9 c8 c7 ff ff 48 8b 7c 24 10 e8 49 01 fb f6 e9 e0 af ff ff e8 4f 77 8a f6 90 <0f> 0b 90 e9 06 ee ff ff e8 41 77 8a f6 31 f6 bf 00 0c 00 00 e8 55 [ 53.251430][ T41] RSP: 0018:ffffc90000757a08 EFLAGS: 00010293 [ 53.253249][ T41] RAX: 0000000000000000 RBX: ffff88805932c73c RCX: ffffffff8b7fd8d5 [ 53.255835][ T41] RDX: ffff88801cb3ca80 RSI: ffffffff8b7fead1 RDI: ffff88801cb3ca80 [ 53.258359][ T41] RBP: ffff88805932c75a R08: 0000000000000003 R09: 0000000000000002 [ 53.261098][ T41] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88805932c418 [ 53.263653][ T41] R13: 0000000000000002 R14: 0000000000000091 R15: ffffed100b265887 [ 53.266094][ T41] FS: 0000000000000000(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 53.268792][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.270774][ T41] CR2: 00007f17093e4d58 CR3: 000000005f054000 CR4: 0000000000352ef0 [ 53.273234][ T41] Call Trace: [ 53.274328][ T41] [ 53.275257][ T41] ? __mutex_lock+0x26d/0x1bd0 [ 53.276771][ T41] ? ceph_con_workfn+0x48/0x13e0 [ 53.278302][ T41] ? register_lock_class+0x40/0x560 [ 53.279896][ T41] ? do_raw_spin_lock+0x128/0x260 [ 53.281488][ T41] ? __pfx___mutex_lock+0x10/0x10 [ 53.283006][ T41] ? __lock_acquire+0x49f/0x1a40 [ 53.284601][ T41] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 53.286445][ T41] ? debug_object_deactivate+0x2e4/0x3b0 [ 53.288232][ T41] ceph_con_workfn+0x9a5/0x13e0 [ 53.289829][ T41] process_one_work+0xa23/0x1940 [ 53.291431][ T41] ? __pfx_process_one_work+0x10/0x10 [ 53.293185][ T41] ? __pfx_ceph_con_workfn+0x10/0x10 [ 53.294839][ T41] worker_thread+0x5ef/0xe50 [ 53.296242][ T41] ? kthread+0x13a/0x450 [ 53.297536][ T41] ? __pfx_worker_thread+0x10/0x10 [ 53.299157][ T41] kthread+0x370/0x450 [ 53.300468][ T41] ? __pfx_kthread+0x10/0x10 [ 53.301945][ T41] ret_from_fork+0x72b/0xd50 [ 53.303394][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 53.304979][ T41] ? __switch_to+0x800/0x10f0 [ 53.306433][ T41] ? __pfx_kthread+0x10/0x10 [ 53.307844][ T41] ret_from_fork_asm+0x1a/0x30 [ 53.309058][ T5529] speedtch 6-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 53.309315][ T41] [ 53.309336][ T41] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.309347][ T41] CPU: 3 UID: 0 PID: 41 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 53.309360][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.309368][ T41] Workqueue: ceph-msgr ceph_con_workfn [ 53.309383][ T41] Call Trace: [ 53.309388][ T41] [ 53.309392][ T41] dump_stack_lvl+0x100/0x190 [ 53.309407][ T41] vpanic+0x552/0x970 [ 53.309418][ T41] ? __pfx_vpanic+0x10/0x10 [ 53.309432][ T41] panic+0xd1/0xe0 [ 53.309442][ T41] ? __pfx_panic+0x10/0x10 [ 53.309456][ T41] ? check_panic_on_warn+0x1f/0x90 [ 53.309468][ T41] check_panic_on_warn.cold+0x19/0x34 [ 53.309479][ T41] ? ceph_con_v1_try_read+0x54e2/0x6ca0 [ 53.309495][ T41] __warn.cold+0x191/0x318 [ 53.309507][ T41] __report_bug+0x30f/0x440 [ 53.309521][ T41] ? ceph_con_v1_try_read+0x54e2/0x6ca0 [ 53.309538][ T41] ? __pfx___report_bug+0x10/0x10 [ 53.309553][ T41] ? __pfx_tcp_recvmsg+0x10/0x10 [ 53.309569][ T41] ? inet_recvmsg+0xdc/0x4c0 [ 53.309582][ T41] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 53.309599][ T41] ? rcu_is_watching+0x12/0xc0 [ 53.309617][ T41] ? ceph_con_v1_try_read+0x54e2/0x6ca0 [ 53.309633][ T41] report_bug+0xb2/0x220 [ 53.309645][ T41] ? ceph_con_v1_try_read+0x54e2/0x6ca0 [ 53.309661][ T41] handle_bug+0x16a/0x2a0 [ 53.309676][ T41] exc_invalid_op+0x17/0x50 [ 53.309691][ T41] asm_exc_invalid_op+0x1a/0x20 [ 53.309703][ T41] RIP: 0010:ceph_con_v1_try_read+0x54e2/0x6ca0 [ 53.309719][ T41] Code: 3c 02 00 0f 85 9c 03 00 00 48 c7 c0 60 c7 48 8d e9 c8 c7 ff ff 48 8b 7c 24 10 e8 49 01 fb f6 e9 e0 af ff ff e8 4f 77 8a f6 90 <0f> 0b 90 e9 06 ee ff ff e8 41 77 8a f6 31 f6 bf 00 0c 00 00 e8 55 [ 53.309730][ T41] RSP: 0018:ffffc90000757a08 EFLAGS: 00010293 [ 53.309739][ T41] RAX: 0000000000000000 RBX: ffff88805932c73c RCX: ffffffff8b7fd8d5 [ 53.309746][ T41] RDX: ffff88801cb3ca80 RSI: ffffffff8b7fead1 RDI: ffff88801cb3ca80 [ 53.309753][ T41] RBP: ffff88805932c75a R08: 0000000000000003 R09: 0000000000000002 [ 53.309763][ T41] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88805932c418 [ 53.309770][ T41] R13: 0000000000000002 R14: 0000000000000091 R15: ffffed100b265887 [ 53.309779][ T41] ? ceph_con_v1_try_read+0x42e5/0x6ca0 [ 53.309794][ T41] ? ceph_con_v1_try_read+0x54e1/0x6ca0 [ 53.309811][ T41] ? ceph_con_v1_try_read+0x54e1/0x6ca0 [ 53.309829][ T41] ? __mutex_lock+0x26d/0x1bd0 [ 53.309842][ T41] ? ceph_con_workfn+0x48/0x13e0 [ 53.309853][ T41] ? register_lock_class+0x40/0x560 [ 53.309867][ T41] ? do_raw_spin_lock+0x128/0x260 [ 53.309883][ T41] ? __pfx___mutex_lock+0x10/0x10 [ 53.309898][ T41] ? __lock_acquire+0x49f/0x1a40 [ 53.309911][ T41] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 53.309928][ T41] ? debug_object_deactivate+0x2e4/0x3b0 [ 53.309947][ T41] ceph_con_workfn+0x9a5/0x13e0 [ 53.309961][ T41] process_one_work+0xa23/0x1940 [ 53.309978][ T41] ? __pfx_process_one_work+0x10/0x10 [ 53.309993][ T41] ? __pfx_ceph_con_workfn+0x10/0x10 [ 53.310006][ T41] worker_thread+0x5ef/0xe50 [ 53.310022][ T41] ? kthread+0x13a/0x450 [ 53.310031][ T41] ? __pfx_worker_thread+0x10/0x10 [ 53.310042][ T41] kthread+0x370/0x450 [ 53.310052][ T41] ? __pfx_kthread+0x10/0x10 [ 53.310063][ T41] ret_from_fork+0x72b/0xd50 [ 53.310079][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 53.310095][ T41] ? __switch_to+0x800/0x10f0 [ 53.310107][ T41] ? __pfx_kthread+0x10/0x10 [ 53.310118][ T41] ret_from_fork_asm+0x1a/0x30 [ 53.310139][ T41] [ 53.313300][ T41] Kernel Offset: disabled