last executing test programs: 17m53.824342207s ago: executing program 32 (id=1211): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYBLOB="07b2", @ANYBLOB="341c46"], 0x78) 8m19.780446695s ago: executing program 33 (id=4468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x58, r2, 0xb496be12fe179219, 0x70bd30, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 7m49.516021469s ago: executing program 34 (id=4763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x8, &(0x7f0000000500)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x48}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00'}, 0x94) 7m44.635698629s ago: executing program 35 (id=4814): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000280)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 7m42.558183386s ago: executing program 36 (id=4828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e62, 0xeffffff2, @empty, 0x7f}}, 0x10001fc, 0x6, 0xffff1896, 0x1f4, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6m57.314596603s ago: executing program 8 (id=5181): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x2) 6m57.047859437s ago: executing program 8 (id=5186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0x3e, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 6m55.209652822s ago: executing program 8 (id=5199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) 6m54.988626269s ago: executing program 8 (id=5202): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x1, &(0x7f0000000000)={0x0, 0x23}, &(0x7f0000000080)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x300, 0x70bd2d, 0x25dfdbfe, {0x20, 0xcc7, 0x1, r2, 0x0, 0x3, 0x7, 0xfffffffb, 0x0, 0x10001, 0x684}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 6m54.729917598s ago: executing program 8 (id=5205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000580)={0xa0002008}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x813400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f0000000100)={0x9, 0x4}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m52.684444006s ago: executing program 8 (id=5224): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x11, 0x8137, r1, 0x1, 0xff, 0x6, @broadcast}, 0x14) 6m37.616471125s ago: executing program 37 (id=5224): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x11, 0x8137, r1, 0x1, 0xff, 0x6, @broadcast}, 0x14) 4m4.262616446s ago: executing program 7 (id=6716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m3.818273668s ago: executing program 7 (id=6722): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m3.733597897s ago: executing program 7 (id=6725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m2.936811462s ago: executing program 7 (id=6730): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/14, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000015a6771949"], 0x48}}, 0x20000000) 4m1.901826236s ago: executing program 9 (id=6734): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 4m1.889467005s ago: executing program 7 (id=6735): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m1.617589718s ago: executing program 7 (id=6736): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x2c}}, 0xea5bc50b6199d77e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x98}, 0x1, 0x7}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 4m1.615635605s ago: executing program 9 (id=6737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001740), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251200000008001500c0000000080001008f"], 0x24}}, 0x488c4) 4m1.507344594s ago: executing program 9 (id=6738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) set_mempolicy(0x2, 0x0, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 4m0.437988408s ago: executing program 9 (id=6745): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/15, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000015a6771949"], 0x48}}, 0x20000000) 4m0.374086569s ago: executing program 9 (id=6746): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m0.24635279s ago: executing program 9 (id=6748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdb7b, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x0) 3m54.142041068s ago: executing program 5 (id=6785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m54.058481573s ago: executing program 5 (id=6786): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m54.017263601s ago: executing program 5 (id=6787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x38a, 0x7, 0x102, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c005}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m53.876114642s ago: executing program 5 (id=6788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10b, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 3m53.823780229s ago: executing program 5 (id=6789): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m53.742445249s ago: executing program 5 (id=6790): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12141, 0x0) 3m49.450344309s ago: executing program 2 (id=6825): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x80, 0x2}}, 0x14) 3m48.621164725s ago: executing program 2 (id=6834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0xc]}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3m48.576488389s ago: executing program 2 (id=6835): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 3m48.538436771s ago: executing program 2 (id=6836): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(fcrypt)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x2f, 0x1000000, 0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sendmmsg$alg(r4, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="92dccab6009e4c3cdfbd7bc0c1e68cca0700cb4d0375ad8260b955d19a1325a68191b5c30b16f6c3fe62b02f226a0dc0899b40a2c20429750334976bffa2b6e5b54ddb97407632ae81a61ab35b46ccdcca366e3394ebb7ccfc675099038784", 0x5f}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4089, 0xff9) 3m47.577999553s ago: executing program 2 (id=6846): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m47.470597166s ago: executing program 2 (id=6848): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf3625830f2dbccdf6a8698d0a881c51852e4451ab7d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m46.603924235s ago: executing program 38 (id=6736): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x2c}}, 0xea5bc50b6199d77e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x98}, 0x1, 0x7}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 3m45.258293704s ago: executing program 39 (id=6748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdb7b, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x0) 3m38.629851317s ago: executing program 40 (id=6790): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12141, 0x0) 3m32.412644051s ago: executing program 41 (id=6848): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf3625830f2dbccdf6a8698d0a881c51852e4451ab7d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.278134821s ago: executing program 4 (id=8569): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x2000c000) 3.273615893s ago: executing program 4 (id=8573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) 3.050413546s ago: executing program 3 (id=8575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.793310993s ago: executing program 0 (id=8578): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r3, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.698629808s ago: executing program 1 (id=8579): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x7e) 2.698444447s ago: executing program 4 (id=8580): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 2.64091258s ago: executing program 1 (id=8582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x58, r1, 0x5, 0x0, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x24, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1b, 0x2, "32b6ff0c20f71d9036a0c2ed85fbe89c84024916151c5c"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800007f}]}, 0x58}}, 0x840) 2.600446431s ago: executing program 0 (id=8583): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, '\x00', 0xfffffffffffffdad, 0xffffff5e}) 2.573050553s ago: executing program 1 (id=8584): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202408) keyctl$chown(0x4, r0, 0xee01, 0x0) 2.539097619s ago: executing program 0 (id=8585): r0 = socket(0xa, 0x3, 0x43) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x8, 0xfffffffd}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) futex(&(0x7f0000000140)=0x1, 0xb, 0x1, &(0x7f0000000240), &(0x7f00000002c0), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ext2\x00', 0x2208004, 0x0) 2.513208668s ago: executing program 6 (id=8586): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000040)="f40d009f1b5be3d8728a7917b1673adda389792468af8d104efbcf0086f4f8135927ed1652053f4d139357f2", 0x2c}, {&(0x7f0000000240)="5c3d460c5d3923906b80e2cede0965aea710b209603fb10d9fb0b80aa991fd350cd5be6fc4fa362429299402af8e6f3397a83042f3da344eff72c9423e1e91ccb3e482a3d5f27ee0d88a0cfc4eff60d8cb23d48d6e25a94afcb6bdf80b5dbc66d0bcd63ea37f0c6012bbee98207e82fe0637607fa67e989377781e498250d8f851df75583019a799548c89896a1ac4a86c47e6a0037c6817005d17468a58c9b9a82b3e1f93d2229e803ca2f62a5812c139092f1e68dd4458485682986e110141b4d948366194003ca44ce095e9923825b008eaf48d53445b7f43b8e4063428b7439d892713f4a5d9ad0dc4325ba351ee1be6365bbfb8fe31be", 0xf9}, {&(0x7f00000000c0)="7f9a7c45f369c86cc0798a52ff52b97dee3f2a0be8cefafeb22cafe2fb696246dc09de8801145bfe405648bd473994dfdab30311bfc67e04c5e496d03e2843f0bdee9a2e4d14ca8714cf05145fd8", 0x4e}, {&(0x7f0000000140)="2a4bce1380ac844e964ba53c4e7acfc05ef11f7f032ec2b4e0bb1cc3789c34997c712112a3935d", 0x27}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="016fb69fb3e883257b1365ab201ae100675ee080af1d82ea242904a409111219593c8886575a240650a0808fe948942164dfd7e502e08b98ef576d3aca66af14f40176ba5d3013978433e02e93fca92436b4c41234860fed20c0ab213397eab337294cb41b06527988f4e4bbe1d70cbb20f2d3cc10ee570e76e06e309efbcf4bad711fac5d", 0x85}, {&(0x7f0000000480)="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", 0xff4}, {&(0x7f0000001480)="47ccfdc9bd365e6eae6642b2637674bd7dad26ef58b65c6f7ca4c9a9fb73c3bd79bcd2b20099f1f74f933acb5d47dc1f52eaea4564486451996c00b4caab3a6e4e9c9e4f23ffcbf998068c496007e60665356ec5b761268978e7af0ea917e20c62567cc4c824946d5acf2146abf67f671d9c9c1e22ad1c15", 0x78}], 0x8}}], 0x1, 0x20040000) 2.509498717s ago: executing program 3 (id=8587): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2.445999593s ago: executing program 1 (id=8588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000007c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 2.392749033s ago: executing program 3 (id=8589): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0}) close(0x3) 2.32876535s ago: executing program 6 (id=8590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.826333363s ago: executing program 3 (id=8591): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x8002e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x0, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.742577239s ago: executing program 4 (id=8592): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x7e) 1.696524587s ago: executing program 6 (id=8593): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x2, 0x1, 0x1}) 1.650268927s ago: executing program 4 (id=8594): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r10 = socket(0x10, 0x2, 0x0) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.502946103s ago: executing program 1 (id=8595): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 1.502061656s ago: executing program 3 (id=8596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000040)="c00b1edcc81f", 0x6}], 0x1, &(0x7f0000001540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x5c}}}], 0x30}}], 0x1, 0x2400c014) 1.501274777s ago: executing program 0 (id=8597): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) syncfs(r1) 985.902701ms ago: executing program 0 (id=8598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x1000, @mcast2}}, 0x0, 0x0, 0x22, 0x0, "ea83d2fe2ad7adfd1fe8da372e62d7ea7fcbf51da968b33030bc376794a9f0e89b4d1b459fcb501a64f984737858507e03ee092d2c143be48c3193017f1a57c57f705eedfb293432322e05e82b3f88a7"}, 0xd8) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) 880.241352ms ago: executing program 0 (id=8599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 658.330891ms ago: executing program 4 (id=8600): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000040)="f40d009f1b5be3d8728a7917b1673adda389792468af8d104efbcf0086f4f8135927ed1652053f4d139357f2", 0x2c}, {&(0x7f0000000240)="5c3d460c5d3923906b80e2cede0965aea710b209603fb10d9fb0b80aa991fd350cd5be6fc4fa362429299402af8e6f3397a83042f3da344eff72c9423e1e91ccb3e482a3d5f27ee0d88a0cfc4eff60d8cb23d48d6e25a94afcb6bdf80b5dbc66d0bcd63ea37f0c6012bbee98207e82fe0637607fa67e989377781e498250d8f851df75583019a799548c89896a1ac4a86c47e6a0037c6817005d17468a58c9b9a82b3e1f93d2229e803ca2f62a5812c139092f1e68dd4458485682986e110141b4d948366194003ca44ce095e9923825b008eaf48d53445b7f43b8e4063428b7439d892713f4a5d9ad0dc4325ba351ee1be6365bbfb8fe31be", 0xf9}, {&(0x7f00000000c0)="7f9a7c45f369c86cc0798a52ff52b97dee3f2a0be8cefafeb22cafe2fb696246dc09de8801145bfe405648bd473994dfdab30311bfc67e04c5e496d03e2843f0bdee9a2e4d14ca8714cf05145fd80e", 0x4f}, {&(0x7f0000000140)="2a4bce1380ac844e964ba53c4e7acfc05ef11f7f032ec2b4e0bb1cc3789c34997c712112a3935d", 0x27}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="016fb69fb3e883257b1365ab201ae100675ee080af1d82ea242904a409111219593c8886575a240650a0808fe948942164dfd7e502e08b98ef576d3aca66af14f40176ba5d3013978433e02e93fca92436b4c41234860fed20c0ab213397eab337294cb41b06527988f4e4bbe1d70cbb20f2d3cc10ee570e76e06e309efbcf4bad711fac5d", 0x85}, {&(0x7f0000000480)="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", 0xff4}, {&(0x7f0000001480)="47ccfdc9bd365e6eae6642b2637674bd7dad26ef58b65c6f7ca4c9a9fb73c3bd79bcd2b20099f1f74f933acb5d47dc1f52eaea4564486451996c00b4caab3a6e4e9c9e4f23ffcbf998068c496007e60665356ec5b761268978e7af0ea917e20c62567cc4c824946d5acf2146abf67f671d9c9c1e22ad1c15", 0x78}], 0x8}}], 0x1, 0x20040000) 174.47598ms ago: executing program 6 (id=8601): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) close(0x3) 106.886197ms ago: executing program 1 (id=8602): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 106.527403ms ago: executing program 3 (id=8603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230800000000030000000b00000008000300", @ANYRES32=r5], 0x48}}, 0x40000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0x0, @val={0x8c, 0x10, {0xb04, "8101c39cce7e", @short="3961bc13d6679f1e"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) 75.998471ms ago: executing program 6 (id=8604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\b', 0x1, 0xc0d0, 0x0, 0x0) close(r0) 0s ago: executing program 6 (id=8605): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x50020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.7.6503'. [ 1021.075991][ T5620] Bluetooth: hci5: unexpected event for opcode 0x0002 [ 1021.658370][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6522'. [ 1022.244689][ T5620] block nbd5: Receive control failed (result -32) [ 1022.246205][T25766] block nbd5: shutting down sockets [ 1022.435010][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6527'. [ 1023.402604][ T5620] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1023.420525][ T5620] Bluetooth: hci0: Injecting HCI hardware error event [ 1023.431190][ T5612] Bluetooth: hci0: hardware error 0x00 [ 1023.456230][T25817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6536'. [ 1023.648227][T25823] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6540'. [ 1023.767631][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1024.189812][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6551'. [ 1024.200448][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6551'. [ 1024.571060][T25830] block nbd2: shutting down sockets [ 1024.945681][ T30] audit: type=1400 audit(2000000218.860:753): avc: denied { setattr } for pid=25855 comm="syz.2.6553" name="file0" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1025.758170][ T5612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1025.837061][ T30] audit: type=1400 audit(2000000219.310:754): avc: denied { append } for pid=25861 comm="syz.9.6555" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1026.735239][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6562'. [ 1026.764203][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6562'. [ 1029.286099][ T5612] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1030.378392][T25979] bond1: left promiscuous mode [ 1030.398019][T25979] bond2: left promiscuous mode [ 1030.425906][T25979] bond3: left promiscuous mode [ 1031.646362][T26008] fuse: Bad value for 'fd' [ 1031.682387][T26011] fuse: Invalid rootmode [ 1031.727527][T26012] tipc: Started in network mode [ 1031.762120][T26012] tipc: Node identity 368925314d8c, cluster identity 4711 [ 1031.820025][T26012] tipc: Enabled bearer , priority 0 [ 1031.844292][T26014] syzkaller0: entered promiscuous mode [ 1031.855208][T26014] syzkaller0: entered allmulticast mode [ 1031.963341][ T30] audit: type=1400 audit(2000000225.860:755): avc: denied { create } for pid=26025 comm="syz.4.6618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1031.995646][T26012] tipc: Resetting bearer [ 1032.008407][ T30] audit: type=1400 audit(2000000225.860:756): avc: denied { ioctl } for pid=26025 comm="syz.4.6618" path="socket:[76087]" dev="sockfs" ino=76087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1032.176663][T26010] tipc: Resetting bearer [ 1032.207727][T26010] tipc: Disabling bearer [ 1032.432495][ T5612] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1033.548405][ T30] audit: type=1400 audit(2000000227.470:757): avc: denied { setopt } for pid=26062 comm="syz.9.6632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1033.626212][ T30] audit: type=1400 audit(2000000227.510:758): avc: denied { listen } for pid=26062 comm="syz.9.6632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1033.700991][ T30] audit: type=1400 audit(2000000227.510:759): avc: denied { write } for pid=26062 comm="syz.9.6632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1033.739335][ T30] audit: type=1400 audit(2000000227.510:760): avc: denied { accept } for pid=26062 comm="syz.9.6632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1033.859912][T26073] bridge0: port 3(gretap0) entered blocking state [ 1033.867525][T26073] bridge0: port 3(gretap0) entered disabled state [ 1033.876843][T26073] gretap0: entered allmulticast mode [ 1033.893243][T26073] gretap0: entered promiscuous mode [ 1033.915390][T26073] gretap0: left allmulticast mode [ 1033.921442][T26073] gretap0: left promiscuous mode [ 1033.927688][T26073] bridge0: port 3(gretap0) entered disabled state [ 1035.323105][ T5612] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1036.834706][T26116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=26116 comm=syz.7.6652 [ 1036.906556][T26116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=26116 comm=syz.7.6652 [ 1036.931833][T26119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6654'. [ 1036.957902][T26116] netlink: 'syz.7.6652': attribute type 27 has an invalid length. [ 1037.004281][T26116] netlink: 'syz.7.6652': attribute type 4 has an invalid length. [ 1037.199284][T26116] netlink: 144 bytes leftover after parsing attributes in process `syz.7.6652'. [ 1038.154640][T26137] random: crng reseeded on system resumption [ 1038.157281][ T30] audit: type=1400 audit(2000000232.080:761): avc: denied { write } for pid=26136 comm="syz.9.6659" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1038.310301][T26144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6665'. [ 1038.447600][T26148] tipc: Enabled bearer , priority 0 [ 1038.457690][T26152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=26152 comm=syz.4.6668 [ 1038.470769][T26148] syzkaller0: entered promiscuous mode [ 1038.479147][T26148] syzkaller0: entered allmulticast mode [ 1038.492366][T26152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=26152 comm=syz.4.6668 [ 1038.527446][T26148] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6666'. [ 1038.539992][T26152] netlink: 'syz.4.6668': attribute type 27 has an invalid length. [ 1038.595671][T26152] netlink: 'syz.4.6668': attribute type 4 has an invalid length. [ 1038.604852][T26152] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6668'. [ 1038.641176][T26148] tipc: Resetting bearer [ 1038.674551][T26147] tipc: Resetting bearer [ 1038.780422][T26147] tipc: Disabling bearer [ 1040.269808][T26210] vlan0: left promiscuous mode [ 1040.345344][T26210] bond1: left promiscuous mode [ 1040.355584][T26210] bond3: left promiscuous mode [ 1040.855535][ T5612] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 1041.113674][T26224] syzkaller0: entered promiscuous mode [ 1041.134814][T26224] syzkaller0: entered allmulticast mode [ 1041.327093][ T9820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.454222][ T5612] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 1043.520504][T26265] syzkaller0: entered promiscuous mode [ 1043.563921][T26265] syzkaller0: entered allmulticast mode [ 1043.967603][T26291] fuse: Bad value for 'fd' [ 1044.194037][T26303] tipc: Enabled bearer , priority 0 [ 1044.201176][T26303] syzkaller0: entered promiscuous mode [ 1044.207109][T26303] syzkaller0: entered allmulticast mode [ 1044.221197][T26302] tipc: Resetting bearer [ 1044.278265][T26302] tipc: Disabling bearer [ 1044.952393][ T5612] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1044.966315][ T5612] Bluetooth: hci1: Injecting HCI hardware error event [ 1044.975794][ T5612] Bluetooth: hci1: hardware error 0x00 [ 1045.923649][T26324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=26324 comm=syz.9.6734 [ 1045.949787][T26324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=26324 comm=syz.9.6734 [ 1045.974764][T26324] netlink: 'syz.9.6734': attribute type 27 has an invalid length. [ 1045.991974][T26324] netlink: 'syz.9.6734': attribute type 4 has an invalid length. [ 1046.008366][T26324] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6734'. [ 1046.082618][T26328] tipc: Enabled bearer , priority 0 [ 1046.114903][T26328] syzkaller0: entered promiscuous mode [ 1046.138268][T26328] syzkaller0: entered allmulticast mode [ 1046.203857][T26328] tipc: Resetting bearer [ 1046.249954][T26327] tipc: Resetting bearer [ 1046.288313][T26327] tipc: Disabling bearer [ 1046.435728][ T5620] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1046.532807][ T5620] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1046.549030][ T5620] Bluetooth: hci2: Injecting HCI hardware error event [ 1046.558297][T26338] tipc: Enabled bearer , priority 0 [ 1046.559659][ T5620] Bluetooth: hci2: hardware error 0x00 [ 1046.574722][T26338] syzkaller0: entered promiscuous mode [ 1046.588925][T26338] syzkaller0: entered allmulticast mode [ 1046.615339][T26337] tipc: Resetting bearer [ 1046.641289][T26337] tipc: Disabling bearer [ 1047.252831][ T5612] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1047.328686][T26350] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1047.407423][T26354] tipc: Enabled bearer , priority 0 [ 1047.415293][T26354] syzkaller0: entered promiscuous mode [ 1047.420893][T26354] syzkaller0: entered allmulticast mode [ 1047.433532][T26354] tipc: Resetting bearer [ 1047.442031][T26353] tipc: Resetting bearer [ 1047.460146][T26353] tipc: Disabling bearer [ 1047.616468][T26360] fuse: Bad value for 'fd' [ 1048.908947][ T5620] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1049.219156][T26386] fuse: Unknown parameter 'user_i00000000000000000000' [ 1049.482314][T26399] syzkaller0: entered promiscuous mode [ 1049.487894][T26399] syzkaller0: entered allmulticast mode [ 1049.507280][T26401] tipc: Started in network mode [ 1049.512298][T26401] tipc: Node identity a6b699af9817, cluster identity 4711 [ 1049.519647][T26401] tipc: Enabled bearer , priority 0 [ 1049.558857][T26401] syzkaller0: entered promiscuous mode [ 1049.564568][T26401] syzkaller0: entered allmulticast mode [ 1050.116665][T26404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6768'. [ 1050.448279][ T5612] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1050.459963][ T5612] Bluetooth: hci4: Injecting HCI hardware error event [ 1050.506786][ T5620] Bluetooth: hci4: hardware error 0x00 [ 1051.896098][T26401] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1051.906749][T26400] tipc: Resetting bearer [ 1051.926705][T26400] tipc: Disabling bearer [ 1051.939366][ T5711] tipc: Node number set to 1050778031 [ 1052.185834][T26424] netlink: 'syz.2.6777': attribute type 1 has an invalid length. [ 1052.250223][T26424] bond3: entered promiscuous mode [ 1052.257177][T26424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1052.300746][T26426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6777'. [ 1052.330062][T26424] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1052.347427][T26424] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1052.702429][ T5620] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1052.870274][T26424] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1053.569861][T26449] tipc: Enabled bearer , priority 0 [ 1053.585086][T26449] syzkaller0: entered promiscuous mode [ 1053.590563][T26449] syzkaller0: entered allmulticast mode [ 1053.600776][T26449] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6785'. [ 1053.611520][T26448] tipc: Resetting bearer [ 1053.631877][T26448] tipc: Disabling bearer [ 1053.735043][T26453] tipc: Enabled bearer , priority 0 [ 1053.745101][T26453] syzkaller0: entered promiscuous mode [ 1053.750669][T26453] syzkaller0: entered allmulticast mode [ 1053.761398][T26453] tipc: Resetting bearer [ 1053.768636][T26452] tipc: Resetting bearer [ 1053.788189][T26452] tipc: Disabling bearer [ 1053.869091][T26455] binder: 26454:26455 ioctl c0306201 200000000040 returned -22 [ 1053.878691][T26455] binder: 26454:26455 ioctl c0306201 200000000640 returned -22 [ 1054.213568][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.219910][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.328260][T26459] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6791'. [ 1054.544404][T26469] tipc: Enabled bearer , priority 0 [ 1054.551661][T26469] syzkaller0: entered promiscuous mode [ 1054.557201][T26469] syzkaller0: entered allmulticast mode [ 1054.566189][T26469] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1054.578010][T26468] tipc: Resetting bearer [ 1054.601527][T26468] tipc: Disabling bearer [ 1054.675701][T26473] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1054.687415][T26472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.130223][ T30] audit: type=1326 audit(2000000250.050:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.158533][ T30] audit: type=1326 audit(2000000250.050:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.187948][ T30] audit: type=1326 audit(2000000250.050:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.215324][ T30] audit: type=1326 audit(2000000250.050:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.243464][ T30] audit: type=1326 audit(2000000250.050:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.271179][ T30] audit: type=1400 audit(2000000250.050:767): avc: denied { bind } for pid=26490 comm="syz.4.6805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1056.294613][ T30] audit: type=1326 audit(2000000250.050:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.318268][T26497] tipc: Enabled bearer , priority 0 [ 1056.322345][ T30] audit: type=1326 audit(2000000250.050:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.333111][T26497] syzkaller0: entered promiscuous mode [ 1056.357763][ T30] audit: type=1326 audit(2000000250.050:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.360680][T26497] syzkaller0: entered allmulticast mode [ 1056.396573][ T30] audit: type=1326 audit(2000000250.050:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26490 comm="syz.4.6805" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92a8d9cdd9 code=0x7ffc0000 [ 1056.415806][T26497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6808'. [ 1056.436868][T26497] tipc: Resetting bearer [ 1056.445561][T26496] tipc: Resetting bearer [ 1056.465644][T26496] tipc: Disabling bearer [ 1057.126766][T26515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6816'. [ 1057.251353][T26523] netlink: 'syz.4.6820': attribute type 1 has an invalid length. [ 1057.270679][T26523] bond1: entered promiscuous mode [ 1057.276257][T26523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1057.287776][T26523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6820'. [ 1057.301913][T26523] bond1: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1057.314497][T26523] bond1: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 1057.324789][T26523] bond1: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 1057.760447][T26536] binder: 26533:26536 ioctl c0306201 200000000540 returned -22 [ 1058.593779][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1058.605047][T26555] netlink: 'syz.4.6831': attribute type 3 has an invalid length. [ 1058.613030][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1058.624191][T26555] netlink: 'syz.4.6831': attribute type 3 has an invalid length. [ 1059.417051][T26568] binder: 26565:26568 ioctl c0306201 200000000540 returned -22 [ 1059.619664][T26570] tipc: Enabled bearer , priority 0 [ 1059.632957][T26570] tipc: Resetting bearer [ 1059.655333][T26569] tipc: Disabling bearer [ 1060.022116][T26585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1060.033379][T26585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1060.095752][T26587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=26587 comm=syz.4.6845 [ 1060.108895][T26587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=26587 comm=syz.4.6845 [ 1060.121871][T26587] netlink: 'syz.4.6845': attribute type 27 has an invalid length. [ 1060.135292][T26587] netlink: 'syz.4.6845': attribute type 4 has an invalid length. [ 1060.143362][T26587] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6845'. [ 1061.071383][T26594] netlink: 'syz.4.6849': attribute type 4 has an invalid length. [ 1061.085258][T26594] netlink: 'syz.4.6849': attribute type 4 has an invalid length. [ 1061.249914][T25509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1061.259996][T25509] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1061.273871][T25509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1061.289190][T25509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1061.296833][T25509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.655318][T26599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.663189][T26599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.670354][T26599] bridge_slave_0: entered allmulticast mode [ 1061.677641][T26599] bridge_slave_0: entered promiscuous mode [ 1061.685309][T26599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.692604][T26599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.699765][T26599] bridge_slave_1: entered allmulticast mode [ 1061.706835][T26599] bridge_slave_1: entered promiscuous mode [ 1061.730174][T26599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.742354][T26599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.767292][T26599] team0: Port device team_slave_0 added [ 1061.774654][T26599] team0: Port device team_slave_1 added [ 1061.795054][T26599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.802003][T26599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.828162][T26599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.840121][T26599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.847958][T26599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.874511][T26599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.914850][T26599] hsr_slave_0: entered promiscuous mode [ 1061.920981][T26599] hsr_slave_1: entered promiscuous mode [ 1061.927124][T26599] debugfs: 'hsr0' already exists in 'hsr' [ 1061.933081][T26599] Cannot create hsr debugfs directory [ 1062.135313][T26599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.242408][T26599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.322251][T26599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.388477][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1062.388492][ T30] audit: type=1400 audit(2000000256.310:780): avc: denied { bind } for pid=26621 comm="syz.4.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1062.467034][T26599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.822890][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1062.829635][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1062.830399][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1062.831205][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1062.831732][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1063.034397][T26599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1063.108014][T26599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.116769][T26599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1063.151357][T26599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.163337][T26599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1063.176126][T26599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.208333][T26599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1063.217875][T26599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.317328][T26599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.350608][T26599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.382716][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.389911][ T9820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.402397][ T5612] Bluetooth: hci3: command tx timeout [ 1063.460775][ T1121] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.495099][T23370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.502305][T23370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.569174][T26646] binder: 26645:26646 ioctl c0306201 200000000040 returned -22 [ 1063.578422][T26646] binder: 26645:26646 ioctl c0306201 200000000640 returned -22 [ 1063.630556][ T1121] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.685092][ T1121] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.765159][ T1121] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.126724][ T1121] bridge_slave_1: left allmulticast mode [ 1064.132508][ T1121] bridge_slave_1: left promiscuous mode [ 1064.138346][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.149391][ T1121] bridge_slave_0: left allmulticast mode [ 1064.155449][ T1121] bridge_slave_0: left promiscuous mode [ 1064.161202][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.306987][ T1121] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1064.369715][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.380230][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.391401][ T1121] bond0 (unregistering): Released all slaves [ 1064.401622][ T1121] bond1 (unregistering): Released all slaves [ 1064.415613][ T1121] bond2 (unregistering): Released all slaves [ 1064.429350][ T1121] bond3 (unregistering): Released all slaves [ 1064.576247][T26627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.597518][T26627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.605704][T26627] bridge_slave_0: entered allmulticast mode [ 1064.628533][T26627] bridge_slave_0: entered promiscuous mode [ 1064.637310][ T1121] tipc: Left network mode [ 1064.637926][T26627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.648915][T26627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.656636][T26627] bridge_slave_1: entered allmulticast mode [ 1064.664313][T26627] bridge_slave_1: entered promiscuous mode [ 1064.789235][T26627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.824729][T26627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.928163][T26599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.944080][T26627] team0: Port device team_slave_0 added [ 1064.971981][T26627] team0: Port device team_slave_1 added [ 1065.026411][ T1121] hsr_slave_0: left promiscuous mode [ 1065.036710][ T1121] hsr_slave_1: left promiscuous mode [ 1065.051217][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.060940][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.075221][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.088765][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.121267][ T1121] veth1_macvtap: left promiscuous mode [ 1065.127043][T26686] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1065.137045][ T1121] veth0_macvtap: left promiscuous mode [ 1065.162932][ T5612] Bluetooth: hci5: command tx timeout [ 1065.275566][ T30] audit: type=1400 audit(2000000259.190:781): avc: denied { write } for pid=26673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.455886][ T30] audit: type=1400 audit(2000000259.380:782): avc: denied { write } for pid=26699 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.488765][ T5612] Bluetooth: hci3: command tx timeout [ 1065.506512][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 1065.558260][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 1065.770677][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1065.789978][T26627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.800970][T26627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.830870][T26627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.846657][T26627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.853753][T26627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.880848][T26627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.972209][T26627] hsr_slave_0: entered promiscuous mode [ 1065.978905][T26627] hsr_slave_1: entered promiscuous mode [ 1065.985420][T26627] debugfs: 'hsr0' already exists in 'hsr' [ 1065.991177][T26627] Cannot create hsr debugfs directory [ 1066.054489][T26599] veth0_vlan: entered promiscuous mode [ 1066.092082][T26599] veth1_vlan: entered promiscuous mode [ 1066.195537][T26599] veth0_macvtap: entered promiscuous mode [ 1066.220010][T26599] veth1_macvtap: entered promiscuous mode [ 1066.281791][T26599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.403283][T26599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.444659][T12550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.455576][ T30] audit: type=1400 audit(2000000260.380:783): avc: denied { write } for pid=26706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.472915][T12550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.489916][T12550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.575868][T12550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.585237][ T30] audit: type=1400 audit(2000000260.500:784): avc: denied { write } for pid=26717 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.835780][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1066.876737][ T6903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.894342][ T6903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.944531][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.958803][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.072006][T26627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1067.085524][T26627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.093886][T26627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1067.104506][T26627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.117540][T26627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1067.142784][T26627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.163609][T26627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1067.200631][T26627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.252393][ T5612] Bluetooth: hci5: command tx timeout [ 1067.331963][T26627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.354749][T26627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.368527][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.375718][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.439768][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.446966][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.579242][ T5612] Bluetooth: hci3: command tx timeout [ 1068.048726][ T30] audit: type=1400 audit(2000000261.970:785): avc: denied { write } for pid=26726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.217551][ T30] audit: type=1400 audit(2000000262.140:786): avc: denied { write } for pid=26757 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.301005][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1068.710015][ T30] audit: type=1400 audit(2000000262.630:787): avc: denied { write } for pid=26771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.869976][ T30] audit: type=1400 audit(2000000262.790:788): avc: denied { write } for pid=26788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.958673][T26627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.968705][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1069.030076][T26627] veth0_vlan: entered promiscuous mode [ 1069.049052][T26627] veth1_vlan: entered promiscuous mode [ 1069.105690][T26627] veth0_macvtap: entered promiscuous mode [ 1069.144867][T26627] veth1_macvtap: entered promiscuous mode [ 1069.200949][T26627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.230525][T26627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.289694][T12550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.322396][ T5612] Bluetooth: hci5: command tx timeout [ 1069.332913][T12550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.375571][T12550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.414601][T12550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.455909][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1069.481240][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1069.494756][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1069.507385][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1069.517029][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1069.642412][ T5620] Bluetooth: hci3: command tx timeout [ 1069.845697][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.898876][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.921352][ T30] audit: type=1400 audit(2000000263.840:789): avc: denied { write } for pid=26791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.087454][ T30] audit: type=1400 audit(2000000264.010:790): avc: denied { write } for pid=26824 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.213420][T13910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.221300][T13910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.441108][T26838] fuse: Bad value for 'fd' [ 1070.644198][ T5620] block nbd3: Receive control failed (result -32) [ 1070.660426][T26817] block nbd3: shutting down sockets [ 1070.847927][ T30] audit: type=1400 audit(2000000264.770:791): avc: denied { write } for pid=26829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.128004][ T30] audit: type=1400 audit(2000000265.050:792): avc: denied { write } for pid=26852 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.402490][ T5620] Bluetooth: hci5: command tx timeout [ 1071.580726][ T5620] Bluetooth: hci0: command tx timeout [ 1071.639952][T26865] bridge0: port 3(gretap0) entered blocking state [ 1071.646798][T26865] bridge0: port 3(gretap0) entered disabled state [ 1071.655895][T26865] gretap0: entered allmulticast mode [ 1071.668716][T26865] gretap0: entered promiscuous mode [ 1071.675978][T26865] bridge0: port 3(gretap0) entered blocking state [ 1071.682554][T26865] bridge0: port 3(gretap0) entered forwarding state [ 1072.894006][ T30] audit: type=1400 audit(2000000266.820:793): avc: denied { write } for pid=26857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.362638][ T30] audit: type=1400 audit(2000000267.260:794): avc: denied { write } for pid=26879 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.411612][T26882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1073.650410][T26802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.667995][T26802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.681535][T26802] bridge_slave_0: entered allmulticast mode [ 1073.694108][T26802] bridge_slave_0: entered promiscuous mode [ 1073.702532][T26802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.709730][T26802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.718885][T26802] bridge_slave_1: entered allmulticast mode [ 1073.722389][ T5620] Bluetooth: hci0: command tx timeout [ 1073.728329][T26802] bridge_slave_1: entered promiscuous mode [ 1073.768857][T26904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1073.771351][T26903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=26903 comm=syz.4.6899 [ 1073.817703][T26802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.873554][T26802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.995159][T26802] team0: Port device team_slave_0 added [ 1074.030016][T26802] team0: Port device team_slave_1 added [ 1074.567646][T26918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1074.610295][ T29] team_slave_0: entered promiscuous mode [ 1074.616042][ T29] team_slave_1: entered promiscuous mode [ 1074.646924][T26802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.667924][T26802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.696899][T26928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1074.708748][T26802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.740067][T26802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.750552][T26802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.784452][T26802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.868105][ T30] audit: type=1400 audit(2000000268.790:795): avc: denied { write } for pid=26905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.895046][T26802] hsr_slave_0: entered promiscuous mode [ 1074.907983][T26802] hsr_slave_1: entered promiscuous mode [ 1074.918820][T26802] debugfs: 'hsr0' already exists in 'hsr' [ 1074.926074][T26802] Cannot create hsr debugfs directory [ 1074.972675][T26933] fuse: Unknown parameter '0x0000000000000004' [ 1075.023959][ T30] audit: type=1400 audit(2000000268.950:796): avc: denied { write } for pid=26936 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.078930][T26943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6910'. [ 1075.125743][T26943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6910'. [ 1075.204929][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6911'. [ 1075.292577][T26802] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.614431][T26802] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.640769][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1075.660224][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1075.672515][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1075.685743][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1075.700589][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1075.711414][ T30] audit: type=1400 audit(2000000269.630:797): avc: denied { write } for pid=26946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.804237][ T5612] Bluetooth: hci0: command tx timeout [ 1075.846468][ T30] audit: type=1400 audit(2000000269.770:798): avc: denied { write } for pid=26972 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.978638][T26802] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.198215][T26802] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.276895][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6923'. [ 1076.390186][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.462062][T27005] tipc: Enabling of bearer rejected, failed to enable media [ 1076.560535][ T30] audit: type=1400 audit(2000000270.480:799): avc: denied { write } for pid=26981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.706620][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.757857][ T30] audit: type=1400 audit(2000000270.680:800): avc: denied { write } for pid=27014 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.865000][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.037259][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.359606][T26802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1077.375663][ T30] audit: type=1400 audit(2000000271.300:801): avc: denied { write } for pid=27023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.413515][T26802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.475451][T26802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1077.511953][T26802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.543207][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6933'. [ 1077.563028][T26802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1077.592727][ T30] audit: type=1400 audit(2000000271.510:802): avc: denied { write } for pid=27044 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.630830][T26802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.766130][T26802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1077.802512][ T5612] Bluetooth: hci4: command tx timeout [ 1077.803076][T26802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.888939][ T5612] Bluetooth: hci0: command tx timeout [ 1078.154555][ T12] veth0_virt_wifi: left allmulticast mode [ 1078.171970][ T12] veth0_virt_wifi: left promiscuous mode [ 1078.186900][ T12] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1078.205774][ T12] bridge_slave_1: left allmulticast mode [ 1078.224005][ T12] bridge_slave_1: left promiscuous mode [ 1078.246087][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.274778][ T12] bridge_slave_0: left allmulticast mode [ 1078.286441][ T12] bridge_slave_0: left promiscuous mode [ 1078.299158][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.464710][ T30] audit: type=1400 audit(2000000272.390:803): avc: denied { write } for pid=27055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.590478][ T30] audit: type=1400 audit(2000000272.510:804): avc: denied { write } for pid=27087 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.774952][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.795743][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.814522][ T12] bond0 (unregistering): Released all slaves [ 1078.827076][ T12] bond1 (unregistering): Released all slaves [ 1078.846351][ T12] bond2 (unregistering): Released all slaves [ 1078.895239][ T12] bond3 (unregistering): Released all slaves [ 1078.991017][ T30] audit: type=1400 audit(2000000272.910:805): avc: denied { write } for pid=27089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.128898][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6946'. [ 1079.206403][ T30] audit: type=1400 audit(2000000273.130:806): avc: denied { write } for pid=27113 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.269435][T27115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1079.300708][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1079.410428][T26964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.419151][T26964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.427357][T26964] bridge_slave_0: entered allmulticast mode [ 1079.436068][T26964] bridge_slave_0: entered promiscuous mode [ 1079.444672][T26964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.451803][T26964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.459520][T26964] bridge_slave_1: entered allmulticast mode [ 1079.467085][T26964] bridge_slave_1: entered promiscuous mode [ 1079.605981][T26964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.626967][T26964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.728202][T26964] team0: Port device team_slave_0 added [ 1079.766032][T26964] team0: Port device team_slave_1 added [ 1079.830042][ T12] hsr_slave_0: left promiscuous mode [ 1079.857520][ T12] hsr_slave_1: left promiscuous mode [ 1079.874028][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.883078][ T5612] Bluetooth: hci4: command tx timeout [ 1079.901093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.920857][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.939134][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.954960][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1079.979528][ T12] veth1_macvtap: left promiscuous mode [ 1079.994719][ T12] veth0_macvtap: left promiscuous mode [ 1080.005182][ T12] veth1_vlan: left promiscuous mode [ 1080.017735][T27142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1080.029870][ T12] veth0_vlan: left promiscuous mode [ 1080.137895][ T30] audit: type=1400 audit(2000000274.060:807): avc: denied { write } for pid=27123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.414464][ T30] audit: type=1400 audit(2000000274.330:808): avc: denied { write } for pid=27149 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.613404][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1080.649443][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1081.130012][T26802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.142206][T26964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.193097][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.246254][ T30] audit: type=1400 audit(2000000275.160:809): avc: denied { write } for pid=27154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.255972][T26964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.318448][T26964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.353348][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.377777][ T30] audit: type=1400 audit(2000000275.300:810): avc: denied { write } for pid=27179 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.440254][T26964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.538471][T27183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=27183 comm=syz.3.6962 [ 1081.595789][T27183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27183 comm=syz.3.6962 [ 1081.659537][T27183] netlink: 'syz.3.6962': attribute type 27 has an invalid length. [ 1081.683853][T26964] hsr_slave_0: entered promiscuous mode [ 1081.690061][T27183] netlink: 'syz.3.6962': attribute type 4 has an invalid length. [ 1081.714448][T26964] hsr_slave_1: entered promiscuous mode [ 1081.720150][T27183] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1081.737944][T26964] debugfs: 'hsr0' already exists in 'hsr' [ 1081.748090][T26964] Cannot create hsr debugfs directory [ 1081.776907][T26802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.918783][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.925986][ T6903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.962406][ T5612] Bluetooth: hci4: command tx timeout [ 1082.033734][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.040903][ T6903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.073648][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6967'. [ 1082.278467][ T30] audit: type=1400 audit(2000000276.200:811): avc: denied { write } for pid=27184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.315213][T27207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6969'. [ 1082.345721][T27207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6969'. [ 1082.360522][T26802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.476751][ T30] audit: type=1400 audit(2000000276.400:812): avc: denied { write } for pid=27213 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.024334][T27243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6978'. [ 1084.043387][ T5612] Bluetooth: hci4: command tx timeout [ 1084.871385][T26964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1084.911630][T26964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.931628][T26964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1084.945564][T26964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.960542][T26802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.979611][T26964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1085.024070][ T30] audit: type=1400 audit(2000000278.930:813): avc: denied { write } for pid=27233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.140094][T27277] binder: 27276:27277 ioctl c0306201 0 returned -14 [ 1085.266570][T26964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.275611][T26964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1085.305672][T26964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.396519][ T30] audit: type=1400 audit(2000000279.310:814): avc: denied { write } for pid=27278 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.484826][T27291] No control pipe specified [ 1085.524527][T27293] tipc: Enabling of bearer rejected, failed to enable media [ 1085.545858][T26964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.613645][T26964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.635261][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1085.702055][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.709246][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.939012][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.946246][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.857639][T26964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1086.868501][T26964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.248930][T26802] veth0_vlan: entered promiscuous mode [ 1087.308675][T26802] veth1_vlan: entered promiscuous mode [ 1087.500211][T26802] veth0_macvtap: entered promiscuous mode [ 1087.567752][T26802] veth1_macvtap: entered promiscuous mode [ 1087.670945][T26802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.745696][T26802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.817179][ T1033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.849218][ T1033] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.884060][ T1033] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.918052][T27360] No control pipe specified [ 1087.940307][ T1033] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.065860][ T30] audit: type=1400 audit(2000000281.990:815): avc: denied { write } for pid=27332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.251066][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.302457][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.442910][ T30] audit: type=1400 audit(2000000282.360:816): avc: denied { write } for pid=27367 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.518127][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.559001][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.104353][T26964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.428595][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1089.525321][T27390] __nla_validate_parse: 1 callbacks suppressed [ 1089.525341][T27390] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6879'. [ 1089.608166][T27392] syzkaller0: entered promiscuous mode [ 1089.624256][T27392] syzkaller0: entered allmulticast mode [ 1089.859343][T26964] veth0_vlan: entered promiscuous mode [ 1089.944501][T27410] autofs: Bad value for 'fd' [ 1090.015904][T26964] veth1_vlan: entered promiscuous mode [ 1090.204582][T27418] netlink: 'syz.6.7008': attribute type 1 has an invalid length. [ 1090.258032][T27422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7008'. [ 1090.462135][T26964] veth0_macvtap: entered promiscuous mode [ 1090.498686][ T30] audit: type=1400 audit(2000000284.420:817): avc: denied { write } for pid=27397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.511714][T27428] tipc: Enabling of bearer rejected, failed to enable media [ 1091.269934][T27438] input: syz0 as /devices/virtual/input/input16 [ 1091.498259][T26964] veth1_macvtap: entered promiscuous mode [ 1091.505710][T27434] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1091.753534][ T30] audit: type=1400 audit(2000000285.680:818): avc: denied { write } for pid=27444 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.087712][T27452] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7013'. [ 1092.117445][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1092.150283][T26964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.217625][T26964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.276550][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7015'. [ 1092.279107][T13910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.352071][T13910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.406476][T13910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.452742][T13910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.626830][T27473] autofs: Bad value for 'fd' [ 1092.878228][ T5612] Bluetooth: hci5: Unable to find connection for big 0x00 [ 1093.026324][T23369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.101509][T23369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.228501][T23369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.254421][T23369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.591033][ T30] audit: type=1400 audit(2000000287.510:819): avc: denied { write } for pid=27461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.623176][T27500] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1094.542864][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7027'. [ 1094.563921][ T30] audit: type=1400 audit(2000000288.460:820): avc: denied { write } for pid=27512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.817962][T27515] syzkaller0: entered promiscuous mode [ 1094.829204][T27515] syzkaller0: entered allmulticast mode [ 1094.872067][T27529] autofs: Bad value for 'fd' [ 1095.370717][T27536] loop2: detected capacity change from 0 to 7 [ 1095.452031][T27536] Dev loop2: unable to read RDB block 7 [ 1095.458646][T27536] loop2: AHDI p1 p2 [ 1095.463266][T27536] loop2: partition table partially beyond EOD, truncated [ 1095.473081][T27536] loop2: p1 start 1835360114 is beyond EOD, truncated [ 1096.217104][T27549] netlink: 'syz.6.7036': attribute type 39 has an invalid length. [ 1097.018701][T27572] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7039'. [ 1099.997177][T27610] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1100.006388][ T30] audit: type=1400 audit(2000000293.920:821): avc: denied { write } for pid=27580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.345952][ T30] audit: type=1400 audit(2000000294.270:822): avc: denied { write } for pid=27618 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.402870][T27617] syzkaller0: entered promiscuous mode [ 1100.419811][T27617] syzkaller0: entered allmulticast mode [ 1100.954135][T27633] netlink: 'syz.0.7057': attribute type 39 has an invalid length. [ 1102.208548][ T30] audit: type=1400 audit(2000000296.120:823): avc: denied { read } for pid=27656 comm="syz.3.7065" path="socket:[83621]" dev="sockfs" ino=83621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1103.787057][ T30] audit: type=1400 audit(2000000297.710:824): avc: denied { setopt } for pid=27675 comm="syz.3.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1104.057580][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1104.064797][T27625] syzkaller0: entered promiscuous mode [ 1104.070471][T27625] syzkaller0: entered allmulticast mode [ 1104.140075][T27640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7060'. [ 1104.152182][T23369] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.155038][T27640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7060'. [ 1104.237530][ T7114] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.273624][ T7114] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.323431][ T7114] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.920592][T27715] syzkaller0: entered promiscuous mode [ 1104.946274][T27715] syzkaller0: entered allmulticast mode [ 1105.116334][ T30] audit: type=1400 audit(2000000299.040:825): avc: denied { write } for pid=27687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.360712][T27736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1105.602360][ T30] audit: type=1400 audit(2000000299.510:826): avc: denied { write } for pid=27738 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.221734][ T30] audit: type=1400 audit(2000000300.140:827): avc: denied { write } for pid=27747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.403778][ T30] audit: type=1400 audit(2000000300.320:828): avc: denied { write } for pid=27769 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.076818][T27792] netlink: 376 bytes leftover after parsing attributes in process `syz.6.7098'. [ 1107.194958][ T30] audit: type=1400 audit(2000000301.110:829): avc: denied { write } for pid=27777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.338365][ T30] audit: type=1400 audit(2000000301.240:830): avc: denied { write } for pid=27799 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.130621][ T30] audit: type=1400 audit(2000000305.050:831): avc: denied { write } for pid=27807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.343860][ T30] audit: type=1400 audit(2000000305.270:832): avc: denied { write } for pid=27868 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1112.013288][T27878] syzkaller0: entered promiscuous mode [ 1112.029072][T27878] syzkaller0: entered allmulticast mode [ 1112.239587][T27893] Bluetooth: MGMT ver 1.23 [ 1112.741418][T27927] syzkaller0: entered promiscuous mode [ 1112.752792][T27927] syzkaller0: entered allmulticast mode [ 1112.859435][ T30] audit: type=1400 audit(2000000306.780:833): avc: denied { write } for pid=27879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1112.924083][T27936] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7144'. [ 1113.120460][ T5612] block nbd4: Receive control failed (result -107) [ 1113.180071][ T30] audit: type=1400 audit(2000000307.100:834): avc: denied { write } for pid=27942 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.202514][T27943] nbd4: detected capacity change from 0 to 10 [ 1113.243932][T27954] nbd4: detected capacity change from 10 to 8589934592 [ 1113.248205][T20024] block nbd4: Dead connection, failed to find a fallback [ 1113.308925][T20024] block nbd4: shutting down sockets [ 1113.340886][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.412995][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.455499][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.497626][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.524793][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.550088][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.570602][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.601184][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.617317][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.648066][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.679872][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.712394][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.741944][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.769060][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.795483][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.825813][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.854909][T20024] ldm_validate_partition_table(): Disk read failed. [ 1113.878137][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.922690][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1113.940819][T20024] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.979526][T20024] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1114.010189][T20024] Dev nbd4: unable to read RDB block 0 [ 1114.081324][T20024] nbd4: unable to read partition table [ 1114.151384][T20024] ldm_validate_partition_table(): Disk read failed. [ 1114.173781][T27993] binder: 27992:27993 ioctl c0306201 0 returned -14 [ 1114.211511][T20024] Dev nbd4: unable to read RDB block 0 [ 1114.235433][T20024] nbd4: unable to read partition table [ 1114.340034][ T30] audit: type=1400 audit(2000000308.250:835): avc: denied { write } for pid=27963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.571724][T28011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1114.578294][T28011] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1114.590647][T28011] vhci_hcd vhci_hcd.0: Device attached [ 1114.601371][T28012] vhci_hcd: connection closed [ 1114.601868][ T7114] vhci_hcd vhci_hcd.1: stop threads [ 1114.627356][ T7114] vhci_hcd vhci_hcd.1: release socket [ 1114.639469][ T7114] vhci_hcd vhci_hcd.1: disconnect device [ 1115.199365][ T30] audit: type=1400 audit(2000000309.120:836): avc: denied { write } for pid=28016 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1115.637757][T28033] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7176'. [ 1115.656770][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.663943][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.462060][T28029] binder: 28028:28029 ioctl c0306201 0 returned -14 [ 1116.610551][T28044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1117.057254][ T30] audit: type=1400 audit(2000000310.720:837): avc: denied { write } for pid=28027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.082840][ T30] audit: type=1400 audit(2000000310.810:838): avc: denied { write } for pid=28052 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.387884][T28067] syzkaller0: entered promiscuous mode [ 1117.400863][T28067] syzkaller0: entered allmulticast mode [ 1117.559632][T28078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7193'. [ 1117.594340][T28078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7193'. [ 1117.719714][ T30] audit: type=1400 audit(2000000311.640:839): avc: denied { write } for pid=28057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.832149][T28089] binder: 28088:28089 ioctl c0306201 0 returned -14 [ 1118.045036][ T30] audit: type=1400 audit(2000000311.950:840): avc: denied { write } for pid=28094 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1118.583164][T28100] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7197'. [ 1119.709516][T28115] syzkaller0: entered promiscuous mode [ 1119.720973][T28115] syzkaller0: entered allmulticast mode [ 1119.782548][ T30] audit: type=1400 audit(2000000313.690:841): avc: denied { write } for pid=28108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1119.909553][ T30] audit: type=1400 audit(2000000313.820:842): avc: denied { write } for pid=28135 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.064764][T28141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=28141 comm=syz.3.7205 [ 1120.096976][T28143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7206'. [ 1120.102102][T28141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=28141 comm=syz.3.7205 [ 1120.127873][T28143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7206'. [ 1120.168657][T28141] netlink: 'syz.3.7205': attribute type 27 has an invalid length. [ 1120.193218][T28141] netlink: 'syz.3.7205': attribute type 4 has an invalid length. [ 1120.211236][T28141] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7205'. [ 1120.459031][T28158] netlink: 'syz.3.7211': attribute type 13 has an invalid length. [ 1120.691401][T28170] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1120.721817][T28170] syzkaller0: entered promiscuous mode [ 1120.732472][T28170] syzkaller0: entered allmulticast mode [ 1120.859808][ T30] audit: type=1400 audit(2000000314.780:843): avc: denied { write } for pid=28144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.996672][T28190] syzkaller0: entered promiscuous mode [ 1121.023099][T28190] syzkaller0: entered allmulticast mode [ 1121.091262][ T30] audit: type=1400 audit(2000000315.010:844): avc: denied { write } for pid=28201 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.141048][T28244] syzkaller0: entered promiscuous mode [ 1122.186109][T28244] syzkaller0: entered allmulticast mode [ 1122.573429][ T30] audit: type=1400 audit(2000000316.500:845): avc: denied { write } for pid=28217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.783742][ T30] audit: type=1400 audit(2000000316.710:846): avc: denied { write } for pid=28266 comm="syz.3.7243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1122.839745][ T30] audit: type=1400 audit(2000000316.760:847): avc: denied { write } for pid=28267 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.889771][T28260] syzkaller0: entered promiscuous mode [ 1122.906089][T28260] syzkaller0: entered allmulticast mode [ 1123.431100][T28300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1123.676156][ T30] audit: type=1400 audit(2000000317.600:848): avc: denied { write } for pid=28278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.759088][T28322] syzkaller0: entered promiscuous mode [ 1123.765963][T28322] syzkaller0: entered allmulticast mode [ 1123.910828][T28328] binder: BINDER_SET_CONTEXT_MGR already set [ 1123.932110][T28328] binder: 28327:28328 ioctl 4018620d 200000004a80 returned -16 [ 1124.015342][ T30] audit: type=1400 audit(2000000317.940:849): avc: denied { write } for pid=28330 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.058884][T28338] netlink: 'syz.0.7268': attribute type 1 has an invalid length. [ 1124.081107][T28339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7269'. [ 1124.104934][T28338] bond1: entered promiscuous mode [ 1124.110506][T28338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1124.174188][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7268'. [ 1124.232459][T28344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1124.249339][T28344] bond1: (slave bond2): making interface the new active one [ 1124.261766][T28344] bond2: entered promiscuous mode [ 1124.268168][T28344] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1124.457400][T28360] syzkaller0: entered promiscuous mode [ 1124.464599][T28360] syzkaller0: entered allmulticast mode [ 1124.834311][T28377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7284'. [ 1124.870069][T28377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7284'. [ 1125.112110][ T29] kernel read not supported for file /usbmon9 (pid: 29 comm: kworker/1:1) [ 1125.352383][ T5612] Bluetooth: hci4: link tx timeout [ 1125.363311][ T5612] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1125.383264][ T5612] Bluetooth: hci4: link tx timeout [ 1125.389756][ T5612] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1125.478080][T28406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1125.718035][T28416] syzkaller0: entered promiscuous mode [ 1125.767795][T28416] syzkaller0: entered allmulticast mode [ 1127.542425][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1130.396192][T28494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7321'. [ 1130.607318][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1133.053639][T28527] syzkaller0: entered promiscuous mode [ 1133.066679][T28527] syzkaller0: entered allmulticast mode [ 1133.143426][T28530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.155136][T28530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.566631][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1133.595771][ T30] audit: type=1400 audit(2000000327.510:850): avc: denied { write } for pid=28523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.742101][ T30] audit: type=1400 audit(2000000327.660:851): avc: denied { write } for pid=28553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.812422][ T5612] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1133.826371][ T5612] Bluetooth: hci0: Injecting HCI hardware error event [ 1133.837086][ T5612] Bluetooth: hci0: hardware error 0x00 [ 1134.204189][ T30] audit: type=1326 audit(2000000328.100:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1134.500534][ T30] audit: type=1326 audit(2000000328.100:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1134.538168][T28565] overlayfs: failed to resolve './file0': -2 [ 1134.547503][ T30] audit: type=1326 audit(2000000328.110:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1134.578998][ T30] audit: type=1326 audit(2000000328.110:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1134.711248][ T30] audit: type=1326 audit(2000000328.110:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1134.739085][ T30] audit: type=1326 audit(2000000328.110:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1134.804547][ T30] audit: type=1326 audit(2000000328.110:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1135.152677][T28578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28578 comm=syz.6.7347 [ 1135.266524][ T30] audit: type=1326 audit(2000000328.110:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28555 comm="syz.6.7340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1135.737411][T25509] Bluetooth: hci4: command 0x0406 tx timeout [ 1136.022816][ T5612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1137.065649][T28628] tipc: Enabling of bearer rejected, failed to enable media [ 1137.108921][T28636] 9p: Bad value for 'rfdno' [ 1138.698969][T28700] tipc: Enabled bearer , priority 0 [ 1138.708387][T28700] syzkaller0: entered promiscuous mode [ 1138.716162][T28700] syzkaller0: entered allmulticast mode [ 1138.726515][T28704] syzkaller0: entered promiscuous mode [ 1138.732016][T28704] syzkaller0: entered allmulticast mode [ 1138.780004][T28700] tipc: Resetting bearer [ 1138.813920][T28699] tipc: Resetting bearer [ 1138.837530][T28699] tipc: Disabling bearer [ 1138.884035][T28715] overlayfs: failed to resolve './file0': -2 [ 1139.191404][T28737] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 1139.933308][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1139.933327][ T30] audit: type=1400 audit(2000000333.850:872): avc: denied { write } for pid=28729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.970361][T28771] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7410'. [ 1140.371807][ T30] audit: type=1400 audit(2000000334.290:873): avc: denied { write } for pid=28776 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.414446][ T30] audit: type=1400 audit(2000000335.340:874): avc: denied { write } for pid=28783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.544277][ T30] audit: type=1400 audit(2000000335.460:875): avc: denied { set_context_mgr } for pid=28813 comm="syz.0.7423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1141.808597][T28814] binder: BINDER_SET_CONTEXT_MGR already set [ 1141.913813][T28814] binder: 28813:28814 ioctl 4018620d 200000004a80 returned -16 [ 1142.116600][ T30] audit: type=1400 audit(2000000336.030:876): avc: denied { write } for pid=28818 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1142.333818][T28825] tipc: Started in network mode [ 1142.339744][T28825] tipc: Node identity 52a8a0a94df4, cluster identity 4711 [ 1142.350005][T28825] tipc: Enabled bearer , priority 0 [ 1142.389347][T28825] tipc: Resetting bearer [ 1142.565777][T28824] tipc: Disabling bearer [ 1143.231346][ T30] audit: type=1400 audit(2000000337.150:877): avc: denied { write } for pid=28838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.498927][T13910] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.508096][ T30] audit: type=1400 audit(2000000337.420:878): avc: denied { write } for pid=28879 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.541437][T13910] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.877928][T28892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7446'. [ 1144.079566][T28902] binder: BINDER_SET_CONTEXT_MGR already set [ 1144.100455][T28902] binder: 28901:28902 ioctl 4018620d 200000004a80 returned -16 [ 1144.191146][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1144.229103][ T30] audit: type=1400 audit(2000000338.150:879): avc: denied { name_bind } for pid=28904 comm="syz.4.7449" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1144.270558][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1144.403961][ T30] audit: type=1400 audit(2000000338.330:880): avc: denied { write } for pid=28890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.672025][ T30] audit: type=1400 audit(2000000338.590:881): avc: denied { write } for pid=28928 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.737505][T28923] syzkaller0: entered promiscuous mode [ 1144.749894][T28923] syzkaller0: entered allmulticast mode [ 1144.861731][T28938] tipc: Started in network mode [ 1144.875048][T28938] tipc: Node identity ac14140f, cluster identity 4711 [ 1144.887943][T28938] tipc: New replicast peer: 255.255.255.255 [ 1144.902234][T28938] tipc: Enabled bearer , priority 10 [ 1144.940746][T28942] netlink: 'syz.1.7462': attribute type 13 has an invalid length. [ 1145.229659][T28956] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1145.253957][T28956] syzkaller0: entered promiscuous mode [ 1145.283668][T28956] syzkaller0: entered allmulticast mode [ 1145.300202][T28942] tipc: Started in network mode [ 1145.321249][T28942] tipc: Node identity 7621c4b607a, cluster identity 4711 [ 1145.351025][T28942] tipc: Enabled bearer , priority 0 [ 1145.378362][T28941] tipc: Resetting bearer [ 1145.449164][T28941] tipc: Disabling bearer [ 1145.528224][T28977] syzkaller0: entered promiscuous mode [ 1145.551751][T28977] syzkaller0: entered allmulticast mode [ 1145.576254][ T30] audit: type=1400 audit(2000000339.500:882): avc: denied { write } for pid=28946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.706440][ T30] audit: type=1400 audit(2000000339.630:883): avc: denied { write } for pid=28989 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.838970][ T30] audit: type=1804 audit(2000000339.750:884): pid=28995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.7472" name="/newroot/122/file1" dev="tmpfs" ino=637 res=1 errno=0 [ 1145.912925][T29000] tipc: New replicast peer: 255.255.255.255 [ 1145.919567][T29000] tipc: Enabled bearer , priority 10 [ 1145.934034][T28997] syzkaller0: entered promiscuous mode [ 1145.955533][T28997] syzkaller0: entered allmulticast mode [ 1146.071929][ T5735] tipc: Node number set to 2886997007 [ 1146.092615][T29011] binder: BINDER_SET_CONTEXT_MGR already set [ 1146.106070][T29011] binder: 29008:29011 ioctl 4018620d 200000004a80 returned -16 [ 1146.500625][ T30] audit: type=1400 audit(2000000340.420:885): avc: denied { name_bind } for pid=29035 comm="syz.0.7485" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1146.538776][ T30] audit: type=1400 audit(2000000340.420:886): avc: denied { node_bind } for pid=29035 comm="syz.0.7485" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1146.728038][ T30] audit: type=1400 audit(2000000340.650:887): avc: denied { write } for pid=29042 comm="syz.0.7486" name="file0" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1146.898426][T29050] syzkaller0: entered promiscuous mode [ 1146.919948][T29050] syzkaller0: entered allmulticast mode [ 1146.958081][ T30] audit: type=1400 audit(2000000340.880:888): avc: denied { write } for pid=29014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.048329][ T29] tipc: Node number set to 526164137 [ 1147.195468][T29060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29060 comm=syz.1.7491 [ 1147.266184][ T30] audit: type=1400 audit(2000000341.190:889): avc: denied { write } for pid=29062 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.433068][T29066] 9p: Bad value for 'wfdno' [ 1148.071726][T29100] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7501'. [ 1148.120259][ T30] audit: type=1400 audit(2000000342.040:890): avc: denied { ioctl } for pid=29103 comm="syz.4.7504" path="socket:[86853]" dev="sockfs" ino=86853 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1148.240703][T29109] syzkaller0: entered promiscuous mode [ 1148.258094][ T30] audit: type=1400 audit(2000000342.170:891): avc: denied { write } for pid=29073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1148.258117][T29109] syzkaller0: entered allmulticast mode [ 1148.564786][T29114] syzkaller0: entered promiscuous mode [ 1148.572405][T29114] syzkaller0: entered allmulticast mode [ 1149.180315][T29146] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7512'. [ 1152.217857][T29167] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7517'. [ 1152.380360][T29176] support for cryptoloop has been removed. Use dm-crypt instead. [ 1152.520916][T29186] lo: Caught tx_queue_len zero misconfig [ 1152.718436][T29199] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7531'. [ 1153.968551][T29246] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7545'. [ 1154.585669][T29293] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7565'. [ 1154.895490][T29318] syzkaller0: entered promiscuous mode [ 1154.913374][T29318] syzkaller0: entered allmulticast mode [ 1155.045731][T29327] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1157.598343][T29361] syzkaller0: entered promiscuous mode [ 1157.715217][T29361] syzkaller0: entered allmulticast mode [ 1158.124919][T29373] syzkaller0: entered promiscuous mode [ 1158.139957][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7597'. [ 1158.153257][T29373] syzkaller0: entered allmulticast mode [ 1158.169615][T29377] fuse: Bad value for 'group_id' [ 1158.189997][T29377] fuse: Bad value for 'group_id' [ 1158.891863][T29387] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7600'. [ 1159.765819][T29394] netlink: 'syz.3.7603': attribute type 1 has an invalid length. [ 1159.794475][T29394] netlink: 'syz.3.7603': attribute type 2 has an invalid length. [ 1159.827774][T29394] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.7603'. [ 1160.094909][T29402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=29402 comm=syz.3.7606 [ 1160.162350][T29402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=29402 comm=syz.3.7606 [ 1160.222108][T29408] lo: Caught tx_queue_len zero misconfig [ 1160.229912][T29402] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1160.250142][T29406] syzkaller0: entered promiscuous mode [ 1160.268724][T29406] syzkaller0: entered allmulticast mode [ 1161.609575][ T29] IPVS: starting estimator thread 0... [ 1161.734898][T29429] IPVS: using max 40 ests per chain, 96000 per kthread [ 1161.789966][T29433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1161.816081][T29433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7618'. [ 1161.948548][T29440] binder: 29439:29440 ioctl 4018620d 0 returned -22 [ 1162.703220][T29444] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7622'. [ 1163.613060][T29450] binder: 29449:29450 ioctl c018620c 200000000100 returned -22 [ 1163.627014][T29452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7627'. [ 1166.178744][T29500] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7646'. [ 1167.510453][T29509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1169.859464][T29588] netlink: 'syz.0.7685': attribute type 13 has an invalid length. [ 1171.048996][T29595] tipc: Enabled bearer , priority 0 [ 1171.082209][T29587] tipc: Disabling bearer [ 1171.874723][T29628] lo speed is unknown, defaulting to 1000 [ 1171.880974][T29628] lo speed is unknown, defaulting to 1000 [ 1171.904162][T29628] lo speed is unknown, defaulting to 1000 [ 1171.919976][T29628] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1171.935501][T29628] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1171.953492][T29628] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1171.981409][T29628] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1172.037670][T29628] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1172.150569][T29622] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1172.159605][T29628] lo speed is unknown, defaulting to 1000 [ 1172.175628][T29628] lo speed is unknown, defaulting to 1000 [ 1172.183685][T29628] lo speed is unknown, defaulting to 1000 [ 1172.190868][T29628] lo speed is unknown, defaulting to 1000 [ 1172.198072][T29628] lo speed is unknown, defaulting to 1000 [ 1172.211797][T29628] lo speed is unknown, defaulting to 1000 [ 1172.219019][T29628] lo speed is unknown, defaulting to 1000 [ 1172.226275][T29628] lo speed is unknown, defaulting to 1000 [ 1172.236812][T29628] lo speed is unknown, defaulting to 1000 [ 1172.243995][T29628] lo speed is unknown, defaulting to 1000 [ 1172.812701][T29648] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7702'. [ 1173.730218][T29656] netlink: 'syz.4.7705': attribute type 13 has an invalid length. [ 1175.146180][T29662] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1175.165674][T29662] syzkaller0: entered promiscuous mode [ 1175.178150][T29662] syzkaller0: entered allmulticast mode [ 1175.193305][T29664] tipc: Enabled bearer , priority 0 [ 1175.208371][T29653] tipc: Resetting bearer [ 1175.233061][T29653] tipc: Disabling bearer [ 1176.507846][T29697] nftables ruleset with unbound chain [ 1176.624447][T29707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7721'. [ 1176.741996][T29715] netlink: 'syz.6.7726': attribute type 13 has an invalid length. [ 1176.819756][T29719] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1176.834267][T29719] syzkaller0: entered promiscuous mode [ 1176.840619][T29719] syzkaller0: entered allmulticast mode [ 1176.857591][T29715] tipc: Enabled bearer , priority 0 [ 1176.866982][T29714] tipc: Resetting bearer [ 1176.875591][T29714] tipc: Disabling bearer [ 1177.085336][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.099789][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.037500][T29747] netlink: 'syz.0.7738': attribute type 13 has an invalid length. [ 1179.101810][ T5711] lo speed is unknown, defaulting to 1000 [ 1179.110290][T29747] tipc: Enabled bearer , priority 0 [ 1179.209778][T29746] tipc: Disabling bearer [ 1180.711175][T29785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7749'. [ 1180.730357][T29785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7749'. [ 1180.986039][T29788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1181.376313][T29802] netlink: 'syz.4.7758': attribute type 13 has an invalid length. [ 1181.549000][T29802] tipc: Enabled bearer , priority 0 [ 1181.631311][T29800] tipc: Disabling bearer [ 1181.643984][T29815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=29815 comm=syz.3.7766 [ 1181.659475][T29813] syzkaller0: entered promiscuous mode [ 1181.665087][T29813] syzkaller0: entered allmulticast mode [ 1181.670814][T29815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=29815 comm=syz.3.7766 [ 1181.723056][T29815] netlink: 'syz.3.7766': attribute type 27 has an invalid length. [ 1181.735085][T29815] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7766'. [ 1182.557607][ T5612] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 1183.295434][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1183.295450][ T30] audit: type=1400 audit(2000000377.220:893): avc: denied { ioctl } for pid=29845 comm="syz.4.7776" path="socket:[90335]" dev="sockfs" ino=90335 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1183.393945][T29849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=29849 comm=syz.6.7777 [ 1183.406774][T29849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=29849 comm=syz.6.7777 [ 1183.427035][T29849] netlink: 'syz.6.7777': attribute type 27 has an invalid length. [ 1183.435318][T29849] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7777'. [ 1183.625054][T29855] syzkaller0: entered promiscuous mode [ 1183.638965][T29855] syzkaller0: entered allmulticast mode [ 1183.996264][T29876] fuse: Unknown parameter 'group_i00000000000000000000' [ 1184.508210][T29886] tipc: Enabling of bearer rejected, failed to enable media [ 1184.785532][ T29] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1184.866632][ T29] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1185.696212][T29902] fido_id[29902]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1186.112147][T29941] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1186.586475][ T30] audit: type=1400 audit(2000000380.510:894): avc: denied { shutdown } for pid=29960 comm="syz.3.7820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1186.614572][ T30] audit: type=1400 audit(2000000380.530:895): avc: denied { read } for pid=29960 comm="syz.3.7820" path="socket:[90514]" dev="sockfs" ino=90514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1186.742875][T29969] geneve2: entered promiscuous mode [ 1186.754722][T29969] geneve2: entered allmulticast mode [ 1188.219828][T29995] syzkaller0: entered promiscuous mode [ 1188.225795][T29995] syzkaller0: entered allmulticast mode [ 1188.765881][T30004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7836'. [ 1190.050355][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 1192.176613][T30041] input: syz0 as /devices/virtual/input/input17 [ 1192.627485][T30046] binder: 30045:30046 ioctl c0306201 200000000100 returned -22 [ 1192.849878][T30023] tipc: Enabling of bearer rejected, failed to enable media [ 1193.537560][T30065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7856'. [ 1193.547018][T30065] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7856'. [ 1193.978288][ T7114] Bluetooth: hci1: Frame reassembly failed (-84) [ 1195.076988][T30099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7870'. [ 1195.086317][T30099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7870'. [ 1195.098759][ T1121] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.047707][ T5620] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1196.049537][ T5612] Bluetooth: hci1: command 0xfc11 tx timeout [ 1196.075396][T30109] 9p: Could not find request transport: fd00000000000000000000003 [ 1197.230217][T30134] fuse: Bad value for 'user_id' [ 1197.248390][T30134] fuse: Bad value for 'user_id' [ 1197.382311][T30138] 9p: Could not find request transport: fd00000000000000000000003 [ 1197.464798][T30147] input: syz0 as /devices/virtual/input/input19 [ 1197.614636][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1197.634660][ T180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.634757][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1197.654459][ T180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.666843][ T180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.696456][ T180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.606203][T30182] netlink: 'syz.6.7901': attribute type 10 has an invalid length. [ 1198.671186][T30182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.697506][T30182] team0: Port device bond0 added [ 1198.825370][ T30] audit: type=1400 audit(2000000392.750:896): avc: denied { read } for pid=30187 comm="syz.3.7904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1198.993500][T30200] lo: Caught tx_queue_len zero misconfig [ 1199.152387][T30205] fuse: Bad value for 'user_id' [ 1199.165085][T30205] fuse: Bad value for 'user_id' [ 1200.372249][T30224] netlink: 'syz.4.7917': attribute type 1 has an invalid length. [ 1200.477907][T30227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7917'. [ 1200.548769][T30227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1200.767014][T30246] virtiofs: Unknown parameter 'ÖC—à' [ 1200.812124][T30247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.141674][T30304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7943'. [ 1205.100771][T29651] Bluetooth: (null): Invalid header checksum [ 1205.275167][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1205.290042][T30351] erspan0: default FDB implementation only supports local addresses [ 1206.602463][ T30] audit: type=1326 audit(2000000400.490:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30366 comm="syz.1.7968" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c1939cdd9 code=0x0 [ 1207.682372][ T30] audit: type=1400 audit(2000000401.600:898): avc: denied { map } for pid=30379 comm="syz.4.7972" path="socket:[92209]" dev="sockfs" ino=92209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1209.204824][T30398] netlink: 'syz.0.7980': attribute type 1 has an invalid length. [ 1209.238546][T30398] bond3: entered promiscuous mode [ 1209.244102][T30398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1209.317183][T30398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1209.326995][T30398] bond3: (slave bond4): making interface the new active one [ 1209.334669][T30398] bond4: entered promiscuous mode [ 1209.340711][T30398] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1209.368319][T30398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7980'. [ 1209.397303][ T30] audit: type=1400 audit(2000000403.310:899): avc: denied { create } for pid=30397 comm="syz.0.7980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1209.544960][T30415] ext2: block size(16384) > page size(4096) not supported by filesystem [ 1211.403352][T30445] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1212.063978][T30444] netlink: 'syz.3.7993': attribute type 1 has an invalid length. [ 1212.515808][T30444] bond1: entered promiscuous mode [ 1212.549692][T30444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1212.774742][T30463] input: syz0 as /devices/virtual/input/input21 [ 1213.315547][T30471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7993'. [ 1213.316177][T30444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1213.484166][T30444] bond1: (slave bond2): making interface the new active one [ 1213.593553][T30444] bond2: entered promiscuous mode [ 1213.730005][T30444] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1213.895129][T30482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8006'. [ 1214.009060][T30484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8006'. [ 1214.162699][T30495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8013'. [ 1215.675926][T30509] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1218.172322][ T30] audit: type=1400 audit(2000000412.090:900): avc: denied { kexec_image_load } for pid=30570 comm="syz.0.8038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1218.254190][ T30] audit: type=1400 audit(2000000412.170:901): avc: denied { watch watch_reads } for pid=30543 comm="syz.6.8026" path="pipe:[79499]" dev="pipefs" ino=79499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1218.796846][T30592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1219.515190][T30611] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8054'. [ 1220.145015][T30635] syzkaller0: entered promiscuous mode [ 1220.160120][T30635] syzkaller0: entered allmulticast mode [ 1220.296173][T30644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.682050][T30653] netlink: 'syz.1.8072': attribute type 8 has an invalid length. [ 1221.831608][T30655] loop9: detected capacity change from 0 to 7 [ 1222.488710][ C1] blk_print_req_error: 24 callbacks suppressed [ 1222.488732][ C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1222.504775][ C1] buffer_io_error: 23 callbacks suppressed [ 1222.504795][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1222.525735][ T30] audit: type=1400 audit(2000000416.450:902): avc: denied { bind } for pid=30675 comm="syz.0.8082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1222.748303][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1222.758157][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1223.191741][T30687] netlink: 'syz.6.8087': attribute type 1 has an invalid length. [ 1223.300643][ T30] audit: type=1804 audit(2000000417.220:903): pid=30685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.8086" name="/newroot/286/file0" dev="fuse" ino=1 res=1 errno=0 [ 1223.309270][T30687] bond1: entered promiscuous mode [ 1223.388224][T30696] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8087'. [ 1223.954257][ T30] audit: type=1400 audit(2000000417.310:904): avc: denied { write } for pid=30686 comm="syz.6.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1224.203287][T30687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1224.212163][T30693] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1224.777213][ T30] audit: type=1400 audit(2000000418.700:905): avc: denied { sys_module } for pid=30717 comm="syz.6.8096" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1225.309413][T30734] smbdirect: ib_dev[syz0] removed [ 1225.712122][T30761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8113'. [ 1227.834303][T30798] fuse: Bad value for 'rootmode' [ 1228.807155][T30823] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8134'. [ 1228.826457][T30822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.842848][T30823] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8134'. [ 1229.223133][T30837] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1229.978850][T30846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8145'. [ 1230.001503][T30848] fuse: Bad value for 'rootmode' [ 1230.577823][T30865] binder: 30858:30865 ioctl c0306201 200000000540 returned -22 [ 1230.608573][T30867] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8151'. [ 1230.624923][T30867] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8151'. [ 1230.837267][T30874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.961824][T30881] bridge0: port 3(gretap0) entered disabled state [ 1230.972178][T30881] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8158'. [ 1230.986286][T30881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1232.016011][T30898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8164'. [ 1232.069700][T30900] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8164'. [ 1232.273730][T30906] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8162'. [ 1233.151672][T30911] syzkaller0: entered promiscuous mode [ 1233.179940][T30911] syzkaller0: entered allmulticast mode [ 1233.697133][T30928] binder: 30924:30928 ioctl c0306201 200000000540 returned -22 [ 1233.791342][ T30] audit: type=1400 audit(2000000427.710:906): avc: denied { map } for pid=30931 comm="syz.1.8175" path="socket:[93209]" dev="sockfs" ino=93209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1233.912158][T30938] __nla_validate_parse: 1 callbacks suppressed [ 1233.912176][T30938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8178'. [ 1233.947896][T30938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8178'. [ 1234.105566][T30951] syzkaller0: entered promiscuous mode [ 1234.127406][T30951] syzkaller0: entered allmulticast mode [ 1234.493462][T30962] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8185'. [ 1235.621204][T30982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8193'. [ 1235.658593][T30982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8193'. [ 1237.146050][T31018] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1238.533865][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.533937][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.595039][ T30] audit: type=1400 audit(2000000432.460:907): avc: denied { call } for pid=31042 comm="syz.6.8218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1239.429547][T31083] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8235'. [ 1240.928747][T31104] syzkaller0: entered promiscuous mode [ 1240.935435][T31104] syzkaller0: entered allmulticast mode [ 1242.125015][T31132] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8256'. [ 1244.378219][T31147] netlink: 'syz.1.8260': attribute type 10 has an invalid length. [ 1244.418846][T31147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.464823][T31147] team0: Port device bond0 added [ 1244.511557][ T5711] kernel write not supported for file bpf-prog (pid: 5711 comm: kworker/1:4) [ 1244.777996][T31172] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.874931][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8269'. [ 1244.884063][T31172] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8269'. [ 1245.364754][T31176] syzkaller0: entered promiscuous mode [ 1245.371038][T31176] syzkaller0: entered allmulticast mode [ 1245.503883][T31182] netlink: 'syz.3.8277': attribute type 10 has an invalid length. [ 1245.813276][T31190] netlink: 'syz.6.8280': attribute type 1 has an invalid length. [ 1245.869622][T31192] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8280'. [ 1246.152231][T31194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8280'. [ 1247.965103][T31182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.973235][T31182] team0: Port device bond0 added [ 1247.978233][T31182] bond_slave_0: entered promiscuous mode [ 1247.985781][T31182] bond_slave_1: entered promiscuous mode [ 1247.996314][T31190] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1248.331888][T31220] netlink: 'syz.0.8292': attribute type 10 has an invalid length. [ 1248.385075][T31220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.416779][T31220] team0: Port device bond0 added [ 1248.554636][T31231] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.8296'. [ 1248.559765][T31223] syzkaller0: entered promiscuous mode [ 1248.569780][T31223] syzkaller0: entered allmulticast mode [ 1248.577720][T31231] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.8296'. [ 1252.398676][T31291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.205020][T31323] syzkaller0: entered promiscuous mode [ 1254.214709][T31323] syzkaller0: entered allmulticast mode [ 1254.868333][T31364] syzkaller0: entered promiscuous mode [ 1254.877083][T31364] syzkaller0: entered allmulticast mode [ 1255.951417][T31396] syzkaller0: entered promiscuous mode [ 1255.966166][T31396] syzkaller0: entered allmulticast mode [ 1256.004130][T31401] syzkaller0: entered promiscuous mode [ 1256.018369][T31401] syzkaller0: entered allmulticast mode [ 1256.587205][ T30] audit: type=1400 audit(2000000450.450:908): avc: denied { audit_write } for pid=31413 comm="syz.1.8363" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1256.906663][T31422] netlink: 'syz.4.8366': attribute type 1 has an invalid length. [ 1256.955476][T31422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8366'. [ 1256.967531][T31422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1257.074583][T31431] netlink: 'syz.3.8370': attribute type 10 has an invalid length. [ 1257.182071][T31431] bond_slave_0: left promiscuous mode [ 1257.184313][ T30] audit: type=1400 audit(2000000451.100:909): avc: denied { unmount } for pid=26627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1257.193815][T31431] bond_slave_1: left promiscuous mode [ 1257.367232][T31441] syzkaller0: entered promiscuous mode [ 1257.389038][T31441] syzkaller0: entered allmulticast mode [ 1258.145465][T31478] syzkaller0: entered promiscuous mode [ 1258.151409][T31478] syzkaller0: entered allmulticast mode [ 1258.259671][T31480] syzkaller0: entered promiscuous mode [ 1258.272464][T31480] syzkaller0: entered allmulticast mode [ 1259.468190][T31510] syzkaller0: entered promiscuous mode [ 1259.485243][T31510] syzkaller0: entered allmulticast mode [ 1259.659703][T31514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.668960][T31514] IPv6: NLM_F_CREATE should be set when creating new route [ 1260.080774][T31517] syzkaller0: entered promiscuous mode [ 1260.095818][T31517] syzkaller0: entered allmulticast mode [ 1260.438075][T31535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8415'. [ 1260.451439][ T30] audit: type=1400 audit(2000000454.370:910): avc: denied { accept } for pid=31526 comm="syz.0.8412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1260.452723][T31535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8415'. [ 1260.965133][T31556] syzkaller0: entered promiscuous mode [ 1260.970807][T31556] syzkaller0: entered allmulticast mode [ 1261.108510][T31562] syzkaller0: entered promiscuous mode [ 1261.115213][T31562] syzkaller0: entered allmulticast mode [ 1262.535819][T31578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8432'. [ 1263.177341][T31586] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8431'. [ 1263.691732][T31594] syzkaller0: entered promiscuous mode [ 1263.712339][T31594] syzkaller0: entered allmulticast mode [ 1265.080792][T31613] lo speed is unknown, defaulting to 1000 [ 1265.086697][T31613] lo speed is unknown, defaulting to 1000 [ 1265.093200][T31613] lo speed is unknown, defaulting to 1000 [ 1265.099771][T31613] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1265.114352][T31613] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1265.132508][T31613] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1265.151013][T31613] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1265.180179][T31613] lo speed is unknown, defaulting to 1000 [ 1265.192550][T31613] lo speed is unknown, defaulting to 1000 [ 1265.200035][T31613] lo speed is unknown, defaulting to 1000 [ 1265.207340][T31613] lo speed is unknown, defaulting to 1000 [ 1265.215070][T31613] lo speed is unknown, defaulting to 1000 [ 1265.222401][T31613] lo speed is unknown, defaulting to 1000 [ 1265.229638][T31613] lo speed is unknown, defaulting to 1000 [ 1265.237965][T31613] lo speed is unknown, defaulting to 1000 [ 1265.245313][T31613] lo speed is unknown, defaulting to 1000 [ 1265.252716][T31613] lo speed is unknown, defaulting to 1000 [ 1266.166360][T31650] syzkaller0: entered promiscuous mode [ 1266.172530][T31650] syzkaller0: entered allmulticast mode [ 1266.725756][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1268.064150][T31681] siw: device registration error -23 [ 1269.504271][T31701] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8475'. [ 1270.310920][ T30] audit: type=1400 audit(2000000464.200:911): avc: denied { read } for pid=31702 comm="syz.1.8476" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1270.546339][ T30] audit: type=1400 audit(2000000464.200:912): avc: denied { open } for pid=31702 comm="syz.1.8476" path="/317/file0" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1270.880082][T31718] syzkaller0: entered promiscuous mode [ 1270.896275][T31718] syzkaller0: entered allmulticast mode [ 1271.276772][T31722] loop9: detected capacity change from 0 to 7 [ 1271.360284][T31723] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.707171][ T30] audit: type=1400 audit(2000000465.630:913): avc: denied { unmount } for pid=26627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1272.106277][ T30] audit: type=1400 audit(2000000465.980:914): avc: denied { mount } for pid=31726 comm="syz.6.8483" name="/" dev="rpc_pipefs" ino=95392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1272.730171][T31746] ext2: block size(16384) > page size(4096) not supported by filesystem [ 1273.730922][T31766] syzkaller0: entered promiscuous mode [ 1273.754098][T31766] syzkaller0: entered allmulticast mode [ 1273.833679][T31770] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8500'. [ 1273.876737][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8500'. [ 1274.400463][T31786] syzkaller0: entered promiscuous mode [ 1274.406155][T31786] syzkaller0: entered allmulticast mode [ 1274.537695][T31793] ext2: block size(16384) > page size(4096) not supported by filesystem [ 1275.961415][T31816] syzkaller0: entered promiscuous mode [ 1275.977224][T31816] syzkaller0: entered allmulticast mode [ 1276.612820][T31835] ext2: block size(16384) > page size(4096) not supported by filesystem [ 1277.272513][T31819] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1277.910878][T31844] fuse: Unknown parameter 'fd0x0000000000000004' [ 1277.934898][T31847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8524'. [ 1277.945537][T31847] syzkaller0: entered promiscuous mode [ 1277.951058][T31847] syzkaller0: entered allmulticast mode [ 1277.993710][T31847] tipc: Started in network mode [ 1278.002309][T31847] tipc: Node identity 1aad93b67991, cluster identity 4711 [ 1278.031166][T31847] tipc: Enabled bearer , priority 0 [ 1278.169585][T31855] openvswitch: netlink: IP tunnel dst address not specified [ 1278.179916][T31855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8526'. [ 1278.357148][T31843] tipc: Resetting bearer [ 1278.484039][T31843] tipc: Disabling bearer [ 1278.648831][T31860] syzkaller0: entered promiscuous mode [ 1278.656569][T31860] syzkaller0: entered allmulticast mode [ 1279.669064][T31869] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1281.219439][T31909] syzkaller0: entered promiscuous mode [ 1281.233891][T31909] syzkaller0: entered allmulticast mode [ 1281.283029][ T30] audit: type=1400 audit(2000000475.170:915): avc: denied { transfer } for pid=31910 comm="syz.1.8548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1281.596579][T31921] fuse: Unknown parameter 'fd0x0000000000000004' [ 1281.610206][T31922] binder: BINDER_SET_CONTEXT_MGR already set [ 1281.630080][T31922] binder: 31920:31922 ioctl 4018620d 200000000040 returned -16 [ 1282.259140][T31955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8564'. [ 1282.278827][T31956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8566'. [ 1282.299238][T31958] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.306979][T31958] binder: 31957:31958 ioctl 4018620d 200000000040 returned -16 [ 1282.446917][ T30] audit: type=1326 audit(2000000476.370:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1282.487563][ T30] audit: type=1326 audit(2000000476.370:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1282.516044][ T30] audit: type=1326 audit(2000000476.370:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1283.412109][ T30] audit: type=1326 audit(2000000476.400:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1283.453033][ T30] audit: type=1326 audit(2000000476.400:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1283.482880][ T30] audit: type=1326 audit(2000000476.400:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1283.526831][ T30] audit: type=1326 audit(2000000476.410:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1283.555003][ T30] audit: type=1326 audit(2000000476.410:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1283.583229][ T30] audit: type=1326 audit(2000000476.410:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.6.8567" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3222f9cdd9 code=0x7ffc0000 [ 1284.767219][T31982] netlink: 'syz.3.8575': attribute type 13 has an invalid length. [ 1284.793772][T31982] gretap0: refused to change device tx_queue_len [ 1284.811788][T31982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1284.924521][T31987] syzkaller0: entered promiscuous mode [ 1284.930052][T31987] syzkaller0: entered allmulticast mode [ 1284.983728][T31982] tipc: Enabled bearer , priority 0 [ 1285.010752][T31981] tipc: Resetting bearer [ 1285.089667][T31981] tipc: Disabling bearer [ 1286.301265][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1286.301283][ T30] audit: type=1400 audit(2000000480.220:934): avc: denied { name_connect } for pid=32031 comm="syz.3.8596" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1286.391607][T32036] syz_tun: entered allmulticast mode [ 1286.407206][T32036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1286.415770][T32036] mroute: pending queue full, dropping entries [ 1286.939233][T32029] syz_tun: left allmulticast mode [ 1287.686257][T32055] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8603'. [ 1287.740430][T32057] ------------[ cut here ]------------ [ 1287.747902][T32057] sp->magic != HWSIM_STA_MAGIC [ 1287.747918][T32057] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:265 at mac80211_hwsim_tx+0x2085/0x2b10, CPU#1: syz.3.8603/32057 [ 1287.765423][T32057] Modules linked in: [ 1287.769672][T32057] CPU: 1 UID: 0 PID: 32057 Comm: syz.3.8603 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.780673][T32057] Tainted: [L]=SOFTLOCKUP [ 1287.785029][T32057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1287.795140][T32057] RIP: 0010:mac80211_hwsim_tx+0x2085/0x2b10 [ 1287.801063][T32057] Code: 44 24 20 e8 fd a6 dc fa 48 8d 3d a6 50 b8 09 48 8b 54 24 20 8b 74 24 30 89 d9 67 48 0f b9 3a e9 f7 ec ff ff e8 dc a6 dc fa 90 <0f> 0b 90 e9 a0 e3 ff ff e8 ce a6 dc fa 48 8d bb f1 07 00 00 48 b8 [ 1287.820755][T32057] RSP: 0018:ffffc900040eeea0 EFLAGS: 00010283 [ 1287.826898][T32057] RAX: 000000000000075e RBX: ffff888083a0eb78 RCX: ffffc90011de4000 [ 1287.834907][T32057] RDX: 0000000000080000 RSI: ffffffff872bec44 RDI: ffff8880663e0000 [ 1287.842937][T32057] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000006d537749 [ 1287.850915][T32057] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888067c460c0 [ 1287.858948][T32057] R13: ffff888074694780 R14: ffff8880401231c0 R15: ffff888074694780 [ 1287.866957][T32057] FS: 00007f439aedf6c0(0000) GS:ffff888124475000(0000) knlGS:0000000000000000 [ 1287.876007][T32057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1287.882620][T32057] CR2: 0000200000003540 CR3: 000000003994c000 CR4: 00000000003526f0 [ 1287.890582][T32057] Call Trace: [ 1287.893879][T32057] [ 1287.896813][T32057] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1287.902646][T32057] ieee80211_tx_frags+0x5c9/0xa70 [ 1287.907683][T32057] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1287.913265][T32057] __ieee80211_tx+0x145/0x5b0 [ 1287.917950][T32057] ieee80211_tx+0x336/0x460 [ 1287.922513][T32057] ? __pfx_ieee80211_tx+0x10/0x10 [ 1287.927589][T32057] ? ieee80211_skb_resize+0x119/0x670 [ 1287.933027][T32057] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 1287.938496][T32057] ieee80211_xmit+0x30f/0x3e0 [ 1287.943249][T32057] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 1287.949092][T32057] ieee80211_tx_skb_tid+0x1c1/0x550 [ 1287.954336][T32057] ieee80211_mgmt_tx+0x1326/0x2590 [ 1287.959461][T32057] ? kmalloc_reserve+0x70/0x350 [ 1287.964347][T32057] cfg80211_mlme_mgmt_tx+0x803/0x1600 [ 1287.969731][T32057] nl80211_tx_mgmt+0x9f9/0xf30 [ 1287.974527][T32057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1287.979820][T32057] ? __pfx_netdev_run_todo+0x10/0x10 [ 1287.985175][T32057] ? nl80211_pre_doit+0x19a/0xae0 [ 1287.990215][T32057] genl_family_rcv_msg_doit+0x214/0x300 [ 1287.995808][T32057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1288.001890][T32057] ? bpf_lsm_capable+0x9/0x10 [ 1288.006596][T32057] ? security_capable+0x80/0x260 [ 1288.012067][T32057] ? ns_capable+0xd2/0xf0 [ 1288.016701][T32057] genl_rcv_msg+0x560/0x800 [ 1288.021225][T32057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1288.026279][T32057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1288.031659][T32057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1288.036975][T32057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1288.042472][T32057] netlink_rcv_skb+0x159/0x420 [ 1288.047249][T32057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1288.052313][T32057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1288.057614][T32057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1288.062930][T32057] genl_rcv+0x28/0x40 [ 1288.066920][T32057] netlink_unicast+0x585/0x850 [ 1288.071677][T32057] ? __pfx_netlink_unicast+0x10/0x10 [ 1288.077005][T32057] netlink_sendmsg+0x8b0/0xda0 [ 1288.081782][T32057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1288.087095][T32057] ? __might_fault+0x90/0x140 [ 1288.091787][T32057] ____sys_sendmsg+0x9e1/0xb70 [ 1288.096580][T32057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1288.101872][T32057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1288.107205][T32057] ? __pfx_futex_wake_mark+0x10/0x10 [ 1288.112515][T32057] ___sys_sendmsg+0x190/0x1e0 [ 1288.117186][T32057] ? __pfx____sys_sendmsg+0x10/0x10 [ 1288.122458][T32057] __sys_sendmsg+0x170/0x220 [ 1288.127068][T32057] ? __pfx___sys_sendmsg+0x10/0x10 [ 1288.132168][T32057] ? __x64_sys_futex+0x34f/0x4d0 [ 1288.137147][T32057] ? rcu_is_watching+0x12/0xc0 [ 1288.141930][T32057] do_syscall_64+0x10b/0xf80 [ 1288.146567][T32057] ? clear_bhb_loop+0x40/0x90 [ 1288.151257][T32057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.157216][T32057] RIP: 0033:0x7f4399f9cdd9 [ 1288.161736][T32057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.181380][T32057] RSP: 002b:00007f439aedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.189827][T32057] RAX: ffffffffffffffda RBX: 00007f439a216090 RCX: 00007f4399f9cdd9 [ 1288.197832][T32057] RDX: 0000000028004800 RSI: 0000200000003740 RDI: 0000000000000003 [ 1288.205832][T32057] RBP: 00007f439a032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1288.213837][T32057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.221805][T32057] R13: 00007f439a216128 R14: 00007f439a216090 R15: 00007ffff74f7008 [ 1288.229822][T32057] [ 1288.232859][T32057] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1288.240119][T32057] CPU: 1 UID: 0 PID: 32057 Comm: syz.3.8603 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.251043][T32057] Tainted: [L]=SOFTLOCKUP [ 1288.255352][T32057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.265393][T32057] Call Trace: [ 1288.268655][T32057] [ 1288.271568][T32057] dump_stack_lvl+0x100/0x190 [ 1288.276237][T32057] vpanic+0x552/0x970 [ 1288.280206][T32057] ? __pfx_vpanic+0x10/0x10 [ 1288.284696][T32057] panic+0xd1/0xe0 [ 1288.288401][T32057] ? __pfx_panic+0x10/0x10 [ 1288.292803][T32057] check_panic_on_warn.cold+0x19/0x34 [ 1288.298166][T32057] ? mac80211_hwsim_tx+0x2085/0x2b10 [ 1288.303447][T32057] __warn.cold+0x191/0x328 [ 1288.307853][T32057] __report_bug+0x296/0x3d0 [ 1288.312345][T32057] ? mac80211_hwsim_tx+0x2085/0x2b10 [ 1288.317631][T32057] ? __pfx___report_bug+0x10/0x10 [ 1288.322663][T32057] ? stack_trace_save+0x8e/0xc0 [ 1288.327499][T32057] ? __pfx_stack_trace_save+0x10/0x10 [ 1288.332858][T32057] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1288.339010][T32057] ? stack_depot_save_flags+0x27/0x9d0 [ 1288.344454][T32057] ? __rate_control_send_low+0x443/0x760 [ 1288.350075][T32057] ? ieee80211_encrypt_tx_skb+0x2b8/0x3b0 [ 1288.355814][T32057] ? mac80211_hwsim_tx+0x2085/0x2b10 [ 1288.361094][T32057] report_bug+0xb2/0x220 [ 1288.365324][T32057] ? mac80211_hwsim_tx+0x2085/0x2b10 [ 1288.370597][T32057] handle_bug+0x16a/0x2a0 [ 1288.374931][T32057] exc_invalid_op+0x17/0x50 [ 1288.379427][T32057] asm_exc_invalid_op+0x1a/0x20 [ 1288.384263][T32057] RIP: 0010:mac80211_hwsim_tx+0x2085/0x2b10 [ 1288.390149][T32057] Code: 44 24 20 e8 fd a6 dc fa 48 8d 3d a6 50 b8 09 48 8b 54 24 20 8b 74 24 30 89 d9 67 48 0f b9 3a e9 f7 ec ff ff e8 dc a6 dc fa 90 <0f> 0b 90 e9 a0 e3 ff ff e8 ce a6 dc fa 48 8d bb f1 07 00 00 48 b8 [ 1288.409744][T32057] RSP: 0018:ffffc900040eeea0 EFLAGS: 00010283 [ 1288.415797][T32057] RAX: 000000000000075e RBX: ffff888083a0eb78 RCX: ffffc90011de4000 [ 1288.423752][T32057] RDX: 0000000000080000 RSI: ffffffff872bec44 RDI: ffff8880663e0000 [ 1288.431710][T32057] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000006d537749 [ 1288.439665][T32057] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888067c460c0 [ 1288.447645][T32057] R13: ffff888074694780 R14: ffff8880401231c0 R15: ffff888074694780 [ 1288.455611][T32057] ? mac80211_hwsim_tx+0x2084/0x2b10 [ 1288.460905][T32057] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1288.466699][T32057] ieee80211_tx_frags+0x5c9/0xa70 [ 1288.471709][T32057] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1288.477244][T32057] __ieee80211_tx+0x145/0x5b0 [ 1288.481913][T32057] ieee80211_tx+0x336/0x460 [ 1288.486405][T32057] ? __pfx_ieee80211_tx+0x10/0x10 [ 1288.491531][T32057] ? ieee80211_skb_resize+0x119/0x670 [ 1288.496886][T32057] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 1288.502341][T32057] ieee80211_xmit+0x30f/0x3e0 [ 1288.507019][T32057] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 1288.512851][T32057] ieee80211_tx_skb_tid+0x1c1/0x550 [ 1288.518040][T32057] ieee80211_mgmt_tx+0x1326/0x2590 [ 1288.523134][T32057] ? kmalloc_reserve+0x70/0x350 [ 1288.527970][T32057] cfg80211_mlme_mgmt_tx+0x803/0x1600 [ 1288.533326][T32057] nl80211_tx_mgmt+0x9f9/0xf30 [ 1288.538072][T32057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1288.543337][T32057] ? __pfx_netdev_run_todo+0x10/0x10 [ 1288.548615][T32057] ? nl80211_pre_doit+0x19a/0xae0 [ 1288.553625][T32057] genl_family_rcv_msg_doit+0x214/0x300 [ 1288.559184][T32057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1288.565243][T32057] ? bpf_lsm_capable+0x9/0x10 [ 1288.569903][T32057] ? security_capable+0x80/0x260 [ 1288.574822][T32057] ? ns_capable+0xd2/0xf0 [ 1288.579136][T32057] genl_rcv_msg+0x560/0x800 [ 1288.583627][T32057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1288.588635][T32057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1288.593989][T32057] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1288.599251][T32057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1288.604698][T32057] netlink_rcv_skb+0x159/0x420 [ 1288.609538][T32057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1288.614574][T32057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1288.619847][T32057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1288.625116][T32057] genl_rcv+0x28/0x40 [ 1288.629080][T32057] netlink_unicast+0x585/0x850 [ 1288.633826][T32057] ? __pfx_netlink_unicast+0x10/0x10 [ 1288.639104][T32057] netlink_sendmsg+0x8b0/0xda0 [ 1288.643880][T32057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1288.649171][T32057] ? __might_fault+0x90/0x140 [ 1288.653843][T32057] ____sys_sendmsg+0x9e1/0xb70 [ 1288.658595][T32057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1288.663893][T32057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1288.669166][T32057] ? __pfx_futex_wake_mark+0x10/0x10 [ 1288.674434][T32057] ___sys_sendmsg+0x190/0x1e0 [ 1288.679098][T32057] ? __pfx____sys_sendmsg+0x10/0x10 [ 1288.684313][T32057] __sys_sendmsg+0x170/0x220 [ 1288.688893][T32057] ? __pfx___sys_sendmsg+0x10/0x10 [ 1288.693993][T32057] ? __x64_sys_futex+0x34f/0x4d0 [ 1288.698943][T32057] ? rcu_is_watching+0x12/0xc0 [ 1288.703717][T32057] do_syscall_64+0x10b/0xf80 [ 1288.708304][T32057] ? clear_bhb_loop+0x40/0x90 [ 1288.712972][T32057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.718853][T32057] RIP: 0033:0x7f4399f9cdd9 [ 1288.723256][T32057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.742853][T32057] RSP: 002b:00007f439aedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.751256][T32057] RAX: ffffffffffffffda RBX: 00007f439a216090 RCX: 00007f4399f9cdd9 [ 1288.759210][T32057] RDX: 0000000028004800 RSI: 0000200000003740 RDI: 0000000000000003 [ 1288.767167][T32057] RBP: 00007f439a032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1288.775126][T32057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.783082][T32057] R13: 00007f439a216128 R14: 00007f439a216090 R15: 00007ffff74f7008 [ 1288.791050][T32057] [ 1288.794344][T32057] Kernel Offset: disabled [ 1288.798650][T32057] Rebooting in 86400 seconds..