last executing test programs: 499.503264ms ago: executing program 3 (id=4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 318.828241ms ago: executing program 3 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r1, &(0x7f0000000a00)='27', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = dup3(r0, r1, 0x80000) mkdirat(r2, 0x0, 0x1c2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000002c80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000020000000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 318.710188ms ago: executing program 3 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007f56e617400140004000800010000000003080002"], 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x0) 306.668966ms ago: executing program 0 (id=1): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0x100, 0x9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00290200000000fac7f1d211"], 0x14}}, 0x8000) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7fff, @rand_addr=' \x01\x00', 0x8}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)='`', 0x1}], 0x1}, 0x4841) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f00000002c0), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local}}}}, 0x0) write$tun(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) close_range(r4, 0xffffffffffffffff, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0xff02, {0xa, 0x4e21, 0xe, @mcast2, 0x9}}, 0x24) 220.712328ms ago: executing program 3 (id=7): socket(0x1, 0x1, 0x0) (async) r0 = socket(0x1, 0x1, 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = epoll_create1(0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@private2, @in=@local, 0x0, 0x196f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x200034ff, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x81}, {{@in=@multicast2, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000001500)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000015c0)="b9180bb7600a070c009e40f086dd1fff310005e0330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000001700), &(0x7f0000001740)}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) fremovexattr(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="73cc702772940fc59eb04194c8b9070693b73ee04fd6b16fdbad1b61b7ec833db9f9"]) 220.478649ms ago: executing program 1 (id=2): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x2d, 0x0}}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @any, 0x3f}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/158, 0x9e}], 0x1, 0x80, 0x800002) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000440)=[0x9db, 0x1d]) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) r5 = fanotify_init(0x1a, 0x800) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x482000, 0xa8) fanotify_mark(r5, 0x441, 0x4800001a, r7, 0x0) fanotify_mark(r5, 0x1, 0x20, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x800, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @llc={0x1a, 0x320, 0x2c, 0x2, 0x9, 0x75, @random="90a62d8818de"}, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1000, 0xe, 0x40}) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x1) 180.320401ms ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000002c0)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8947, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000300)) write$FUSE_ATTR(r1, 0x0, 0xfc92) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000b80)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000046000901fefffffffedbdf25017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 108.944879ms ago: executing program 3 (id=8): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000009e000000bf09000000000000350901000000000095001c0000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 60.398562ms ago: executing program 1 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) sendfile(r0, r1, 0x0, 0x7ffff004) 884.995µs ago: executing program 1 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000050000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) 253.845µs ago: executing program 2 (id=11): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_TXQLEN={0x8, 0xd, 0x7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_TXQLEN={0x8, 0xd, 0x7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r8, &(0x7f0000001440)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x4e22, @local}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000f80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000001080)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000001300)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) bind$packet(r9, &(0x7f0000001300)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r9, &(0x7f0000001340)="080211000001080211000000080045", 0xf) (async) write(r9, &(0x7f0000001340)="080211000001080211000000080045", 0xf) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="aa7987b1ae222dcb25f90400d29eced78b680bcf43edc6edfac4206992ff1e7f1efe11801769b3d6c351dd3b84f85e843fea4e8725cea33cea278b154c1cd36b61f5a3e39a25441d09bee4b472dcffc3e04beedbb33b98b19222cf444bc3fc684bfd7ab702a3511c1fac778a0157c3bd3c7a295c6956aeb192d7e8d1535c1d618e55a0363e0e55a2352456cfac073e40f42fbdfd45b6c61be49be1b21bca9ee72eba6fd16b74582bc249dcde096fce7af863", 0xb2}, {&(0x7f0000000280)="adca040dace59dccd93cd94a", 0xc}], 0x2, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xc8}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="aa7987b1ae222dcb25f90400d29eced78b680bcf43edc6edfac4206992ff1e7f1efe11801769b3d6c351dd3b84f85e843fea4e8725cea33cea278b154c1cd36b61f5a3e39a25441d09bee4b472dcffc3e04beedbb33b98b19222cf444bc3fc684bfd7ab702a3511c1fac778a0157c3bd3c7a295c6956aeb192d7e8d1535c1d618e55a0363e0e55a2352456cfac073e40f42fbdfd45b6c61be49be1b21bca9ee72eba6fd16b74582bc249dcde096fce7af863", 0xb2}, {&(0x7f0000000280)="adca040dace59dccd93cd94a", 0xc}], 0x2, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xc8}, 0x0) 0s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2210088, &(0x7f0000000440)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f00000004c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x1000000, 0x28812, r0, 0x74886000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x6, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26961' (ED25519) to the list of known hosts. [ 39.853903][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 39.853917][ T42] audit: type=1400 audit(1793910666.602:138): avc: denied { name_bind } for pid=5777 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.880948][ T42] audit: type=1400 audit(1793910666.622:139): avc: denied { execute } for pid=5778 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.881238][ T42] audit: type=1400 audit(1793910666.622:140): avc: denied { execute_no_trans } for pid=5778 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.152111][ T42] audit: type=1400 audit(1793910668.892:141): avc: denied { mounton } for pid=5778 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.160800][ T42] audit: type=1400 audit(1793910668.902:142): avc: denied { mount } for pid=5778 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.165670][ T5778] cgroup: Unknown subsys name 'net' [ 42.166877][ T42] audit: type=1400 audit(1793910668.912:143): avc: denied { unmount } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.305477][ T5778] cgroup: Unknown subsys name 'cpuset' [ 42.310898][ T5778] cgroup: Unknown subsys name 'rlimit' [ 42.447570][ T42] audit: type=1400 audit(1793910669.192:144): avc: denied { setattr } for pid=5778 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.450248][ T42] audit: type=1400 audit(1793910669.192:145): avc: denied { create } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.450294][ T42] audit: type=1400 audit(1793910669.192:146): avc: denied { write } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.450330][ T42] audit: type=1400 audit(1793910669.192:147): avc: denied { read } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.501950][ T5782] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.220356][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.648526][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 46.648540][ T42] audit: type=1400 audit(1793910673.392:154): avc: denied { execmem } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.806764][ T42] audit: type=1400 audit(1793910673.552:155): avc: denied { create } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.807186][ T42] audit: type=1400 audit(1793910673.552:156): avc: denied { read write } for pid=5790 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.807540][ T42] audit: type=1400 audit(1793910673.552:157): avc: denied { open } for pid=5790 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.819212][ T42] audit: type=1400 audit(1793910673.562:158): avc: denied { ioctl } for pid=5791 comm="syz-executor" path="socket:[6970]" dev="sockfs" ino=6970 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.839140][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.841105][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.841969][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.842763][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.843129][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.845573][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.846600][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.846806][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.848481][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.848625][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.848987][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.849247][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.849498][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.849642][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.849772][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.852438][ T42] audit: type=1400 audit(1793910673.592:159): avc: denied { read } for pid=5791 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.866085][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.866852][ T42] audit: type=1400 audit(1793910673.592:160): avc: denied { open } for pid=5791 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.870127][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.871469][ T42] audit: type=1400 audit(1793910673.612:161): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.871604][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.872576][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.873543][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.880550][ T42] audit: type=1400 audit(1793910673.622:162): avc: denied { module_request } for pid=5798 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.882175][ T42] audit: type=1400 audit(1793910673.622:163): avc: denied { module_request } for pid=5790 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.094575][ T5798] rdma_rxe: Failed to create IPv4 UDP tunnel [ 47.095005][ T5790] rdma_rxe: Failed to create IPv4 UDP tunnel [ 47.101488][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.101993][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.110934][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.119725][ T5801] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.199280][ T5791] infiniband rxe0: set active [ 47.201892][ T5791] infiniband rxe0: added rxe_eth0 [ 47.211447][ T5791] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.211470][ T5791] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.211492][ T5791] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.213691][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.227410][ T5791] RDS/IB: rxe0: added [ 47.227546][ T5791] smc: adding ib device rxe0 with port count 1 [ 47.227583][ T5791] smc: ib device rxe0 port 1 has no pnetid [ 47.237898][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.238863][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.357722][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.497353][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.521715][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.522492][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.522560][ T5790] bridge_slave_0: entered allmulticast mode [ 47.523420][ T5790] bridge_slave_0: entered promiscuous mode [ 47.525697][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.525738][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.525792][ T5798] bridge_slave_0: entered allmulticast mode [ 47.526501][ T5798] bridge_slave_0: entered promiscuous mode [ 47.533663][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.533736][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.534007][ T5798] bridge_slave_1: entered allmulticast mode [ 47.535454][ T5798] bridge_slave_1: entered promiscuous mode [ 47.537060][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.537131][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.537393][ T5790] bridge_slave_1: entered allmulticast mode [ 47.538542][ T5790] bridge_slave_1: entered promiscuous mode [ 47.613311][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.613474][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.613543][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.613638][ T5801] bridge_slave_0: entered allmulticast mode [ 47.614846][ T5801] bridge_slave_0: entered promiscuous mode [ 47.621315][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.622795][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.622866][ T5801] bridge_slave_1: entered allmulticast mode [ 47.623718][ T5801] bridge_slave_1: entered promiscuous mode [ 47.626163][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.627687][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.640648][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.660058][ T5798] team0: Port device team_slave_0 added [ 47.673778][ T5798] team0: Port device team_slave_1 added [ 47.675360][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.677660][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.677763][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.684623][ T5790] team0: Port device team_slave_0 added [ 47.685963][ T5790] team0: Port device team_slave_1 added [ 47.717197][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.717210][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.717224][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.725163][ T5801] team0: Port device team_slave_0 added [ 47.725563][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.725572][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.725586][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.726908][ T5801] team0: Port device team_slave_1 added [ 47.727365][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.727374][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.727388][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.738053][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.738063][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.738077][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.760756][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.760767][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.760781][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.779638][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.779650][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.779664][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.792119][ T5790] hsr_slave_0: entered promiscuous mode [ 47.792631][ T5790] hsr_slave_1: entered promiscuous mode [ 47.795821][ T5798] hsr_slave_0: entered promiscuous mode [ 47.796381][ T5798] hsr_slave_1: entered promiscuous mode [ 47.796794][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 47.796807][ T5798] Cannot create hsr debugfs directory [ 47.882792][ T5801] hsr_slave_0: entered promiscuous mode [ 47.883364][ T5801] hsr_slave_1: entered promiscuous mode [ 47.883773][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 47.883783][ T5801] Cannot create hsr debugfs directory [ 48.167596][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.174811][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.175631][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.178747][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.189449][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.189914][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.190015][ T5791] bridge_slave_0: entered allmulticast mode [ 48.190793][ T5791] bridge_slave_0: entered promiscuous mode [ 48.195072][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.201303][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.201765][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.201832][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.201891][ T5791] bridge_slave_1: entered allmulticast mode [ 48.202653][ T5791] bridge_slave_1: entered promiscuous mode [ 48.203999][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.207724][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.263346][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.264871][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.303358][ T5791] team0: Port device team_slave_0 added [ 48.305763][ T5791] team0: Port device team_slave_1 added [ 48.318476][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.318566][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.318928][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.319025][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.345926][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.348902][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.350826][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.355152][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.356762][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.361343][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.362581][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.362593][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.362614][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.364849][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.364861][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.364883][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.376328][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.386404][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.400191][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.409409][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.478517][ T5791] hsr_slave_0: entered promiscuous mode [ 48.479258][ T5791] hsr_slave_1: entered promiscuous mode [ 48.479813][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 48.479827][ T5791] Cannot create hsr debugfs directory [ 48.546790][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.549843][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.550495][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.554149][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.554896][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.558273][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.560130][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.564119][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.665859][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.703295][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.731454][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.731567][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.747737][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.747822][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.753856][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.757896][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.761337][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.761832][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.763724][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.764073][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.767305][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.771431][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.777265][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.813122][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.832492][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.832574][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.845972][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.846019][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.854322][ T5793] Bluetooth: hci2: command tx timeout [ 48.881062][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.914876][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.926735][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.926820][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.932831][ T5793] Bluetooth: hci3: command tx timeout [ 48.933197][ T5802] Bluetooth: hci0: command tx timeout [ 48.933206][ T5793] Bluetooth: hci1: command tx timeout [ 48.939581][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.939659][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.956010][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.989346][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.000671][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.000743][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.008632][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.008709][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.168878][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.220660][ T5790] veth0_vlan: entered promiscuous mode [ 49.228828][ T5790] veth1_vlan: entered promiscuous mode [ 49.245425][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.253794][ T5790] veth0_macvtap: entered promiscuous mode [ 49.259522][ T5790] veth1_macvtap: entered promiscuous mode [ 49.279943][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.289158][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.290145][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.298016][ T5798] veth0_vlan: entered promiscuous mode [ 49.314451][ T5798] veth1_vlan: entered promiscuous mode [ 49.364660][ T5603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.375676][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.402659][ T5801] veth0_vlan: entered promiscuous mode [ 49.405216][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.405235][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.407286][ T5798] veth0_macvtap: entered promiscuous mode [ 49.421873][ T5798] veth1_macvtap: entered promiscuous mode [ 49.434982][ T5801] veth1_vlan: entered promiscuous mode [ 49.448894][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.448914][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.467347][ T5791] veth0_vlan: entered promiscuous mode [ 49.476746][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.479480][ T5791] veth1_vlan: entered promiscuous mode [ 49.486505][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.503524][ T5801] veth0_macvtap: entered promiscuous mode [ 49.513077][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.513266][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.517679][ T5801] veth1_macvtap: entered promiscuous mode [ 49.534136][ T5790] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.543314][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.559109][ T5791] veth0_macvtap: entered promiscuous mode [ 49.575127][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.585572][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.585591][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.587198][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.590662][ T5791] veth1_macvtap: entered promiscuous mode [ 49.623085][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.636169][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.638300][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.638313][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.648468][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.655119][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.657971][ T5603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.658049][ T5603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.658155][ T5603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.685556][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.685600][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.711086][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.711100][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.724247][ T5603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.724274][ T5603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.757708][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.757722][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.776382][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.776395][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.783050][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783240][ T5901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783380][ T5901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783400][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783418][ T5901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783436][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.860198][ T5961] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 49.934726][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.980731][ T5970] netlink: 'syz.2.3': attribute type 2 has an invalid length. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 50.145742][ T5985] ------------[ cut here ]------------ [ 50.145753][ T5985] sp->magic != HWSIM_STA_MAGIC [ 50.145757][ T5985] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1f17/0x2a20, CPU#2: syz.2.11/5985 [ 50.153695][ T5985] Modules linked in: [ 50.155027][ T5985] CPU: 2 UID: 0 PID: 5985 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 50.157733][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.160698][ T5985] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 50.162456][ T5985] Code: b6 58 1b 89 de e8 a9 01 95 fa 84 db 0f 85 e5 ee ff ff e8 8c 07 95 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 7a 07 95 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 50.168305][ T5985] RSP: 0018:ffffc9000478ef78 EFLAGS: 00010293 [ 50.170516][ T5985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000201 [ 50.173411][ T5985] RDX: ffff88802a092580 RSI: ffffffff87795d66 RDI: 0000000000000005 [ 50.176260][ T5985] RBP: ffff888055bdad90 R08: 000000006d537749 R09: 0000000000000000 [ 50.179091][ T5985] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 50.181456][ T5985] R13: ffffc9000478f130 R14: ffff88805a5232c0 R15: ffff88803856fa40 [ 50.183988][ T5985] FS: 00007fe6cc9b46c0(0000) GS:ffff8880d467c000(0000) knlGS:0000000000000000 [ 50.186773][ T5985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.188773][ T5985] CR2: 0000200000000500 CR3: 000000005ac22000 CR4: 0000000000352ef0 [ 50.191126][ T5985] Call Trace: [ 50.192169][ T5985] [ 50.193114][ T5985] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 50.194756][ T5985] ? do_raw_spin_lock+0x128/0x260 [ 50.196305][ T5985] ? mark_held_locks+0x40/0x70 [ 50.197716][ T5985] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.199459][ T5985] ieee80211_tx_frags+0x5c9/0xa70 [ 50.200996][ T5985] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 50.202655][ T5985] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 50.204490][ T5985] __ieee80211_xmit_fast+0x834/0x2b70 [ 50.206114][ T5985] ? __kernel_text_address+0xd/0x30 [ 50.207794][ T5985] ? __siphash_unaligned+0x190/0x360 [ 50.209449][ T5985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.211269][ T5985] ? cfg80211_classify8021d+0x1f5/0xa30 [ 50.213050][ T5985] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 50.214820][ T5985] ? ieee80211_mandatory_rates+0x150/0x220 [ 50.216569][ T5985] ? mesh_path_refresh+0x14d/0x2e0 [ 50.218099][ T5985] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 50.219767][ T5985] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 50.221619][ T5985] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 50.223447][ T5985] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 50.225348][ T5985] ? sock_def_readable+0x90/0x600 [ 50.226826][ T5985] ? find_held_lock+0x2b/0x80 [ 50.228231][ T5985] ? sock_def_readable+0x1d2/0x600 [ 50.229723][ T5985] ? sock_def_readable+0x1d2/0x600 [ 50.231253][ T5985] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 50.232955][ T5985] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 50.234825][ T5985] ? dev_queue_xmit_nit+0x748/0xa80 [ 50.236441][ T5985] ? __pfx_packet_rcv+0x10/0x10 [ 50.237877][ T5985] ? dev_queue_xmit_nit+0x74d/0xa80 [ 50.239425][ T5985] dev_hard_start_xmit+0x121/0x760 [ 50.241138][ T5985] __dev_queue_xmit+0x1bef/0x48d0 [ 50.242759][ T5985] ? __might_fault+0xc5/0x140 [ 50.244236][ T5985] ? __might_fault+0xc5/0x140 [ 50.245705][ T5985] ? __pfx___dev_queue_xmit+0x10/0x10 [ 50.247748][ T5985] ? _copy_from_iter+0x270/0x16c0 [ 50.249438][ T5985] ? __pfx__copy_from_iter+0x10/0x10 [ 50.251116][ T5985] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 50.252852][ T5985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.254675][ T5985] ? packet_parse_headers+0x294/0x7f0 [ 50.256369][ T5985] ? __pfx_packet_parse_headers+0x10/0x10 [ 50.258124][ T5985] packet_xmit+0x24b/0x320 [ 50.259517][ T5985] packet_sendmsg+0x3205/0x4f80 [ 50.261038][ T5985] ? sock_has_perm+0x254/0x320 [ 50.262722][ T5985] ? __pfx_sock_has_perm+0x10/0x10 [ 50.264357][ T5985] ? __pfx_avc_has_perm+0x10/0x10 [ 50.265894][ T5985] ? __pfx_packet_sendmsg+0x10/0x10 [ 50.267476][ T5985] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.269184][ T5985] sock_write_iter+0x560/0x5d0 [ 50.270829][ T5985] ? __pfx_packet_sendmsg+0x10/0x10 [ 50.272474][ T5985] ? __pfx_sock_write_iter+0x10/0x10 [ 50.274170][ T5985] ? bpf_lsm_file_permission+0x9/0x10 [ 50.275852][ T5985] ? security_file_permission+0x76/0x210 [ 50.277671][ T5985] ? rw_verify_area+0xce/0x6d0 [ 50.279146][ T5985] vfs_write+0x6af/0x1050 [ 50.280510][ T5985] ? __pfx_sock_write_iter+0x10/0x10 [ 50.282132][ T5985] ? __pfx_vfs_write+0x10/0x10 [ 50.283636][ T5985] ? find_held_lock+0x2b/0x80 [ 50.285109][ T5985] ksys_write+0x1f8/0x250 [ 50.286401][ T5985] ? __pfx_ksys_write+0x10/0x10 [ 50.287921][ T5985] do_syscall_64+0x123/0x790 [ 50.289430][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.291248][ T5985] RIP: 0033:0x7fe6ce79fb19 [ 50.292627][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.298497][ T5985] RSP: 002b:00007fe6cc9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.301066][ T5985] RAX: ffffffffffffffda RBX: 00007fe6cea26180 RCX: 00007fe6ce79fb19 [ 50.303553][ T5985] RDX: 000000000000000f RSI: 0000200000001340 RDI: 000000000000000b [ 50.305940][ T5985] RBP: 00007fe6ce837b70 R08: 0000000000000000 R09: 0000000000000000 [ 50.308342][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.310760][ T5985] R13: 00007fe6cea26218 R14: 00007fe6cea26180 R15: 00007ffd36bd93a8 [ 50.313250][ T5985] [ 50.314204][ T5985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.316389][ T5985] CPU: 2 UID: 0 PID: 5985 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 50.318983][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.321889][ T5985] Call Trace: [ 50.322883][ T5985] [ 50.323788][ T5985] dump_stack_lvl+0x100/0x190 [ 50.325197][ T5985] vpanic+0x2dc/0x6f8 [ 50.326389][ T5985] panic+0xd1/0xe0 [ 50.327529][ T5985] ? __pfx_panic+0x10/0x10 [ 50.328854][ T5985] check_panic_on_warn.cold+0x19/0x34 [ 50.330435][ T5985] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 50.331963][ T5985] __warn.cold+0x191/0x321 [ 50.333313][ T5985] __report_bug+0x30f/0x440 [ 50.334674][ T5985] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 50.336219][ T5985] ? __pfx___report_bug+0x10/0x10 [ 50.337700][ T5985] ? __bfs+0x150/0x2a0 [ 50.338922][ T5985] ? check_irq_usage+0x1a4/0x8b0 [ 50.340425][ T5985] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 50.342111][ T5985] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 50.343666][ T5985] report_bug+0xb3/0x220 [ 50.344918][ T5985] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 50.346473][ T5985] handle_bug+0x16a/0x2a0 [ 50.347768][ T5985] exc_invalid_op+0x17/0x50 [ 50.349100][ T5985] asm_exc_invalid_op+0x1a/0x20 [ 50.350570][ T5985] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 50.352300][ T5985] Code: b6 58 1b 89 de e8 a9 01 95 fa 84 db 0f 85 e5 ee ff ff e8 8c 07 95 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 7a 07 95 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 50.357801][ T5985] RSP: 0018:ffffc9000478ef78 EFLAGS: 00010293 [ 50.359586][ T5985] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000201 [ 50.361902][ T5985] RDX: ffff88802a092580 RSI: ffffffff87795d66 RDI: 0000000000000005 [ 50.364224][ T5985] RBP: ffff888055bdad90 R08: 000000006d537749 R09: 0000000000000000 [ 50.366497][ T5985] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 50.368814][ T5985] R13: ffffc9000478f130 R14: ffff88805a5232c0 R15: ffff88803856fa40 [ 50.371105][ T5985] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 50.372631][ T5985] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 50.374207][ T5985] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 50.375824][ T5985] ? do_raw_spin_lock+0x128/0x260 [ 50.377291][ T5985] ? mark_held_locks+0x40/0x70 [ 50.378709][ T5985] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.380465][ T5985] ieee80211_tx_frags+0x5c9/0xa70 [ 50.381933][ T5985] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 50.383628][ T5985] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 50.385358][ T5985] __ieee80211_xmit_fast+0x834/0x2b70 [ 50.386918][ T5985] ? __kernel_text_address+0xd/0x30 [ 50.388492][ T5985] ? __siphash_unaligned+0x190/0x360 [ 50.390050][ T5985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.391889][ T5985] ? cfg80211_classify8021d+0x1f5/0xa30 [ 50.393578][ T5985] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 50.395348][ T5985] ? ieee80211_mandatory_rates+0x150/0x220 [ 50.397147][ T5985] ? mesh_path_refresh+0x14d/0x2e0 [ 50.398724][ T5985] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 50.400488][ T5985] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 50.402342][ T5985] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 50.404175][ T5985] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 50.406076][ T5985] ? sock_def_readable+0x90/0x600 [ 50.407549][ T5985] ? find_held_lock+0x2b/0x80 [ 50.409001][ T5985] ? sock_def_readable+0x1d2/0x600 [ 50.410596][ T5985] ? sock_def_readable+0x1d2/0x600 [ 50.412150][ T5985] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 50.413772][ T5985] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 50.415571][ T5985] ? dev_queue_xmit_nit+0x748/0xa80 [ 50.417115][ T5985] ? __pfx_packet_rcv+0x10/0x10 [ 50.418604][ T5985] ? dev_queue_xmit_nit+0x74d/0xa80 [ 50.420208][ T5985] dev_hard_start_xmit+0x121/0x760 [ 50.421773][ T5985] __dev_queue_xmit+0x1bef/0x48d0 [ 50.423313][ T5985] ? __might_fault+0xc5/0x140 [ 50.424774][ T5985] ? __might_fault+0xc5/0x140 [ 50.426237][ T5985] ? __pfx___dev_queue_xmit+0x10/0x10 [ 50.427884][ T5985] ? _copy_from_iter+0x270/0x16c0 [ 50.429446][ T5985] ? __pfx__copy_from_iter+0x10/0x10 [ 50.431082][ T5985] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 50.432755][ T5985] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.434503][ T5985] ? packet_parse_headers+0x294/0x7f0 [ 50.436083][ T5985] ? __pfx_packet_parse_headers+0x10/0x10 [ 50.437783][ T5985] packet_xmit+0x24b/0x320 [ 50.439120][ T5985] packet_sendmsg+0x3205/0x4f80 [ 50.440611][ T5985] ? sock_has_perm+0x254/0x320 [ 50.442038][ T5985] ? __pfx_sock_has_perm+0x10/0x10 [ 50.443577][ T5985] ? __pfx_avc_has_perm+0x10/0x10 [ 50.445046][ T5985] ? __pfx_packet_sendmsg+0x10/0x10 [ 50.446629][ T5985] ? selinux_socket_sendmsg+0x198/0x2f0 [ 50.448335][ T5985] sock_write_iter+0x560/0x5d0 [ 50.449821][ T5985] ? __pfx_packet_sendmsg+0x10/0x10 [ 50.451408][ T5985] ? __pfx_sock_write_iter+0x10/0x10 [ 50.453031][ T5985] ? bpf_lsm_file_permission+0x9/0x10 [ 50.454681][ T5985] ? security_file_permission+0x76/0x210 [ 50.456378][ T5985] ? rw_verify_area+0xce/0x6d0 [ 50.457850][ T5985] vfs_write+0x6af/0x1050 [ 50.459125][ T5985] ? __pfx_sock_write_iter+0x10/0x10 [ 50.460777][ T5985] ? __pfx_vfs_write+0x10/0x10 [ 50.462249][ T5985] ? find_held_lock+0x2b/0x80 [ 50.463713][ T5985] ksys_write+0x1f8/0x250 [ 50.465038][ T5985] ? __pfx_ksys_write+0x10/0x10 [ 50.466545][ T5985] do_syscall_64+0x123/0x790 [ 50.467996][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.469810][ T5985] RIP: 0033:0x7fe6ce79fb19 [ 50.471218][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.477036][ T5985] RSP: 002b:00007fe6cc9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.479562][ T5985] RAX: ffffffffffffffda RBX: 00007fe6cea26180 RCX: 00007fe6ce79fb19 [ 50.481915][ T5985] RDX: 000000000000000f RSI: 0000200000001340 RDI: 000000000000000b [ 50.484325][ T5985] RBP: 00007fe6ce837b70 R08: 0000000000000000 R09: 0000000000000000 [ 50.486712][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.489108][ T5985] R13: 00007fe6cea26218 R14: 00007fe6cea26180 R15: 00007ffd36bd93a8 [ 50.491553][ T5985] [ 50.493279][ T5985] Kernel Offset: disabled [ 50.494627][ T5985] Rebooting in 86400 seconds..