[ 120.893977][ T48] audit: type=1400 audit(1609220727.551:41): avc: denied { map } for pid=9962 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:49174' (ECDSA) to the list of known hosts. [ 124.866531][ T48] audit: type=1400 audit(1609220731.521:42): avc: denied { map } for pid=9974 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/12/29 05:45:31 fuzzer started 2020/12/29 05:45:32 dialing manager at 10.0.2.10:33415 2020/12/29 05:45:32 syscalls: 3496 2020/12/29 05:45:32 code coverage: enabled 2020/12/29 05:45:32 comparison tracing: enabled 2020/12/29 05:45:32 extra coverage: enabled 2020/12/29 05:45:32 setuid sandbox: enabled 2020/12/29 05:45:32 namespace sandbox: enabled 2020/12/29 05:45:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/29 05:45:32 fault injection: enabled 2020/12/29 05:45:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/29 05:45:32 net packet injection: enabled 2020/12/29 05:45:32 net device setup: enabled 2020/12/29 05:45:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/29 05:45:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/29 05:45:32 USB emulation: enabled 2020/12/29 05:45:32 hci packet injection: enabled 2020/12/29 05:45:32 wifi device emulation: enabled [ 125.602365][ T48] audit: type=1400 audit(1609220732.261:43): avc: denied { integrity } for pid=9992 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 05:46:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e63000025000516d25a80648c63940d0424fc60100002400a000200051a82c137153e670402018010000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 202.002385][ T48] audit: type=1400 audit(1609220808.661:44): avc: denied { map } for pid=9994 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3085 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 05:46:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, 0x0) 05:46:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 05:46:49 executing program 3: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380)='NLBL_MGMT\x00') dup3(r3, r1, 0x0) [ 203.481156][ T9996] IPVS: ftp: loaded support on port[0] = 21 [ 203.568858][ T9997] IPVS: ftp: loaded support on port[0] = 21 [ 203.635144][ T9996] chnl_net:caif_netlink_parms(): no params data found [ 203.753782][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.762771][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.775729][ T9996] device bridge_slave_0 entered promiscuous mode [ 203.797657][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.806742][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.816376][ T9996] device bridge_slave_1 entered promiscuous mode [ 203.877429][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.903295][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.921436][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 203.968231][ T9999] IPVS: ftp: loaded support on port[0] = 21 [ 203.975756][ T9996] team0: Port device team_slave_0 added [ 204.013416][ T9996] team0: Port device team_slave_1 added [ 204.056448][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.067217][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.105205][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.128867][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.138468][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.177860][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.196636][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.205851][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.217836][ T9997] device bridge_slave_0 entered promiscuous mode [ 204.242654][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.254346][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.266625][ T9997] device bridge_slave_1 entered promiscuous mode [ 204.315866][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.322171][T10001] IPVS: ftp: loaded support on port[0] = 21 [ 204.347028][ T9996] device hsr_slave_0 entered promiscuous mode [ 204.369468][ T9996] device hsr_slave_1 entered promiscuous mode [ 204.405308][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.459229][ T9997] team0: Port device team_slave_0 added [ 204.489809][ T9997] team0: Port device team_slave_1 added [ 204.544009][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.568128][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.625232][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.654300][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.668175][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.716061][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.815955][ T9997] device hsr_slave_0 entered promiscuous mode [ 204.825545][ T9997] device hsr_slave_1 entered promiscuous mode [ 204.838708][ T9997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.849505][ T9997] Cannot create hsr debugfs directory [ 204.928763][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 205.080896][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.089878][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.100215][ T9999] device bridge_slave_0 entered promiscuous mode [ 205.139251][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.147331][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.156432][ T9999] device bridge_slave_1 entered promiscuous mode [ 205.185626][T10001] chnl_net:caif_netlink_parms(): no params data found [ 205.205453][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.223792][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.261067][ T48] audit: type=1400 audit(1609220811.921:45): avc: denied { create } for pid=9996 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.282071][ T9996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.312572][ T48] audit: type=1400 audit(1609220811.921:46): avc: denied { write } for pid=9996 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.358984][ T48] audit: type=1400 audit(1609220811.921:47): avc: denied { read } for pid=9996 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 205.371815][ T9999] team0: Port device team_slave_0 added [ 205.435656][ T9999] team0: Port device team_slave_1 added [ 205.439359][ T1713] Bluetooth: hci0: command 0x0409 tx timeout [ 205.458923][ T9996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.528752][ T9996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.548982][ T9996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.577239][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.587257][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.609200][ T1713] Bluetooth: hci1: command 0x0409 tx timeout [ 205.643881][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.693804][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.705426][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.740557][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.766549][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.776961][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.788819][T10001] device bridge_slave_0 entered promiscuous mode [ 205.802696][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.818160][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.848829][T10001] device bridge_slave_1 entered promiscuous mode [ 205.901926][ T9999] device hsr_slave_0 entered promiscuous mode [ 205.918171][ T1713] Bluetooth: hci2: command 0x0409 tx timeout [ 205.933574][ T9999] device hsr_slave_1 entered promiscuous mode [ 205.942037][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.952611][ T9999] Cannot create hsr debugfs directory [ 205.963415][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.990423][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.031240][T10001] team0: Port device team_slave_0 added [ 206.044110][T10001] team0: Port device team_slave_1 added [ 206.104067][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.117823][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.172885][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.198617][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.216828][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.238006][ T1713] Bluetooth: hci3: command 0x0409 tx timeout [ 206.268181][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.353068][ T9997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.384964][ T9997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.409446][ T9997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.449244][T10001] device hsr_slave_0 entered promiscuous mode [ 206.461425][T10001] device hsr_slave_1 entered promiscuous mode [ 206.472540][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.484618][T10001] Cannot create hsr debugfs directory [ 206.495488][ T9997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.683606][ T9999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.700380][ T9999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.717483][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.735031][ T9999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.748201][ T9999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.783402][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.794716][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.825253][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.858156][T10001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.884475][T10001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.923436][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.943721][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.963190][ T1713] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.976178][ T1713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.987038][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.001298][T10001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.029447][T10001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.055045][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.078552][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.108873][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.125193][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.148504][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.170763][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.197804][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.209939][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.221948][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.243531][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.255613][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.266092][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.282334][ T9997] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.326631][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.350406][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.400596][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.419431][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.452453][ T3242] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.474621][ T3242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.489679][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.503704][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.518092][ T1713] Bluetooth: hci0: command 0x041b tx timeout [ 207.518689][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.540401][ T3242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.552560][ T3242] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.567487][ T3242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.584323][ T9996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.602001][ T9996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.637885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.650924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.665936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.688413][ T1713] Bluetooth: hci1: command 0x041b tx timeout [ 207.693557][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.722002][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.748168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.766719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.795003][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.809354][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.822250][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.834360][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.847074][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.863393][ T9996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.894553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.908530][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.920351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.930962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.952036][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.992689][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.003301][ T1713] Bluetooth: hci2: command 0x041b tx timeout [ 208.016887][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.027972][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.039666][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.052999][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.067584][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.103986][ T9997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.124497][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.151804][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.179645][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.198380][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.223588][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.242862][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.255280][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.279426][ T9996] device veth0_vlan entered promiscuous mode [ 208.305716][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.323122][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.342900][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 208.350841][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.377202][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.389845][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.403173][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.414025][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.432526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.446782][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.460490][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.476357][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.486856][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.500278][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.515567][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.525054][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.539565][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.554610][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.571931][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.581793][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.595690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.614924][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.635914][ T9996] device veth1_vlan entered promiscuous mode [ 208.658679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.674704][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.690737][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.702644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.726935][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.738496][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.765874][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.779004][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.796369][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.826832][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.856555][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.889955][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.910637][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.947049][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.003351][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.043094][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.079216][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.126129][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.160818][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.185639][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.217962][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.237417][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.255498][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.277448][ T9997] device veth0_vlan entered promiscuous mode [ 209.301178][ T9999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.333436][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.350162][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.366291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.381287][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.397105][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.415423][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.427290][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.457320][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.536414][ T9996] device veth0_macvtap entered promiscuous mode [ 209.599270][T10026] Bluetooth: hci0: command 0x040f tx timeout [ 209.602566][T10001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.638454][ T9997] device veth1_vlan entered promiscuous mode [ 209.655854][ T9996] device veth1_macvtap entered promiscuous mode [ 209.686982][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.703732][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.719068][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.737474][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.751518][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.758283][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 209.786727][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.817436][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.841198][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.860895][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.877466][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.890529][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.903500][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.923061][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.943661][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.962854][ T9996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.980122][ T9996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.998786][ T9996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.017055][ T9996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.038267][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.056599][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.083279][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 210.091434][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.112096][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.129447][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.148742][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.190877][ T9997] device veth0_macvtap entered promiscuous mode [ 210.238887][ T9997] device veth1_macvtap entered promiscuous mode [ 210.320635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.338665][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.355740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.376154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.398159][ T1713] Bluetooth: hci3: command 0x040f tx timeout [ 210.402441][T10001] device veth0_vlan entered promiscuous mode [ 210.429698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.452609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.466483][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.482879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.504070][ T9997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.521315][ T9997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.539599][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.563488][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.576780][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.599172][ T9997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.627192][ T9997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.644137][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.670429][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.671610][ T9997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.681311][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.702309][ T9997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.746761][ T9997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.771730][ T9997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.808920][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.824527][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.838628][ T1713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.852024][T10001] device veth1_vlan entered promiscuous mode [ 210.888296][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.899961][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.910888][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.926464][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.938937][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.951148][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.982591][ T9999] device veth0_vlan entered promiscuous mode [ 210.998808][T10022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.011074][T10022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.025887][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.041294][ T48] audit: type=1400 audit(1609220817.701:48): avc: denied { associate } for pid=9996 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 211.092349][ T9999] device veth1_vlan entered promiscuous mode [ 211.111639][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.124765][ T3357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.150384][T10001] device veth0_macvtap entered promiscuous mode [ 211.153085][ T9996] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 211.163697][T10001] device veth1_macvtap entered promiscuous mode [ 211.204749][T10022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.251393][T10022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.260715][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.290176][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.304094][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.323261][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.336542][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.359203][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.361000][T10033] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 211.372964][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.372977][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.372988][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:46:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e63000025000516d25a80648c63940d0424fc60100002400a000200051a82c137153e670402018010000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 211.374876][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.387034][T10033] netlink: 24838 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.405256][ T9999] device veth0_macvtap entered promiscuous mode [ 211.470659][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.481123][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.490390][T10036] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 211.495342][T10026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.504282][T10036] netlink: 24838 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.519944][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.542252][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:46:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e63000025000516d25a80648c63940d0424fc60100002400a000200051a82c137153e670402018010000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 211.556631][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.569763][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.585371][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.604156][ T9999] device veth1_macvtap entered promiscuous mode [ 211.608639][T10039] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 211.613871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.624484][T10039] netlink: 24838 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.639160][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 05:46:58 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e63000025000516d25a80648c63940d0424fc60100002400a000200051a82c137153e670402018010000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 211.664461][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.679252][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 211.680427][T10022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.692735][T10001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.702763][T10022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.714761][T10001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.741932][T10001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.756259][T10001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.772797][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.804882][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.818848][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.832716][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.832919][T10042] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 211.838363][T10026] Bluetooth: hci1: command 0x0419 tx timeout [ 211.849494][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.849520][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.849531][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.851108][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.872192][T10042] netlink: 24838 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.994726][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 05:46:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 212.025643][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.051379][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.075125][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.092365][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.111261][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.127915][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.143035][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.158110][ T1713] Bluetooth: hci2: command 0x0419 tx timeout [ 212.170771][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.200161][ T9999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.213092][ T9999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.225368][ T9999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.236919][ T9999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.250329][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.262944][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.286258][ T48] audit: type=1400 audit(1609220818.941:49): avc: denied { open } for pid=10045 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 212.294506][T10046] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 212.306716][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.306761][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.308905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.319230][ T48] audit: type=1400 audit(1609220818.941:50): avc: denied { perfmon } for pid=10045 comm="syz-executor.0" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 212.353789][T10009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 05:46:59 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 212.366701][ T48] audit: type=1400 audit(1609220818.941:51): avc: denied { kernel } for pid=10045 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 212.377309][T10009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.409596][ T48] audit: type=1400 audit(1609220818.941:52): avc: denied { confidentiality } for pid=10045 comm="syz-executor.0" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 212.496985][ T47] Bluetooth: hci3: command 0x0419 tx timeout 05:46:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) [ 212.516133][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.558301][ T48] audit: type=1400 audit(1609220819.221:53): avc: denied { create } for pid=10055 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 212.582630][T10009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.597237][ T48] audit: type=1400 audit(1609220819.221:54): avc: denied { write } for pid=10055 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 212.603572][T10009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.647287][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.675425][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.686497][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.702379][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:46:59 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2188868, &(0x7f00000005c0)) 05:47:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x18, @in=@local, @in6=@mcast2}]}, 0x38}}, 0x0) 05:47:00 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) 05:47:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2188868, &(0x7f00000005c0)) 05:47:00 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2188868, &(0x7f00000005c0)) 05:47:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) 05:47:00 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) 05:47:00 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2188868, &(0x7f00000005c0)) 05:47:00 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 05:47:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) 05:47:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x6e, 0x40000777, 0x0, 0x0) 05:47:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x0) 05:47:00 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x31e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd6f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) unshare(0x40020400) 05:47:00 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x6142, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) [ 213.976298][T10124] IPVS: ftp: loaded support on port[0] = 21 05:47:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 213.996691][T10127] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:47:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000001280)=ANY=[]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f00000012c0)={0x0, 0xfb, 0xe01, 0x0, 0x0, "b4c299ce9f88aae66317975620c06168", "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"}, 0xe01, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000001300)=ANY=[], 0xc001, 0x0) [ 214.010454][ T48] audit: type=1800 audit(1609220820.671:55): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16563 res=0 errno=0 [ 214.083465][ T48] audit: type=1800 audit(1609220820.671:56): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16563 res=0 errno=0 05:47:00 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x31e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd6f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) unshare(0x40020400) [ 214.174039][T10135] loop3: detected capacity change from 512 to 0 [ 214.182065][T10140] IPVS: ftp: loaded support on port[0] = 21 05:47:00 executing program 0: r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e"], 0x44) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 214.225452][T10135] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 05:47:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x7686d6f) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) tkill(r1, 0xb) 05:47:01 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x31e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd6f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) unshare(0x40020400) 05:47:01 executing program 0: r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e"], 0x44) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 05:47:01 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 214.873487][T10161] IPVS: ftp: loaded support on port[0] = 21 05:47:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) 05:47:01 executing program 0: r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e"], 0x44) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 05:47:01 executing program 3: perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 05:47:01 executing program 1: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x31e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd6f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) unshare(0x40020400) [ 215.144465][T10183] IPVS: ftp: loaded support on port[0] = 21 05:47:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, 0x27, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 05:47:03 executing program 3: perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 05:47:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000011000300000000000000000017000000", @ANYRES32=r4], 0x24}}, 0x0) 05:47:03 executing program 0: r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e"], 0x44) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 216.745957][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:03 executing program 3: perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 05:47:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000011000300000000000000000017000000", @ANYRES32=r4], 0x24}}, 0x0) 05:47:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) [ 216.838104][T10199] [ 216.843942][T10199] ============================= [ 216.852383][T10199] WARNING: suspicious RCU usage [ 216.860858][T10199] 5.11.0-rc1-syzkaller #0 Not tainted [ 216.873697][T10199] ----------------------------- 05:47:03 executing program 3: perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 216.882194][T10199] net/wireless/reg.c:144 suspicious rcu_dereference_check() usage! [ 216.895163][T10199] [ 216.895163][T10199] other info that might help us debug this: [ 216.895163][T10199] [ 216.912465][T10199] [ 216.912465][T10199] rcu_scheduler_active = 2, debug_locks = 1 [ 216.923768][T10199] 2 locks held by syz-executor.2/10199: [ 216.930835][T10199] #0: ffffffff8c9cd830 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 216.945739][T10199] #1: ffffffff8c9cd8e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x3e0/0x580 [ 216.957431][T10199] [ 216.957431][T10199] stack backtrace: [ 216.966007][T10199] CPU: 1 PID: 10199 Comm: syz-executor.2 Not tainted 5.11.0-rc1-syzkaller #0 [ 216.975542][T10199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 216.975542][T10199] Call Trace: [ 216.975542][T10199] dump_stack+0x107/0x163 [ 216.975542][T10199] get_wiphy_regdom+0xc3/0xd0 [ 216.975542][T10199] wiphy_apply_custom_regulatory+0x234/0x360 [ 216.975542][T10199] mac80211_hwsim_new_radio+0x1f45/0x4830 [ 216.975542][T10199] ? hwsim_virtio_rx_work+0x350/0x350 [ 217.031454][T10199] ? fs_reclaim_release+0x13/0xe0 [ 217.031454][T10199] hwsim_new_radio_nl+0x9a6/0x10b0 [ 217.046309][T10199] ? mac80211_hwsim_new_radio+0x4830/0x4830 [ 217.046309][T10199] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 217.046309][T10199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x280 [ 217.046309][T10199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 217.046309][T10199] genl_family_rcv_msg_doit+0x228/0x320 [ 217.046309][T10199] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 217.046309][T10199] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 217.046309][T10199] ? cap_capable+0x1f1/0x270 [ 217.046309][T10199] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 217.046309][T10199] ? ns_capable+0xde/0x100 [ 217.046309][T10199] genl_rcv_msg+0x328/0x580 [ 217.046309][T10199] ? genl_get_cmd+0x480/0x480 [ 217.046309][T10199] ? mac80211_hwsim_new_radio+0x4830/0x4830 [ 217.046309][T10199] ? lock_release+0x710/0x710 [ 217.046309][T10199] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 217.046309][T10199] netlink_rcv_skb+0x153/0x420 [ 217.046309][T10199] ? genl_get_cmd+0x480/0x480 [ 217.046309][T10199] ? netlink_ack+0xaa0/0xaa0 [ 217.046309][T10199] genl_rcv+0x24/0x40 [ 217.046309][T10199] netlink_unicast+0x533/0x7d0 [ 217.046309][T10199] ? netlink_attachskb+0x870/0x870 [ 217.046309][T10199] ? _copy_from_iter_full+0x275/0x850 [ 217.046309][T10199] netlink_sendmsg+0x856/0xd90 [ 217.046309][T10199] ? netlink_unicast+0x7d0/0x7d0 [ 217.046309][T10199] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 217.046309][T10199] ? netlink_unicast+0x7d0/0x7d0 [ 217.046309][T10199] sock_sendmsg+0xcf/0x120 [ 217.046309][T10199] ____sys_sendmsg+0x6e8/0x810 [ 217.046309][T10199] ? kernel_sendmsg+0x50/0x50 [ 217.046309][T10199] ? do_recvmmsg+0x6c0/0x6c0 [ 217.046309][T10199] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 217.046309][T10199] ___sys_sendmsg+0xf3/0x170 [ 217.046309][T10199] ? sendmsg_copy_msghdr+0x160/0x160 [ 217.046309][T10199] ? __fget_files+0x266/0x3d0 [ 217.046309][T10199] ? lock_downgrade+0x6d0/0x6d0 [ 217.046309][T10199] ? find_held_lock+0x2d/0x110 [ 217.046309][T10199] ? __fget_files+0x288/0x3d0 [ 217.046309][T10199] ? __fget_light+0xea/0x280 [ 217.046309][T10199] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 217.046309][T10199] __sys_sendmsg+0xe5/0x1b0 [ 217.046309][T10199] ? __sys_sendmsg_sock+0xb0/0xb0 [ 217.046309][T10199] ? __do_sys_futex+0x2a2/0x470 [ 217.046309][T10199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 217.046309][T10199] do_syscall_64+0x2d/0x70 [ 217.046309][T10199] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 217.046309][T10199] RIP: 0033:0x45ddd9 [ 217.046309][T10199] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.046309][T10199] RSP: 002b:00007fe338958c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.046309][T10199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045ddd9 [ 217.046309][T10199] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 217.046309][T10199] RBP: 00000000004aaf1d R08: 0000000000000000 R09: 0000000000000000 [ 217.046309][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf60 [ 217.046309][T10199] R13: 00007fff51d1aacf R14: 00007fe338939000 R15: 0000000000000003 [ 217.516773][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 05:47:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, 0x27, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 05:47:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000011000300000000000000000017000000", @ANYRES32=r4], 0x24}}, 0x0) 05:47:04 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vcsu\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 05:47:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) [ 217.728132][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) 05:47:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, 0x27, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 05:47:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000011000300000000000000000017000000", @ANYRES32=r4], 0x24}}, 0x0) 05:47:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) [ 217.983770][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:04 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) 05:47:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, 0x27, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 05:47:04 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) 05:47:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x3, 0x41) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000300)=@abs, 0x6e, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000002c00)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) dup3(r0, r1, 0x0) 05:47:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x3, 0x41) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000300)=@abs, 0x6e, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000002c00)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) dup3(r0, r1, 0x0) 05:47:05 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) accept4$tipc(r0, 0x0, 0x0, 0x0) 05:47:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) 05:47:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x3, 0x41) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000300)=@abs, 0x6e, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000002c00)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) dup3(r0, r1, 0x0) 05:47:05 executing program 1: syz_mount_image$afs(&(0x7f0000000080)='afs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) 05:47:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0xa, 0x2, "1416"}, 0x0) 05:47:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x3, 0x41) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000300)=@abs, 0x6e, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000002c00)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) dup3(r0, r1, 0x0) [ 219.053000][T10326] kAFS: No cell specified 05:47:05 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f00000086c0)=[{{&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)="a1", 0x1}, {&(0x7f00000001c0)=':', 0x1}], 0x3}}, {{&(0x7f0000000480)=@l2tp={0x2, 0x0, @multicast1}, 0xc, 0x0}}], 0x2, 0x0) 05:47:05 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffea0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) [ 219.104536][T10326] kAFS: No cell specified 05:47:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x200) 05:47:06 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffea0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 05:47:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {0x0, 0x0, 0x0}}, 0x4) 05:47:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) 05:47:06 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffea0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 05:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) 05:47:06 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffea0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 05:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) 05:47:06 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 05:47:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) 05:47:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) 05:47:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) 05:47:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) 05:47:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x0) 05:47:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) [ 220.539951][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.552974][T10381] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x0, 0x4], [], @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 05:47:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) [ 220.602907][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.618477][T10391] xt_cgroup: xt_cgroup: no path or classid specified 05:47:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x0) 05:47:07 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) [ 220.678530][T10397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.689996][T10397] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90a4c, 0x0) 05:47:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x0) [ 221.471601][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:47:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90a4c, 0x0) 05:47:08 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x727}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x0, 0x800004}, 0x0, 0x800002, 0x1f, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) [ 222.067707][ C0] hrtimer: interrupt took 30959 ns VM DIAGNOSIS: 05:47:04 Registers: info registers vcpu 0 RAX=00000000000cc1ab RBX=ffffffff8b0bc000 RCX=ffffffff88ec2730 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=fffffbfff1617800 RSP=ffffffff8b007e40 R8 =0000000000000001 R9 =ffff88802ca35c6b R10=ffffed1005946b8d R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8cef3288 R15=0000000000000000 RIP=ffffffff88ee7bde RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09bed8b000 CR3=000000001df90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffff000000000000ffffff0000000000 XMM01=00000000ff00000000000000000000ff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=2064657a696e676f6365726e75002f40 XMM05=614d6c65766172547c2a323932362a65 XMM06=70736e497c30313131206e6f72697073 XMM07=2d63707276633a3174633a554d45516e XMM08=ffffffffffffffffffffffffffffffff XMM09=00000020202020202020202020202000 XMM10=ffffffffffffffffffffffffffffffff XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8414e53c RDI=ffffffff8fb26ba0 RBP=ffffffff8fb26b60 RSP=ffffc90001506ec0 R8 =000000000000003b R9 =0000000000000030 R10=ffffffff84134f98 R11=000000000000000a R12=0000000000000020 R13=fffffbfff1f64dbf R14=fffffbfff1f64d76 R15=dffffc0000000000 RIP=ffffffff8414e590 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe338959700 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09bed8a000 CR3=000000006cabf000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=545b5d3338333235382e36313220205b XMM01=6c656e72656b2072656c6c616b7a7973 XMM02=6c656e72656b2072656c6c616b7a7973 XMM03=2033303a37343a353020393220636544 XMM04=3220205b203a6c656e72656b2072656c XMM05=6c656e72656b2072656c6c616b7a7973 XMM06=202230656c6966223d656d616e202233 XMM07=313d6f6e69202231616473223d766564 XMM08=ffffff0000000000ff000000000000ff XMM09=00000000000000000000000000000000 XMM10=ffffff00000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=ffff88806fe20d00 RBX=0000000000000002 RCX=ffffffff81588611 RDX=fffffbfff19de652 RSI=0000000000000008 RDI=ffffffff8cef3288 RBP=1ffff9200018cf52 RSP=ffffc90000c67a78 R8 =0000000000000000 R9 =ffffffff8cef328f R10=fffffbfff19de651 R11=0000000000000000 R12=ffffffff8b363860 R13=ffffc90000c67ca8 R14=000000000000000a R15=dffffc0000000000 RIP=ffffffff88ec248d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09bed8b000 CR3=000000002a205000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffff0000000000000000000000000000 XMM01=00006d697377685f313132303863616d XMM02=0000000001528de00000524556495244 XMM03=000000000000ff000000000000ff0000 XMM04=acffff7bacffff7bacffff7eb9002f2f XMM05=2a5d392d305b64746d7c2a5d392d305b XMM06=70736e497c30313131206e6f72697073 XMM07=2d63707276633a3174633a554d45516e XMM08=ffffffffffffffffffffffffffffffff XMM09=00000020202020202020202020202000 XMM10=ffffffffffffffffffffffffffffffff XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=1ffff920001a2f60 RCX=0000000000000000 RDX=ffff88801e06cb40 RSI=ffffffff81673462 RDI=0000000000000003 RBP=ffffc90000d17bb0 RSP=ffffc90000d17ae0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff81673489 R11=0000000000000000 R12=ffff88802cd35d00 R13=0000000000000001 R14=0000000000000003 R15=ffffed10059a6ba1 RIP=ffffffff81673464 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000734338 CR3=0000000069e82000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000001700000000000000004 XMM02=00000000000000000000000000000000 XMM03=00000000000001700000000000000004 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000