[ 51.706380][ T38] audit: type=1400 audit(1661447200.589:74): avc: denied { write } for pid=3625 comm="sh" path="pipe:[30207]" dev="pipefs" ino=30207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:36608' (ECDSA) to the list of known hosts. [ 55.156352][ T38] audit: type=1400 audit(1661447204.049:75): avc: denied { execute } for pid=3675 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.170716][ T38] audit: type=1400 audit(1661447204.059:76): avc: denied { execute_no_trans } for pid=3675 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/08/25 17:06:44 fuzzer started 2022/08/25 17:06:44 dialing manager at localhost:40007 [ 56.007052][ T38] audit: type=1400 audit(1661447204.909:77): avc: denied { mounton } for pid=3684 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.020079][ T3684] cgroup: Unknown subsys name 'net' [ 56.026736][ T38] audit: type=1400 audit(1661447204.909:78): avc: denied { mount } for pid=3684 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.048335][ T38] audit: type=1400 audit(1661447204.929:79): avc: denied { unmount } for pid=3684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.239986][ T3684] cgroup: Unknown subsys name 'rlimit' [ 56.378657][ T38] audit: type=1400 audit(1661447205.279:80): avc: denied { mounton } for pid=3684 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/08/25 17:06:45 syscalls: 3757 2022/08/25 17:06:45 code coverage: enabled 2022/08/25 17:06:45 comparison tracing: enabled 2022/08/25 17:06:45 extra coverage: enabled 2022/08/25 17:06:45 delay kcov mmap: enabled 2022/08/25 17:06:45 setuid sandbox: enabled 2022/08/25 17:06:45 namespace sandbox: enabled 2022/08/25 17:06:45 Android sandbox: enabled 2022/08/25 17:06:45 fault injection: enabled 2022/08/25 17:06:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/08/25 17:06:45 net packet injection: enabled 2022/08/25 17:06:45 net device setup: enabled 2022/08/25 17:06:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/08/25 17:06:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/08/25 17:06:45 USB emulation: enabled 2022/08/25 17:06:45 hci packet injection: enabled 2022/08/25 17:06:45 wifi device emulation: failed to parse kernel version (6.0.0-rc2-syzkaller-00054-gc40e8341e3b3) 2022/08/25 17:06:45 802.15.4 emulation: enabled 2022/08/25 17:06:45 fetching corpus: 0, signal 0/2000 (executing program) [ 56.397446][ T38] audit: type=1400 audit(1661447205.279:81): avc: denied { mount } for pid=3684 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.422817][ T38] audit: type=1400 audit(1661447205.279:82): avc: denied { setattr } for pid=3684 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/08/25 17:06:45 fetching corpus: 50, signal 44242/47752 (executing program) 2022/08/25 17:06:45 fetching corpus: 100, signal 59751/64760 (executing program) 2022/08/25 17:06:46 fetching corpus: 150, signal 74254/80651 (executing program) 2022/08/25 17:06:46 fetching corpus: 200, signal 81790/89557 (executing program) 2022/08/25 17:06:46 fetching corpus: 250, signal 94389/103352 (executing program) 2022/08/25 17:06:46 fetching corpus: 300, signal 99635/109884 (executing program) 2022/08/25 17:06:46 fetching corpus: 350, signal 107147/118566 (executing program) 2022/08/25 17:06:47 fetching corpus: 400, signal 113141/125725 (executing program) 2022/08/25 17:06:47 fetching corpus: 450, signal 119552/133254 (executing program) 2022/08/25 17:06:47 fetching corpus: 500, signal 126348/141055 (executing program) 2022/08/25 17:06:47 fetching corpus: 550, signal 131324/147065 (executing program) 2022/08/25 17:06:47 fetching corpus: 600, signal 135695/152442 (executing program) 2022/08/25 17:06:47 fetching corpus: 650, signal 140807/158464 (executing program) 2022/08/25 17:06:48 fetching corpus: 700, signal 145165/163733 (executing program) 2022/08/25 17:06:48 fetching corpus: 750, signal 151160/170489 (executing program) 2022/08/25 17:06:48 fetching corpus: 800, signal 154232/174493 (executing program) 2022/08/25 17:06:48 fetching corpus: 850, signal 157277/178431 (executing program) 2022/08/25 17:06:48 fetching corpus: 900, signal 159961/181993 (executing program) 2022/08/25 17:06:48 fetching corpus: 950, signal 162531/185499 (executing program) 2022/08/25 17:06:49 fetching corpus: 1000, signal 165498/189288 (executing program) 2022/08/25 17:06:49 fetching corpus: 1050, signal 169278/193773 (executing program) 2022/08/25 17:06:49 fetching corpus: 1100, signal 172487/197729 (executing program) 2022/08/25 17:06:49 fetching corpus: 1150, signal 175538/201509 (executing program) 2022/08/25 17:06:50 fetching corpus: 1200, signal 177849/204589 (executing program) 2022/08/25 17:06:50 fetching corpus: 1250, signal 181519/208816 (executing program) 2022/08/25 17:06:50 fetching corpus: 1300, signal 184809/212663 (executing program) 2022/08/25 17:06:50 fetching corpus: 1350, signal 186685/215317 (executing program) 2022/08/25 17:06:51 fetching corpus: 1400, signal 188638/217997 (executing program) 2022/08/25 17:06:51 fetching corpus: 1450, signal 191086/221074 (executing program) 2022/08/25 17:06:51 fetching corpus: 1500, signal 193474/224091 (executing program) 2022/08/25 17:06:51 fetching corpus: 1550, signal 196252/227342 (executing program) 2022/08/25 17:06:52 fetching corpus: 1600, signal 198771/230463 (executing program) 2022/08/25 17:06:52 fetching corpus: 1650, signal 200657/232934 (executing program) 2022/08/25 17:06:52 fetching corpus: 1700, signal 203282/236016 (executing program) 2022/08/25 17:06:52 fetching corpus: 1750, signal 205381/238722 (executing program) 2022/08/25 17:06:52 fetching corpus: 1800, signal 207457/241343 (executing program) 2022/08/25 17:06:53 fetching corpus: 1850, signal 209033/243513 (executing program) 2022/08/25 17:06:53 fetching corpus: 1900, signal 210801/245891 (executing program) 2022/08/25 17:06:53 fetching corpus: 1950, signal 212854/248431 (executing program) 2022/08/25 17:06:53 fetching corpus: 2000, signal 215144/251099 (executing program) 2022/08/25 17:06:53 fetching corpus: 2050, signal 217029/253438 (executing program) 2022/08/25 17:06:54 fetching corpus: 2100, signal 218867/255734 (executing program) 2022/08/25 17:06:54 fetching corpus: 2150, signal 221341/258466 (executing program) 2022/08/25 17:06:54 fetching corpus: 2200, signal 223521/260944 (executing program) 2022/08/25 17:06:54 fetching corpus: 2250, signal 225242/263077 (executing program) 2022/08/25 17:06:54 fetching corpus: 2300, signal 226693/265006 (executing program) 2022/08/25 17:06:55 fetching corpus: 2350, signal 228488/267168 (executing program) 2022/08/25 17:06:55 fetching corpus: 2400, signal 230115/269180 (executing program) 2022/08/25 17:06:55 fetching corpus: 2450, signal 231365/270949 (executing program) 2022/08/25 17:06:55 fetching corpus: 2500, signal 232543/272619 (executing program) 2022/08/25 17:06:55 fetching corpus: 2550, signal 234199/274608 (executing program) 2022/08/25 17:06:56 fetching corpus: 2600, signal 236141/276823 (executing program) 2022/08/25 17:06:56 fetching corpus: 2650, signal 237545/278591 (executing program) 2022/08/25 17:06:56 fetching corpus: 2700, signal 238835/280307 (executing program) 2022/08/25 17:06:56 fetching corpus: 2750, signal 240064/281891 (executing program) 2022/08/25 17:06:57 fetching corpus: 2800, signal 241592/283703 (executing program) 2022/08/25 17:06:57 fetching corpus: 2850, signal 243029/285489 (executing program) 2022/08/25 17:06:57 fetching corpus: 2900, signal 244454/287216 (executing program) 2022/08/25 17:06:57 fetching corpus: 2950, signal 245842/288920 (executing program) 2022/08/25 17:06:57 fetching corpus: 3000, signal 247360/290670 (executing program) 2022/08/25 17:06:58 fetching corpus: 3050, signal 248635/292266 (executing program) 2022/08/25 17:06:58 fetching corpus: 3100, signal 250412/294133 (executing program) 2022/08/25 17:06:58 fetching corpus: 3150, signal 251693/295686 (executing program) 2022/08/25 17:06:58 fetching corpus: 3200, signal 253483/297564 (executing program) 2022/08/25 17:06:58 fetching corpus: 3250, signal 254809/299070 (executing program) 2022/08/25 17:06:59 fetching corpus: 3300, signal 256043/300608 (executing program) 2022/08/25 17:06:59 fetching corpus: 3350, signal 257401/302190 (executing program) 2022/08/25 17:06:59 fetching corpus: 3400, signal 258539/303608 (executing program) 2022/08/25 17:06:59 fetching corpus: 3450, signal 259446/304860 (executing program) 2022/08/25 17:06:59 fetching corpus: 3500, signal 260483/306179 (executing program) 2022/08/25 17:07:00 fetching corpus: 3549, signal 262265/307977 (executing program) 2022/08/25 17:07:00 fetching corpus: 3599, signal 263555/309402 (executing program) 2022/08/25 17:07:00 fetching corpus: 3649, signal 264600/310694 (executing program) 2022/08/25 17:07:00 fetching corpus: 3699, signal 265661/311954 (executing program) 2022/08/25 17:07:00 fetching corpus: 3749, signal 267429/313638 (executing program) 2022/08/25 17:07:01 fetching corpus: 3799, signal 269235/315332 (executing program) 2022/08/25 17:07:01 fetching corpus: 3849, signal 270376/316567 (executing program) 2022/08/25 17:07:01 fetching corpus: 3898, signal 271324/317670 (executing program) 2022/08/25 17:07:01 fetching corpus: 3948, signal 272252/318824 (executing program) 2022/08/25 17:07:02 fetching corpus: 3998, signal 273438/320087 (executing program) 2022/08/25 17:07:02 fetching corpus: 4048, signal 274512/321279 (executing program) 2022/08/25 17:07:03 fetching corpus: 4098, signal 275616/322464 (executing program) 2022/08/25 17:07:03 fetching corpus: 4148, signal 276665/323609 (executing program) 2022/08/25 17:07:03 fetching corpus: 4198, signal 278106/324938 (executing program) 2022/08/25 17:07:03 fetching corpus: 4248, signal 278866/325940 (executing program) 2022/08/25 17:07:03 fetching corpus: 4298, signal 279768/326947 (executing program) 2022/08/25 17:07:04 fetching corpus: 4347, signal 280934/328124 (executing program) 2022/08/25 17:07:04 fetching corpus: 4397, signal 281999/329206 (executing program) 2022/08/25 17:07:04 fetching corpus: 4447, signal 283633/330566 (executing program) 2022/08/25 17:07:04 fetching corpus: 4497, signal 284702/331616 (executing program) 2022/08/25 17:07:04 fetching corpus: 4547, signal 285751/332683 (executing program) 2022/08/25 17:07:05 fetching corpus: 4595, signal 286709/333698 (executing program) 2022/08/25 17:07:05 fetching corpus: 4645, signal 287709/334727 (executing program) 2022/08/25 17:07:05 fetching corpus: 4695, signal 289022/335843 (executing program) 2022/08/25 17:07:05 fetching corpus: 4745, signal 290103/336884 (executing program) [ 77.242652][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.248785][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 2022/08/25 17:07:06 fetching corpus: 4795, signal 291392/337956 (executing program) 2022/08/25 17:07:06 fetching corpus: 4845, signal 292184/338794 (executing program) 2022/08/25 17:07:06 fetching corpus: 4895, signal 293640/339979 (executing program) 2022/08/25 17:07:06 fetching corpus: 4945, signal 294423/340853 (executing program) 2022/08/25 17:07:07 fetching corpus: 4995, signal 295293/341703 (executing program) 2022/08/25 17:07:07 fetching corpus: 5045, signal 295926/342474 (executing program) 2022/08/25 17:07:07 fetching corpus: 5095, signal 296892/343370 (executing program) 2022/08/25 17:07:07 fetching corpus: 5145, signal 298022/344340 (executing program) 2022/08/25 17:07:07 fetching corpus: 5195, signal 299202/345338 (executing program) 2022/08/25 17:07:07 fetching corpus: 5245, signal 300041/346169 (executing program) 2022/08/25 17:07:08 fetching corpus: 5295, signal 301374/347159 (executing program) 2022/08/25 17:07:08 fetching corpus: 5345, signal 302432/348043 (executing program) 2022/08/25 17:07:08 fetching corpus: 5395, signal 303420/348898 (executing program) 2022/08/25 17:07:08 fetching corpus: 5445, signal 304872/349929 (executing program) 2022/08/25 17:07:08 fetching corpus: 5495, signal 307809/351553 (executing program) 2022/08/25 17:07:09 fetching corpus: 5545, signal 308801/352346 (executing program) 2022/08/25 17:07:09 fetching corpus: 5595, signal 309797/353177 (executing program) 2022/08/25 17:07:09 fetching corpus: 5645, signal 310930/353971 (executing program) 2022/08/25 17:07:09 fetching corpus: 5695, signal 311868/354709 (executing program) 2022/08/25 17:07:09 fetching corpus: 5745, signal 312900/355479 (executing program) 2022/08/25 17:07:10 fetching corpus: 5795, signal 313943/356251 (executing program) 2022/08/25 17:07:10 fetching corpus: 5845, signal 314409/356832 (executing program) 2022/08/25 17:07:10 fetching corpus: 5895, signal 315243/357488 (executing program) 2022/08/25 17:07:10 fetching corpus: 5945, signal 316094/358174 (executing program) 2022/08/25 17:07:10 fetching corpus: 5995, signal 316812/358767 (executing program) 2022/08/25 17:07:11 fetching corpus: 6045, signal 317594/359391 (executing program) 2022/08/25 17:07:11 fetching corpus: 6095, signal 318408/359966 (executing program) 2022/08/25 17:07:11 fetching corpus: 6145, signal 318943/360483 (executing program) 2022/08/25 17:07:11 fetching corpus: 6195, signal 320068/361222 (executing program) 2022/08/25 17:07:11 fetching corpus: 6245, signal 320986/361870 (executing program) 2022/08/25 17:07:12 fetching corpus: 6295, signal 321489/362327 (executing program) 2022/08/25 17:07:12 fetching corpus: 6345, signal 322337/362966 (executing program) 2022/08/25 17:07:12 fetching corpus: 6395, signal 323355/363630 (executing program) 2022/08/25 17:07:12 fetching corpus: 6445, signal 324268/364270 (executing program) 2022/08/25 17:07:13 fetching corpus: 6495, signal 325129/364881 (executing program) 2022/08/25 17:07:13 fetching corpus: 6545, signal 326037/365456 (executing program) 2022/08/25 17:07:13 fetching corpus: 6595, signal 326728/365964 (executing program) 2022/08/25 17:07:13 fetching corpus: 6645, signal 327475/366516 (executing program) 2022/08/25 17:07:13 fetching corpus: 6695, signal 328447/367121 (executing program) 2022/08/25 17:07:14 fetching corpus: 6745, signal 329092/367593 (executing program) 2022/08/25 17:07:14 fetching corpus: 6795, signal 330090/368190 (executing program) 2022/08/25 17:07:14 fetching corpus: 6845, signal 330786/368658 (executing program) 2022/08/25 17:07:14 fetching corpus: 6895, signal 331287/369048 (executing program) 2022/08/25 17:07:15 fetching corpus: 6945, signal 331670/369404 (executing program) 2022/08/25 17:07:15 fetching corpus: 6995, signal 332088/369782 (executing program) 2022/08/25 17:07:15 fetching corpus: 7045, signal 332769/370194 (executing program) 2022/08/25 17:07:15 fetching corpus: 7095, signal 333498/370647 (executing program) 2022/08/25 17:07:15 fetching corpus: 7145, signal 334176/371099 (executing program) 2022/08/25 17:07:16 fetching corpus: 7195, signal 334740/371519 (executing program) 2022/08/25 17:07:16 fetching corpus: 7245, signal 335438/371940 (executing program) [ 87.482569][ T40] cfg80211: failed to load regulatory.db 2022/08/25 17:07:16 fetching corpus: 7295, signal 336112/372362 (executing program) 2022/08/25 17:07:16 fetching corpus: 7345, signal 336814/372742 (executing program) 2022/08/25 17:07:16 fetching corpus: 7395, signal 337539/373144 (executing program) 2022/08/25 17:07:17 fetching corpus: 7445, signal 338246/373562 (executing program) 2022/08/25 17:07:17 fetching corpus: 7495, signal 338723/373885 (executing program) 2022/08/25 17:07:17 fetching corpus: 7545, signal 339251/374225 (executing program) 2022/08/25 17:07:17 fetching corpus: 7595, signal 340145/374619 (executing program) 2022/08/25 17:07:17 fetching corpus: 7645, signal 341597/375123 (executing program) 2022/08/25 17:07:17 fetching corpus: 7695, signal 342468/375510 (executing program) 2022/08/25 17:07:18 fetching corpus: 7745, signal 343069/375800 (executing program) 2022/08/25 17:07:18 fetching corpus: 7795, signal 343692/376132 (executing program) 2022/08/25 17:07:18 fetching corpus: 7845, signal 344142/376394 (executing program) 2022/08/25 17:07:18 fetching corpus: 7895, signal 344611/376675 (executing program) 2022/08/25 17:07:19 fetching corpus: 7945, signal 345509/377063 (executing program) 2022/08/25 17:07:19 fetching corpus: 7995, signal 346310/377409 (executing program) 2022/08/25 17:07:19 fetching corpus: 8045, signal 347037/377716 (executing program) 2022/08/25 17:07:19 fetching corpus: 8095, signal 347603/378010 (executing program) 2022/08/25 17:07:20 fetching corpus: 8145, signal 348195/378268 (executing program) 2022/08/25 17:07:20 fetching corpus: 8195, signal 348692/378511 (executing program) 2022/08/25 17:07:20 fetching corpus: 8245, signal 349500/378881 (executing program) 2022/08/25 17:07:20 fetching corpus: 8295, signal 350103/379143 (executing program) 2022/08/25 17:07:20 fetching corpus: 8345, signal 350631/379388 (executing program) 2022/08/25 17:07:20 fetching corpus: 8395, signal 351222/379625 (executing program) 2022/08/25 17:07:21 fetching corpus: 8445, signal 351657/379814 (executing program) 2022/08/25 17:07:21 fetching corpus: 8495, signal 352561/380051 (executing program) 2022/08/25 17:07:21 fetching corpus: 8545, signal 353261/380249 (executing program) 2022/08/25 17:07:21 fetching corpus: 8595, signal 353750/380474 (executing program) 2022/08/25 17:07:22 fetching corpus: 8645, signal 354415/380694 (executing program) 2022/08/25 17:07:22 fetching corpus: 8695, signal 355297/380932 (executing program) 2022/08/25 17:07:22 fetching corpus: 8745, signal 356006/381155 (executing program) 2022/08/25 17:07:22 fetching corpus: 8795, signal 356527/381332 (executing program) 2022/08/25 17:07:22 fetching corpus: 8845, signal 356932/381503 (executing program) 2022/08/25 17:07:23 fetching corpus: 8895, signal 357473/381662 (executing program) 2022/08/25 17:07:23 fetching corpus: 8945, signal 358090/381825 (executing program) 2022/08/25 17:07:24 fetching corpus: 8995, signal 358849/382014 (executing program) 2022/08/25 17:07:24 fetching corpus: 9045, signal 359323/382176 (executing program) 2022/08/25 17:07:24 fetching corpus: 9095, signal 359725/382325 (executing program) 2022/08/25 17:07:24 fetching corpus: 9145, signal 360493/382455 (executing program) 2022/08/25 17:07:25 fetching corpus: 9195, signal 361242/382611 (executing program) 2022/08/25 17:07:25 fetching corpus: 9245, signal 361814/382734 (executing program) 2022/08/25 17:07:25 fetching corpus: 9295, signal 362533/382859 (executing program) 2022/08/25 17:07:25 fetching corpus: 9345, signal 363052/383001 (executing program) 2022/08/25 17:07:25 fetching corpus: 9395, signal 363506/383062 (executing program) 2022/08/25 17:07:26 fetching corpus: 9445, signal 364242/383062 (executing program) 2022/08/25 17:07:26 fetching corpus: 9495, signal 364694/383063 (executing program) 2022/08/25 17:07:26 fetching corpus: 9545, signal 365332/383069 (executing program) 2022/08/25 17:07:26 fetching corpus: 9595, signal 365932/383069 (executing program) 2022/08/25 17:07:26 fetching corpus: 9645, signal 366520/383097 (executing program) 2022/08/25 17:07:27 fetching corpus: 9695, signal 367052/383102 (executing program) 2022/08/25 17:07:27 fetching corpus: 9745, signal 367547/383115 (executing program) 2022/08/25 17:07:27 fetching corpus: 9794, signal 368277/383167 (executing program) 2022/08/25 17:07:27 fetching corpus: 9844, signal 369597/383195 (executing program) 2022/08/25 17:07:28 fetching corpus: 9894, signal 370236/383230 (executing program) 2022/08/25 17:07:28 fetching corpus: 9943, signal 371011/383237 (executing program) 2022/08/25 17:07:28 fetching corpus: 9993, signal 371483/383237 (executing program) 2022/08/25 17:07:28 fetching corpus: 10042, signal 372180/383312 (executing program) 2022/08/25 17:07:29 fetching corpus: 10092, signal 373000/383313 (executing program) 2022/08/25 17:07:29 fetching corpus: 10140, signal 373400/383324 (executing program) 2022/08/25 17:07:29 fetching corpus: 10190, signal 373847/383344 (executing program) 2022/08/25 17:07:30 fetching corpus: 10240, signal 374409/383344 (executing program) 2022/08/25 17:07:30 fetching corpus: 10290, signal 374927/383361 (executing program) 2022/08/25 17:07:31 fetching corpus: 10340, signal 375486/383365 (executing program) 2022/08/25 17:07:31 fetching corpus: 10390, signal 375952/383377 (executing program) 2022/08/25 17:07:31 fetching corpus: 10416, signal 376166/383377 (executing program) 2022/08/25 17:07:31 fetching corpus: 10416, signal 376166/383377 (executing program) 2022/08/25 17:07:35 starting 4 fuzzer processes 17:07:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0xefb, 0x0, 0x0, 0x1, 0x0, "804c81a0b9f1849395bf940023987e000200"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd) 17:07:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'veth1_to_team\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'pim6reg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @dev, @multicast1}}}], {{'\x00', 0xc0, 0x1d0}, {0x28}}}}, 0x418) 17:07:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@loopback, @private1, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "65db01", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}}}, 0x0) 17:07:35 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x400004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80020005, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 106.230325][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 106.230363][ T38] audit: type=1400 audit(1661447255.129:86): avc: denied { execmem } for pid=3706 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.515979][ T38] audit: type=1400 audit(1661447255.409:87): avc: denied { mounton } for pid=3711 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 106.533130][ T38] audit: type=1400 audit(1661447255.409:88): avc: denied { mount } for pid=3712 comm="syz-executor.1" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 106.549979][ T38] audit: type=1400 audit(1661447255.409:89): avc: denied { create } for pid=3712 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.567281][ T38] audit: type=1400 audit(1661447255.409:90): avc: denied { read write } for pid=3712 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.586313][ T38] audit: type=1400 audit(1661447255.409:91): avc: denied { read write } for pid=3713 comm="syz-executor.3" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.604183][ T38] audit: type=1400 audit(1661447255.409:92): avc: denied { open } for pid=3712 comm="syz-executor.1" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.589969][ T38] audit: type=1400 audit(1661447256.489:93): avc: denied { ioctl } for pid=3713 comm="syz-executor.3" path="socket:[907]" dev="sockfs" ino=907 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.627084][ T3721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.631278][ T3723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.641278][ T3726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.642127][ T3721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.643141][ T3723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.644243][ T3723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.645574][ T3723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.646504][ T3723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.646958][ T3723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.652029][ T3723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.654258][ T3729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.654893][ T38] audit: type=1400 audit(1661447256.559:94): avc: denied { read } for pid=3713 comm="syz-executor.3" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.657257][ T3721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.658198][ T3721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.658818][ T3721] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.659599][ T3721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.663533][ T3729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.663630][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.665105][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.665341][ T38] audit: type=1400 audit(1661447256.559:95): avc: denied { open } for pid=3713 comm="syz-executor.3" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.665733][ T63] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.666019][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.687686][ T3726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.787915][ T3726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.793109][ T3726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.799060][ T3726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.053694][ T3713] chnl_net:caif_netlink_parms(): no params data found [ 108.199692][ T3714] chnl_net:caif_netlink_parms(): no params data found [ 108.364360][ T3711] chnl_net:caif_netlink_parms(): no params data found [ 108.383184][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.390149][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.400728][ T3713] device bridge_slave_0 entered promiscuous mode [ 108.423093][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.427742][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.432952][ T3713] device bridge_slave_1 entered promiscuous mode [ 108.632449][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.638069][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.646041][ T3714] device bridge_slave_0 entered promiscuous mode [ 108.653056][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.658073][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.663768][ T3714] device bridge_slave_1 entered promiscuous mode [ 108.704466][ T3713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.810261][ T3713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.847838][ T3714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.908877][ T3714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.956532][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.962435][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.971119][ T3711] device bridge_slave_0 entered promiscuous mode [ 109.005536][ T3712] chnl_net:caif_netlink_parms(): no params data found [ 109.045420][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.051482][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.058412][ T3711] device bridge_slave_1 entered promiscuous mode [ 109.089674][ T3713] team0: Port device team_slave_0 added [ 109.112947][ T3714] team0: Port device team_slave_0 added [ 109.141981][ T3713] team0: Port device team_slave_1 added [ 109.190884][ T3714] team0: Port device team_slave_1 added [ 109.198035][ T3711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.207455][ T3711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.340209][ T3713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.344917][ T3713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.365954][ T3713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.377803][ T3713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.383021][ T3713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.404985][ T3713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.442076][ T3711] team0: Port device team_slave_0 added [ 109.468126][ T3714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.473252][ T3714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.491275][ T3714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.502175][ T3711] team0: Port device team_slave_1 added [ 109.590458][ T3714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.594845][ T3714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.614288][ T3714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.677240][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.681887][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.690137][ T3712] device bridge_slave_0 entered promiscuous mode [ 109.716516][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.717416][ T1394] Bluetooth: hci0: command 0x0409 tx timeout [ 109.721652][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.726532][ T39] Bluetooth: hci2: command 0x0409 tx timeout [ 109.743053][ T41] Bluetooth: hci1: command 0x0409 tx timeout [ 109.746321][ T3711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.747535][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.764907][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.771346][ T3712] device bridge_slave_1 entered promiscuous mode [ 109.799787][ T3713] device hsr_slave_0 entered promiscuous mode [ 109.809205][ T3713] device hsr_slave_1 entered promiscuous mode [ 109.815905][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.821573][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.843804][ T3711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.876551][ T39] Bluetooth: hci3: command 0x0409 tx timeout [ 109.976382][ T3711] device hsr_slave_0 entered promiscuous mode [ 109.981746][ T3711] device hsr_slave_1 entered promiscuous mode [ 109.988529][ T3711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.994314][ T3711] Cannot create hsr debugfs directory [ 110.000067][ T3712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.009997][ T3712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.053920][ T3714] device hsr_slave_0 entered promiscuous mode [ 110.059029][ T3714] device hsr_slave_1 entered promiscuous mode [ 110.064932][ T3714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.070199][ T3714] Cannot create hsr debugfs directory [ 110.207408][ T3712] team0: Port device team_slave_0 added [ 110.252988][ T3712] team0: Port device team_slave_1 added [ 110.380441][ T3712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.385925][ T3712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.403775][ T3712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.450724][ T3712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.455664][ T3712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.472418][ T3712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.640050][ T3712] device hsr_slave_0 entered promiscuous mode [ 110.645768][ T3712] device hsr_slave_1 entered promiscuous mode [ 110.650857][ T3712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.656298][ T3712] Cannot create hsr debugfs directory [ 110.789610][ T3713] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.820697][ T3713] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.847610][ T3713] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.854152][ T3713] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.911936][ T3711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.922642][ T3711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.949934][ T3711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.959652][ T3711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.029248][ T3714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.037596][ T3714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.048597][ T3714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.075807][ T3714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.098214][ T3713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.134332][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.142726][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.155673][ T3713] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.196731][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.204153][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.211899][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.216717][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.222621][ T3712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.231727][ T3712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.242436][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.258501][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.269162][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.276014][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.281568][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.291889][ T3712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.303889][ T3712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.356847][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.364147][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.382340][ T3714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.397486][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.406863][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.414892][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.423383][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.439450][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.459295][ T3711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.470495][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.479503][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.494675][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.501929][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.514793][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.531571][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.536901][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.545556][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.552426][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.577495][ T3714] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.586459][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.617235][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.623388][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.629741][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.634772][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.640615][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.645696][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.650839][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.657306][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.663701][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.669732][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.676345][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.683591][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.690459][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.696190][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.706881][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.712288][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.724315][ T3713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.735833][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.742045][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.748144][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.754047][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.759089][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.764935][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.771498][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.786814][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 111.786830][ T38] audit: type=1400 audit(1661447260.689:97): avc: denied { module_request } for pid=3713 comm="syz-executor.3" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.796661][ T172] Bluetooth: hci2: command 0x041b tx timeout [ 111.796822][ T3685] Bluetooth: hci1: command 0x041b tx timeout [ 111.808971][ T3711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.808990][ T3711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.843383][ T172] Bluetooth: hci0: command 0x041b tx timeout [ 111.843733][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.858442][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.881576][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.888589][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.894964][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.901387][ T38] audit: type=1400 audit(1661447260.799:98): avc: denied { sys_module } for pid=3713 comm="syz-executor.3" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.915673][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.921612][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.928126][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.933941][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.951817][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.959483][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.965339][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.972799][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.979255][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.985722][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.991893][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.997405][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.003767][ T1394] Bluetooth: hci3: command 0x041b tx timeout [ 112.010669][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.017112][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.023727][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.038054][ T3712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.050336][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.056794][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.064739][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.079752][ T3711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.105611][ T3712] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.120567][ T3714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.127083][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.133829][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.142140][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.148032][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.162500][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.169549][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.177537][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.182498][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.188629][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.209409][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.215101][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.219338][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.225042][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.245831][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.252097][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.258495][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.280517][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.288722][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.296349][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.303159][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.309915][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.318063][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.332293][ T3713] device veth0_vlan entered promiscuous mode [ 112.347179][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.355922][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.364441][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.371534][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.380883][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.389320][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.410520][ T3713] device veth1_vlan entered promiscuous mode [ 112.436507][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.442983][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.449510][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.467296][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.473761][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.487662][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.494148][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.501077][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.509077][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.520995][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.528552][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.535451][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.545432][ T3711] device veth0_vlan entered promiscuous mode [ 112.571063][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.578883][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.586969][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.594393][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.603592][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.608862][ T3714] device veth0_vlan entered promiscuous mode [ 112.622488][ T3714] device veth1_vlan entered promiscuous mode [ 112.632659][ T3711] device veth1_vlan entered promiscuous mode [ 112.652167][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.658709][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.664376][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.670646][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.676988][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.681849][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.704172][ T3712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.716283][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.724011][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.736023][ T3713] device veth0_macvtap entered promiscuous mode [ 112.747870][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.753653][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.760141][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.771241][ T3713] device veth1_macvtap entered promiscuous mode [ 112.783812][ T3711] device veth0_macvtap entered promiscuous mode [ 112.805363][ T3714] device veth0_macvtap entered promiscuous mode [ 112.812304][ T3711] device veth1_macvtap entered promiscuous mode [ 112.818787][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.825708][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.833186][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.839231][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.845552][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.852067][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.868431][ T3714] device veth1_macvtap entered promiscuous mode [ 112.883827][ T3713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.893383][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.899447][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.905804][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.915266][ T3713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.930303][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.936860][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.943677][ T3713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.949876][ T3713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.957082][ T3713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.962525][ T3713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.974366][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.983199][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.994048][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.009437][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.017521][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.030418][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.039150][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.048645][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.069004][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.075558][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.098023][ T3711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.103452][ T3711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.109863][ T3711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.117713][ T3711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.128001][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.134676][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.141403][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.149770][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.159580][ T3714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.179803][ T38] audit: type=1400 audit(1661447262.079:99): avc: denied { mounton } for pid=3713 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 113.185992][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.196297][ T38] audit: type=1400 audit(1661447262.079:100): avc: denied { mount } for pid=3713 comm="syz-executor.3" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 113.201050][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.245239][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.252470][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.264835][ T3714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.272122][ T3714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.279971][ T3714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.288045][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.294402][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.301446][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.308008][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.339119][ T3714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.344810][ T3714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.352946][ T3714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.359030][ T3714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.368213][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.372210][ T38] audit: type=1400 audit(1661447262.269:101): avc: denied { read write } for pid=3713 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.387069][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.398719][ T38] audit: type=1400 audit(1661447262.269:102): avc: denied { open } for pid=3713 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.406549][ T3712] device veth0_vlan entered promiscuous mode [ 113.420587][ T38] audit: type=1400 audit(1661447262.269:103): avc: denied { ioctl } for pid=3713 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.442854][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.443713][ T38] audit: type=1400 audit(1661447262.339:104): avc: denied { create } for pid=3783 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.448138][ T1394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.461748][ T38] audit: type=1400 audit(1661447262.339:105): avc: denied { bind } for pid=3783 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.481962][ T38] audit: type=1400 audit(1661447262.339:106): avc: denied { accept } for pid=3783 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.507205][ T3712] device veth1_vlan entered promiscuous mode [ 113.579678][ T3712] device veth0_macvtap entered promiscuous mode [ 113.588021][ T3712] device veth1_macvtap entered promiscuous mode [ 113.614821][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.615852][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.616846][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.617680][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.619778][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.621664][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.652927][ T3712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.652997][ T3712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:07:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@loopback, @private1, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "65db01", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}}}, 0x0) [ 113.653004][ T3712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.653012][ T3712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.653019][ T3712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 113.653027][ T3712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.654396][ T3712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.659694][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.660293][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 17:07:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@loopback, @private1, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "65db01", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}}}, 0x0) [ 113.663769][ T3712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.663785][ T3712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.663791][ T3712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.663800][ T3712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.663807][ T3712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.663815][ T3712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.664949][ T3712] batman_adv: batadv0: Interface activated: batadv_slave_1 17:07:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@loopback, @private1, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "65db01", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}}}, 0x0) [ 113.665034][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.665703][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.668658][ T3712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 17:07:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'veth1_to_team\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'pim6reg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @dev, @multicast1}}}], {{'\x00', 0xc0, 0x1d0}, {0x28}}}}, 0x418) [ 113.668765][ T3712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.668787][ T3712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.668806][ T3712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.877279][ T3685] Bluetooth: hci0: command 0x040f tx timeout [ 113.881827][ T3685] Bluetooth: hci2: command 0x040f tx timeout [ 113.892662][ T3685] Bluetooth: hci1: command 0x040f tx timeout 17:07:42 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 17:07:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'veth1_to_team\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'pim6reg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @dev, @multicast1}}}], {{'\x00', 0xc0, 0x1d0}, {0x28}}}}, 0x418) [ 114.037525][ T29] Bluetooth: hci3: command 0x040f tx timeout 17:07:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'veth1_to_team\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'pim6reg0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @dev, @multicast1}}}], {{'\x00', 0xc0, 0x1d0}, {0x28}}}}, 0x418) 17:07:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:43 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x400004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80020005, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17:07:43 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 17:07:43 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 17:07:43 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:43 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 17:07:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:43 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:44 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x400004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80020005, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17:07:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:44 executing program 2: r0 = memfd_create(&(0x7f0000002200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x1a\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xfa\x83\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3Z\xa8\xd9\xe6\\W\x04\\\x04?P\x9d\x1a\xd4\\\xb3\xd1QL\xcc\x8c\xae\xfa\xaa\xd3\xf9\x1f\xa5\b\xde\x1c\x83\x8emB\xde\xfe\xfbC\x8f\x83|\xa9\x0f\x18\v\xad\xdd\xb3\x88\xe7\xdbq`C6\xb2\xf6\x02\xcbQ6\xf1O\xa2o\xd0\xf7F\x15\x8e\a\xd8\xa3r\x04\xffiI\xfcK\x1c\xe4]\x91\xc09]O\x17!\xd4\xc0\xc1\xdf\x1a\xed', 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000100)=0xfffffffffffffec1) 17:07:44 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000070000000000000000e54095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000300), 0x4) 17:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}}, 0x0) 17:07:44 executing program 2: r0 = memfd_create(&(0x7f0000002200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x1a\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xfa\x83\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3Z\xa8\xd9\xe6\\W\x04\\\x04?P\x9d\x1a\xd4\\\xb3\xd1QL\xcc\x8c\xae\xfa\xaa\xd3\xf9\x1f\xa5\b\xde\x1c\x83\x8emB\xde\xfe\xfbC\x8f\x83|\xa9\x0f\x18\v\xad\xdd\xb3\x88\xe7\xdbq`C6\xb2\xf6\x02\xcbQ6\xf1O\xa2o\xd0\xf7F\x15\x8e\a\xd8\xa3r\x04\xffiI\xfcK\x1c\xe4]\x91\xc09]O\x17!\xd4\xc0\xc1\xdf\x1a\xed', 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000100)=0xfffffffffffffec1) 17:07:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:44 executing program 2: r0 = memfd_create(&(0x7f0000002200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x1a\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xfa\x83\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3Z\xa8\xd9\xe6\\W\x04\\\x04?P\x9d\x1a\xd4\\\xb3\xd1QL\xcc\x8c\xae\xfa\xaa\xd3\xf9\x1f\xa5\b\xde\x1c\x83\x8emB\xde\xfe\xfbC\x8f\x83|\xa9\x0f\x18\v\xad\xdd\xb3\x88\xe7\xdbq`C6\xb2\xf6\x02\xcbQ6\xf1O\xa2o\xd0\xf7F\x15\x8e\a\xd8\xa3r\x04\xffiI\xfcK\x1c\xe4]\x91\xc09]O\x17!\xd4\xc0\xc1\xdf\x1a\xed', 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000100)=0xfffffffffffffec1) [ 115.956390][ T3685] Bluetooth: hci1: command 0x0419 tx timeout [ 115.961855][ T3685] Bluetooth: hci2: command 0x0419 tx timeout [ 115.962682][ T29] Bluetooth: hci0: command 0x0419 tx timeout 17:07:44 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x400004) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80020005, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}}, 0x0) 17:07:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:44 executing program 2: r0 = memfd_create(&(0x7f0000002200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\x1a\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xfa\x83\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3Z\xa8\xd9\xe6\\W\x04\\\x04?P\x9d\x1a\xd4\\\xb3\xd1QL\xcc\x8c\xae\xfa\xaa\xd3\xf9\x1f\xa5\b\xde\x1c\x83\x8emB\xde\xfe\xfbC\x8f\x83|\xa9\x0f\x18\v\xad\xdd\xb3\x88\xe7\xdbq`C6\xb2\xf6\x02\xcbQ6\xf1O\xa2o\xd0\xf7F\x15\x8e\a\xd8\xa3r\x04\xffiI\xfcK\x1c\xe4]\x91\xc09]O\x17!\xd4\xc0\xc1\xdf\x1a\xed', 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000100)=0xfffffffffffffec1) 17:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}}, 0x0) 17:07:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) [ 116.116677][ T29] Bluetooth: hci3: command 0x0419 tx timeout 17:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}}, 0x0) 17:07:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 17:07:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}, 0x0) [ 116.963894][ T38] kauditd_printk_skb: 18 callbacks suppressed 17:07:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 116.963907][ T38] audit: type=1400 audit(1661447265.859:125): avc: denied { create } for pid=3870 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.983909][ T38] audit: type=1400 audit(1661447265.869:126): avc: denied { write } for pid=3870 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 17:07:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:45 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) [ 117.006314][ T38] audit: type=1400 audit(1661447265.899:127): avc: denied { write } for pid=3873 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.024097][ T38] audit: type=1400 audit(1661447265.909:128): avc: denied { create } for pid=3877 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.037834][ T38] audit: type=1400 audit(1661447265.919:129): avc: denied { setopt } for pid=3877 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.055511][ T38] audit: type=1400 audit(1661447265.929:130): avc: denied { getopt } for pid=3877 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 17:07:45 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 17:07:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:07:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 17:07:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x8) 17:07:46 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 17:07:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:07:46 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 17:07:46 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 17:07:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17:07:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="93253dd44b93", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:07:46 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ff) 17:07:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000340)) [ 117.176608][ T38] audit: type=1400 audit(1661447266.079:131): avc: denied { read } for pid=3901 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 17:07:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="93253dd44b93", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltaction={0x28, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) [ 117.193894][ T38] audit: type=1400 audit(1661447266.079:132): avc: denied { open } for pid=3901 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 17:07:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000340)) [ 117.220643][ T38] audit: type=1400 audit(1661447266.079:133): avc: denied { ioctl } for pid=3901 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=702 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 17:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltaction={0x28, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) 17:07:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x14, 0x4a, 0x105}, 0x14}}, 0x0) 17:07:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="93253dd44b93", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltaction={0x28, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) 17:07:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x14, 0x4a, 0x105}, 0x14}}, 0x0) [ 117.251758][ T38] audit: type=1400 audit(1661447266.099:134): avc: denied { mounton } for pid=3907 comm="syz-executor.2" path="/syzkaller-testdir686177453/syzkaller.wwQhjD/18/file0" dev="sda1" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 17:07:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="93253dd44b93", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:07:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x14, 0x4a, 0x105}, 0x14}}, 0x0) 17:07:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000340)) 17:07:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@deltaction={0x28, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) 17:07:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f75ecdb4cb92e0a480e003f000000e8bd6e2eb80314000e000100250248ff050005001200", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 17:07:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnetconf={0x14, 0x4a, 0x105}, 0x14}}, 0x0) 17:07:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f75ecdb4cb92e0a480e003f000000e8bd6e2eb80314000e000100250248ff050005001200", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 17:07:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000340)) 17:07:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/51}, 0x20) 17:07:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f75ecdb4cb92e0a480e003f000000e8bd6e2eb80314000e000100250248ff050005001200", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 17:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000001c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0xfffffffffffffcbc, 0x35, 'ip6_vti0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x4c}}, 0x0) 17:07:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/51}, 0x20) 17:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000001c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0xfffffffffffffcbc, 0x35, 'ip6_vti0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x4c}}, 0x0) 17:07:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f75ecdb4cb92e0a480e003f000000e8bd6e2eb80314000e000100250248ff050005001200", 0x2e}], 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 17:07:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/51}, 0x20) 17:07:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200002, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000bce000/0x4000)=nil, 0x4000, 0x0, 0x80010, r2, 0x1f616000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000180)=""/239, 0x3e, 0xef, 0x1}, 0x20) 17:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000001c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0xfffffffffffffcbc, 0x35, 'ip6_vti0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x4c}}, 0x0) 17:07:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/51}, 0x20) 17:07:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000001c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0xfffffffffffffcbc, 0x35, 'ip6_vti0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x4c}}, 0x0) 17:07:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:46 executing program 1: syz_clone(0x102400, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)='t') 17:07:46 executing program 1: syz_clone(0x102400, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)='t') 17:07:47 executing program 1: syz_clone(0x102400, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)='t') 17:07:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200002, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000bce000/0x4000)=nil, 0x4000, 0x0, 0x80010, r2, 0x1f616000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000180)=""/239, 0x3e, 0xef, 0x1}, 0x20) 17:07:47 executing program 1: syz_clone(0x102400, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)='t') 17:07:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200002, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000bce000/0x4000)=nil, 0x4000, 0x0, 0x80010, r2, 0x1f616000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000180)=""/239, 0x3e, 0xef, 0x1}, 0x20) 17:07:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200002, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000bce000/0x4000)=nil, 0x4000, 0x0, 0x80010, r2, 0x1f616000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000180)=""/239, 0x3e, 0xef, 0x1}, 0x20) 17:07:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='&', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 17:07:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 17:07:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 17:07:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 17:07:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 17:07:50 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) 17:07:50 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:07:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:50 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) 17:07:50 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:07:50 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) 17:07:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:51 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:07:51 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) [ 122.121734][ T38] kauditd_printk_skb: 16 callbacks suppressed 17:07:51 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 122.121765][ T38] audit: type=1804 audit(1661447271.019:151): pid=4066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1670077052/syzkaller.6vGhyp/26/file0/bus" dev="ramfs" ino=34036 res=1 errno=0 [ 122.167433][ T38] audit: type=1804 audit(1661447271.069:152): pid=4071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1670077052/syzkaller.6vGhyp/27/file0/bus" dev="ramfs" ino=31183 res=1 errno=0 17:07:51 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:07:51 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) 17:07:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x8}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17:07:51 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) [ 122.879754][ T38] audit: type=1804 audit(1661447271.779:153): pid=4078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2926056970/syzkaller.nB8Esw/39/file0/bus" dev="ramfs" ino=32256 res=1 errno=0 17:07:51 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000a40)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000001840)={0x0, 0x8000000000000001}) 17:07:51 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:07:51 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="e6f30000", @ANYRES16, @ANYBLOB="00022abd7000fcdbdf252800000005002e000200000006000400feff00000c002d0002"], 0x30}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001700000000200000000a0001007770616e3000000009001f"], 0x2c}}, 0x0) 17:07:51 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) [ 123.091647][ T38] audit: type=1804 audit(1661447271.979:154): pid=4088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2926056970/syzkaller.nB8Esw/40/file0/bus" dev="ramfs" ino=34063 res=1 errno=0 [ 123.120298][ T38] audit: type=1400 audit(1661447272.009:155): avc: denied { create } for pid=4090 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 17:07:52 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) 17:07:52 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 123.176263][ T38] audit: type=1804 audit(1661447272.069:156): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2926056970/syzkaller.nB8Esw/41/file0/bus" dev="ramfs" ino=31198 res=1 errno=0 17:07:52 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="e6f30000", @ANYRES16, @ANYBLOB="00022abd7000fcdbdf252800000005002e000200000006000400feff00000c002d0002"], 0x30}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001700000000200000000a0001007770616e3000000009001f"], 0x2c}}, 0x0) 17:07:52 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) 17:07:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="741610e6", 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="35c3b00c77e0f5081ae1032fe630cd77cb454261997c6531447310ce90a3adf94e6338bb33d5bbb2886942664b518aa74b5cabbb69c6f876701418980a5ef9e4c18669d1a2e321a1284ce2f553431e585912e569a639cc0fd193a7427d5bc8b81b48933753a486d6cb81a84979606f8d0f9b689742c213f12343e7310f9759603b473cd26b7d560aed773932d309b567ac26d1b8f53e8aa726ac87bf57e9fa0e073aeba761b5614c50af222bc10874d13bf1070000000000000033f9984ba95c", 0xc0}, {&(0x7f0000000340)='\x00'/16, 0x3e}], 0x2}, 0x20000090) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/40, 0x28}], 0x2}, 0x0) 17:07:52 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:07:52 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="e6f30000", @ANYRES16, @ANYBLOB="00022abd7000fcdbdf252800000005002e000200000006000400feff00000c002d0002"], 0x30}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001700000000200000000a0001007770616e3000000009001f"], 0x2c}}, 0x0) [ 123.834385][ T38] audit: type=1400 audit(1661447272.729:157): avc: denied { read } for pid=4100 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 17:07:52 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) 17:07:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="741610e6", 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="35c3b00c77e0f5081ae1032fe630cd77cb454261997c6531447310ce90a3adf94e6338bb33d5bbb2886942664b518aa74b5cabbb69c6f876701418980a5ef9e4c18669d1a2e321a1284ce2f553431e585912e569a639cc0fd193a7427d5bc8b81b48933753a486d6cb81a84979606f8d0f9b689742c213f12343e7310f9759603b473cd26b7d560aed773932d309b567ac26d1b8f53e8aa726ac87bf57e9fa0e073aeba761b5614c50af222bc10874d13bf1070000000000000033f9984ba95c", 0xc0}, {&(0x7f0000000340)='\x00'/16, 0x3e}], 0x2}, 0x20000090) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/40, 0x28}], 0x2}, 0x0) 17:07:52 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="e6f30000", @ANYRES16, @ANYBLOB="00022abd7000fcdbdf252800000005002e000200000006000400feff00000c002d0002"], 0x30}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001700000000200000000a0001007770616e3000000009001f"], 0x2c}}, 0x0) [ 123.875425][ T38] audit: type=1400 audit(1661447272.769:158): avc: denied { listen } for pid=4102 comm="syz-executor.3" lport=60504 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.922021][ T38] audit: type=1400 audit(1661447272.819:159): avc: denied { accept } for pid=4102 comm="syz-executor.3" lport=60504 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 17:07:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="741610e6", 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="35c3b00c77e0f5081ae1032fe630cd77cb454261997c6531447310ce90a3adf94e6338bb33d5bbb2886942664b518aa74b5cabbb69c6f876701418980a5ef9e4c18669d1a2e321a1284ce2f553431e585912e569a639cc0fd193a7427d5bc8b81b48933753a486d6cb81a84979606f8d0f9b689742c213f12343e7310f9759603b473cd26b7d560aed773932d309b567ac26d1b8f53e8aa726ac87bf57e9fa0e073aeba761b5614c50af222bc10874d13bf1070000000000000033f9984ba95c", 0xc0}, {&(0x7f0000000340)='\x00'/16, 0x3e}], 0x2}, 0x20000090) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/40, 0x28}], 0x2}, 0x0) 17:07:52 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}}}, 0x0) [ 123.953339][ T38] audit: type=1400 audit(1661447272.849:160): avc: denied { setopt } for pid=4102 comm="syz-executor.3" lport=60504 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 17:07:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="741610e6", 0x4) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="35c3b00c77e0f5081ae1032fe630cd77cb454261997c6531447310ce90a3adf94e6338bb33d5bbb2886942664b518aa74b5cabbb69c6f876701418980a5ef9e4c18669d1a2e321a1284ce2f553431e585912e569a639cc0fd193a7427d5bc8b81b48933753a486d6cb81a84979606f8d0f9b689742c213f12343e7310f9759603b473cd26b7d560aed773932d309b567ac26d1b8f53e8aa726ac87bf57e9fa0e073aeba761b5614c50af222bc10874d13bf1070000000000000033f9984ba95c", 0xc0}, {&(0x7f0000000340)='\x00'/16, 0x3e}], 0x2}, 0x20000090) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/40, 0x28}], 0x2}, 0x0) 17:07:52 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:07:52 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}}}, 0x0) 17:07:52 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:07:52 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}}}, 0x0) 17:07:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) 17:07:52 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:07:52 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) [ 124.047529][ T4132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.052861][ T4132] IPv6: NLM_F_CREATE should be set when creating new route 17:07:52 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:07:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) 17:07:52 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 17:07:52 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}}}, 0x0) [ 124.095069][ T4145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 17:07:53 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) 17:07:53 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000038c0), 0x5004, &(0x7f0000003980)) 17:07:53 executing program 2: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_fh={0x25, 0xfb}, 0x0) 17:07:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) 17:07:53 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) [ 124.145436][ T4153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 17:07:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) [ 124.171384][ T4149] overlayfs: failed to decode file handle (len=9, type=251, flags=0, err=-22) 17:07:53 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) [ 124.185389][ T4157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 17:07:53 executing program 2: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_fh={0x25, 0xfb}, 0x0) 17:07:53 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) 17:07:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000052000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66ba4100b095eedde164640fc79e0080000066baf80cb80280988aef66bafc0c66ed66baf80cb8a4636f8def66bafc0ced660f7e84f462d000008fc83ca2f70b66ba210066b88e6366ef67362ef36a570f024f03", 0x54}], 0x1, 0x7f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000004e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:07:53 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_fh={0x25, 0xfb}, 0x0) 17:07:53 executing program 0: r0 = syz_io_uring_setup(0x881, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 124.271604][ T4163] overlayfs: failed to decode file handle (len=9, type=251, flags=0, err=-22) 17:07:53 executing program 0: r0 = syz_io_uring_setup(0x881, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 124.283714][ T4165] overlayfs: failed to decode file handle (len=9, type=251, flags=0, err=-22) 17:07:53 executing program 2: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_fh={0x25, 0xfb}, 0x0) [ 124.293836][ T4169] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:07:53 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_fh={0x25, 0xfb}, 0x0) 17:07:53 executing program 0: r0 = syz_io_uring_setup(0x881, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 124.350780][ T4174] ------------[ cut here ]------------ [ 124.354859][ T4174] WARNING: CPU: 0 PID: 4174 at kernel/cpu.c:347 lockdep_assert_cpus_held+0xbd/0xe0 [ 124.358243][ T4178] overlayfs: failed to decode file handle (len=9, type=251, flags=0, err=-22) [ 124.364981][ T4174] Modules linked in: [ 124.373088][ T4174] CPU: 0 PID: 4174 Comm: kvm-nx-lpage-re Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 124.381213][ T4174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 124.388647][ T4174] RIP: 0010:lockdep_assert_cpus_held+0xbd/0xe0 [ 124.393474][ T4174] Code: e8 88 11 34 00 be ff ff ff ff 48 c7 c7 70 39 e3 8b e8 b7 14 38 08 31 ff 89 c3 89 c6 e8 2c 0e 34 00 85 db 75 d5 e8 63 11 34 00 <0f> 0b eb cc 48 c7 c7 04 c4 dd 8d e8 93 b7 7f 00 e9 62 ff ff ff 48 [ 124.406657][ T4174] RSP: 0018:ffffc900041afc28 EFLAGS: 00010293 [ 124.412223][ T4174] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.418683][ T4174] RDX: ffff8880689de000 RSI: ffffffff814728bd RDI: 0000000000000005 [ 124.424767][ T4174] RBP: ffff88801e1bc800 R08: 0000000000000005 R09: 0000000000000000 [ 124.430951][ T4174] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900041afde0 [ 124.437115][ T4174] R13: ffffffff8bfd96e0 R14: 1ffff92000835f8c R15: ffffc900041afe04 [ 124.442375][ T4174] FS: 0000000000000000(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 124.448352][ T4174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.453436][ T4174] CR2: 00007fbeacad6800 CR3: 000000006309e000 CR4: 0000000000152ee0 [ 124.458790][ T4174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.463334][ T4174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.468858][ T4174] Call Trace: [ 124.471080][ T4174] [ 124.472951][ T4174] cpuset_attach+0x92/0x520 [ 124.475997][ T4174] ? guarantee_online_cpus+0x4d0/0x4d0 [ 124.479759][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.483462][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.487540][ T4174] cgroup_migrate_execute+0xbc7/0x1220 [ 124.490653][ T4174] cgroup_attach_task+0x416/0x7c0 [ 124.493762][ T4174] ? cgroup_migrate+0x1f0/0x1f0 [ 124.496836][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.499895][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.502895][ T4174] cgroup_attach_task_all+0xde/0x140 [ 124.506289][ T4174] kvm_vm_worker_thread+0xdd/0x5a0 [ 124.509546][ T4174] ? kvm_mmu_pte_write+0xdc0/0xdc0 [ 124.512769][ T4174] ? __bpf_trace_kvm_unmap_hva_range+0xe0/0xe0 [ 124.517419][ T4174] kthread+0x2e4/0x3a0 [ 124.520519][ T4174] ? kthread_complete_and_exit+0x40/0x40 [ 124.524003][ T4174] ret_from_fork+0x1f/0x30 [ 124.527115][ T4174] [ 124.529207][ T4174] Kernel panic - not syncing: panic_on_warn set ... [ 124.532846][ T4174] CPU: 3 PID: 4174 Comm: kvm-nx-lpage-re Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 124.539352][ T4174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 124.545101][ T4174] Call Trace: [ 124.547178][ T4174] [ 124.548895][ T4174] dump_stack_lvl+0xcd/0x134 [ 124.551718][ T4174] panic+0x2c8/0x627 [ 124.554176][ T4174] ? panic_print_sys_info.part.0+0x10b/0x10b [ 124.558285][ T4174] ? __warn.cold+0x248/0x2c4 [ 124.561836][ T4174] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 124.566029][ T4174] __warn.cold+0x259/0x2c4 [ 124.569545][ T4174] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 124.574119][ T4174] report_bug+0x1bc/0x210 [ 124.577516][ T4174] handle_bug+0x3c/0x60 [ 124.580460][ T4174] exc_invalid_op+0x14/0x40 [ 124.583254][ T4174] asm_exc_invalid_op+0x16/0x20 [ 124.586799][ T4174] RIP: 0010:lockdep_assert_cpus_held+0xbd/0xe0 [ 124.591785][ T4174] Code: e8 88 11 34 00 be ff ff ff ff 48 c7 c7 70 39 e3 8b e8 b7 14 38 08 31 ff 89 c3 89 c6 e8 2c 0e 34 00 85 db 75 d5 e8 63 11 34 00 <0f> 0b eb cc 48 c7 c7 04 c4 dd 8d e8 93 b7 7f 00 e9 62 ff ff ff 48 [ 124.605771][ T4174] RSP: 0018:ffffc900041afc28 EFLAGS: 00010293 [ 124.610193][ T4174] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.615653][ T4174] RDX: ffff8880689de000 RSI: ffffffff814728bd RDI: 0000000000000005 [ 124.621383][ T4174] RBP: ffff88801e1bc800 R08: 0000000000000005 R09: 0000000000000000 [ 124.627422][ T4174] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900041afde0 [ 124.633982][ T4174] R13: ffffffff8bfd96e0 R14: 1ffff92000835f8c R15: ffffc900041afe04 [ 124.640041][ T4174] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 124.644726][ T4174] ? lockdep_assert_cpus_held+0xbd/0xe0 [ 124.649118][ T4174] cpuset_attach+0x92/0x520 [ 124.652663][ T4174] ? guarantee_online_cpus+0x4d0/0x4d0 [ 124.657258][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.661740][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.665692][ T4174] cgroup_migrate_execute+0xbc7/0x1220 [ 124.669228][ T4174] cgroup_attach_task+0x416/0x7c0 [ 124.672741][ T4174] ? cgroup_migrate+0x1f0/0x1f0 [ 124.676163][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.679440][ T4174] ? _raw_spin_unlock_irq+0x1f/0x40 [ 124.682832][ T4174] cgroup_attach_task_all+0xde/0x140 [ 124.686184][ T4174] kvm_vm_worker_thread+0xdd/0x5a0 [ 124.689820][ T4174] ? kvm_mmu_pte_write+0xdc0/0xdc0 [ 124.693265][ T4174] ? __bpf_trace_kvm_unmap_hva_range+0xe0/0xe0 [ 124.697308][ T4174] kthread+0x2e4/0x3a0 [ 124.700003][ T4174] ? kthread_complete_and_exit+0x40/0x40 [ 124.703422][ T4174] ret_from_fork+0x1f/0x30 [ 124.706488][ T4174] [ 124.709727][ T4174] Kernel Offset: disabled [ 124.712649][ T4174] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:07:53 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff8880689de000 RSI=ffffffff81610ff2 RDI=0000000000000001 RBP=ffffc900041af918 RSP=ffffc900041af8e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000033 R12=0000000000000012 R13=ffff888064c2e080 R14=0000000000000200 R15=ffffc900041af968 RIP=ffffffff81610ff4 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbeacad6800 CR3=000000002295f000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=65646f636564206f742064656c696166 XMM04=000000000000000000000000000000ff XMM05=000000000000000000000000000000ff XMM06=73682e3a72316c2f616c75732d746800 XMM07=70206b61656c2061746164202c6e6f20 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8147bec0 RDX=ffff888060222140 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc90002f1fd18 RSP=ffffc90002f1fc90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920005e3f9f R13=00007ffe3b6af23c R14=0000000000000004 R15=0000000000000000 RIP=ffffffff8147c865 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555565fe400 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555557377808 CR3=00000000625ee000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000007 RBX=ffff888015e08a78 RCX=ffffc90002eaf9c8 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888015e08a9c RBP=1ffff920005d5f31 RSP=ffffc90002eaf978 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8bf867c0 R13=0000000000000001 R14=ffff888015e08a70 R15=ffff888015e08000 RIP=ffffffff815ea367 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa553e0e840 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbeacad6800 CR3=000000001a692000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffff00000000000000000000 XMM02=ffffffffffff00000000000000000000 XMM03=00000000000000000000ff00ff0000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=73737373737371f2737373435c021e73 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=ffff888069650a78 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8bf86700 RDI=ffff888069650a78 RBP=ffffffff8bf86700 RSP=ffffc90001f47b88 R8 =0000000000000000 R9 =ffffffff8dddf3d7 R10=fffffbfff1bbbe7a R11=0000000000000000 R12=ffff888069650000 R13=ffff888069650a78 R14=00000000ffffffff R15=ffff888069650a78 RIP=ffffffff897f3d16 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa553e0e840 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b3373b000 CR3=000000006a1e2000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffff0000000000000000 XMM01=000056445d649f0030706f6f6c2f2e2e XMM02=0000000000000000000000000000ff00 XMM03=00000000000000000000000000000000 XMM04=ffff0000ff0000000000000000000000 XMM05=ffff000000000000ffff000000000000 XMM06=ffff0000ff0000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=75252f73252f7665642f7379732f002f XMM09=00000000000000000000000000000000 XMM10=73737373737371f2737373435c021e73 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000