last executing test programs: 9.312455577s ago: executing program 2 (id=94): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9.114546154s ago: executing program 3 (id=96): ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) 9.114227328s ago: executing program 0 (id=97): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000130001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 9.114038527s ago: executing program 3 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x30, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9.005481005s ago: executing program 0 (id=99): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x7a1b292899e99e4, 0x7, 0x10, 0x0, 0x7, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x80c1) sendmsg$nl_generic(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x24008030) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r9, 0x7}}, 0x48) close(r8) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="0600130084e000000a0006000802110000010000060010008005000006001200010000009600ac"], 0xd8}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x300c072, &(0x7f0000002480)={[{@stats}]}) sendmmsg$inet6(r10, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b2a, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7000fbdbdf2501000000000000000b0000000014001462726f616463617363b08dd61b742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x2, 0x70bd29, 0x27dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004054}, 0x4) 8.801440697s ago: executing program 2 (id=101): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}}, 0x14}}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa39bab2d9023093e}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4800) 8.682322364s ago: executing program 0 (id=102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fanotify_init(0x8, 0x40000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r1, 0x2, 0x100018, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x2f, 0x92, 0x5f, 0x2, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x5, 0x7}}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 8.641848997s ago: executing program 1 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 8.211168571s ago: executing program 3 (id=104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000009700000701000001ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 6.396545641s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250c43, 0xd5) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x9}) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x13, 0x7, 0x2, {{0x6, 'tmpfs\x00'}, 0x3}}, 0x13) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@', @ANYRESDEC=r0], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f36358a4c) 6.396225847s ago: executing program 3 (id=106): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @loopback}], 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000004100f91588e8ffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521519c209ae446800a18001c8014000100fe8000"/72], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x40000b6, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r4, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x214, 0x105000) read$rfkill(r5, &(0x7f0000000100), 0x8) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, &(0x7f0000000480)=""/165, 0xa5, &(0x7f00000005c0)={&(0x7f0000000540)={'xcbc(camellia-asm)\x00'}}) 1.521045976s ago: executing program 1 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a"], 0x30}}, 0x4090) 1.34994772s ago: executing program 2 (id=108): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008006d64"], 0x48}}, 0x20000034) 1.272223089s ago: executing program 0 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 1.104854113s ago: executing program 1 (id=110): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r0, &(0x7f00000025c0)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/15, 0xf}, {0x0}], 0x6) 794.608772ms ago: executing program 1 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b00"], 0x18}}, 0x0) 686.538454ms ago: executing program 1 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x800, 0x70bd23, 0x25dfdafc, {0x0, 0x0, 0x0, 0x0, {0x1ffec, 0xe}, {0xf, 0x5}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x40008d5) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 686.154383ms ago: executing program 3 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4, 0x6, 0x6, 0x0, 0x3}, &(0x7f0000000a00)=0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x7a1b292899e99e4, 0x7, 0x10, 0x0, 0x7, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x80c1) sendmsg$nl_generic(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040004}, 0x24008030) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r9, 0x7}}, 0x48) close(r8) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="0600130084e000000a0006000802110000010000060010008005000006001200010000009600ac"], 0xd8}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x300c072, &(0x7f0000002480)={[{@stats}]}) sendmmsg$inet6(r10, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b2a, &(0x7f0000000040)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7000fbdbdf2501000000000000000b0000000014001462726f616463617363b08dd61b742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x2, 0x70bd29, 0x27dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004054}, 0x4) 493.657927ms ago: executing program 2 (id=112): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x12c, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 4.322597ms ago: executing program 3 (id=113): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, 0x0, 0xfffffffffffffeb4}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f00000001c0)="7250b45732f0150e60841452d3a6e782cfd104b52d152ec7e91da0fb93afda96325b8e7406083c1741893bfd8bba76ef558bc80617", &(0x7f00000004c0)=""/175}, 0x20) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x40000000002, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x81000000, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000000be, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.762482ms ago: executing program 2 (id=114): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="c01803002e000b12", 0x8}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d14"], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0100001000", @ANYRESDEC], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 3.406854ms ago: executing program 0 (id=115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x38, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r4, r5+60000000}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000d35d01"], 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x1d, 0x7f, 0x400, 0x6}}, @val={0x6, 0x2, 0x7}, @void, @void, @void}, 0x32) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 225.2µs ago: executing program 1 (id=116): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 0s ago: executing program 2 (id=119): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROM_DISC_STATUS(r0, 0x5327) kernel console output (not intermixed with test programs): [ 52.297874][ T42] audit: type=1400 audit(1783748447.636:114): avc: denied { rlimitinh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.306705][ T42] audit: type=1400 audit(1783748447.636:115): avc: denied { siginh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.421098][ T42] audit: type=1400 audit(1783748447.786:116): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.487320][ T42] audit: type=1400 audit(1783748447.846:117): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.689263][ T42] audit: type=1400 audit(1783748448.056:118): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.762076][ T42] audit: type=1400 audit(1783748448.126:119): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.111348][ T42] audit: type=1400 audit(1783748448.476:120): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:24581' (ED25519) to the list of known hosts. [ 56.790168][ T5665] cgroup: Unknown subsys name 'net' [ 56.960863][ T5665] cgroup: Unknown subsys name 'cpuset' [ 56.965682][ T5665] cgroup: Unknown subsys name 'rlimit' [ 57.195382][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.030449][ T5665] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.892371][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 62.892391][ T42] audit: type=1400 audit(1783748458.256:158): avc: denied { execmem } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.129191][ T42] audit: type=1400 audit(1783748458.496:159): avc: denied { create } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.143916][ T42] audit: type=1400 audit(1783748458.496:160): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.152929][ T42] audit: type=1400 audit(1783748458.496:161): avc: denied { open } for pid=5735 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.161252][ T42] audit: type=1400 audit(1783748458.506:162): avc: denied { ioctl } for pid=5735 comm="syz-executor" path="socket:[7231]" dev="sockfs" ino=7231 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.178110][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.183261][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.194758][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.198899][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.203461][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.209301][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.209710][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.212152][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.212344][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.219298][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.221504][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.222268][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.225573][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.226430][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.227971][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.231907][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.233502][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.234166][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.237708][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.239142][ T42] audit: type=1400 audit(1783748458.606:163): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.239181][ T42] audit: type=1400 audit(1783748458.606:164): avc: denied { open } for pid=5735 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.239210][ T42] audit: type=1400 audit(1783748458.606:165): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.243116][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.244295][ T42] audit: type=1400 audit(1783748458.606:166): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.267300][ T42] audit: type=1400 audit(1783748458.636:167): avc: denied { sys_module } for pid=5735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.029005][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.034019][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.037710][ T5739] bridge_slave_0: entered allmulticast mode [ 64.042373][ T5739] bridge_slave_0: entered promiscuous mode [ 64.081248][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.085509][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.089146][ T5739] bridge_slave_1: entered allmulticast mode [ 64.093373][ T5739] bridge_slave_1: entered promiscuous mode [ 64.116689][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.119925][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.122529][ T5735] bridge_slave_0: entered allmulticast mode [ 64.125683][ T5735] bridge_slave_0: entered promiscuous mode [ 64.141379][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.144278][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.147739][ T5735] bridge_slave_1: entered allmulticast mode [ 64.151208][ T5735] bridge_slave_1: entered promiscuous mode [ 64.173298][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.204770][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.220597][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.274923][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.282748][ T5739] team0: Port device team_slave_0 added [ 64.336410][ T5739] team0: Port device team_slave_1 added [ 64.338765][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.341979][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.347465][ T5740] bridge_slave_0: entered allmulticast mode [ 64.352175][ T5740] bridge_slave_0: entered promiscuous mode [ 64.371718][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.375797][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.379581][ T5741] bridge_slave_0: entered allmulticast mode [ 64.385006][ T5741] bridge_slave_0: entered promiscuous mode [ 64.403622][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.406169][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.409222][ T5740] bridge_slave_1: entered allmulticast mode [ 64.413424][ T5740] bridge_slave_1: entered promiscuous mode [ 64.417684][ T5735] team0: Port device team_slave_0 added [ 64.422073][ T5735] team0: Port device team_slave_1 added [ 64.424209][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.427109][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.431271][ T5741] bridge_slave_1: entered allmulticast mode [ 64.436185][ T5741] bridge_slave_1: entered promiscuous mode [ 64.450011][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.453000][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.464057][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.506964][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.509310][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.519436][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.555452][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.563134][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.570921][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.589451][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.593268][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.604439][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.610263][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.654818][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.658572][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.669441][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.676174][ T5740] team0: Port device team_slave_0 added [ 64.700746][ T5741] team0: Port device team_slave_0 added [ 64.714391][ T5740] team0: Port device team_slave_1 added [ 64.722937][ T5739] hsr_slave_0: entered promiscuous mode [ 64.726913][ T5739] hsr_slave_1: entered promiscuous mode [ 64.733679][ T5741] team0: Port device team_slave_1 added [ 64.786263][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.788625][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.798413][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.803083][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.805522][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.816834][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.839268][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.841684][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.852196][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.857019][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.860036][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.871484][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.924891][ T5735] hsr_slave_0: entered promiscuous mode [ 64.927754][ T5735] hsr_slave_1: entered promiscuous mode [ 64.931375][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 64.934414][ T5735] Cannot create hsr debugfs directory [ 65.032501][ T5741] hsr_slave_0: entered promiscuous mode [ 65.036158][ T5741] hsr_slave_1: entered promiscuous mode [ 65.040532][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 65.044987][ T5741] Cannot create hsr debugfs directory [ 65.071134][ T5740] hsr_slave_0: entered promiscuous mode [ 65.074548][ T5740] hsr_slave_1: entered promiscuous mode [ 65.077911][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 65.080286][ T5740] Cannot create hsr debugfs directory [ 65.307529][ T5743] Bluetooth: hci1: command tx timeout [ 65.307634][ T5091] Bluetooth: hci3: command tx timeout [ 65.307876][ T5746] Bluetooth: hci0: command tx timeout [ 65.308020][ T64] Bluetooth: hci2: command tx timeout [ 65.466146][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.482413][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.486093][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.494999][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.498821][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.506210][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.511249][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.518265][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.598668][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.603453][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.607705][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.615668][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.621579][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.630738][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.638645][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.645252][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.721620][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.729194][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.739581][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.746689][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.752860][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.760459][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.770350][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.778353][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.892010][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.899700][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.904996][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.912726][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.923838][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.930822][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.935050][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.941156][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.966276][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.000441][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.024667][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.028734][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.045053][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.052013][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.055159][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.121368][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.140497][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.164025][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.167101][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.183192][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.185571][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.205251][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.235183][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.237936][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.257502][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.268771][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.272268][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.311136][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.329440][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.333207][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.354766][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.357706][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.606652][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.623002][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.667417][ T5739] veth0_vlan: entered promiscuous mode [ 66.688531][ T5739] veth1_vlan: entered promiscuous mode [ 66.706493][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.715271][ T5735] veth0_vlan: entered promiscuous mode [ 66.732607][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.744241][ T5735] veth1_vlan: entered promiscuous mode [ 66.759763][ T5739] veth0_macvtap: entered promiscuous mode [ 66.775171][ T5739] veth1_macvtap: entered promiscuous mode [ 66.820806][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.839448][ T5741] veth0_vlan: entered promiscuous mode [ 66.844611][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.857874][ T5740] veth0_vlan: entered promiscuous mode [ 66.881410][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.887954][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.894293][ T5741] veth1_vlan: entered promiscuous mode [ 66.901112][ T5735] veth0_macvtap: entered promiscuous mode [ 66.904671][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.910638][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916202][ T5740] veth1_vlan: entered promiscuous mode [ 66.932113][ T5735] veth1_macvtap: entered promiscuous mode [ 67.014432][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.031978][ T5741] veth0_macvtap: entered promiscuous mode [ 67.042703][ T5741] veth1_macvtap: entered promiscuous mode [ 67.043005][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.047780][ T5740] veth0_macvtap: entered promiscuous mode [ 67.050035][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.064971][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.096103][ T5740] veth1_macvtap: entered promiscuous mode [ 67.100990][ T5587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.104416][ T5587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.121211][ T5587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.124254][ T5587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.134848][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.136651][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.139098][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.158918][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.170494][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.178779][ T5587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.190497][ T5587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.194414][ T5587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.213319][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.214298][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.225779][ T5587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.250996][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.279062][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.294534][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.301465][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.309139][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.316577][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.377499][ T5091] Bluetooth: hci2: command tx timeout [ 67.378283][ T64] Bluetooth: hci3: command tx timeout [ 67.378483][ T5743] Bluetooth: hci0: command tx timeout [ 67.387030][ T64] Bluetooth: hci1: command tx timeout [ 67.396616][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.403713][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.411220][ T5888] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.418337][ T5888] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 67.424201][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.427725][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.474865][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.479665][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.500132][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.504273][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.557361][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.561731][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.786244][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.786285][ T5901] syzkaller0: entered promiscuous mode [ 67.792888][ T5901] syzkaller0: entered allmulticast mode [ 67.848532][ T5902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.856128][ T5902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.863370][ T5902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.903978][ T5902] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.936939][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.940419][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.969561][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 67.969577][ T42] audit: type=1400 audit(1783748463.336:190): avc: denied { create } for pid=5904 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.978969][ T42] audit: type=1400 audit(1783748463.336:191): avc: denied { setopt } for pid=5904 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.985345][ T42] audit: type=1400 audit(1783748463.336:192): avc: denied { bind } for pid=5904 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.995354][ T42] audit: type=1400 audit(1783748463.336:193): avc: denied { name_bind } for pid=5904 comm="syz.0.7" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.003737][ T42] audit: type=1400 audit(1783748463.336:194): avc: denied { node_bind } for pid=5904 comm="syz.0.7" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.020155][ T42] audit: type=1400 audit(1783748463.336:195): avc: denied { write } for pid=5904 comm="syz.0.7" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.030261][ T42] audit: type=1400 audit(1783748463.336:196): avc: denied { connect } for pid=5904 comm="syz.0.7" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.039426][ T42] audit: type=1400 audit(1783748463.336:197): avc: denied { name_connect } for pid=5904 comm="syz.0.7" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.042242][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.049057][ T42] audit: type=1400 audit(1783748463.406:198): avc: denied { getopt } for pid=5904 comm="syz.0.7" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.054407][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.117938][ T42] audit: type=1400 audit(1783748463.476:199): avc: denied { read write } for pid=5907 comm="syz.0.8" name="video36" dev="devtmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 68.213031][ T5587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.218026][ T5587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.238618][ T5587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.245886][ T5587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.254398][ T5910] syzkaller0: entered promiscuous mode [ 68.256662][ T5910] syzkaller0: entered allmulticast mode [ 68.733712][ T5892] Set syz1 is full, maxelem 65536 reached [ 68.935222][ T5918] process 'syz.0.13' launched './file0' with NULL argv: empty string added [ 69.013124][ T5920] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 69.130187][ T10] IPVS: starting estimator thread 0... [ 69.202725][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 69.207121][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 69.246923][ T5923] IPVS: using max 42 ests per chain, 100800 per kthread [ 69.306086][ T5922] bridge_slave_0: left allmulticast mode [ 69.308779][ T5922] bridge_slave_0: left promiscuous mode [ 69.312445][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.399778][ T5922] bridge_slave_1: left allmulticast mode [ 69.402410][ T5922] bridge_slave_1: left promiscuous mode [ 69.405249][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.422712][ T5922] bond0: (slave bond_slave_0): Releasing backup interface [ 69.431690][ T5922] bond0: (slave bond_slave_1): Releasing backup interface [ 69.439153][ T5922] team0: Port device team_slave_0 removed [ 69.445520][ T5922] team0: Port device team_slave_1 removed [ 69.448058][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.454986][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.457162][ T64] Bluetooth: hci0: command tx timeout [ 69.459393][ T5743] Bluetooth: hci1: command tx timeout [ 69.459453][ T5746] Bluetooth: hci3: command tx timeout [ 69.466059][ T5922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.472286][ T5743] Bluetooth: hci2: command tx timeout [ 69.636068][ T5930] 9pnet_fd: p9_fd_create_tcp (5930): problem connecting socket to 127.0.0.1 [ 69.693844][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 69.812260][ T5949] netlink: 144 bytes leftover after parsing attributes in process `syz.1.26'. [ 70.371289][ T5930] 9pnet_fd: p9_fd_create_tcp (5930): problem connecting socket to 127.0.0.1 [ 71.085352][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 71.091940][ T6048] syz_tun: entered promiscuous mode [ 71.199820][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 71.225561][ T6054] bond1: Invalid ad_actor_system MAC address. [ 71.228983][ T6054] bond1: option ad_actor_system: invalid value (27571) [ 71.451176][ T6054] bond1 (unregistering): Released all slaves [ 71.492770][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.519672][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.537157][ T5743] Bluetooth: hci2: command tx timeout [ 71.537174][ T64] Bluetooth: hci1: command tx timeout [ 71.538940][ T5091] Bluetooth: hci0: command tx timeout [ 71.546953][ T5091] Bluetooth: hci3: command 0x0419 tx timeout [ 71.556862][ T5886] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.568741][ T6054] Zero length message leads to an empty skb [ 71.660367][ T6088] netlink: 104 bytes leftover after parsing attributes in process `syz.2.53'. [ 71.716860][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 71.723593][ T5886] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 71.733179][ T5886] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 71.739149][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.744927][ T5886] usb 6-1: Product: syz [ 71.749375][ T5886] usb 6-1: Manufacturer: syz [ 71.752049][ T5886] usb 6-1: SerialNumber: syz [ 71.766337][ T5886] usb 6-1: config 0 descriptor?? [ 71.791983][ T5886] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 71.796185][ T5886] dvb-usb: bulk message failed: -22 (4/0) [ 71.800035][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.804107][ T5886] dvb-usb: bulk message failed: -22 (5/0) [ 71.807796][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.812057][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.821026][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.826611][ T5886] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 71.830992][ T5886] usb 6-1: media controller created [ 71.844940][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.855662][ T3265] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 71.864581][ T5886] usb 6-1: selecting invalid altsetting 3 [ 71.866662][ T5886] ttusb2: set interface to alts=3 failed [ 71.868947][ T3265] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 71.891343][ T224] wlan1: authenticated [ 71.891601][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.893839][ T5886] DVB: Unable to find symbol tda10086_attach() [ 71.901090][ T5886] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 71.905500][ T5886] dvb-usb: bulk message failed: -22 (4/0) [ 71.910114][ T224] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 71.911674][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.917467][ T224] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1491) [ 71.921390][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.922564][ T5886] dvb-usb: bulk message failed: -22 (5/0) [ 71.925553][ T224] wlan1: associated [ 71.933746][ T5886] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.934627][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.944301][ T5886] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 71.992931][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.997735][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.133605][ T5886] usb 6-1: USB disconnect, device number 2 [ 72.138268][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.227620][ T5886] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 72.295363][ T6099] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 72.348093][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.355662][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.371152][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.380183][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.400111][ T6109] syzkaller0: entered promiscuous mode [ 72.402237][ T6109] syzkaller0: entered allmulticast mode [ 72.613829][ T6095] syz.2.55 (6095): drop_caches: 2 [ 72.896371][ T6124] netlink: 'syz.1.61': attribute type 2 has an invalid length. [ 72.899359][ T6124] netlink: 'syz.1.61': attribute type 2 has an invalid length. [ 72.911663][ T6124] ======================================================= [ 72.911663][ T6124] WARNING: The mand mount option has been deprecated and [ 72.911663][ T6124] and is ignored by this kernel. Remove the mand [ 72.911663][ T6124] option from the mount to silence this warning. [ 72.911663][ T6124] ======================================================= [ 72.927662][ T6124] binder: Binderfs stats mode cannot be changed during a remount [ 73.064123][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 73.064141][ T42] audit: type=1400 audit(1783748468.426:271): avc: denied { append } for pid=6127 comm="syz.1.63" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.138794][ T42] audit: type=1400 audit(1783748468.506:272): avc: denied { ioctl } for pid=6132 comm="syz.1.64" path="socket:[11360]" dev="sockfs" ino=11360 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.239880][ T6138] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 73.619327][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 73.779611][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.843012][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.867578][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.897853][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.070197][ T6176] syzkaller0: entered promiscuous mode [ 74.073200][ T6176] syzkaller0: entered allmulticast mode [ 74.223836][ T6178] netlink: 144 bytes leftover after parsing attributes in process `syz.3.77'. [ 74.261202][ T6180] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 74.372659][ T42] audit: type=1400 audit(1783748469.736:273): avc: denied { ioctl } for pid=6181 comm="syz.3.79" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10641 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.425605][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 74.431181][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 74.711857][ T6192] syzkaller0: entered promiscuous mode [ 74.713726][ T6192] syzkaller0: entered allmulticast mode [ 74.796905][ T5742] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.946952][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 74.950849][ T5742] usb 5-1: config index 0 descriptor too short (expected 15270, got 18) [ 74.955901][ T5742] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 74.961144][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.964040][ T5742] usb 5-1: Product: syz [ 74.965251][ T5742] usb 5-1: Manufacturer: syz [ 74.967663][ T5742] usb 5-1: SerialNumber: syz [ 74.975674][ T5742] usb 5-1: config 0 descriptor?? [ 74.987310][ T5742] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 74.990889][ T5742] dvb-usb: bulk message failed: -22 (4/0) [ 74.992794][ T5742] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 74.995795][ T5742] dvb-usb: bulk message failed: -22 (5/0) [ 74.998481][ T5742] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 75.005490][ T5742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.009537][ T5742] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 75.012056][ T5742] usb 5-1: media controller created [ 75.019900][ T5742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.031053][ T5742] usb 5-1: selecting invalid altsetting 3 [ 75.032902][ T5742] ttusb2: set interface to alts=3 failed [ 75.063674][ T5742] DVB: Unable to find symbol tda10086_attach() [ 75.065531][ T5742] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 75.073627][ T5742] dvb-usb: bulk message failed: -22 (4/0) [ 75.075567][ T5742] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 75.079463][ T5742] dvb-usb: bulk message failed: -22 (5/0) [ 75.084627][ T5742] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 75.088973][ T5742] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 75.192058][ T42] audit: type=1400 audit(1783748470.556:274): avc: denied { create } for pid=6205 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.216226][ T42] audit: type=1400 audit(1783748470.576:275): avc: denied { connect } for pid=6205 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.261466][ T42] audit: type=1400 audit(1783748470.626:276): avc: denied { connect } for pid=6207 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.276173][ T6211] syzkaller0: entered promiscuous mode [ 75.278936][ T42] audit: type=1400 audit(1783748470.626:277): avc: denied { name_connect } for pid=6207 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 75.287726][ T6211] syzkaller0: entered allmulticast mode [ 75.299529][ T5843] usb 5-1: USB disconnect, device number 2 [ 75.335125][ T42] audit: type=1400 audit(1783748470.696:278): avc: denied { name_bind } for pid=6212 comm="syz.1.89" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 75.440526][ T5843] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 75.470213][ T6220] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 75.592990][ T42] audit: type=1400 audit(1783748470.956:279): avc: denied { create } for pid=6221 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.605920][ T42] audit: type=1400 audit(1783748470.966:280): avc: denied { bind } for pid=6221 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.606261][ T6222] Unsupported ieee802154 address type: 0 [ 75.617509][ T6222] netlink: 104 bytes leftover after parsing attributes in process `syz.2.92'. [ 75.680540][ T6224] capability: warning: `syz.1.93' uses deprecated v2 capabilities in a way that may be insecure [ 75.696967][ T5091] Bluetooth: hci3: command 0x0419 tx timeout [ 76.010858][ T6240] netlink: 'syz.0.99': attribute type 2 has an invalid length. [ 76.014575][ T6240] netlink: 'syz.0.99': attribute type 2 has an invalid length. [ 76.023498][ T6240] binder: Binderfs stats mode cannot be changed during a remount [ 76.096882][ T6229] syz.2.94 (6229): drop_caches: 2 [ 76.281390][ T6244] syzkaller1: entered promiscuous mode [ 76.300549][ T6244] syzkaller1: entered allmulticast mode [ 77.486888][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.498030][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 83.261704][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 83.261722][ T42] audit: type=1400 audit(1783748478.606:286): avc: denied { read } for pid=6254 comm="syz.0.105" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.306689][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 83.310916][ T6258] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.379583][ T42] audit: type=1400 audit(1783748478.616:287): avc: denied { open } for pid=6254 comm="syz.0.105" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.391946][ T42] audit: type=1400 audit(1783748478.626:288): avc: denied { ioctl } for pid=6254 comm="syz.0.105" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.401623][ T42] audit: type=1400 audit(1783748478.676:289): avc: denied { setopt } for pid=6257 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.409337][ T42] audit: type=1400 audit(1783748478.746:290): avc: denied { write } for pid=6257 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.511022][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 83.524575][ T42] audit: type=1400 audit(1783748478.886:291): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.892311][ T6268] syzkaller0: entered promiscuous mode [ 83.894578][ T6268] syzkaller0: entered allmulticast mode [ 84.193644][ T6275] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 84.200702][ T6275] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 84.269190][ T6276] binder: Binderfs stats mode cannot be changed during a remount [ 84.331041][ T42] audit: type=1400 audit(1783748479.696:292): avc: denied { name_connect } for pid=6277 comm="syz.2.112" dest=300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 84.614785][ T42] audit: type=1400 audit(1783748479.976:293): avc: denied { create } for pid=6281 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.672047][ T6282] netlink: 108 bytes leftover after parsing attributes in process `syz.2.114'. [ 84.682070][ T42] audit: type=1400 audit(1783748480.036:294): avc: denied { write } for pid=6281 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.054394][ T42] audit: type=1400 audit(1783748480.416:295): avc: denied { create } for pid=6289 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.082776][ T6293] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 85.087529][ T6293] syzkaller0: Linktype set failed because interface is up [ 85.094345][ T6295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.161175][ T6295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.169785][ T6295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.177513][ T6295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.362528][ T234] ------------[ cut here ]------------ [ 85.365796][ T234] intreq != rdev->scan_req && intreq != rdev->int_scan_req [ 85.365815][ T234] WARNING: net/wireless/scan.c:1199 at cfg80211_scan_done+0x191/0x520, CPU#3: kworker/u33:8/234 [ 85.373625][ T234] Modules linked in: [ 85.375596][ T234] CPU: 3 UID: 0 PID: 234 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 85.380361][ T234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.385689][ T234] Workqueue: events_unbound cfg80211_wiphy_work [ 85.388403][ T234] RIP: 0010:cfg80211_scan_done+0x191/0x520 [ 85.390867][ T234] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 57 03 00 00 4c 39 bd 78 fa ff ff 74 09 e8 c0 a4 02 f7 90 <0f> 0b 90 e8 b7 a4 02 f7 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 [ 85.399535][ T234] RSP: 0018:ffffc900031679d0 EFLAGS: 00010293 [ 85.402619][ T234] RAX: 0000000000000000 RBX: ffff88801c743418 RCX: ffffffff8b072e16 [ 85.405890][ T234] RDX: ffff888025b04a80 RSI: ffffffff8b072b80 RDI: ffff8880589901b8 [ 85.409360][ T234] RBP: ffff888058990740 R08: 0000000000000001 R09: 0000000000000000 [ 85.412695][ T234] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 85.416703][ T234] R13: ffff888058992b40 R14: 1ffff9200062cf3c R15: ffff88801c743400 [ 85.420796][ T234] FS: 0000000000000000(0000) GS:ffff8880d60ea000(0000) knlGS:0000000000000000 [ 85.425431][ T234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.428256][ T234] CR2: 00007f2ecdbeb158 CR3: 0000000033d62000 CR4: 0000000000352ef0 [ 85.431693][ T234] Call Trace: [ 85.433189][ T234] [ 85.434543][ T234] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 85.437358][ T234] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.440184][ T234] __ieee80211_scan_completed+0x342/0xe30 [ 85.442794][ T234] ieee80211_scan_work+0x472/0x2010 [ 85.444992][ T234] ? do_raw_spin_lock+0x128/0x260 [ 85.447214][ T234] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 85.449940][ T234] ? rcu_is_watching+0x12/0xc0 [ 85.452083][ T234] cfg80211_wiphy_work+0x2b7/0x550 [ 85.454563][ T234] process_one_work+0xa23/0x1940 [ 85.456956][ T234] ? __pfx_process_one_work+0x10/0x10 [ 85.459395][ T234] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 85.461894][ T234] worker_thread+0x5ef/0xe50 [ 85.463866][ T234] ? kthread+0x13a/0x450 [ 85.465682][ T234] ? __pfx_worker_thread+0x10/0x10 [ 85.467980][ T234] kthread+0x370/0x450 [ 85.469886][ T234] ? __pfx_kthread+0x10/0x10 [ 85.472215][ T234] ret_from_fork+0x72b/0xd50 [ 85.474601][ T234] ? __pfx_ret_from_fork+0x10/0x10 [ 85.477007][ T234] ? __switch_to+0x800/0x10f0 [ 85.479046][ T234] ? __pfx_kthread+0x10/0x10 [ 85.480986][ T234] ret_from_fork_asm+0x1a/0x30 [ 85.483120][ T234] [ 85.484460][ T234] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.488429][ T234] CPU: 3 UID: 0 PID: 234 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 85.492701][ T234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.496860][ T234] Workqueue: events_unbound cfg80211_wiphy_work [ 85.499467][ T234] Call Trace: [ 85.500971][ T234] [ 85.502745][ T234] dump_stack_lvl+0x100/0x190 [ 85.505369][ T234] vpanic+0x552/0x970 [ 85.507472][ T234] ? __pfx_vpanic+0x10/0x10 [ 85.509703][ T234] panic+0xd1/0xe0 [ 85.511320][ T234] ? __pfx_panic+0x10/0x10 [ 85.513241][ T234] ? check_panic_on_warn+0x1f/0x90 [ 85.515382][ T234] check_panic_on_warn.cold+0x19/0x34 [ 85.517648][ T234] ? cfg80211_scan_done+0x191/0x520 [ 85.520064][ T234] __warn.cold+0x191/0x318 [ 85.522139][ T234] __report_bug+0x30f/0x440 [ 85.524508][ T234] ? cfg80211_scan_done+0x191/0x520 [ 85.526979][ T234] ? __pfx___report_bug+0x10/0x10 [ 85.529093][ T234] ? __schedule+0x126e/0x6730 [ 85.531104][ T234] ? find_held_lock+0x2b/0x80 [ 85.533145][ T234] ? synchronize_rcu_expedited+0x3c3/0x450 [ 85.535655][ T234] ? synchronize_rcu_expedited+0x3c3/0x450 [ 85.538697][ T234] ? cfg80211_scan_done+0x191/0x520 [ 85.542052][ T234] report_bug+0xb2/0x220 [ 85.544426][ T234] ? cfg80211_scan_done+0x191/0x520 [ 85.546625][ T234] handle_bug+0x16a/0x2a0 [ 85.548440][ T234] exc_invalid_op+0x17/0x50 [ 85.550368][ T234] asm_exc_invalid_op+0x1a/0x20 [ 85.552445][ T234] RIP: 0010:cfg80211_scan_done+0x191/0x520 [ 85.554893][ T234] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 57 03 00 00 4c 39 bd 78 fa ff ff 74 09 e8 c0 a4 02 f7 90 <0f> 0b 90 e8 b7 a4 02 f7 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 [ 85.563362][ T234] RSP: 0018:ffffc900031679d0 EFLAGS: 00010293 [ 85.566269][ T234] RAX: 0000000000000000 RBX: ffff88801c743418 RCX: ffffffff8b072e16 [ 85.569566][ T234] RDX: ffff888025b04a80 RSI: ffffffff8b072b80 RDI: ffff8880589901b8 [ 85.572864][ T234] RBP: ffff888058990740 R08: 0000000000000001 R09: 0000000000000000 [ 85.576384][ T234] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 85.580169][ T234] R13: ffff888058992b40 R14: 1ffff9200062cf3c R15: ffff88801c743400 [ 85.583943][ T234] ? cfg80211_scan_done+0x426/0x520 [ 85.586120][ T234] ? cfg80211_scan_done+0x190/0x520 [ 85.588340][ T234] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 85.590650][ T234] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 85.592918][ T234] __ieee80211_scan_completed+0x342/0xe30 [ 85.595567][ T234] ieee80211_scan_work+0x472/0x2010 [ 85.598663][ T234] ? do_raw_spin_lock+0x128/0x260 [ 85.601039][ T234] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 85.603527][ T234] ? rcu_is_watching+0x12/0xc0 [ 85.605520][ T234] cfg80211_wiphy_work+0x2b7/0x550 [ 85.607695][ T234] process_one_work+0xa23/0x1940 [ 85.609781][ T234] ? __pfx_process_one_work+0x10/0x10 [ 85.612293][ T234] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 85.615384][ T234] worker_thread+0x5ef/0xe50 [ 85.618013][ T234] ? kthread+0x13a/0x450 [ 85.620072][ T234] ? __pfx_worker_thread+0x10/0x10 [ 85.622446][ T234] kthread+0x370/0x450 [ 85.624184][ T234] ? __pfx_kthread+0x10/0x10 [ 85.626143][ T234] ret_from_fork+0x72b/0xd50 [ 85.628103][ T234] ? __pfx_ret_from_fork+0x10/0x10 [ 85.630245][ T234] ? __switch_to+0x800/0x10f0 [ 85.632240][ T234] ? __pfx_kthread+0x10/0x10 [ 85.634355][ T234] ret_from_fork_asm+0x1a/0x30 [ 85.636941][ T234] [ 85.639677][ T234] Kernel Offset: disabled [ 85.641821][ T234] Rebooting in 86400 seconds..