[ 51.271299][ T39] audit: type=1400 audit(1661412647.148:74): avc: denied { write } for pid=3574 comm="sh" path="pipe:[30900]" dev="pipefs" ino=30900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:2916' (ECDSA) to the list of known hosts. [ 54.848776][ T39] audit: type=1400 audit(1661412650.738:75): avc: denied { execute } for pid=3650 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.867649][ T39] audit: type=1400 audit(1661412650.738:76): avc: denied { execute_no_trans } for pid=3650 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/08/25 07:30:51 fuzzer started 2022/08/25 07:30:51 dialing manager at localhost:45607 [ 55.828863][ T39] audit: type=1400 audit(1661412651.718:77): avc: denied { mounton } for pid=3675 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.835463][ T3675] cgroup: Unknown subsys name 'net' [ 55.848793][ T39] audit: type=1400 audit(1661412651.718:78): avc: denied { mount } for pid=3675 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.873063][ T39] audit: type=1400 audit(1661412651.768:79): avc: denied { unmount } for pid=3675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.053958][ T3675] cgroup: Unknown subsys name 'rlimit' [ 56.167267][ T39] audit: type=1400 audit(1661412652.058:80): avc: denied { mounton } for pid=3675 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/08/25 07:30:52 syscalls: 3757 2022/08/25 07:30:52 code coverage: enabled 2022/08/25 07:30:52 comparison tracing: enabled 2022/08/25 07:30:52 extra coverage: enabled 2022/08/25 07:30:52 delay kcov mmap: enabled 2022/08/25 07:30:52 setuid sandbox: enabled 2022/08/25 07:30:52 namespace sandbox: enabled 2022/08/25 07:30:52 Android sandbox: enabled 2022/08/25 07:30:52 fault injection: enabled 2022/08/25 07:30:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/08/25 07:30:52 net packet injection: enabled 2022/08/25 07:30:52 net device setup: enabled 2022/08/25 07:30:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/08/25 07:30:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/08/25 07:30:52 USB emulation: enabled 2022/08/25 07:30:52 hci packet injection: enabled 2022/08/25 07:30:52 wifi device emulation: failed to parse kernel version (6.0.0-rc2-syzkaller-00054-gc40e8341e3b3) 2022/08/25 07:30:52 802.15.4 emulation: enabled [ 56.184618][ T39] audit: type=1400 audit(1661412652.058:81): avc: denied { mount } for pid=3675 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2022/08/25 07:30:52 fetching corpus: 0, signal 0/2000 (executing program) [ 56.200829][ T39] audit: type=1400 audit(1661412652.058:82): avc: denied { setattr } for pid=3675 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/08/25 07:30:52 fetching corpus: 50, signal 42712/46433 (executing program) 2022/08/25 07:30:52 fetching corpus: 100, signal 63728/69083 (executing program) 2022/08/25 07:30:52 fetching corpus: 150, signal 72708/79712 (executing program) 2022/08/25 07:30:53 fetching corpus: 200, signal 82569/91174 (executing program) 2022/08/25 07:30:53 fetching corpus: 250, signal 89660/99796 (executing program) 2022/08/25 07:30:53 fetching corpus: 300, signal 97350/108952 (executing program) 2022/08/25 07:30:53 fetching corpus: 350, signal 105234/118252 (executing program) 2022/08/25 07:30:54 fetching corpus: 400, signal 110119/124603 (executing program) 2022/08/25 07:30:54 fetching corpus: 450, signal 115895/131811 (executing program) 2022/08/25 07:30:54 fetching corpus: 500, signal 120877/138150 (executing program) 2022/08/25 07:30:54 fetching corpus: 550, signal 128689/147143 (executing program) 2022/08/25 07:30:54 fetching corpus: 600, signal 132764/152543 (executing program) 2022/08/25 07:30:55 fetching corpus: 650, signal 136708/157804 (executing program) 2022/08/25 07:30:55 fetching corpus: 700, signal 141313/163649 (executing program) 2022/08/25 07:30:55 fetching corpus: 750, signal 144673/168286 (executing program) 2022/08/25 07:30:55 fetching corpus: 800, signal 148819/173644 (executing program) 2022/08/25 07:30:55 fetching corpus: 850, signal 151017/177154 (executing program) 2022/08/25 07:30:55 fetching corpus: 900, signal 154609/181945 (executing program) 2022/08/25 07:30:56 fetching corpus: 950, signal 156995/185615 (executing program) 2022/08/25 07:30:56 fetching corpus: 1000, signal 159972/189838 (executing program) 2022/08/25 07:30:56 fetching corpus: 1050, signal 161667/192831 (executing program) 2022/08/25 07:30:56 fetching corpus: 1100, signal 165913/198110 (executing program) 2022/08/25 07:30:57 fetching corpus: 1150, signal 169674/202917 (executing program) 2022/08/25 07:30:57 fetching corpus: 1200, signal 172174/206581 (executing program) 2022/08/25 07:30:57 fetching corpus: 1250, signal 174748/210297 (executing program) 2022/08/25 07:30:57 fetching corpus: 1300, signal 178179/214786 (executing program) 2022/08/25 07:30:57 fetching corpus: 1350, signal 181016/218656 (executing program) 2022/08/25 07:30:58 fetching corpus: 1400, signal 183971/222687 (executing program) 2022/08/25 07:30:58 fetching corpus: 1450, signal 188117/227721 (executing program) 2022/08/25 07:30:58 fetching corpus: 1500, signal 190645/231285 (executing program) 2022/08/25 07:30:58 fetching corpus: 1550, signal 195288/236687 (executing program) 2022/08/25 07:30:59 fetching corpus: 1600, signal 197727/240145 (executing program) 2022/08/25 07:30:59 fetching corpus: 1650, signal 199241/242812 (executing program) 2022/08/25 07:30:59 fetching corpus: 1700, signal 201302/245857 (executing program) 2022/08/25 07:30:59 fetching corpus: 1750, signal 203095/248726 (executing program) 2022/08/25 07:30:59 fetching corpus: 1800, signal 205684/252261 (executing program) 2022/08/25 07:30:59 fetching corpus: 1850, signal 207197/254870 (executing program) 2022/08/25 07:31:00 fetching corpus: 1900, signal 209511/258208 (executing program) 2022/08/25 07:31:00 fetching corpus: 1950, signal 211401/261079 (executing program) 2022/08/25 07:31:00 fetching corpus: 2000, signal 214466/264958 (executing program) 2022/08/25 07:31:00 fetching corpus: 2050, signal 216277/267707 (executing program) 2022/08/25 07:31:00 fetching corpus: 2100, signal 218866/271128 (executing program) 2022/08/25 07:31:01 fetching corpus: 2150, signal 221141/274238 (executing program) 2022/08/25 07:31:01 fetching corpus: 2200, signal 222624/276693 (executing program) 2022/08/25 07:31:01 fetching corpus: 2250, signal 224480/279445 (executing program) 2022/08/25 07:31:01 fetching corpus: 2300, signal 226600/282412 (executing program) 2022/08/25 07:31:01 fetching corpus: 2350, signal 227792/284578 (executing program) 2022/08/25 07:31:01 fetching corpus: 2400, signal 229283/286986 (executing program) 2022/08/25 07:31:02 fetching corpus: 2450, signal 232042/290394 (executing program) 2022/08/25 07:31:02 fetching corpus: 2500, signal 234192/293332 (executing program) 2022/08/25 07:31:02 fetching corpus: 2550, signal 235750/295745 (executing program) 2022/08/25 07:31:02 fetching corpus: 2600, signal 239332/299778 (executing program) 2022/08/25 07:31:03 fetching corpus: 2650, signal 240720/302042 (executing program) 2022/08/25 07:31:03 fetching corpus: 2700, signal 242152/304360 (executing program) 2022/08/25 07:31:03 fetching corpus: 2750, signal 243914/306911 (executing program) 2022/08/25 07:31:03 fetching corpus: 2800, signal 246019/309713 (executing program) 2022/08/25 07:31:03 fetching corpus: 2850, signal 247361/311901 (executing program) 2022/08/25 07:31:03 fetching corpus: 2900, signal 249224/314433 (executing program) 2022/08/25 07:31:04 fetching corpus: 2950, signal 251030/316931 (executing program) 2022/08/25 07:31:04 fetching corpus: 3000, signal 252003/318806 (executing program) 2022/08/25 07:31:04 fetching corpus: 3050, signal 253764/321273 (executing program) 2022/08/25 07:31:04 fetching corpus: 3100, signal 255430/323703 (executing program) 2022/08/25 07:31:04 fetching corpus: 3150, signal 256615/325713 (executing program) 2022/08/25 07:31:05 fetching corpus: 3200, signal 258051/327862 (executing program) 2022/08/25 07:31:05 fetching corpus: 3250, signal 259470/329988 (executing program) 2022/08/25 07:31:05 fetching corpus: 3300, signal 260792/332088 (executing program) 2022/08/25 07:31:05 fetching corpus: 3350, signal 262115/334165 (executing program) 2022/08/25 07:31:05 fetching corpus: 3400, signal 263183/336033 (executing program) 2022/08/25 07:31:06 fetching corpus: 3450, signal 264346/337928 (executing program) 2022/08/25 07:31:06 fetching corpus: 3500, signal 266172/340383 (executing program) 2022/08/25 07:31:06 fetching corpus: 3550, signal 267116/342127 (executing program) 2022/08/25 07:31:06 fetching corpus: 3600, signal 268388/344080 (executing program) 2022/08/25 07:31:06 fetching corpus: 3650, signal 269396/345846 (executing program) 2022/08/25 07:31:07 fetching corpus: 3700, signal 270963/348031 (executing program) 2022/08/25 07:31:07 fetching corpus: 3750, signal 272135/349886 (executing program) 2022/08/25 07:31:07 fetching corpus: 3800, signal 272973/351468 (executing program) 2022/08/25 07:31:07 fetching corpus: 3850, signal 275324/354221 (executing program) 2022/08/25 07:31:07 fetching corpus: 3900, signal 276381/355966 (executing program) 2022/08/25 07:31:08 fetching corpus: 3950, signal 277615/357883 (executing program) 2022/08/25 07:31:08 fetching corpus: 4000, signal 280043/360630 (executing program) 2022/08/25 07:31:08 fetching corpus: 4050, signal 281075/362348 (executing program) 2022/08/25 07:31:08 fetching corpus: 4100, signal 282022/364064 (executing program) 2022/08/25 07:31:08 fetching corpus: 4150, signal 283156/365782 (executing program) 2022/08/25 07:31:09 fetching corpus: 4200, signal 284458/367685 (executing program) 2022/08/25 07:31:09 fetching corpus: 4250, signal 285572/369443 (executing program) 2022/08/25 07:31:09 fetching corpus: 4300, signal 286844/371282 (executing program) 2022/08/25 07:31:09 fetching corpus: 4350, signal 287967/372965 (executing program) 2022/08/25 07:31:10 fetching corpus: 4400, signal 289030/374661 (executing program) 2022/08/25 07:31:10 fetching corpus: 4450, signal 289764/376077 (executing program) 2022/08/25 07:31:10 fetching corpus: 4500, signal 291104/377924 (executing program) 2022/08/25 07:31:10 fetching corpus: 4550, signal 292498/379816 (executing program) 2022/08/25 07:31:10 fetching corpus: 4600, signal 293723/381619 (executing program) 2022/08/25 07:31:11 fetching corpus: 4650, signal 294880/383336 (executing program) 2022/08/25 07:31:11 fetching corpus: 4700, signal 295832/384891 (executing program) 2022/08/25 07:31:11 fetching corpus: 4750, signal 296630/386323 (executing program) 2022/08/25 07:31:11 fetching corpus: 4800, signal 297652/387954 (executing program) 2022/08/25 07:31:11 fetching corpus: 4850, signal 299051/389806 (executing program) 2022/08/25 07:31:12 fetching corpus: 4900, signal 300679/391816 (executing program) 2022/08/25 07:31:12 fetching corpus: 4950, signal 302416/393875 (executing program) 2022/08/25 07:31:12 fetching corpus: 5000, signal 303400/395402 (executing program) 2022/08/25 07:31:12 fetching corpus: 5050, signal 304321/396891 (executing program) 2022/08/25 07:31:12 fetching corpus: 5100, signal 305098/398226 (executing program) 2022/08/25 07:31:13 fetching corpus: 5150, signal 306364/399937 (executing program) 2022/08/25 07:31:13 fetching corpus: 5200, signal 307366/401386 (executing program) 2022/08/25 07:31:13 fetching corpus: 5250, signal 308456/402950 (executing program) 2022/08/25 07:31:13 fetching corpus: 5300, signal 310392/405052 (executing program) [ 77.717533][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.725288][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 2022/08/25 07:31:13 fetching corpus: 5350, signal 311453/406630 (executing program) 2022/08/25 07:31:13 fetching corpus: 5400, signal 312303/407990 (executing program) 2022/08/25 07:31:14 fetching corpus: 5450, signal 313487/409627 (executing program) 2022/08/25 07:31:14 fetching corpus: 5500, signal 314331/411018 (executing program) 2022/08/25 07:31:14 fetching corpus: 5550, signal 315172/412402 (executing program) 2022/08/25 07:31:14 fetching corpus: 5600, signal 316085/413818 (executing program) 2022/08/25 07:31:14 fetching corpus: 5650, signal 316976/415203 (executing program) 2022/08/25 07:31:14 fetching corpus: 5700, signal 317994/416655 (executing program) 2022/08/25 07:31:15 fetching corpus: 5750, signal 318813/417978 (executing program) 2022/08/25 07:31:15 fetching corpus: 5800, signal 320144/419589 (executing program) 2022/08/25 07:31:15 fetching corpus: 5850, signal 321026/420905 (executing program) 2022/08/25 07:31:15 fetching corpus: 5900, signal 322084/422348 (executing program) 2022/08/25 07:31:16 fetching corpus: 5950, signal 323445/423954 (executing program) 2022/08/25 07:31:16 fetching corpus: 6000, signal 324076/425107 (executing program) 2022/08/25 07:31:16 fetching corpus: 6050, signal 324919/426393 (executing program) 2022/08/25 07:31:16 fetching corpus: 6100, signal 325590/427570 (executing program) 2022/08/25 07:31:16 fetching corpus: 6150, signal 326533/428923 (executing program) 2022/08/25 07:31:17 fetching corpus: 6200, signal 327446/430243 (executing program) 2022/08/25 07:31:18 fetching corpus: 6250, signal 328566/431661 (executing program) 2022/08/25 07:31:18 fetching corpus: 6300, signal 329497/433000 (executing program) 2022/08/25 07:31:18 fetching corpus: 6350, signal 330354/434252 (executing program) 2022/08/25 07:31:18 fetching corpus: 6400, signal 331085/435465 (executing program) 2022/08/25 07:31:19 fetching corpus: 6450, signal 331894/436726 (executing program) 2022/08/25 07:31:19 fetching corpus: 6500, signal 332704/437941 (executing program) 2022/08/25 07:31:19 fetching corpus: 6550, signal 333342/439131 (executing program) 2022/08/25 07:31:19 fetching corpus: 6600, signal 334318/440437 (executing program) 2022/08/25 07:31:20 fetching corpus: 6650, signal 335259/441770 (executing program) 2022/08/25 07:31:20 fetching corpus: 6700, signal 335833/442898 (executing program) 2022/08/25 07:31:20 fetching corpus: 6750, signal 336712/444135 (executing program) 2022/08/25 07:31:20 fetching corpus: 6800, signal 337352/445232 (executing program) 2022/08/25 07:31:20 fetching corpus: 6850, signal 338108/446378 (executing program) 2022/08/25 07:31:20 fetching corpus: 6900, signal 338723/447495 (executing program) 2022/08/25 07:31:21 fetching corpus: 6950, signal 339466/448705 (executing program) 2022/08/25 07:31:21 fetching corpus: 7000, signal 340061/449794 (executing program) 2022/08/25 07:31:21 fetching corpus: 7050, signal 340839/450957 (executing program) 2022/08/25 07:31:21 fetching corpus: 7100, signal 341648/452114 (executing program) 2022/08/25 07:31:21 fetching corpus: 7150, signal 342466/453304 (executing program) 2022/08/25 07:31:22 fetching corpus: 7200, signal 343267/454425 (executing program) 2022/08/25 07:31:22 fetching corpus: 7250, signal 344144/455639 (executing program) 2022/08/25 07:31:22 fetching corpus: 7300, signal 344840/456743 (executing program) 2022/08/25 07:31:23 fetching corpus: 7350, signal 345618/457880 (executing program) 2022/08/25 07:31:23 fetching corpus: 7400, signal 346067/458843 (executing program) 2022/08/25 07:31:23 fetching corpus: 7450, signal 346788/459934 (executing program) 2022/08/25 07:31:23 fetching corpus: 7500, signal 347580/461013 (executing program) 2022/08/25 07:31:23 fetching corpus: 7550, signal 348388/462129 (executing program) 2022/08/25 07:31:23 fetching corpus: 7600, signal 349203/463244 (executing program) 2022/08/25 07:31:24 fetching corpus: 7650, signal 349942/464293 (executing program) 2022/08/25 07:31:24 fetching corpus: 7700, signal 350573/465328 (executing program) 2022/08/25 07:31:24 fetching corpus: 7750, signal 351261/466374 (executing program) 2022/08/25 07:31:24 fetching corpus: 7800, signal 352413/467619 (executing program) 2022/08/25 07:31:24 fetching corpus: 7850, signal 353567/468803 (executing program) 2022/08/25 07:31:25 fetching corpus: 7900, signal 354529/469922 (executing program) 2022/08/25 07:31:25 fetching corpus: 7950, signal 355345/471009 (executing program) 2022/08/25 07:31:25 fetching corpus: 8000, signal 356196/472079 (executing program) 2022/08/25 07:31:25 fetching corpus: 8050, signal 357056/473163 (executing program) 2022/08/25 07:31:26 fetching corpus: 8100, signal 357705/474185 (executing program) 2022/08/25 07:31:26 fetching corpus: 8150, signal 358203/475099 (executing program) 2022/08/25 07:31:26 fetching corpus: 8200, signal 359142/476191 (executing program) 2022/08/25 07:31:26 fetching corpus: 8250, signal 359948/477228 (executing program) 2022/08/25 07:31:26 fetching corpus: 8300, signal 360742/478298 (executing program) 2022/08/25 07:31:27 fetching corpus: 8350, signal 361354/479180 (executing program) 2022/08/25 07:31:27 fetching corpus: 8400, signal 361903/480076 (executing program) 2022/08/25 07:31:27 fetching corpus: 8450, signal 362379/480928 (executing program) 2022/08/25 07:31:27 fetching corpus: 8500, signal 363091/481890 (executing program) 2022/08/25 07:31:27 fetching corpus: 8550, signal 363790/482863 (executing program) 2022/08/25 07:31:27 fetching corpus: 8600, signal 364240/483726 (executing program) 2022/08/25 07:31:28 fetching corpus: 8650, signal 364971/484666 (executing program) 2022/08/25 07:31:28 fetching corpus: 8700, signal 365539/485556 (executing program) 2022/08/25 07:31:28 fetching corpus: 8750, signal 366257/486528 (executing program) 2022/08/25 07:31:28 fetching corpus: 8800, signal 366754/487414 (executing program) 2022/08/25 07:31:28 fetching corpus: 8850, signal 367163/488233 (executing program) 2022/08/25 07:31:28 fetching corpus: 8900, signal 367594/489065 (executing program) [ 93.077463][ T972] cfg80211: failed to load regulatory.db 2022/08/25 07:31:29 fetching corpus: 8950, signal 368112/489916 (executing program) 2022/08/25 07:31:29 fetching corpus: 9000, signal 368851/490876 (executing program) 2022/08/25 07:31:29 fetching corpus: 9050, signal 369650/491855 (executing program) 2022/08/25 07:31:29 fetching corpus: 9100, signal 370407/492813 (executing program) 2022/08/25 07:31:29 fetching corpus: 9150, signal 371656/493898 (executing program) 2022/08/25 07:31:30 fetching corpus: 9200, signal 372122/494723 (executing program) 2022/08/25 07:31:30 fetching corpus: 9250, signal 373018/495663 (executing program) 2022/08/25 07:31:30 fetching corpus: 9300, signal 373555/496465 (executing program) 2022/08/25 07:31:30 fetching corpus: 9350, signal 374224/497338 (executing program) 2022/08/25 07:31:30 fetching corpus: 9400, signal 374903/498193 (executing program) 2022/08/25 07:31:30 fetching corpus: 9450, signal 375606/499098 (executing program) 2022/08/25 07:31:31 fetching corpus: 9500, signal 376250/499953 (executing program) 2022/08/25 07:31:31 fetching corpus: 9550, signal 376745/500767 (executing program) 2022/08/25 07:31:31 fetching corpus: 9600, signal 377362/501606 (executing program) 2022/08/25 07:31:31 fetching corpus: 9650, signal 377896/502452 (executing program) 2022/08/25 07:31:31 fetching corpus: 9700, signal 378936/503427 (executing program) 2022/08/25 07:31:31 fetching corpus: 9750, signal 379494/504279 (executing program) 2022/08/25 07:31:31 fetching corpus: 9800, signal 380024/505084 (executing program) 2022/08/25 07:31:32 fetching corpus: 9850, signal 380710/505945 (executing program) 2022/08/25 07:31:32 fetching corpus: 9900, signal 381356/506743 (executing program) 2022/08/25 07:31:32 fetching corpus: 9950, signal 382051/507597 (executing program) 2022/08/25 07:31:32 fetching corpus: 10000, signal 382676/508418 (executing program) 2022/08/25 07:31:32 fetching corpus: 10050, signal 383299/509218 (executing program) 2022/08/25 07:31:33 fetching corpus: 10100, signal 383851/509952 (executing program) 2022/08/25 07:31:33 fetching corpus: 10150, signal 384371/510756 (executing program) 2022/08/25 07:31:33 fetching corpus: 10200, signal 384955/511507 (executing program) 2022/08/25 07:31:33 fetching corpus: 10250, signal 385752/512311 (executing program) 2022/08/25 07:31:33 fetching corpus: 10300, signal 386741/513196 (executing program) 2022/08/25 07:31:33 fetching corpus: 10350, signal 387208/513967 (executing program) 2022/08/25 07:31:34 fetching corpus: 10400, signal 387904/514756 (executing program) 2022/08/25 07:31:34 fetching corpus: 10450, signal 388529/515566 (executing program) 2022/08/25 07:31:34 fetching corpus: 10500, signal 389140/516333 (executing program) 2022/08/25 07:31:34 fetching corpus: 10550, signal 389873/517122 (executing program) 2022/08/25 07:31:34 fetching corpus: 10600, signal 390383/517829 (executing program) 2022/08/25 07:31:35 fetching corpus: 10650, signal 390966/518540 (executing program) 2022/08/25 07:31:35 fetching corpus: 10700, signal 391511/519226 (executing program) 2022/08/25 07:31:35 fetching corpus: 10750, signal 392194/519955 (executing program) 2022/08/25 07:31:35 fetching corpus: 10800, signal 392799/520659 (executing program) 2022/08/25 07:31:36 fetching corpus: 10850, signal 393341/521367 (executing program) 2022/08/25 07:31:36 fetching corpus: 10900, signal 393990/522089 (executing program) 2022/08/25 07:31:36 fetching corpus: 10950, signal 394554/522764 (executing program) 2022/08/25 07:31:36 fetching corpus: 11000, signal 395346/523518 (executing program) 2022/08/25 07:31:36 fetching corpus: 11050, signal 395994/524253 (executing program) 2022/08/25 07:31:36 fetching corpus: 11100, signal 396518/524929 (executing program) 2022/08/25 07:31:37 fetching corpus: 11150, signal 397015/525572 (executing program) 2022/08/25 07:31:37 fetching corpus: 11200, signal 397698/526265 (executing program) 2022/08/25 07:31:37 fetching corpus: 11250, signal 398385/526955 (executing program) 2022/08/25 07:31:37 fetching corpus: 11300, signal 398829/527628 (executing program) 2022/08/25 07:31:37 fetching corpus: 11350, signal 399376/528275 (executing program) 2022/08/25 07:31:38 fetching corpus: 11400, signal 399718/528917 (executing program) 2022/08/25 07:31:38 fetching corpus: 11450, signal 400380/529577 (executing program) 2022/08/25 07:31:38 fetching corpus: 11500, signal 400955/530253 (executing program) 2022/08/25 07:31:38 fetching corpus: 11550, signal 401630/530896 (executing program) 2022/08/25 07:31:38 fetching corpus: 11600, signal 402150/531536 (executing program) 2022/08/25 07:31:39 fetching corpus: 11650, signal 402841/532208 (executing program) 2022/08/25 07:31:39 fetching corpus: 11700, signal 403443/532874 (executing program) 2022/08/25 07:31:39 fetching corpus: 11750, signal 403984/533472 (executing program) 2022/08/25 07:31:39 fetching corpus: 11800, signal 404742/534105 (executing program) 2022/08/25 07:31:39 fetching corpus: 11850, signal 405428/534760 (executing program) 2022/08/25 07:31:39 fetching corpus: 11900, signal 406085/535415 (executing program) 2022/08/25 07:31:40 fetching corpus: 11950, signal 406809/536079 (executing program) 2022/08/25 07:31:40 fetching corpus: 12000, signal 407265/536694 (executing program) 2022/08/25 07:31:40 fetching corpus: 12050, signal 408051/537320 (executing program) 2022/08/25 07:31:40 fetching corpus: 12100, signal 408735/537921 (executing program) 2022/08/25 07:31:41 fetching corpus: 12150, signal 409185/538505 (executing program) 2022/08/25 07:31:41 fetching corpus: 12200, signal 409778/539092 (executing program) 2022/08/25 07:31:41 fetching corpus: 12250, signal 410269/539671 (executing program) 2022/08/25 07:31:41 fetching corpus: 12300, signal 411059/540315 (executing program) 2022/08/25 07:31:41 fetching corpus: 12350, signal 411475/540847 (executing program) 2022/08/25 07:31:42 fetching corpus: 12400, signal 411974/541453 (executing program) 2022/08/25 07:31:42 fetching corpus: 12450, signal 412421/541988 (executing program) 2022/08/25 07:31:42 fetching corpus: 12500, signal 412954/542594 (executing program) 2022/08/25 07:31:42 fetching corpus: 12550, signal 413600/543162 (executing program) 2022/08/25 07:31:42 fetching corpus: 12600, signal 414392/543741 (executing program) 2022/08/25 07:31:43 fetching corpus: 12650, signal 414833/544291 (executing program) 2022/08/25 07:31:43 fetching corpus: 12700, signal 415228/544855 (executing program) 2022/08/25 07:31:43 fetching corpus: 12750, signal 415810/545393 (executing program) 2022/08/25 07:31:43 fetching corpus: 12800, signal 416317/545943 (executing program) 2022/08/25 07:31:44 fetching corpus: 12850, signal 416738/546464 (executing program) 2022/08/25 07:31:44 fetching corpus: 12900, signal 417203/547023 (executing program) 2022/08/25 07:31:44 fetching corpus: 12950, signal 417525/547543 (executing program) 2022/08/25 07:31:44 fetching corpus: 13000, signal 417887/548075 (executing program) 2022/08/25 07:31:44 fetching corpus: 13050, signal 418406/548582 (executing program) 2022/08/25 07:31:44 fetching corpus: 13100, signal 418997/549076 (executing program) 2022/08/25 07:31:45 fetching corpus: 13150, signal 419451/549615 (executing program) 2022/08/25 07:31:45 fetching corpus: 13200, signal 420080/550129 (executing program) 2022/08/25 07:31:45 fetching corpus: 13250, signal 420451/550651 (executing program) 2022/08/25 07:31:45 fetching corpus: 13300, signal 420819/551159 (executing program) 2022/08/25 07:31:45 fetching corpus: 13350, signal 421199/551645 (executing program) 2022/08/25 07:31:46 fetching corpus: 13400, signal 421873/552127 (executing program) 2022/08/25 07:31:46 fetching corpus: 13450, signal 422472/552650 (executing program) 2022/08/25 07:31:46 fetching corpus: 13500, signal 422813/553153 (executing program) 2022/08/25 07:31:46 fetching corpus: 13550, signal 423351/553643 (executing program) 2022/08/25 07:31:46 fetching corpus: 13600, signal 423903/554145 (executing program) 2022/08/25 07:31:47 fetching corpus: 13650, signal 424410/554610 (executing program) 2022/08/25 07:31:47 fetching corpus: 13700, signal 425025/555086 (executing program) 2022/08/25 07:31:47 fetching corpus: 13750, signal 425401/555485 (executing program) 2022/08/25 07:31:47 fetching corpus: 13800, signal 425798/555486 (executing program) 2022/08/25 07:31:47 fetching corpus: 13850, signal 426221/555490 (executing program) 2022/08/25 07:31:48 fetching corpus: 13900, signal 426937/555490 (executing program) 2022/08/25 07:31:48 fetching corpus: 13950, signal 427397/555494 (executing program) 2022/08/25 07:31:48 fetching corpus: 14000, signal 427842/555499 (executing program) 2022/08/25 07:31:48 fetching corpus: 14050, signal 428339/555500 (executing program) 2022/08/25 07:31:48 fetching corpus: 14100, signal 428646/555512 (executing program) 2022/08/25 07:31:48 fetching corpus: 14150, signal 429047/555519 (executing program) 2022/08/25 07:31:49 fetching corpus: 14200, signal 429594/555529 (executing program) 2022/08/25 07:31:49 fetching corpus: 14250, signal 430062/555533 (executing program) 2022/08/25 07:31:49 fetching corpus: 14300, signal 430437/555545 (executing program) 2022/08/25 07:31:49 fetching corpus: 14350, signal 430898/555549 (executing program) 2022/08/25 07:31:49 fetching corpus: 14400, signal 431634/555549 (executing program) 2022/08/25 07:31:50 fetching corpus: 14450, signal 432186/555558 (executing program) 2022/08/25 07:31:50 fetching corpus: 14500, signal 432654/555571 (executing program) 2022/08/25 07:31:50 fetching corpus: 14550, signal 433093/555577 (executing program) 2022/08/25 07:31:50 fetching corpus: 14600, signal 433484/555583 (executing program) 2022/08/25 07:31:51 fetching corpus: 14650, signal 433872/555584 (executing program) 2022/08/25 07:31:51 fetching corpus: 14700, signal 434279/555605 (executing program) 2022/08/25 07:31:51 fetching corpus: 14750, signal 434694/555610 (executing program) 2022/08/25 07:31:51 fetching corpus: 14800, signal 435165/555610 (executing program) 2022/08/25 07:31:52 fetching corpus: 14850, signal 435688/555610 (executing program) 2022/08/25 07:31:52 fetching corpus: 14900, signal 436318/555616 (executing program) 2022/08/25 07:31:52 fetching corpus: 14950, signal 436771/555619 (executing program) 2022/08/25 07:31:52 fetching corpus: 15000, signal 437489/555627 (executing program) 2022/08/25 07:31:52 fetching corpus: 15050, signal 437963/555627 (executing program) 2022/08/25 07:31:53 fetching corpus: 15100, signal 438553/555631 (executing program) 2022/08/25 07:31:53 fetching corpus: 15150, signal 438841/555632 (executing program) 2022/08/25 07:31:53 fetching corpus: 15200, signal 439151/555640 (executing program) 2022/08/25 07:31:53 fetching corpus: 15250, signal 439528/555642 (executing program) 2022/08/25 07:31:53 fetching corpus: 15300, signal 439877/555655 (executing program) 2022/08/25 07:31:54 fetching corpus: 15350, signal 440610/555661 (executing program) 2022/08/25 07:31:54 fetching corpus: 15400, signal 440963/555663 (executing program) 2022/08/25 07:31:54 fetching corpus: 15450, signal 441458/555708 (executing program) 2022/08/25 07:31:54 fetching corpus: 15500, signal 442055/555755 (executing program) 2022/08/25 07:31:55 fetching corpus: 15550, signal 442382/555765 (executing program) 2022/08/25 07:31:55 fetching corpus: 15600, signal 442749/555766 (executing program) 2022/08/25 07:31:55 fetching corpus: 15650, signal 443124/555775 (executing program) 2022/08/25 07:31:56 fetching corpus: 15700, signal 443526/555775 (executing program) 2022/08/25 07:31:56 fetching corpus: 15750, signal 444224/555784 (executing program) 2022/08/25 07:31:56 fetching corpus: 15800, signal 444707/555785 (executing program) 2022/08/25 07:31:56 fetching corpus: 15850, signal 445087/555792 (executing program) 2022/08/25 07:31:56 fetching corpus: 15900, signal 445490/555792 (executing program) 2022/08/25 07:31:57 fetching corpus: 15950, signal 445971/555794 (executing program) 2022/08/25 07:31:57 fetching corpus: 16000, signal 446426/555797 (executing program) 2022/08/25 07:31:57 fetching corpus: 16050, signal 446860/555810 (executing program) 2022/08/25 07:31:57 fetching corpus: 16100, signal 447307/555814 (executing program) 2022/08/25 07:31:58 fetching corpus: 16150, signal 447692/555815 (executing program) 2022/08/25 07:31:58 fetching corpus: 16200, signal 448106/555815 (executing program) 2022/08/25 07:31:58 fetching corpus: 16250, signal 448474/555854 (executing program) 2022/08/25 07:31:58 fetching corpus: 16300, signal 448849/555867 (executing program) 2022/08/25 07:31:58 fetching corpus: 16350, signal 449194/555871 (executing program) 2022/08/25 07:31:59 fetching corpus: 16400, signal 449682/555871 (executing program) 2022/08/25 07:31:59 fetching corpus: 16450, signal 450026/555878 (executing program) 2022/08/25 07:31:59 fetching corpus: 16500, signal 450472/555878 (executing program) 2022/08/25 07:31:59 fetching corpus: 16550, signal 450858/555910 (executing program) 2022/08/25 07:31:59 fetching corpus: 16600, signal 451295/555910 (executing program) 2022/08/25 07:32:00 fetching corpus: 16650, signal 451746/555910 (executing program) 2022/08/25 07:32:00 fetching corpus: 16700, signal 452268/555920 (executing program) 2022/08/25 07:32:00 fetching corpus: 16750, signal 452976/555921 (executing program) 2022/08/25 07:32:00 fetching corpus: 16800, signal 453392/555933 (executing program) 2022/08/25 07:32:00 fetching corpus: 16850, signal 453985/555936 (executing program) 2022/08/25 07:32:01 fetching corpus: 16900, signal 454317/555945 (executing program) 2022/08/25 07:32:01 fetching corpus: 16950, signal 454719/555945 (executing program) 2022/08/25 07:32:01 fetching corpus: 17000, signal 454977/555953 (executing program) 2022/08/25 07:32:01 fetching corpus: 17050, signal 455394/555955 (executing program) 2022/08/25 07:32:01 fetching corpus: 17100, signal 455735/555955 (executing program) 2022/08/25 07:32:02 fetching corpus: 17150, signal 456138/555955 (executing program) 2022/08/25 07:32:02 fetching corpus: 17200, signal 456453/555969 (executing program) 2022/08/25 07:32:02 fetching corpus: 17250, signal 456879/555969 (executing program) 2022/08/25 07:32:02 fetching corpus: 17300, signal 457210/555969 (executing program) 2022/08/25 07:32:03 fetching corpus: 17350, signal 457578/555976 (executing program) 2022/08/25 07:32:03 fetching corpus: 17400, signal 458007/555976 (executing program) 2022/08/25 07:32:03 fetching corpus: 17450, signal 458414/555976 (executing program) 2022/08/25 07:32:03 fetching corpus: 17500, signal 458812/555988 (executing program) 2022/08/25 07:32:04 fetching corpus: 17550, signal 459227/555988 (executing program) 2022/08/25 07:32:04 fetching corpus: 17600, signal 459495/555989 (executing program) 2022/08/25 07:32:04 fetching corpus: 17650, signal 459884/555996 (executing program) 2022/08/25 07:32:04 fetching corpus: 17700, signal 460310/556013 (executing program) 2022/08/25 07:32:04 fetching corpus: 17750, signal 460738/556016 (executing program) 2022/08/25 07:32:04 fetching corpus: 17800, signal 461043/556016 (executing program) 2022/08/25 07:32:05 fetching corpus: 17850, signal 461448/556017 (executing program) 2022/08/25 07:32:05 fetching corpus: 17900, signal 461709/556019 (executing program) 2022/08/25 07:32:05 fetching corpus: 17950, signal 462064/556044 (executing program) 2022/08/25 07:32:05 fetching corpus: 18000, signal 462354/556048 (executing program) 2022/08/25 07:32:05 fetching corpus: 18050, signal 462645/556054 (executing program) 2022/08/25 07:32:06 fetching corpus: 18100, signal 462999/556060 (executing program) 2022/08/25 07:32:06 fetching corpus: 18150, signal 463427/556063 (executing program) 2022/08/25 07:32:06 fetching corpus: 18200, signal 463821/556065 (executing program) 2022/08/25 07:32:06 fetching corpus: 18250, signal 464205/556073 (executing program) 2022/08/25 07:32:06 fetching corpus: 18300, signal 464677/556090 (executing program) 2022/08/25 07:32:07 fetching corpus: 18350, signal 464958/556107 (executing program) 2022/08/25 07:32:07 fetching corpus: 18400, signal 465328/556107 (executing program) 2022/08/25 07:32:07 fetching corpus: 18450, signal 465943/556107 (executing program) 2022/08/25 07:32:07 fetching corpus: 18500, signal 466410/556109 (executing program) 2022/08/25 07:32:08 fetching corpus: 18550, signal 466718/556110 (executing program) 2022/08/25 07:32:08 fetching corpus: 18600, signal 467025/556110 (executing program) 2022/08/25 07:32:08 fetching corpus: 18650, signal 467404/556110 (executing program) 2022/08/25 07:32:08 fetching corpus: 18700, signal 467791/556114 (executing program) 2022/08/25 07:32:08 fetching corpus: 18750, signal 468097/556116 (executing program) 2022/08/25 07:32:09 fetching corpus: 18800, signal 468473/556118 (executing program) 2022/08/25 07:32:09 fetching corpus: 18850, signal 468794/556118 (executing program) 2022/08/25 07:32:09 fetching corpus: 18900, signal 469220/556131 (executing program) 2022/08/25 07:32:09 fetching corpus: 18950, signal 469670/556132 (executing program) 2022/08/25 07:32:09 fetching corpus: 19000, signal 470026/556134 (executing program) 2022/08/25 07:32:10 fetching corpus: 19050, signal 470475/556135 (executing program) 2022/08/25 07:32:10 fetching corpus: 19100, signal 470735/556137 (executing program) 2022/08/25 07:32:10 fetching corpus: 19150, signal 471207/556139 (executing program) 2022/08/25 07:32:11 fetching corpus: 19200, signal 471604/556139 (executing program) 2022/08/25 07:32:11 fetching corpus: 19250, signal 471979/556149 (executing program) 2022/08/25 07:32:11 fetching corpus: 19300, signal 472507/556167 (executing program) 2022/08/25 07:32:11 fetching corpus: 19350, signal 472834/556167 (executing program) 2022/08/25 07:32:12 fetching corpus: 19400, signal 473125/556173 (executing program) 2022/08/25 07:32:12 fetching corpus: 19450, signal 473533/556178 (executing program) 2022/08/25 07:32:12 fetching corpus: 19500, signal 473804/556180 (executing program) 2022/08/25 07:32:12 fetching corpus: 19550, signal 474115/556184 (executing program) 2022/08/25 07:32:12 fetching corpus: 19600, signal 474532/556184 (executing program) 2022/08/25 07:32:13 fetching corpus: 19650, signal 474872/556187 (executing program) 2022/08/25 07:32:13 fetching corpus: 19700, signal 475243/556190 (executing program) 2022/08/25 07:32:13 fetching corpus: 19750, signal 475598/556190 (executing program) 2022/08/25 07:32:13 fetching corpus: 19800, signal 475803/556192 (executing program) 2022/08/25 07:32:13 fetching corpus: 19850, signal 476225/556192 (executing program) 2022/08/25 07:32:14 fetching corpus: 19900, signal 476664/556192 (executing program) 2022/08/25 07:32:14 fetching corpus: 19950, signal 476895/556192 (executing program) 2022/08/25 07:32:14 fetching corpus: 20000, signal 477237/556194 (executing program) 2022/08/25 07:32:14 fetching corpus: 20050, signal 477605/556197 (executing program) 2022/08/25 07:32:14 fetching corpus: 20100, signal 477939/556210 (executing program) [ 139.154620][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.161944][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 2022/08/25 07:32:15 fetching corpus: 20150, signal 478313/556216 (executing program) 2022/08/25 07:32:15 fetching corpus: 20200, signal 478655/556219 (executing program) 2022/08/25 07:32:15 fetching corpus: 20250, signal 479149/556220 (executing program) 2022/08/25 07:32:16 fetching corpus: 20300, signal 479528/556227 (executing program) 2022/08/25 07:32:16 fetching corpus: 20350, signal 479792/556228 (executing program) 2022/08/25 07:32:16 fetching corpus: 20400, signal 480091/556228 (executing program) 2022/08/25 07:32:16 fetching corpus: 20450, signal 480542/556230 (executing program) 2022/08/25 07:32:17 fetching corpus: 20500, signal 480845/556238 (executing program) 2022/08/25 07:32:17 fetching corpus: 20550, signal 481110/556249 (executing program) 2022/08/25 07:32:17 fetching corpus: 20600, signal 481663/556251 (executing program) 2022/08/25 07:32:17 fetching corpus: 20650, signal 482117/556252 (executing program) 2022/08/25 07:32:17 fetching corpus: 20700, signal 482484/556252 (executing program) 2022/08/25 07:32:18 fetching corpus: 20750, signal 482849/556257 (executing program) 2022/08/25 07:32:18 fetching corpus: 20800, signal 483341/556257 (executing program) 2022/08/25 07:32:18 fetching corpus: 20850, signal 483821/556263 (executing program) 2022/08/25 07:32:18 fetching corpus: 20900, signal 484145/556278 (executing program) 2022/08/25 07:32:18 fetching corpus: 20950, signal 484439/556280 (executing program) 2022/08/25 07:32:19 fetching corpus: 21000, signal 484786/556285 (executing program) 2022/08/25 07:32:19 fetching corpus: 21050, signal 485111/556285 (executing program) 2022/08/25 07:32:19 fetching corpus: 21100, signal 485382/556294 (executing program) 2022/08/25 07:32:19 fetching corpus: 21150, signal 485588/556298 (executing program) 2022/08/25 07:32:19 fetching corpus: 21200, signal 485884/556302 (executing program) 2022/08/25 07:32:20 fetching corpus: 21250, signal 486248/556312 (executing program) 2022/08/25 07:32:20 fetching corpus: 21300, signal 486724/556317 (executing program) 2022/08/25 07:32:20 fetching corpus: 21350, signal 487261/556317 (executing program) 2022/08/25 07:32:20 fetching corpus: 21400, signal 487584/556318 (executing program) 2022/08/25 07:32:21 fetching corpus: 21450, signal 487845/556323 (executing program) 2022/08/25 07:32:21 fetching corpus: 21500, signal 488113/556328 (executing program) 2022/08/25 07:32:21 fetching corpus: 21550, signal 488412/556330 (executing program) 2022/08/25 07:32:21 fetching corpus: 21600, signal 488966/556330 (executing program) 2022/08/25 07:32:21 fetching corpus: 21650, signal 489288/556345 (executing program) 2022/08/25 07:32:21 fetching corpus: 21700, signal 489607/556350 (executing program) 2022/08/25 07:32:22 fetching corpus: 21750, signal 489991/556350 (executing program) 2022/08/25 07:32:22 fetching corpus: 21800, signal 490415/556351 (executing program) 2022/08/25 07:32:22 fetching corpus: 21850, signal 490749/556354 (executing program) 2022/08/25 07:32:22 fetching corpus: 21900, signal 491146/556365 (executing program) 2022/08/25 07:32:22 fetching corpus: 21950, signal 491435/556370 (executing program) 2022/08/25 07:32:23 fetching corpus: 22000, signal 491835/556377 (executing program) 2022/08/25 07:32:23 fetching corpus: 22050, signal 492201/556378 (executing program) 2022/08/25 07:32:23 fetching corpus: 22100, signal 492643/556393 (executing program) 2022/08/25 07:32:24 fetching corpus: 22150, signal 492975/556399 (executing program) 2022/08/25 07:32:24 fetching corpus: 22200, signal 493416/556400 (executing program) 2022/08/25 07:32:24 fetching corpus: 22250, signal 493727/556401 (executing program) 2022/08/25 07:32:24 fetching corpus: 22300, signal 493976/556405 (executing program) 2022/08/25 07:32:25 fetching corpus: 22350, signal 494408/556410 (executing program) 2022/08/25 07:32:25 fetching corpus: 22400, signal 494762/556411 (executing program) 2022/08/25 07:32:25 fetching corpus: 22450, signal 495128/556412 (executing program) 2022/08/25 07:32:25 fetching corpus: 22500, signal 495513/556414 (executing program) 2022/08/25 07:32:26 fetching corpus: 22550, signal 495790/556415 (executing program) 2022/08/25 07:32:26 fetching corpus: 22600, signal 496104/556417 (executing program) 2022/08/25 07:32:26 fetching corpus: 22650, signal 496516/556419 (executing program) 2022/08/25 07:32:26 fetching corpus: 22700, signal 496815/556419 (executing program) 2022/08/25 07:32:26 fetching corpus: 22750, signal 497192/556419 (executing program) 2022/08/25 07:32:26 fetching corpus: 22800, signal 497499/556424 (executing program) 2022/08/25 07:32:27 fetching corpus: 22850, signal 497944/556433 (executing program) 2022/08/25 07:32:27 fetching corpus: 22900, signal 498369/556437 (executing program) 2022/08/25 07:32:27 fetching corpus: 22950, signal 498621/556442 (executing program) 2022/08/25 07:32:27 fetching corpus: 23000, signal 498848/556447 (executing program) 2022/08/25 07:32:27 fetching corpus: 23050, signal 499496/556454 (executing program) 2022/08/25 07:32:28 fetching corpus: 23100, signal 499859/556467 (executing program) 2022/08/25 07:32:28 fetching corpus: 23150, signal 500164/556475 (executing program) 2022/08/25 07:32:28 fetching corpus: 23200, signal 500408/556476 (executing program) 2022/08/25 07:32:28 fetching corpus: 23250, signal 500689/556476 (executing program) 2022/08/25 07:32:28 fetching corpus: 23300, signal 501111/556482 (executing program) 2022/08/25 07:32:29 fetching corpus: 23350, signal 501406/556483 (executing program) 2022/08/25 07:32:29 fetching corpus: 23400, signal 501688/556484 (executing program) 2022/08/25 07:32:29 fetching corpus: 23450, signal 502044/556501 (executing program) 2022/08/25 07:32:29 fetching corpus: 23500, signal 502238/556503 (executing program) 2022/08/25 07:32:29 fetching corpus: 23550, signal 502653/556503 (executing program) 2022/08/25 07:32:30 fetching corpus: 23600, signal 503041/556511 (executing program) 2022/08/25 07:32:30 fetching corpus: 23650, signal 503298/556513 (executing program) 2022/08/25 07:32:30 fetching corpus: 23700, signal 503605/556515 (executing program) 2022/08/25 07:32:30 fetching corpus: 23750, signal 503982/556516 (executing program) 2022/08/25 07:32:31 fetching corpus: 23800, signal 504243/556523 (executing program) 2022/08/25 07:32:31 fetching corpus: 23850, signal 504621/556527 (executing program) 2022/08/25 07:32:31 fetching corpus: 23900, signal 504982/556527 (executing program) 2022/08/25 07:32:31 fetching corpus: 23950, signal 505298/556529 (executing program) 2022/08/25 07:32:31 fetching corpus: 24000, signal 505716/556533 (executing program) 2022/08/25 07:32:32 fetching corpus: 24050, signal 505985/556538 (executing program) 2022/08/25 07:32:32 fetching corpus: 24100, signal 506192/556538 (executing program) 2022/08/25 07:32:32 fetching corpus: 24150, signal 506556/556538 (executing program) 2022/08/25 07:32:32 fetching corpus: 24200, signal 506854/556551 (executing program) 2022/08/25 07:32:32 fetching corpus: 24250, signal 507106/556551 (executing program) 2022/08/25 07:32:32 fetching corpus: 24300, signal 507363/556551 (executing program) 2022/08/25 07:32:33 fetching corpus: 24350, signal 507661/556551 (executing program) 2022/08/25 07:32:33 fetching corpus: 24400, signal 507927/556551 (executing program) 2022/08/25 07:32:33 fetching corpus: 24450, signal 508140/556551 (executing program) 2022/08/25 07:32:34 fetching corpus: 24500, signal 508428/556555 (executing program) 2022/08/25 07:32:34 fetching corpus: 24550, signal 508733/556565 (executing program) 2022/08/25 07:32:34 fetching corpus: 24600, signal 509858/556588 (executing program) 2022/08/25 07:32:34 fetching corpus: 24650, signal 510241/556592 (executing program) 2022/08/25 07:32:34 fetching corpus: 24700, signal 510448/556597 (executing program) 2022/08/25 07:32:34 fetching corpus: 24750, signal 510635/556597 (executing program) 2022/08/25 07:32:35 fetching corpus: 24800, signal 510963/556598 (executing program) 2022/08/25 07:32:35 fetching corpus: 24850, signal 511255/556599 (executing program) 2022/08/25 07:32:35 fetching corpus: 24900, signal 511528/556599 (executing program) 2022/08/25 07:32:35 fetching corpus: 24950, signal 511837/556611 (executing program) 2022/08/25 07:32:35 fetching corpus: 25000, signal 512091/556611 (executing program) 2022/08/25 07:32:36 fetching corpus: 25050, signal 512499/556623 (executing program) 2022/08/25 07:32:36 fetching corpus: 25100, signal 512811/556625 (executing program) 2022/08/25 07:32:36 fetching corpus: 25150, signal 513082/556625 (executing program) 2022/08/25 07:32:36 fetching corpus: 25200, signal 513375/556627 (executing program) 2022/08/25 07:32:36 fetching corpus: 25250, signal 513579/556627 (executing program) 2022/08/25 07:32:37 fetching corpus: 25300, signal 513950/556628 (executing program) 2022/08/25 07:32:37 fetching corpus: 25350, signal 514222/556628 (executing program) 2022/08/25 07:32:37 fetching corpus: 25400, signal 514409/556628 (executing program) 2022/08/25 07:32:37 fetching corpus: 25450, signal 514710/556630 (executing program) 2022/08/25 07:32:38 fetching corpus: 25500, signal 514946/556640 (executing program) 2022/08/25 07:32:38 fetching corpus: 25550, signal 515242/556641 (executing program) 2022/08/25 07:32:38 fetching corpus: 25600, signal 515519/556645 (executing program) 2022/08/25 07:32:38 fetching corpus: 25650, signal 515725/556647 (executing program) 2022/08/25 07:32:38 fetching corpus: 25700, signal 516016/556652 (executing program) 2022/08/25 07:32:39 fetching corpus: 25750, signal 516280/556652 (executing program) 2022/08/25 07:32:39 fetching corpus: 25800, signal 516671/556656 (executing program) 2022/08/25 07:32:39 fetching corpus: 25850, signal 517041/556657 (executing program) 2022/08/25 07:32:39 fetching corpus: 25900, signal 517305/556657 (executing program) 2022/08/25 07:32:39 fetching corpus: 25950, signal 517590/556659 (executing program) 2022/08/25 07:32:40 fetching corpus: 26000, signal 517830/556659 (executing program) 2022/08/25 07:32:40 fetching corpus: 26050, signal 518162/556687 (executing program) 2022/08/25 07:32:40 fetching corpus: 26100, signal 518466/556699 (executing program) 2022/08/25 07:32:40 fetching corpus: 26150, signal 518685/556700 (executing program) 2022/08/25 07:32:40 fetching corpus: 26200, signal 518894/556702 (executing program) 2022/08/25 07:32:41 fetching corpus: 26250, signal 519124/556708 (executing program) 2022/08/25 07:32:41 fetching corpus: 26300, signal 519341/556710 (executing program) 2022/08/25 07:32:41 fetching corpus: 26350, signal 519601/556710 (executing program) 2022/08/25 07:32:41 fetching corpus: 26400, signal 519826/556716 (executing program) 2022/08/25 07:32:41 fetching corpus: 26450, signal 520049/556726 (executing program) 2022/08/25 07:32:42 fetching corpus: 26500, signal 520295/556730 (executing program) 2022/08/25 07:32:42 fetching corpus: 26550, signal 520550/556733 (executing program) 2022/08/25 07:32:43 fetching corpus: 26600, signal 520861/556738 (executing program) 2022/08/25 07:32:43 fetching corpus: 26650, signal 521041/556738 (executing program) 2022/08/25 07:32:43 fetching corpus: 26700, signal 521392/556748 (executing program) 2022/08/25 07:32:43 fetching corpus: 26750, signal 521761/556749 (executing program) 2022/08/25 07:32:43 fetching corpus: 26800, signal 522002/556755 (executing program) 2022/08/25 07:32:44 fetching corpus: 26850, signal 522281/556755 (executing program) 2022/08/25 07:32:44 fetching corpus: 26900, signal 522528/556757 (executing program) 2022/08/25 07:32:44 fetching corpus: 26950, signal 522790/556757 (executing program) 2022/08/25 07:32:44 fetching corpus: 27000, signal 523142/556761 (executing program) 2022/08/25 07:32:45 fetching corpus: 27050, signal 523420/556761 (executing program) 2022/08/25 07:32:45 fetching corpus: 27100, signal 523655/556761 (executing program) 2022/08/25 07:32:45 fetching corpus: 27150, signal 523965/556762 (executing program) 2022/08/25 07:32:45 fetching corpus: 27200, signal 524291/556764 (executing program) 2022/08/25 07:32:45 fetching corpus: 27250, signal 524553/556767 (executing program) 2022/08/25 07:32:46 fetching corpus: 27300, signal 524777/556779 (executing program) 2022/08/25 07:32:46 fetching corpus: 27350, signal 525050/556781 (executing program) 2022/08/25 07:32:46 fetching corpus: 27400, signal 525431/556795 (executing program) 2022/08/25 07:32:46 fetching corpus: 27450, signal 525692/556814 (executing program) 2022/08/25 07:32:46 fetching corpus: 27500, signal 525909/556814 (executing program) 2022/08/25 07:32:47 fetching corpus: 27550, signal 526426/556815 (executing program) 2022/08/25 07:32:47 fetching corpus: 27600, signal 526679/556816 (executing program) 2022/08/25 07:32:47 fetching corpus: 27650, signal 526974/556816 (executing program) 2022/08/25 07:32:47 fetching corpus: 27700, signal 527331/556830 (executing program) 2022/08/25 07:32:48 fetching corpus: 27750, signal 527509/556832 (executing program) 2022/08/25 07:32:48 fetching corpus: 27800, signal 527704/556846 (executing program) 2022/08/25 07:32:48 fetching corpus: 27850, signal 527952/556855 (executing program) 2022/08/25 07:32:48 fetching corpus: 27900, signal 528181/556856 (executing program) 2022/08/25 07:32:49 fetching corpus: 27950, signal 528422/556857 (executing program) 2022/08/25 07:32:49 fetching corpus: 28000, signal 528680/556861 (executing program) 2022/08/25 07:32:49 fetching corpus: 28050, signal 529025/556863 (executing program) 2022/08/25 07:32:49 fetching corpus: 28100, signal 529304/556863 (executing program) 2022/08/25 07:32:49 fetching corpus: 28150, signal 529501/556863 (executing program) 2022/08/25 07:32:49 fetching corpus: 28200, signal 529748/556864 (executing program) 2022/08/25 07:32:50 fetching corpus: 28250, signal 529998/556864 (executing program) 2022/08/25 07:32:50 fetching corpus: 28300, signal 530228/556872 (executing program) 2022/08/25 07:32:50 fetching corpus: 28350, signal 530467/556875 (executing program) 2022/08/25 07:32:50 fetching corpus: 28400, signal 530698/556881 (executing program) 2022/08/25 07:32:50 fetching corpus: 28450, signal 530998/556881 (executing program) 2022/08/25 07:32:51 fetching corpus: 28500, signal 531260/556887 (executing program) 2022/08/25 07:32:51 fetching corpus: 28550, signal 531466/556888 (executing program) 2022/08/25 07:32:51 fetching corpus: 28600, signal 531753/556888 (executing program) 2022/08/25 07:32:52 fetching corpus: 28650, signal 532013/556890 (executing program) 2022/08/25 07:32:52 fetching corpus: 28700, signal 532282/556896 (executing program) 2022/08/25 07:32:52 fetching corpus: 28750, signal 532501/556896 (executing program) 2022/08/25 07:32:52 fetching corpus: 28800, signal 532801/556900 (executing program) 2022/08/25 07:32:52 fetching corpus: 28850, signal 532990/556906 (executing program) 2022/08/25 07:32:52 fetching corpus: 28900, signal 533346/556906 (executing program) 2022/08/25 07:32:53 fetching corpus: 28950, signal 533705/556910 (executing program) 2022/08/25 07:32:53 fetching corpus: 29000, signal 534055/556910 (executing program) 2022/08/25 07:32:53 fetching corpus: 29050, signal 534349/556912 (executing program) 2022/08/25 07:32:53 fetching corpus: 29100, signal 534565/556912 (executing program) 2022/08/25 07:32:54 fetching corpus: 29150, signal 534900/556934 (executing program) 2022/08/25 07:32:54 fetching corpus: 29200, signal 535161/556935 (executing program) 2022/08/25 07:32:54 fetching corpus: 29250, signal 535317/556935 (executing program) 2022/08/25 07:32:55 fetching corpus: 29300, signal 535689/556938 (executing program) 2022/08/25 07:32:55 fetching corpus: 29350, signal 535950/556938 (executing program) 2022/08/25 07:32:55 fetching corpus: 29400, signal 536294/556942 (executing program) 2022/08/25 07:32:55 fetching corpus: 29450, signal 536474/556943 (executing program) 2022/08/25 07:32:56 fetching corpus: 29500, signal 536824/556943 (executing program) 2022/08/25 07:32:56 fetching corpus: 29550, signal 537041/556945 (executing program) 2022/08/25 07:32:56 fetching corpus: 29600, signal 537313/556945 (executing program) 2022/08/25 07:32:56 fetching corpus: 29650, signal 537537/556949 (executing program) 2022/08/25 07:32:56 fetching corpus: 29700, signal 537741/556950 (executing program) 2022/08/25 07:32:57 fetching corpus: 29750, signal 537944/556950 (executing program) 2022/08/25 07:32:57 fetching corpus: 29800, signal 538248/556950 (executing program) 2022/08/25 07:32:57 fetching corpus: 29850, signal 538596/556951 (executing program) 2022/08/25 07:32:57 fetching corpus: 29900, signal 538800/556951 (executing program) 2022/08/25 07:32:57 fetching corpus: 29950, signal 539086/556964 (executing program) 2022/08/25 07:32:58 fetching corpus: 30000, signal 539328/556965 (executing program) 2022/08/25 07:32:58 fetching corpus: 30050, signal 539571/556978 (executing program) 2022/08/25 07:32:58 fetching corpus: 30100, signal 539819/556980 (executing program) 2022/08/25 07:32:58 fetching corpus: 30150, signal 540003/556986 (executing program) 2022/08/25 07:32:58 fetching corpus: 30200, signal 540233/556986 (executing program) 2022/08/25 07:32:59 fetching corpus: 30250, signal 540420/556995 (executing program) 2022/08/25 07:32:59 fetching corpus: 30300, signal 540878/556995 (executing program) 2022/08/25 07:32:59 fetching corpus: 30350, signal 541137/556995 (executing program) 2022/08/25 07:33:00 fetching corpus: 30400, signal 541319/556996 (executing program) 2022/08/25 07:33:00 fetching corpus: 30450, signal 541516/556996 (executing program) 2022/08/25 07:33:00 fetching corpus: 30500, signal 541688/556997 (executing program) 2022/08/25 07:33:00 fetching corpus: 30550, signal 541918/557002 (executing program) 2022/08/25 07:33:00 fetching corpus: 30600, signal 542189/557002 (executing program) 2022/08/25 07:33:02 fetching corpus: 30650, signal 542412/557002 (executing program) 2022/08/25 07:33:02 fetching corpus: 30700, signal 542805/557024 (executing program) 2022/08/25 07:33:02 fetching corpus: 30750, signal 543057/557028 (executing program) 2022/08/25 07:33:02 fetching corpus: 30800, signal 543300/557034 (executing program) 2022/08/25 07:33:03 fetching corpus: 30850, signal 543505/557040 (executing program) 2022/08/25 07:33:03 fetching corpus: 30900, signal 543736/557042 (executing program) 2022/08/25 07:33:03 fetching corpus: 30949, signal 544093/557052 (executing program) 2022/08/25 07:33:03 fetching corpus: 30999, signal 544406/557052 (executing program) 2022/08/25 07:33:03 fetching corpus: 31049, signal 544620/557067 (executing program) 2022/08/25 07:33:03 fetching corpus: 31099, signal 544891/557075 (executing program) 2022/08/25 07:33:04 fetching corpus: 31149, signal 545041/557079 (executing program) 2022/08/25 07:33:04 fetching corpus: 31199, signal 545314/557079 (executing program) 2022/08/25 07:33:04 fetching corpus: 31249, signal 545585/557083 (executing program) 2022/08/25 07:33:04 fetching corpus: 31299, signal 545782/557084 (executing program) 2022/08/25 07:33:04 fetching corpus: 31349, signal 546105/557089 (executing program) 2022/08/25 07:33:05 fetching corpus: 31398, signal 546369/557113 (executing program) 2022/08/25 07:33:05 fetching corpus: 31448, signal 546570/557153 (executing program) 2022/08/25 07:33:05 fetching corpus: 31498, signal 546779/557156 (executing program) 2022/08/25 07:33:05 fetching corpus: 31519, signal 546868/557157 (executing program) 2022/08/25 07:33:05 fetching corpus: 31520, signal 546884/557170 (executing program) 2022/08/25 07:33:05 fetching corpus: 31520, signal 546884/557170 (executing program) 2022/08/25 07:33:09 starting 4 fuzzer processes 07:33:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 07:33:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 07:33:09 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x800000000009031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000040)=0x80000001) pipe(0x0) 07:33:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001140), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0x125d, 0x20000000) [ 193.229371][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 193.229422][ T39] audit: type=1400 audit(1661412789.118:86): avc: denied { execmem } for pid=3704 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 193.553442][ T39] audit: type=1400 audit(1661412789.448:87): avc: denied { mounton } for pid=3708 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 193.570759][ T39] audit: type=1400 audit(1661412789.448:88): avc: denied { mount } for pid=3708 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 193.586746][ T39] audit: type=1400 audit(1661412789.448:89): avc: denied { create } for pid=3709 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.601290][ T39] audit: type=1400 audit(1661412789.448:90): avc: denied { create } for pid=3708 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.615421][ T39] audit: type=1400 audit(1661412789.448:92): avc: denied { read write } for pid=3708 comm="syz-executor.0" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.633057][ T39] audit: type=1400 audit(1661412789.448:91): avc: denied { read write } for pid=3709 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.655352][ T39] audit: type=1400 audit(1661412789.448:94): avc: denied { open } for pid=3708 comm="syz-executor.0" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.674716][ T39] audit: type=1400 audit(1661412789.448:93): avc: denied { open } for pid=3709 comm="syz-executor.1" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.612435][ T39] audit: type=1400 audit(1661412790.498:95): avc: denied { ioctl } for pid=3709 comm="syz-executor.1" path="socket:[29316]" dev="sockfs" ino=29316 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.648262][ T3716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.652113][ T3718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.658173][ T3716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.663696][ T3718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.667725][ T3716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.677053][ T3720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.680959][ T3716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.686464][ T3720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.691402][ T3716] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 194.694531][ T3721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.696503][ T3721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.704865][ T3720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.705341][ T3716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.712531][ T3716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.725723][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.732273][ T3723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.746453][ T3723] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.754941][ T3723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.124454][ T3709] chnl_net:caif_netlink_parms(): no params data found [ 195.138512][ T3710] chnl_net:caif_netlink_parms(): no params data found [ 195.223099][ T3711] chnl_net:caif_netlink_parms(): no params data found [ 195.529426][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.534984][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.540813][ T3710] device bridge_slave_0 entered promiscuous mode [ 195.595871][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.600842][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.607267][ T3709] device bridge_slave_0 entered promiscuous mode [ 195.617068][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.622396][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.628635][ T3709] device bridge_slave_1 entered promiscuous mode [ 195.636019][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.640703][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.647005][ T3710] device bridge_slave_1 entered promiscuous mode [ 195.815142][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.820591][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.827910][ T3711] device bridge_slave_0 entered promiscuous mode [ 195.834928][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.840366][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.847935][ T3711] device bridge_slave_1 entered promiscuous mode [ 195.858903][ T3709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.870049][ T3710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.905119][ T3709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.914554][ T3710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.048865][ T3710] team0: Port device team_slave_0 added [ 196.058298][ T3711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.095820][ T3710] team0: Port device team_slave_1 added [ 196.105234][ T3711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.115714][ T3709] team0: Port device team_slave_0 added [ 196.208863][ T3709] team0: Port device team_slave_1 added [ 196.282836][ T3711] team0: Port device team_slave_0 added [ 196.316731][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.322185][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.339137][ T3710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.353417][ T3711] team0: Port device team_slave_1 added [ 196.358510][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.367270][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.384388][ T3709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.393402][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.398239][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.415238][ T3709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.423528][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.428559][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.444882][ T3710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.610637][ T3710] device hsr_slave_0 entered promiscuous mode [ 196.622432][ T3710] device hsr_slave_1 entered promiscuous mode [ 196.630851][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.635688][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.650702][ T3711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.682554][ T3719] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 196.685626][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.695673][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.714117][ T3711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.725691][ T3709] device hsr_slave_0 entered promiscuous mode [ 196.732957][ T3709] device hsr_slave_1 entered promiscuous mode [ 196.738505][ T3709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.746096][ T3709] Cannot create hsr debugfs directory [ 196.761875][ T40] Bluetooth: hci1: command 0x0409 tx timeout [ 196.768250][ T40] Bluetooth: hci0: command 0x0409 tx timeout [ 196.841668][ T51] Bluetooth: hci3: command 0x0409 tx timeout [ 196.898516][ T3711] device hsr_slave_0 entered promiscuous mode [ 196.905222][ T3711] device hsr_slave_1 entered promiscuous mode [ 196.912252][ T3711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.919233][ T3711] Cannot create hsr debugfs directory [ 197.303129][ T3710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.336323][ T3710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.355038][ T3710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.370948][ T3710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.396954][ T3711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.406454][ T3711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.417025][ T3711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.448669][ T3711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.516740][ T3709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.525029][ T3709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.535674][ T3709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.543804][ T3709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.680534][ T3710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.713977][ T3711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.728157][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.738513][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.748831][ T3710] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.779460][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.787948][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.803610][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.810232][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.817983][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.825809][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.844429][ T3709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.865109][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.870533][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.877924][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.883829][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.896880][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.901920][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.908071][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.942305][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.948627][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.956100][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.964106][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.973049][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.982145][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.998380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.006316][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.014268][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.020219][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.034238][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.046818][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.057977][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.064237][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.071148][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.078387][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.084054][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.116648][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.126079][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.133060][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.139882][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.150470][ T3709] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.161975][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.183856][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.192075][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.199758][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.208732][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.215214][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.222210][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.230706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.240315][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.246242][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.252566][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.272188][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.279472][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.304488][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.312331][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.321288][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.353383][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.359940][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.366926][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.373079][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.379411][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.388990][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.395923][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.402126][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.408442][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.416547][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.422215][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.429439][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.452681][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.461919][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.472568][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.479340][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.486897][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.494967][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.511338][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.529097][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.546262][ T3710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.579896][ T3709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.593261][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.595762][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 198.595806][ T39] audit: type=1400 audit(1661412794.488:99): avc: denied { module_request } for pid=3710 comm="syz-executor.2" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 198.599501][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.627693][ T39] audit: type=1400 audit(1661412794.518:100): avc: denied { sys_module } for pid=3710 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 198.631235][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.658414][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.680289][ T3711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.822235][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.830341][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.833871][ T972] Bluetooth: hci0: command 0x041b tx timeout [ 198.840391][ T972] Bluetooth: hci1: command 0x041b tx timeout [ 198.857743][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.864540][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.878281][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.884986][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.911165][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.912133][ T972] Bluetooth: hci3: command 0x041b tx timeout [ 198.916779][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.926068][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.933517][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.940736][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.948968][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.957802][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.965528][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.979584][ T3709] device veth0_vlan entered promiscuous mode [ 198.991591][ T3710] device veth0_vlan entered promiscuous mode [ 199.012155][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.018908][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.030397][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.036675][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.057553][ T3709] device veth1_vlan entered promiscuous mode [ 199.074594][ T3711] device veth0_vlan entered promiscuous mode [ 199.099479][ T3710] device veth1_vlan entered promiscuous mode [ 199.132197][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.139316][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.148017][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.156529][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.165315][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.174102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.186957][ T3711] device veth1_vlan entered promiscuous mode [ 199.208927][ T3709] device veth0_macvtap entered promiscuous mode [ 199.218933][ T3709] device veth1_macvtap entered promiscuous mode [ 199.236230][ T3710] device veth0_macvtap entered promiscuous mode [ 199.251258][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.260855][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.268941][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.276817][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.286706][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.293885][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.301060][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.318993][ T3710] device veth1_macvtap entered promiscuous mode [ 199.349934][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.360572][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.368061][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.379375][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.392429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.400508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.409943][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.418344][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.428289][ T3709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.436361][ T3709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.443578][ T3709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.450936][ T3709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.469445][ T3711] device veth0_macvtap entered promiscuous mode [ 199.498758][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.505853][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.514537][ T3710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.528139][ T3711] device veth1_macvtap entered promiscuous mode [ 199.538927][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.547078][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.555036][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.562930][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.576295][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.585703][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.595447][ T3710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.608060][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.615995][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.628905][ T3710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.638858][ T3710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.650055][ T3710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.658193][ T3710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.684450][ T39] audit: type=1400 audit(1661412795.568:101): avc: denied { mounton } for pid=3709 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 199.713291][ T39] audit: type=1400 audit(1661412795.588:102): avc: denied { mount } for pid=3709 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.746513][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.755928][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.762255][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.768861][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.777385][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.797220][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.804374][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.813473][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.820100][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.829140][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.839147][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.854003][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.872653][ T3711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.879029][ T3711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.887187][ T3711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.894612][ T3711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.906960][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.915700][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.926679][ T39] audit: type=1400 audit(1661412795.818:103): avc: denied { read write } for pid=3710 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.951833][ T39] audit: type=1400 audit(1661412795.818:104): avc: denied { open } for pid=3709 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.971973][ T39] audit: type=1400 audit(1661412795.818:105): avc: denied { ioctl } for pid=3709 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.993369][ T39] audit: type=1400 audit(1661412795.848:106): avc: denied { create } for pid=3769 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.005818][ T39] audit: type=1400 audit(1661412795.848:107): avc: denied { setopt } for pid=3769 comm="syz-executor.2" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 07:33:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 07:33:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 07:33:16 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 07:33:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) [ 200.594538][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.600465][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.609589][ T39] audit: type=1400 audit(1661412796.498:108): avc: denied { read } for pid=3116 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 200.922679][ T972] Bluetooth: hci1: command 0x040f tx timeout [ 200.927628][ T972] Bluetooth: hci0: command 0x040f tx timeout [ 200.993333][ T972] Bluetooth: hci3: command 0x040f tx timeout [ 201.952102][ T3719] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 202.992798][ T34] Bluetooth: hci0: command 0x0419 tx timeout [ 202.998479][ T34] Bluetooth: hci1: command 0x0419 tx timeout [ 203.078035][ T41] Bluetooth: hci3: command 0x0419 tx timeout [ 206.511904][ T3719] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 209.008334][ T3723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.020372][ T3723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.033624][ T3723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.045086][ T3723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.055374][ T3723] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.061110][ T3723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.264757][ T3788] chnl_net:caif_netlink_parms(): no params data found [ 209.390284][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.399154][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.408492][ T3788] device bridge_slave_0 entered promiscuous mode [ 209.422094][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.427628][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.433658][ T3788] device bridge_slave_1 entered promiscuous mode [ 209.478323][ T3788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.489198][ T3788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.542377][ T3788] team0: Port device team_slave_0 added [ 209.549519][ T3788] team0: Port device team_slave_1 added [ 209.598050][ T3788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.603673][ T3788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.623418][ T3788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.633924][ T3788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.639186][ T3788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.659600][ T3788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.715975][ T3788] device hsr_slave_0 entered promiscuous mode [ 209.722345][ T3788] device hsr_slave_1 entered promiscuous mode [ 209.731779][ T3788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.737197][ T3788] Cannot create hsr debugfs directory [ 209.984646][ T3788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.994751][ T3788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.005444][ T3788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.014774][ T3788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.045044][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.050248][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.056752][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.062008][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.123568][ T3788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.139496][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.147232][ T3156] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.155415][ T3156] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.164157][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 210.180993][ T3788] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.214312][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.222250][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.228936][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.243083][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.250339][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.254749][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.265772][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.291817][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.300112][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.309262][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.317230][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.324220][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.332594][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.339582][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.349097][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.360146][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.366464][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.378352][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.402226][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.408082][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.419519][ T3788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.594227][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.611113][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.655129][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.662262][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.672568][ T3788] device veth0_vlan entered promiscuous mode [ 210.686926][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.694617][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.717295][ T3788] device veth1_vlan entered promiscuous mode [ 210.741904][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.760480][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.768517][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.776446][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.791159][ T3788] device veth0_macvtap entered promiscuous mode [ 210.800874][ T3788] device veth1_macvtap entered promiscuous mode [ 210.819329][ T3788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.827910][ T3788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.835312][ T3788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.844616][ T3788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.850680][ T3788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.858958][ T3788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.873703][ T3788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.882560][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.890286][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.898985][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.907196][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.915207][ T3788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.921775][ T3788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.929500][ T3788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.937848][ T3788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.945387][ T3788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.951871][ T3788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.959832][ T3788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.967978][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.974051][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.984874][ T3788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.991189][ T3788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.998836][ T3788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.007683][ T3788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.094851][ T39] audit: type=1400 audit(1661412806.988:109): avc: denied { create } for pid=3801 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 07:33:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) 07:33:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 07:33:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:27 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x800000000009031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000040)=0x80000001) pipe(0x0) [ 211.110602][ T39] audit: type=1400 audit(1661412806.998:110): avc: denied { write } for pid=3801 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.151949][ T3156] Bluetooth: hci2: command 0x0409 tx timeout 07:33:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "56b745", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00'}}}}}}}, 0x0) [ 211.175107][ T39] audit: type=1400 audit(1661412807.078:111): avc: denied { create } for pid=3809 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.216043][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.240630][ T39] audit: type=1400 audit(1661412807.128:112): avc: denied { bind } for pid=3809 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 07:33:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) [ 211.280806][ T39] audit: type=1400 audit(1661412807.158:113): avc: denied { write } for pid=3809 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 07:33:27 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@getae={0x54, 0x1f, 0x833, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@multicast1}, [@mark={0xc}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x54}}, 0x0) [ 211.324102][ T39] audit: type=1400 audit(1661412807.218:114): avc: denied { create } for pid=3814 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.326916][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:33:27 executing program 3: r0 = io_uring_setup(0x3f92, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) [ 211.366894][ T39] audit: type=1400 audit(1661412807.248:115): avc: denied { write } for pid=3814 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 07:33:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) [ 211.396330][ T39] audit: type=1400 audit(1661412807.248:116): avc: denied { nlmsg_read } for pid=3814 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.437003][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.444921][ T39] audit: type=1400 audit(1661412807.288:117): avc: denied { create } for pid=3819 comm="syz-executor.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 07:33:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x4, 0x80000, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x10) [ 211.517181][ T39] audit: type=1400 audit(1661412807.408:118): avc: denied { bpf } for pid=3824 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 07:33:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:27 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x800000000009031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000040)=0x80000001) pipe(0x0) 07:33:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) 07:33:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="1b", 0x5}, {&(0x7f0000000240)="0b7d1f01786259a12cee05e94c10a393b606621d753bfa8bb161cb45c586563460a0d8a2cbf37b68b46e81bc15010397388b28ab8451449c5c27d0e0fa67102f", 0x7fffefff}], 0x2}, 0x0) [ 211.835782][ T3833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 07:33:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="1b", 0x5}, {&(0x7f0000000240)="0b7d1f01786259a12cee05e94c10a393b606621d753bfa8bb161cb45c586563460a0d8a2cbf37b68b46e81bc15010397388b28ab8451449c5c27d0e0fa67102f", 0x7fffefff}], 0x2}, 0x0) 07:33:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="1b", 0x5}, {&(0x7f0000000240)="0b7d1f01786259a12cee05e94c10a393b606621d753bfa8bb161cb45c586563460a0d8a2cbf37b68b46e81bc15010397388b28ab8451449c5c27d0e0fa67102f", 0x7fffefff}], 0x2}, 0x0) 07:33:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="1b", 0x5}, {&(0x7f0000000240)="0b7d1f01786259a12cee05e94c10a393b606621d753bfa8bb161cb45c586563460a0d8a2cbf37b68b46e81bc15010397388b28ab8451449c5c27d0e0fa67102f", 0x7fffefff}], 0x2}, 0x0) 07:33:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:28 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x800000000009031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000040)=0x80000001) pipe(0x0) 07:33:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 213.232387][ T3744] Bluetooth: hci2: command 0x041b tx timeout 07:33:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$unlink(0xb, r0, 0x0) 07:33:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$unlink(0xb, r0, 0x0) 07:33:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$unlink(0xb, r0, 0x0) 07:33:30 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$unlink(0xb, r0, 0x0) 07:33:30 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x4240) 07:33:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) 07:33:30 executing program 2: syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="eb52904e5446532020202000020200000000000000f8000000000000000000000000000080008000ff0f0000000000001000000000000000ff030000000000000100000004", 0x45}, {&(0x7f0000010120)="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", 0x105, 0x4000}, {&(0x7f00000102e0)="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", 0x16d, 0x43a0}, {&(0x7f00000104c0)="000000000000000000000000000000000000000000000000000000000000020046494c4530000300000000000000000002000100380001005801000000040000000000000000000003000000020000000200000000000000100000006000000000001800000000004800000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000000000000000010000000000000000000000000000000000003000000070000000000018000000020052000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801000004000000000000000400000000000600000000000000080324004c006f006700460069006c006500000000000000800000004800000001", 0x131, 0x47e0}, {&(0x7f0000010660)="000000000000000000000000000000000000000000000000000000000000020046494c453000030000000000000000000300010038000100e001000000040000000000000000000006000000030000000400000000000000100000004800000000001800000000003000000018000000801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd801060000000000000000000000000000003000000068000000000018000000010050000000180001000500000000000500801875c1344fd801801875c1344fd801801875c1344fd801801875c1344fd8010000000000000000000000000000000006000000000000000703240056006f006c0075006d00650050000000800000000000180000000200640000001800000001000480480000005400000000000000140000000200340002000000000014009f011200010100000000000512000000000018009f011200010200000000000520000000200200000101000000000005120000000102000000000005200000002002000000000000600000003000000000001800000004001200000018000000730079007a006b0061006c006c0065007200000000000000700000002800000000001800000005000c00000018000000000000000000000003010000000000008000000018", 0x1e5, 0x4be0}], 0x0, &(0x7f000007c8e0)) [ 214.901164][ T3890] loop2: detected capacity change from 0 to 75 [ 214.962805][ T3890] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only 07:33:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 07:33:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) 07:33:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 215.133057][ T3899] loop0: detected capacity change from 0 to 262160 07:33:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 215.398035][ T3744] Bluetooth: hci2: command 0x040f tx timeout 07:33:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) [ 215.662570][ T3904] input: syz1 as /devices/virtual/input/input5 07:33:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) 07:33:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 07:33:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 215.949276][ T3910] input: syz1 as /devices/virtual/input/input6 [ 216.094717][ T3916] loop0: detected capacity change from 0 to 262160 [ 216.210847][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 216.210881][ T39] audit: type=1804 audit(1661412812.098:139): pid=3917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir4068029931/syzkaller.cxuEuw/9/file0/file0" dev="sda1" ino=1146 res=1 errno=0 07:33:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) 07:33:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 216.258842][ T39] audit: type=1804 audit(1661412812.138:140): pid=3916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir4068029931/syzkaller.cxuEuw/9/file0/file0" dev="sda1" ino=1146 res=1 errno=0 [ 216.336630][ T3920] input: syz1 as /devices/virtual/input/input7 07:33:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 07:33:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) [ 216.523825][ T3927] loop3: detected capacity change from 0 to 262160 07:33:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 216.731883][ T39] audit: type=1804 audit(1661412812.528:141): pid=3930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2984906444/syzkaller.UI9qnt/14/file0/file0" dev="sda1" ino=1148 res=1 errno=0 07:33:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) [ 216.896967][ T3934] input: syz1 as /devices/virtual/input/input8 [ 216.897910][ T39] audit: type=1804 audit(1661412812.538:142): pid=3930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2984906444/syzkaller.UI9qnt/14/file0/file0" dev="sda1" ino=1148 res=1 errno=0 07:33:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 07:33:32 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, 0x0) [ 217.193588][ T3940] loop0: detected capacity change from 0 to 262160 [ 217.236048][ T39] audit: type=1804 audit(1661412813.128:143): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir4068029931/syzkaller.cxuEuw/10/file0/file0" dev="loop0" ino=1048593 res=1 errno=0 07:33:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x80000000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') dup2(r1, r0) [ 217.346448][ T39] audit: type=1804 audit(1661412813.128:144): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir4068029931/syzkaller.cxuEuw/10/file0/file0" dev="loop0" ino=1048593 res=1 errno=0 07:33:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 07:33:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x80000000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') dup2(r1, r0) [ 217.458364][ T39] audit: type=1400 audit(1661412813.268:145): avc: denied { read } for pid=3942 comm="syz-executor.1" name="usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.690155][ T3953] loop3: detected capacity change from 0 to 262160 [ 217.713242][ T39] audit: type=1400 audit(1661412813.268:146): avc: denied { open } for pid=3942 comm="syz-executor.1" path="/dev/usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.805379][ T39] audit: type=1804 audit(1661412813.668:147): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2984906444/syzkaller.UI9qnt/15/file0/file0" dev="loop3" ino=1048594 res=1 errno=0 07:33:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x80000000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') dup2(r1, r0) [ 217.834744][ T39] audit: type=1804 audit(1661412813.668:148): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2984906444/syzkaller.UI9qnt/15/file0/file0" dev="loop3" ino=1048594 res=1 errno=0 [ 217.954177][ T972] Bluetooth: hci2: command 0x0419 tx timeout 07:33:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x80000000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') dup2(r1, r0) 07:33:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 07:33:33 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{}, {r0, 0x4}, {r1, 0x983297e27f81703e}], 0x3, 0x0) poll(&(0x7f0000000080)=[{r1, 0x4}, {0xffffffffffffff9c}, {r1}], 0x3, 0x0) [ 218.223645][ T3965] loop0: detected capacity change from 0 to 262160 07:33:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 07:33:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1071c1, 0x0) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x16) sendfile(r5, r5, &(0x7f0000000240), 0x8001) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0xef84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 07:33:34 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 218.635082][ T3976] loop3: detected capacity change from 0 to 262160 07:33:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 07:33:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 07:33:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 07:33:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 07:33:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 07:33:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000160013070000000000000000fe8000000000000000000000000000bbac1e0001000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362"], 0x140}}, 0x0) [ 219.516509][ T3999] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 07:33:35 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:33:35 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:33:35 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:33:35 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:33:35 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x39, 0x0, 0x0) 07:33:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x90) 07:33:35 executing program 2: setuid(0xee00) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7}, 0x48) 07:33:35 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) 07:33:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x90) 07:33:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x90) 07:33:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x90) 07:33:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20381, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xffffffffffffffdd}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 07:33:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4018aee3, 0x20001100) 07:33:36 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) 07:33:36 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) 07:33:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000080)={0x2, 0x0}) 07:33:36 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) 07:33:36 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_clone(0x44200500, &(0x7f0000000940), 0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)="8f77e68a7eae16269927a89829d10bcb1a162e64112b4b889e061f622f596d6995513177e6260ab6aa397531deb8a0a6ba2c5e9e5ab422") r1 = syz_open_dev$loop(&(0x7f0000004c80), 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = syz_open_dev$loop(&(0x7f0000004c80), 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) r5 = syz_open_dev$loop(&(0x7f0000004c80), 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="4594782aa625ed35d18e6acf86ae8ca4ff39336424d6057407fe0db7387eb9bf4eae9a3b435495b9123b8d92022709b6ca8ec89bee0a43b0c43e0ab0", 0x3c}, {&(0x7f0000000100)="a6fb14de10da8910c03556f553463e59ee95c08ee0b78314781210fe6f3b2a76130a27d8a65983cbe590f4e0cc6277325729ce321f4541b362347044b2663a2947cfe8c2b4bf124df156f10c70f61af47a03", 0x52}, {&(0x7f0000000180)="2990c71ad49a77c33b8ed8a417b130cd05540f1e2277dfd2571a1029adc4cd2f1feacecd1d1585dec50fac8ff4804b514abca1650d", 0x35}], 0x3, 0x0, 0x0, 0x8001}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="ab7ede432808519743d4d9190b3d52e5e6932fd4b8df757c07b2c33f421a47cc76f7318cf9027b06143d2cf3b1b9384066c27e7818535495485f2d16839e044424a38f04210101", 0x47}, {&(0x7f0000000280)="0f4483104a5aeb1bf2f9700850155ed66f78df268353bb94a108071bd1fdd73a13d3e1e75aca349b51c6befa91f2250afe04a6925aa006b1fead887621a6148f6e41f6f9bbfc4321b7295a31ba3ec74b25776717405648c501b31fc3408410d88ad4a737c5ef4ac7cd46397709b7f8a45426ea1d48a7a9476bc0b5ea3ff877c033141c29657d8c5173b16e2a37a90da0f7fcd50673d6dbc4b57bfe2844befcb66757a06c60e0df3efea188b55b7b923e1f31dc144da675dded880bf41788c1cd11766b5b619b00637cbce8f81cc36bdfcfcd1e001f8f3a7d9adcb82480f2307e72342a3a89515598fc94daa3b50be73edab6", 0xf2}, {&(0x7f0000000380)="4e988caf595272986c28f92ab5ac5221d39497e36046e22f1c7e78e949e42356229d26f542dae78d5c6bf75a1740513f2e6b2a813cd6569c8b7fae4743f8ceea9610c8137c6de3e8c6c3b474cd8b541effa040e463d15f7c95ad139d257975b27a4bf2bcf26dafc7735003d9b87a8f20f621d78d9ca12a07f0494fe33b78a68a6ceb5ea5de21c287c9ec4f9aa76c2876363c6ad64b7839ffb70b88bea24f479f7888b32a190bf1f61d390281c45e4c39cb00aaf7d5c140dca6f36dfb19bedb95a7afc700b3609b034dd2844a9028f609", 0xd0}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="2b6952fbf226aa35ad709eb30e14c0cc0cf19433f2907062fe1777c057", 0x1d}, {&(0x7f00000005c0)="5745786c033a12d75939ca7f65dc28f9e1a982bf1f050e064199e1f466b8909a2fce2fc304855ce552bf25b0f4a6c643b94fa9b4d2a2439413806361d7bbd9734d2231921ef45d44efa3620e7ccc7fa7dd08e8949e672ea02a51a7774a8d632ddb868f8be894efbf1f71073c448ce66cc48b7fc6148919301ca4d7bc0a1e2c4e060dffb6eb54fda78c72a01a920c6980871bb89247c179796147b8df9558c768bdcc9ee9be3e2e8d26e59f432a4e848fd656334a34123980c24217f478fb95c4591f9dff40", 0xc5}, {&(0x7f00000006c0)="62b8ba48dbefb63f135b2ffcb2333f4a8dce175d24a7db1de55f38050ba9a0bbb133bfa99e900073813f6ff26b1821175ca23ee0e064109705c83c", 0x3b}, {&(0x7f0000000700)="565d00905b7f5201c98d57f8d9070687e45ba4c9f2766ea3d1f9f8cb355adb376c62876e94ee9abe434cc318f2010cbf42c811614aea04f004420518a557c5f053da16d05e9cbed41f4a316f1029631076dd92f4f19000d03ba19134d61ae4dbb60cb35cfe6ce359b4a0b592f8246106e017b1658e734dc89c39bf39a116791d285f5440094327d452ecbd883d084806c7532f6a9d4ca15dc30fc8478855bff3a06a2b3f246e2e9c6a9702d203bdffe5b74b7e05d607f9ec1accc1832f07f937833f3efbf6f25bd720873ab45572687d1e6b5d27db8db99af6f2657735e2b15f062a9ecd08df26", 0xe7}, {&(0x7f0000000800)="354421d1e51ff11a8566cfc9ed812a4150078b35222a81", 0x17}], 0x9, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r4]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0xe8, 0x1}}, {{&(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000cc0)}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xc8, 0x800}}, {{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001100)="cd39ca5273b2eb77f6a960fc9ed6f04c2dbe60f4281925bcda7fe70da6cd10eb12672e1aaf0be0d5dc5605957ef1c9fc0ffcc02eca04fdf8c779ea00128f4ea3d28ead11c286f70239b1974991b3e22f8ea445d442b8c8fecccbef05", 0x5c}, {&(0x7f0000001180)="80948bb740350b2cf99f7ba4178f90139a6a68", 0x13}, {&(0x7f00000011c0)}, {&(0x7f0000001280)="5e42d188b5b2aa907009c7cb0db6ee6d495dcfc7817947f3ba05e6b580b73820bfa7a25468bfe45d8bff838493220941c0fb9c1e0e7976beabb4775c227789619f660d934a791f1319e36475f502256f243653adfd733afdf8fbc12b1f40436b4fcbe9", 0x63}, {&(0x7f0000001300)="ac15911af79096e66d97075d9f2fad72870919d4405162dc2ed2a880d2361a34a33c0241e7f6cb5329186b9197f754eb3f19ca804f7820385bba8cda493d9e38917901c25884c163a99a2e4604270b29a89027a1cee54b2bbba3787b0272d14255a47178f38069c8547126bb0dcb152655830522b5627795cd353a23f7164ef6dff32857fc44b9fdd2553df141a8778d3cf4a4f019ce9a15482a10167e1de783251b", 0xa2}, {&(0x7f00000013c0)="8916f9b65f4fec273a1a59f5862341f211260235a9f4ac42a218092d1e6315b451b2015c34a675d44e748aa2628f698a10251cba4a61a8d91080637b33e3b3b8624afe796738c2dbcc15cb92c5045a5a1e56fec3461483806c5e6862161db89baa064de93960b6fc5a870e52b7f567f74d962c645f60036d9cf0db3c8b07119bb93c63efbe204b5261e42bf62a33057a988d14e5dcfb9a1f3b3d292df8e2c94d1a6825bb59cd0c6fd4f5df6e9da5fb62d428d8f339aec9b06cc1a7be11af89280761f9608aed9be2ff6fa7988e755c24ae", 0xd1}, {0x0}, {&(0x7f00000015c0)="0de98d5dd4748643c1656377a1f4ffb89d8cf8ba956ffa964df95dde49b0d7e5efda8ae38fcb090ac0d2fd3313e39bcf5c53ef02c873426e7abac2338a55293f83d9e72b577fc569b5ee427406ce23e669802b37bfb61957f96b01170fe52cf3b683e82ea6c3a1b0398223b70cefc55a34f4c589be34a4e3e6bd17c6d8e91f8184b5afcc6d519f8e7a63", 0x8a}], 0x8, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0, 0x44000}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0}}], 0x5, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 07:33:36 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) 07:33:36 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) 07:33:36 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) 07:33:36 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)) 07:33:37 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) 07:33:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0xb, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4089, 0x34000}], 0x5, 0x0, 0x2c}, 0x0) 07:33:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)) 07:33:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)) 07:33:37 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) 07:33:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)) [ 221.767576][ T39] kauditd_printk_skb: 17 callbacks suppressed 07:33:37 executing program 0: r0 = socket$unix(0x1, 0x4000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="001900"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'sit0\x00', r3, 0x29}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b62700000000007259aba7a2e2b03f78bcd256b2a7b99f4744bca4ac2025ee67ac805f6aaf8648c8cdbf50b77502d96566cc0c231214a52fc500041c7974b008099f9e57e205f1ac657bb227de79600369af642d625f57c311f83ff1ae0dac77741cae831ab10be54772f5d4170314a6a8fa464d7dce47317dac73d4ef5712b2d218a94a5e973dfad7ac664acd8baa6d00046810766ce13887c7872715568e5137600741a482761cfeea626d825029a2de402243ced4608bbed6400166f1a11ef9e28a0de1b8b1c1035e79837a53177934d84ce8d25c", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000008000400050000003c00038008000500e0000001140006002001000000000000000000000000000208000500ac1e000114000200626f6e6430000000000000000000000008000500001000000c0003800800010001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44008041}, 0x8c0) listen(r1, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) [ 221.767694][ T39] audit: type=1400 audit(1661412817.658:166): avc: denied { read } for pid=4060 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.816233][ T39] audit: type=1400 audit(1661412817.688:167): avc: denied { append } for pid=3116 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.842312][ T39] audit: type=1400 audit(1661412817.688:168): avc: denied { open } for pid=3116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.866841][ T39] audit: type=1400 audit(1661412817.688:169): avc: denied { getattr } for pid=3116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 07:33:37 executing program 0: r0 = socket$unix(0x1, 0x4000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="001900"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'sit0\x00', r3, 0x29}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b62700000000007259aba7a2e2b03f78bcd256b2a7b99f4744bca4ac2025ee67ac805f6aaf8648c8cdbf50b77502d96566cc0c231214a52fc500041c7974b008099f9e57e205f1ac657bb227de79600369af642d625f57c311f83ff1ae0dac77741cae831ab10be54772f5d4170314a6a8fa464d7dce47317dac73d4ef5712b2d218a94a5e973dfad7ac664acd8baa6d00046810766ce13887c7872715568e5137600741a482761cfeea626d825029a2de402243ced4608bbed6400166f1a11ef9e28a0de1b8b1c1035e79837a53177934d84ce8d25c", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000008000400050000003c00038008000500e0000001140006002001000000000000000000000000000208000500ac1e000114000200626f6e6430000000000000000000000008000500001000000c0003800800010001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44008041}, 0x8c0) listen(r1, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) [ 221.885986][ T39] audit: type=1400 audit(1661412817.708:170): avc: denied { ioctl } for pid=4073 comm="syz-executor.0" path="socket:[31360]" dev="sockfs" ino=31360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.919009][ T39] audit: type=1400 audit(1661412817.778:171): avc: denied { create } for pid=4073 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 221.943813][ T39] audit: type=1400 audit(1661412817.778:172): avc: denied { write } for pid=4073 comm="syz-executor.0" path="socket:[31362]" dev="sockfs" ino=31362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 221.968988][ T39] audit: type=1400 audit(1661412817.778:173): avc: denied { nlmsg_read } for pid=4073 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 07:33:38 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) 07:33:38 executing program 0: r0 = socket$unix(0x1, 0x4000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="001900"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'sit0\x00', r3, 0x29}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b62700000000007259aba7a2e2b03f78bcd256b2a7b99f4744bca4ac2025ee67ac805f6aaf8648c8cdbf50b77502d96566cc0c231214a52fc500041c7974b008099f9e57e205f1ac657bb227de79600369af642d625f57c311f83ff1ae0dac77741cae831ab10be54772f5d4170314a6a8fa464d7dce47317dac73d4ef5712b2d218a94a5e973dfad7ac664acd8baa6d00046810766ce13887c7872715568e5137600741a482761cfeea626d825029a2de402243ced4608bbed6400166f1a11ef9e28a0de1b8b1c1035e79837a53177934d84ce8d25c", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000008000400050000003c00038008000500e0000001140006002001000000000000000000000000000208000500ac1e000114000200626f6e6430000000000000000000000008000500001000000c0003800800010001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44008041}, 0x8c0) listen(r1, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 07:33:38 executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x4103fe) sendfile(r0, r1, 0x0, 0xffffffff054) 07:33:38 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x0, 0x83) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0xf03affff) sendfile(r3, r2, 0x0, 0x8000000000004) write$cgroup_int(r2, 0x0, 0x0) ftruncate(r2, 0x0) [ 222.649119][ T39] audit: type=1800 audit(1661412818.538:174): pid=4086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1157 res=0 errno=0 [ 222.672992][ T39] audit: type=1804 audit(1661412818.538:175): pid=4086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2984906444/syzkaller.UI9qnt/25/file0" dev="sda1" ino=1157 res=1 errno=0 07:33:38 executing program 0: r0 = socket$unix(0x1, 0x4000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="001900"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'sit0\x00', r3, 0x29}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b62700000000007259aba7a2e2b03f78bcd256b2a7b99f4744bca4ac2025ee67ac805f6aaf8648c8cdbf50b77502d96566cc0c231214a52fc500041c7974b008099f9e57e205f1ac657bb227de79600369af642d625f57c311f83ff1ae0dac77741cae831ab10be54772f5d4170314a6a8fa464d7dce47317dac73d4ef5712b2d218a94a5e973dfad7ac664acd8baa6d00046810766ce13887c7872715568e5137600741a482761cfeea626d825029a2de402243ced4608bbed6400166f1a11ef9e28a0de1b8b1c1035e79837a53177934d84ce8d25c", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000008000400050000003c00038008000500e0000001140006002001000000000000000000000000000208000500ac1e000114000200626f6e6430000000000000000000000008000500001000000c0003800800010001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44008041}, 0x8c0) listen(r1, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 07:33:38 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00'}) [ 222.875049][ T4100] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 222.911160][ T4100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 07:33:38 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00'}) 07:33:38 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00'}) 07:33:39 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00'}) 07:33:39 executing program 3: setreuid(0xee00, 0xee01) setreuid(0xee01, 0x0) 07:33:39 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x6, &(0x7f0000000040)=0xac47e17a14ae4701, 0x57) 07:33:39 executing program 3: setreuid(0xee00, 0xee01) setreuid(0xee01, 0x0) 07:33:39 executing program 3: setreuid(0xee00, 0xee01) setreuid(0xee01, 0x0) 07:33:39 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000081c100080000000000080ee595"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000600)='ext4_da_write_pages\x00', r1}, 0x10) write$FUSE_BMAP(r0, &(0x7f0000002040)={0x18}, 0x18) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0x10000) 07:33:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x111) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) sendmmsg$unix(r2, &(0x7f0000003200)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000280)="a434c7173092552a7575b2bbfa2ca7bc13f59d82fca52c936f9cd90053e30338e2eb5d7c277a1cc1d3ad52d8e327ef902357a2ac743e", 0x36}, {&(0x7f0000000080)}, {&(0x7f0000000400)="df3b70c613032805fced61c4b781fcd313b56ac03017f470c6fef5fbc5dd4c3925816cc567707b889e8b0778c1fd0f2ddedf0f20361935e80871", 0x3a}], 0x3, 0x0, 0x0, 0x24044000}}, {{&(0x7f0000000480)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40800}}, {{0x0, 0x0, &(0x7f00000031c0)=[{0x0}], 0x1}}], 0x3, 0x0) sched_setattr(0x0, &(0x7f0000001500)={0x38, 0x5, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000000000000080eff95"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0xbe1b884a, 0x29, &(0x7f0000000580)=""/41, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x5, 0x668a, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x80) 07:33:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) 07:33:39 executing program 3: setreuid(0xee00, 0xee01) setreuid(0xee01, 0x0) 07:33:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000040)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a6401181b3886420589c6685d4982a83b71b906769e737201ac6cfc0974454156569cbf3a5be811dc9c957b5831b89b59d703e748c7c00", 0x37}, 0x48, 0xffffffffffffffff) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000041) 07:33:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x908, 0x642) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) [ 223.818843][ T4128] usb usb2: usbfs: process 4128 (syz-executor.3) did not claim interface 0 before use [ 223.824970][ T4131] syz-executor.1 (pid 4131) is setting deprecated v1 encryption policy; recommend upgrading to v2. 07:33:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) [ 223.884216][ T4135] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 223.929842][ T4135] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 223.965938][ T4135] syz-executor.3 (4135) used greatest stack depth: 22648 bytes left 07:33:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) 07:33:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7fff, 0x4) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) [ 224.086355][ T4131] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" 07:33:40 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:33:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7fff, 0x4) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) 07:33:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) 07:33:40 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) 07:33:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7fff, 0x4) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) 07:33:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x206) [ 224.734253][ T4160] SET target dimension over the limit! 07:33:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x206) 07:33:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7fff, 0x4) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) [ 224.785355][ T4163] SET target dimension over the limit! [ 262.036171][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.041653][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.596647][ T10] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:34:32 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:34:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x206) 07:34:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) 07:34:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) [ 276.860246][ T4180] SET target dimension over the limit! [ 276.894392][ T10] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:34:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) 07:34:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x206) [ 276.970878][ T4185] SET target dimension over the limit! 07:34:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) [ 277.002130][ T10] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:34:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) [ 277.102595][ T10] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.137983][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 277.138018][ T39] audit: type=1804 audit(1661412873.028:191): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir4068029931/syzkaller.cxuEuw/34/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 277.250661][ T39] audit: type=1400 audit(1661412873.138:192): avc: denied { read } for pid=3354 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 278.143309][ T10] device hsr_slave_0 left promiscuous mode [ 278.150899][ T10] device hsr_slave_1 left promiscuous mode [ 278.156916][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.164048][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.186018][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.194798][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.203252][ T10] device bridge_slave_1 left promiscuous mode [ 278.209864][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.226363][ T10] device bridge_slave_0 left promiscuous mode [ 278.230926][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.251718][ T10] device veth1_macvtap left promiscuous mode [ 278.256206][ T10] device veth0_macvtap left promiscuous mode [ 278.261073][ T10] device veth1_vlan left promiscuous mode [ 278.265985][ T10] device veth0_vlan left promiscuous mode [ 278.550399][ T10] team0 (unregistering): Port device team_slave_1 removed [ 278.566792][ T10] team0 (unregistering): Port device team_slave_0 removed [ 278.588567][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.606517][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.717922][ T10] bond0 (unregistering): Released all slaves [ 279.880738][ T3723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.893635][ T3723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.899428][ T3723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.905011][ T3723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.911337][ T3723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.920326][ T3723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.060383][ T4218] chnl_net:caif_netlink_parms(): no params data found [ 280.220071][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.225192][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.232167][ T4218] device bridge_slave_0 entered promiscuous mode [ 280.238641][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.243560][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.249702][ T4218] device bridge_slave_1 entered promiscuous mode [ 280.317003][ T4218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.328381][ T4218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.386323][ T4218] team0: Port device team_slave_0 added [ 280.394976][ T4218] team0: Port device team_slave_1 added [ 280.461105][ T4218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.469872][ T4218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.490813][ T4218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.505318][ T4218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.510808][ T4218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.528922][ T4218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.605705][ T4218] device hsr_slave_0 entered promiscuous mode [ 280.614356][ T4218] device hsr_slave_1 entered promiscuous mode [ 280.779713][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.785239][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.791240][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.796751][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.867700][ T4218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.886779][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.895869][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.904023][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.911134][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 280.932030][ T4218] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.943382][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.949801][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.955966][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.984928][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.992848][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.999070][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.008264][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.014903][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.029049][ T4218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.037926][ T4218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.050120][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.056264][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.062368][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.069450][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.095045][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.102283][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.118519][ T4218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.514950][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.523023][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.536521][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.545184][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.552820][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.559908][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.570786][ T4218] device veth0_vlan entered promiscuous mode [ 281.596033][ T4218] device veth1_vlan entered promiscuous mode [ 281.622081][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.628505][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.637002][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.645260][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.657596][ T4218] device veth0_macvtap entered promiscuous mode [ 281.666545][ T4218] device veth1_macvtap entered promiscuous mode [ 281.689453][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.698620][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.705733][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.713667][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.725926][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.735370][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.747584][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.755413][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.761918][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.769378][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.777432][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.788036][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.795928][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.803487][ T4218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.812524][ T4218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.824722][ T4218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.839032][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.847334][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.889398][ T39] audit: type=1400 audit(1661412877.788:193): avc: denied { mounton } for pid=4218 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 281.951914][ T51] Bluetooth: hci0: command 0x0409 tx timeout [ 284.031953][ T3767] Bluetooth: hci0: command 0x041b tx timeout [ 286.115195][ T51] Bluetooth: hci0: command 0x040f tx timeout [ 288.191815][ T51] Bluetooth: hci0: command 0x0419 tx timeout [ 320.431791][ T1388] Bluetooth: hci3: command 0x0406 tx timeout [ 320.436406][ T1388] Bluetooth: hci1: command 0x0406 tx timeout [ 323.479707][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.485421][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 07:35:28 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:35:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) 07:35:28 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) 07:35:28 executing program 0: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:35:28 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @generic}) 07:35:29 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:35:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 07:35:29 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 333.312588][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.342396][ T4368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.832486][ T4216] device hsr_slave_0 left promiscuous mode [ 333.848024][ T4216] device hsr_slave_1 left promiscuous mode [ 333.853352][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.857980][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.864864][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.869679][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.876277][ T4216] device bridge_slave_1 left promiscuous mode [ 333.881244][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.890378][ T4216] device bridge_slave_0 left promiscuous mode [ 333.898164][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.913985][ T4216] device veth1_macvtap left promiscuous mode [ 333.918714][ T4216] device veth0_macvtap left promiscuous mode [ 333.923589][ T4216] device veth1_vlan left promiscuous mode [ 333.928224][ T4216] device veth0_vlan left promiscuous mode [ 334.228917][ T4216] team0 (unregistering): Port device team_slave_1 removed [ 334.253745][ T4216] team0 (unregistering): Port device team_slave_0 removed [ 334.269926][ T4216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.294797][ T4216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.388951][ T4216] bond0 (unregistering): Released all slaves [ 335.792073][ T34] Bluetooth: hci2: command 0x0406 tx timeout [ 335.882402][ T3723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.894273][ T3723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.901387][ T3723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.922913][ T3723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.931925][ T3723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.940852][ T3723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.080754][ T4373] chnl_net:caif_netlink_parms(): no params data found [ 336.192624][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.196862][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.203372][ T4373] device bridge_slave_0 entered promiscuous mode [ 336.209981][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.215090][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.220721][ T4373] device bridge_slave_1 entered promiscuous mode [ 336.263274][ T4373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.271309][ T4373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.316107][ T4373] team0: Port device team_slave_0 added [ 336.322206][ T4373] team0: Port device team_slave_1 added [ 336.379086][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.384320][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.401047][ T4373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.411347][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.416267][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.433448][ T4373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.496989][ T4373] device hsr_slave_0 entered promiscuous mode [ 336.502445][ T4373] device hsr_slave_1 entered promiscuous mode [ 336.658146][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.666417][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.672143][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.676713][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.727478][ T4373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.755293][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.761121][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.770173][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.780588][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 336.801365][ T4373] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.818214][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.825764][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.831842][ T3742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.846171][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.854704][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.862382][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.891814][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.898014][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.915417][ T4373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.925500][ T4373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.935300][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.942242][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.949399][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.956566][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.972156][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.980822][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.002181][ T4373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.295731][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.301600][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.317406][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.323525][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.332402][ T4373] device veth0_vlan entered promiscuous mode [ 337.337286][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.343260][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.354256][ T4373] device veth1_vlan entered promiscuous mode [ 337.374381][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 337.380287][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 337.387572][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.394074][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.402687][ T4373] device veth0_macvtap entered promiscuous mode [ 337.412803][ T4373] device veth1_macvtap entered promiscuous mode [ 337.428113][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.437538][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.447477][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.454784][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.461719][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.468659][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.476254][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.483038][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.489453][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.496046][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.502252][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.513226][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.520073][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.528287][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.537748][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.546333][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.553187][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.560273][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.042797][ T972] Bluetooth: hci0: command 0x0409 tx timeout [ 340.121652][ T972] Bluetooth: hci0: command 0x041b tx timeout [ 342.191791][ T3744] Bluetooth: hci0: command 0x040f tx timeout [ 344.297954][ T3744] Bluetooth: hci0: command 0x0419 tx timeout [ 384.915076][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.919782][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 07:36:28 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:36:28 executing program 0: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:36:28 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:36:28 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:36:28 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:36:28 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:36:28 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000000)=""/26, 0x1a) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 07:36:28 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030036000b63d25a80648c2594f90124fc601000034004000000050982c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 392.948655][ T4424] netlink: 1280 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.334771][ T3723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.344095][ T3723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.365385][ T3723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.376148][ T3723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.383564][ T3723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 395.390244][ T3723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.558464][ T3719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.568737][ T3719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.570880][ T4426] chnl_net:caif_netlink_parms(): no params data found [ 395.581841][ T3719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.591029][ T3719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.596984][ T3719] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.606122][ T3719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.746294][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.753048][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.761013][ T4426] device bridge_slave_0 entered promiscuous mode [ 395.785044][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.791270][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.799515][ T4426] device bridge_slave_1 entered promiscuous mode [ 395.871814][ T4426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.899967][ T4426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.976754][ T4426] team0: Port device team_slave_0 added [ 395.985625][ T4426] team0: Port device team_slave_1 added [ 396.063555][ T4426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.069408][ T4426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.087636][ T4426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.113240][ T4426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.117589][ T4426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.136295][ T4426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.267229][ T4428] chnl_net:caif_netlink_parms(): no params data found [ 396.283256][ T4426] device hsr_slave_0 entered promiscuous mode [ 396.288749][ T4426] device hsr_slave_1 entered promiscuous mode [ 396.294800][ T4426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.299958][ T4426] Cannot create hsr debugfs directory [ 396.528879][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.541762][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.548552][ T4428] device bridge_slave_0 entered promiscuous mode [ 396.611985][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.618717][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.632708][ T4428] device bridge_slave_1 entered promiscuous mode [ 396.723278][ T4428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.740042][ T4428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.837181][ T4428] team0: Port device team_slave_0 added [ 396.860781][ T4428] team0: Port device team_slave_1 added [ 396.962396][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.968914][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.990353][ T4428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.017503][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.023053][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.046233][ T4428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.129462][ T4428] device hsr_slave_0 entered promiscuous mode [ 397.138692][ T4428] device hsr_slave_1 entered promiscuous mode [ 397.146505][ T4428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.155751][ T4428] Cannot create hsr debugfs directory [ 397.318095][ T4426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.383234][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.391428][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.409342][ T4426] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.435830][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.444104][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.454366][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.460649][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.479320][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.479680][ T3742] Bluetooth: hci4: command 0x0409 tx timeout [ 397.487664][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.501239][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.510378][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.516828][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.553192][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.560726][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.569013][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.578986][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.586715][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.594655][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.601760][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.607796][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.614977][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.621928][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.630977][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.639351][ T34] Bluetooth: hci5: command 0x0409 tx timeout [ 397.673264][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.678000][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.688934][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.724951][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.732475][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.743140][ T4426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.761107][ T4428] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.777210][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.783773][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.813987][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.820244][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.864210][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.904301][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.912819][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.921768][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.928304][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.935903][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.944848][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.955111][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.963922][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.970871][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.979040][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.987291][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.008036][ T4428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.016875][ T4428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.027597][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.036069][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.050309][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.057608][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.068734][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.121863][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.127776][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.146966][ T4428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.212828][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.226028][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.241266][ T4426] device veth0_vlan entered promiscuous mode [ 398.251163][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.257725][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.265081][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.270657][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.283509][ T4426] device veth1_vlan entered promiscuous mode [ 398.318293][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.326854][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.336292][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.343138][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.355713][ T4426] device veth0_macvtap entered promiscuous mode [ 398.368341][ T4426] device veth1_macvtap entered promiscuous mode [ 398.396578][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.405165][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.414275][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.422114][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.428892][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.435931][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.443890][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.453133][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.465973][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.475204][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.481927][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.488160][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.495898][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.504929][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.514937][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.523455][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.531099][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.541287][ T4426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.549353][ T4426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.562589][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.571089][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.578663][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.720404][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.727599][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.735994][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.744404][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.752980][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.762043][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.772774][ T4428] device veth0_vlan entered promiscuous mode [ 398.792295][ T4428] device veth1_vlan entered promiscuous mode [ 398.828978][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.836733][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.845486][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.853608][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.865522][ T4428] device veth0_macvtap entered promiscuous mode [ 398.875736][ T4428] device veth1_macvtap entered promiscuous mode [ 398.896450][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.904251][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.916488][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.924629][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.931121][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.954248][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.963694][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.980185][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.991130][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 399.003957][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.013453][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.021686][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.027315][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.034132][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.042236][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.064256][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.078433][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.087587][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.090374][ T39] audit: type=1400 audit(1661412994.978:194): avc: denied { rename } for pid=3116 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.095492][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.095584][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.130140][ T39] audit: type=1400 audit(1661412994.978:195): avc: denied { unlink } for pid=3116 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.138041][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.149677][ T39] audit: type=1400 audit(1661412994.978:196): avc: denied { create } for pid=3116 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.165024][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 399.194748][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.203023][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.212447][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.222209][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.562104][ T1388] Bluetooth: hci4: command 0x041b tx timeout [ 399.722370][ T1388] Bluetooth: hci5: command 0x041b tx timeout [ 401.635964][ T40] Bluetooth: hci4: command 0x040f tx timeout [ 401.792060][ T40] Bluetooth: hci5: command 0x040f tx timeout [ 403.717156][ T3742] Bluetooth: hci4: command 0x0419 tx timeout [ 403.871993][ T3742] Bluetooth: hci5: command 0x0419 tx timeout [ 446.367233][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.371162][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 07:37:29 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x66, 0xb13, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 453.874445][ T4469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:30 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) 07:37:30 executing program 0: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000080)=""/4096, 0x20001080) 07:37:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}]}, 0x44}}, 0x0) 07:37:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x66, 0xb13, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 454.386624][ T4474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 454.397602][ T4475] process 'syz-executor.3' launched './file1' with NULL argv: empty string added 07:37:30 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) 07:37:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x66, 0xb13, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 07:37:30 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) [ 454.754242][ T4485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:30 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) 07:37:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x66, 0xb13, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 455.108664][ T4495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.566146][ T3723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.575033][ T3723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.580955][ T3723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.590264][ T3723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.596951][ T3723] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 457.603003][ T3723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 457.790751][ T4499] chnl_net:caif_netlink_parms(): no params data found [ 457.803772][ T3719] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 457.813358][ T3719] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 457.819614][ T3719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 457.826336][ T3719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 457.832906][ T3719] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 457.838468][ T3719] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 458.057937][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.072038][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.081794][ T4499] device bridge_slave_0 entered promiscuous mode [ 458.113010][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.118077][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.132398][ T4499] device bridge_slave_1 entered promiscuous mode [ 458.195789][ T4501] chnl_net:caif_netlink_parms(): no params data found [ 458.278283][ T4499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.287451][ T4499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.428072][ T4499] team0: Port device team_slave_0 added [ 458.447622][ T4499] team0: Port device team_slave_1 added [ 458.462067][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.467477][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.480182][ T4501] device bridge_slave_0 entered promiscuous mode [ 458.510320][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.523224][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.530115][ T4501] device bridge_slave_1 entered promiscuous mode [ 458.561229][ T4499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.567116][ T4499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.585541][ T4499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.621640][ T4499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.625723][ T4499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.643078][ T4499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.681846][ T1388] Bluetooth: hci0: command 0x0406 tx timeout [ 458.695877][ T4501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.706910][ T4501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.806201][ T4499] device hsr_slave_0 entered promiscuous mode [ 458.813190][ T4499] device hsr_slave_1 entered promiscuous mode [ 458.819018][ T4499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.826267][ T4499] Cannot create hsr debugfs directory [ 458.900026][ T4501] team0: Port device team_slave_0 added [ 458.939815][ T4501] team0: Port device team_slave_1 added [ 459.026094][ T4501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.030823][ T4501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.047107][ T4501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.061026][ T4501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.065817][ T4501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.084988][ T4501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.216340][ T4501] device hsr_slave_0 entered promiscuous mode [ 459.224916][ T4501] device hsr_slave_1 entered promiscuous mode [ 459.232872][ T4501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.239877][ T4501] Cannot create hsr debugfs directory [ 459.587962][ T4499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.624056][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.630481][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.641789][ T1388] Bluetooth: hci6: command 0x0409 tx timeout [ 459.645404][ T4499] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.657983][ T4501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.692809][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.700577][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.708696][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.714566][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.722068][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.739438][ T4501] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.752535][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.760467][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.767879][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.777481][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.788078][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.794102][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.818130][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.824532][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.830622][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.836978][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.841591][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.846956][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.854205][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.860458][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.864686][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.871948][ T173] Bluetooth: hci7: command 0x0409 tx timeout [ 459.894989][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.902890][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.909786][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.917526][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.925943][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.951409][ T4501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.960517][ T4501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.033607][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.040386][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.063736][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.167261][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.174648][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.184666][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.199268][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.217597][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.223694][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.229826][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.246798][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.253756][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.259864][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.269941][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.279083][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.287962][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.308156][ T4499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.325523][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.335980][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.343554][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.357560][ T4501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.370892][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.388186][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.412329][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.418838][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.444354][ T4499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.782942][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.788692][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.808669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.819030][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.829577][ T4499] device veth0_vlan entered promiscuous mode [ 460.851025][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.860425][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.869973][ T4499] device veth1_vlan entered promiscuous mode [ 460.900588][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.907434][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.913515][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.937748][ T4501] device veth0_vlan entered promiscuous mode [ 460.943455][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.948964][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.955261][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.961233][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.975390][ T4501] device veth1_vlan entered promiscuous mode [ 461.002362][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.009115][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.018645][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.025732][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.035887][ T4499] device veth0_macvtap entered promiscuous mode [ 461.049234][ T4499] device veth1_macvtap entered promiscuous mode [ 461.069082][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.075973][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.084434][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.091285][ T1388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.103834][ T4501] device veth0_macvtap entered promiscuous mode [ 461.112188][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.119579][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.129873][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.138676][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.145603][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.155532][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.162280][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.170703][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.178868][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.187709][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.195649][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.203083][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.214326][ T4499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.223388][ T4501] device veth1_macvtap entered promiscuous mode [ 461.236950][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.242837][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.248296][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.253871][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.260445][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.267037][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.273631][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.280369][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.288106][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.295481][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.302561][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.309124][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.316655][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.323449][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.331280][ T4499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.359503][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.366419][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.405362][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.416941][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.436009][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.443084][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.451044][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.460215][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.466837][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.474089][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.481082][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.487644][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.493153][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.499439][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.504949][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.512233][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.520865][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.540365][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.546983][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.558810][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.569549][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.577016][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.585630][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.592573][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.599474][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.606482][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.613946][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.620831][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.628196][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.634204][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.642022][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.652701][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.663654][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.671156][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.719196][ T34] Bluetooth: hci6: command 0x041b tx timeout 07:37:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r5, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x66, 0xb13, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 461.829702][ T4543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.952224][ T34] Bluetooth: hci7: command 0x041b tx timeout [ 463.802123][ T3768] Bluetooth: hci6: command 0x040f tx timeout [ 464.061943][ T3768] Bluetooth: hci7: command 0x040f tx timeout [ 465.872354][ T3768] Bluetooth: hci6: command 0x0419 tx timeout [ 466.112252][ T3768] Bluetooth: hci7: command 0x0419 tx timeout [ 487.312413][ C1] ================================================================== [ 487.318334][ C1] BUG: KASAN: slab-out-of-bounds in decode_session6+0xfc3/0x17f0 [ 487.323761][ C1] Read of size 1 at addr ffff88802561e6fc by task swapper/1/0 [ 487.334973][ C1] [ 487.337682][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 487.345252][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 487.352256][ C1] Call Trace: [ 487.355062][ C1] [ 487.357533][ C1] dump_stack_lvl+0xcd/0x134 [ 487.361351][ C1] print_report.cold+0x2ba/0x6e9 [ 487.364820][ C1] ? decode_session6+0xfc3/0x17f0 [ 487.367964][ C1] kasan_report+0xb1/0x1e0 [ 487.371860][ C1] ? decode_session6+0xfc3/0x17f0 [ 487.375810][ C1] decode_session6+0xfc3/0x17f0 [ 487.379686][ C1] ? __lock_acquire+0x166e/0x56d0 [ 487.383642][ C1] __xfrm_decode_session+0x50/0xb0 [ 487.387509][ C1] vti6_tnl_xmit+0x419/0x1f90 [ 487.391725][ C1] ? find_held_lock+0x2d/0x110 [ 487.395514][ C1] ? vti6_exit_batch_net+0x670/0x670 [ 487.399624][ C1] dev_hard_start_xmit+0x183/0x880 [ 487.404741][ C1] sch_direct_xmit+0x19f/0xbe0 [ 487.408956][ C1] ? sfb_enqueue+0x95a/0x2020 [ 487.412848][ C1] ? dev_watchdog+0x8f0/0x8f0 [ 487.417546][ C1] __qdisc_run+0x4bb/0x1710 [ 487.421061][ C1] ? rcu_read_lock_sched_held+0x3a/0x70 [ 487.425500][ C1] __dev_queue_xmit+0x2299/0x3ad0 [ 487.430716][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 487.435302][ C1] ? find_held_lock+0x2d/0x110 [ 487.439269][ C1] ? ip6_finish_output2+0x564/0x1520 [ 487.443479][ C1] ? mark_held_locks+0x9f/0xe0 [ 487.447418][ C1] ? ___neigh_create+0x1824/0x29a0 [ 487.451789][ C1] ? neigh_connected_output+0x41a/0x520 [ 487.456212][ C1] ? neigh_connected_output+0x41a/0x520 [ 487.460842][ C1] neigh_connected_output+0x3c0/0x520 [ 487.465099][ C1] ip6_finish_output2+0x564/0x1520 [ 487.469389][ C1] ip6_finish_output+0x690/0x1160 [ 487.473619][ C1] ip6_output+0x1ed/0x540 [ 487.477655][ C1] ndisc_send_skb+0xa5f/0x1730 [ 487.481899][ C1] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 487.487081][ C1] ? ndisc_net_init+0x220/0x220 [ 487.491563][ C1] ? memset+0x20/0x40 [ 487.495612][ C1] ndisc_send_rs+0x12e/0x6f0 [ 487.499532][ C1] addrconf_rs_timer+0x3ed/0x820 [ 487.503316][ C1] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 487.506985][ C1] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 487.511216][ C1] call_timer_fn+0x1a0/0x6b0 [ 487.515873][ C1] ? timer_fixup_activate+0x350/0x350 [ 487.520599][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 487.524483][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 487.528910][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 487.533244][ C1] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 487.537610][ C1] __run_timers.part.0+0x674/0xa80 [ 487.541832][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 487.545867][ C1] ? cpuacct_all_seq_show+0x520/0x520 [ 487.551022][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 487.555361][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 487.559415][ C1] run_timer_softirq+0xb3/0x1d0 [ 487.563075][ C1] __do_softirq+0x1d3/0x9c6 [ 487.566836][ C1] __irq_exit_rcu+0x123/0x180 [ 487.570702][ C1] irq_exit_rcu+0x5/0x20 [ 487.574377][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 487.579315][ C1] [ 487.581787][ C1] [ 487.583884][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 487.588714][ C1] RIP: 0010:tick_nohz_idle_enter+0x19f/0x250 [ 487.593610][ C1] Code: df 48 c1 ea 03 0f b6 04 02 48 89 ea 83 e2 07 38 d0 7f 04 84 c0 75 78 80 4b 4c 04 e8 fb 37 ec ff e8 66 86 12 00 fb 48 83 c4 08 <5b> 5d c3 e8 f9 0e 0c 00 65 8b 1d 0e 4b 93 7e 31 ff 89 de e8 a9 0b [ 487.609026][ C1] RSP: 0018:ffffc9000067fe00 EFLAGS: 00000296 [ 487.613574][ C1] RAX: 00000000005f5217 RBX: ffff88802c92ae60 RCX: 1ffffffff1bbb881 [ 487.619485][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 487.626545][ C1] RBP: ffff88802c92aeac R08: 0000000000000001 R09: 0000000000000001 [ 487.633407][ C1] R10: ffffffff8f507057 R11: 0000000000000001 R12: 0000000000000000 [ 487.640483][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 487.647136][ C1] do_idle+0x94/0x590 [ 487.650832][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 487.655205][ C1] cpu_startup_entry+0x14/0x20 [ 487.659381][ C1] start_secondary+0x21d/0x2b0 [ 487.663414][ C1] ? set_cpu_sibling_map+0x2270/0x2270 [ 487.667707][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 487.672691][ C1] [ 487.675428][ C1] [ 487.677434][ C1] Allocated by task 4216: [ 487.681344][ C1] kasan_save_stack+0x1e/0x40 [ 487.685577][ C1] __kasan_kmalloc+0xa6/0xd0 [ 487.689086][ C1] __alloc_skb+0xd9/0x2f0 [ 487.693397][ C1] __netdev_alloc_skb+0x70/0x400 [ 487.697653][ C1] batadv_iv_ogm_aggregate_new+0x106/0x4e0 [ 487.702442][ C1] batadv_iv_ogm_schedule_buff+0xe46/0x1430 [ 487.707246][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x740/0x910 [ 487.712168][ C1] process_one_work+0x991/0x1610 [ 487.715784][ C1] worker_thread+0x665/0x1080 [ 487.720271][ C1] kthread+0x2e4/0x3a0 [ 487.724494][ C1] ret_from_fork+0x1f/0x30 [ 487.728296][ C1] [ 487.730543][ C1] The buggy address belongs to the object at ffff88802561e000 [ 487.730543][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 487.741408][ C1] The buggy address is located 764 bytes to the right of [ 487.741408][ C1] 1024-byte region [ffff88802561e000, ffff88802561e400) [ 487.752630][ C1] [ 487.754465][ C1] The buggy address belongs to the physical page: [ 487.759253][ C1] page:ffffea0000958780 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802561e000 pfn:0x2561e [ 487.768547][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 487.773953][ C1] raw: 00fff00000000200 ffffea000057f688 ffffea0000736d88 ffff888011840700 [ 487.780059][ C1] raw: ffff88802561e000 ffff88802561e000 0000000100000001 0000000000000000 [ 487.786290][ C1] page dumped because: kasan: bad access detected [ 487.791064][ C1] page_owner tracks the page as allocated [ 487.795413][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2c2220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_THISNODE), pid 4499, tgid 4499 (syz-executor.0), ts 460240038673, free_ts 454733329566 [ 487.813071][ C1] get_page_from_freelist+0x109b/0x2ce0 [ 487.817626][ C1] __alloc_pages_slowpath.constprop.0+0x2d7/0x2240 [ 487.823182][ C1] __alloc_pages+0x43d/0x510 [ 487.826855][ C1] cache_grow_begin+0x75/0x360 [ 487.831056][ C1] cache_alloc_refill+0x27f/0x380 [ 487.835500][ C1] kmem_cache_alloc_node_trace+0x50a/0x570 [ 487.840506][ C1] __kmalloc_node_track_caller+0x38/0x60 [ 487.844925][ C1] __alloc_skb+0xd9/0x2f0 [ 487.849285][ C1] inet6_rt_notify+0xec/0x2b0 [ 487.853145][ C1] fib6_add+0x26e7/0x3f10 [ 487.856287][ C1] ip6_route_add+0x8b/0x150 [ 487.859735][ C1] addrconf_prefix_route+0x30a/0x4e0 [ 487.864755][ C1] addrconf_notify+0x129d/0x1b90 [ 487.869071][ C1] notifier_call_chain+0xb5/0x200 [ 487.873420][ C1] call_netdevice_notifiers_info+0xb5/0x130 [ 487.878490][ C1] __dev_notify_flags+0x110/0x2b0 [ 487.882797][ C1] page last free stack trace: [ 487.886585][ C1] free_pcp_prepare+0x5e4/0xd20 [ 487.890193][ C1] free_unref_page+0x19/0x4d0 [ 487.894146][ C1] slabs_destroy+0x89/0xc0 [ 487.897819][ C1] ___cache_free+0x2a8/0x3d0 [ 487.901812][ C1] qlist_free_all+0x4f/0x1b0 [ 487.905418][ C1] kasan_quarantine_reduce+0x180/0x200 [ 487.909693][ C1] __kasan_slab_alloc+0x97/0xb0 [ 487.913751][ C1] kmem_cache_alloc+0x214/0x520 [ 487.917458][ C1] getname_flags.part.0+0x50/0x4f0 [ 487.921686][ C1] getname_flags+0x9a/0xe0 [ 487.925630][ C1] vfs_fstatat+0x73/0xb0 [ 487.928947][ C1] __do_sys_newfstatat+0x91/0x110 [ 487.933663][ C1] do_syscall_64+0x35/0xb0 [ 487.937235][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 487.941825][ C1] [ 487.944278][ C1] Memory state around the buggy address: [ 487.949820][ C1] ffff88802561e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.957227][ C1] ffff88802561e600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.963786][ C1] >ffff88802561e680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.970644][ C1] ^ [ 487.977776][ C1] ffff88802561e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.984010][ C1] ffff88802561e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.990470][ C1] ================================================================== [ 487.996910][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 488.001946][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.0.0-rc2-syzkaller-00054-gc40e8341e3b3 #0 [ 488.008597][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 488.016477][ C1] Call Trace: [ 488.018662][ C1] [ 488.020415][ C1] dump_stack_lvl+0xcd/0x134 [ 488.023182][ C1] panic+0x2c8/0x627 [ 488.025944][ C1] ? panic_print_sys_info.part.0+0x10b/0x10b [ 488.029756][ C1] ? decode_session6+0xfc3/0x17f0 [ 488.033103][ C1] end_report.part.0+0x3f/0x7c [ 488.036245][ C1] kasan_report.cold+0xa/0xf [ 488.039291][ C1] ? decode_session6+0xfc3/0x17f0 [ 488.042433][ C1] decode_session6+0xfc3/0x17f0 [ 488.045582][ C1] ? __lock_acquire+0x166e/0x56d0 [ 488.049214][ C1] __xfrm_decode_session+0x50/0xb0 [ 488.053072][ C1] vti6_tnl_xmit+0x419/0x1f90 [ 488.056513][ C1] ? find_held_lock+0x2d/0x110 [ 488.060434][ C1] ? vti6_exit_batch_net+0x670/0x670 [ 488.065290][ C1] dev_hard_start_xmit+0x183/0x880 [ 488.069940][ C1] sch_direct_xmit+0x19f/0xbe0 [ 488.073820][ C1] ? sfb_enqueue+0x95a/0x2020 [ 488.077677][ C1] ? dev_watchdog+0x8f0/0x8f0 [ 488.081821][ C1] __qdisc_run+0x4bb/0x1710 [ 488.084971][ C1] ? rcu_read_lock_sched_held+0x3a/0x70 [ 488.088522][ C1] __dev_queue_xmit+0x2299/0x3ad0 [ 488.091564][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 488.095110][ C1] ? find_held_lock+0x2d/0x110 [ 488.098193][ C1] ? ip6_finish_output2+0x564/0x1520 [ 488.101381][ C1] ? mark_held_locks+0x9f/0xe0 [ 488.104182][ C1] ? ___neigh_create+0x1824/0x29a0 [ 488.107259][ C1] ? neigh_connected_output+0x41a/0x520 [ 488.110558][ C1] ? neigh_connected_output+0x41a/0x520 [ 488.114147][ C1] neigh_connected_output+0x3c0/0x520 [ 488.117519][ C1] ip6_finish_output2+0x564/0x1520 [ 488.120671][ C1] ip6_finish_output+0x690/0x1160 [ 488.124230][ C1] ip6_output+0x1ed/0x540 [ 488.126753][ C1] ndisc_send_skb+0xa5f/0x1730 [ 488.129630][ C1] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 488.133385][ C1] ? ndisc_net_init+0x220/0x220 [ 488.136282][ C1] ? memset+0x20/0x40 [ 488.139241][ C1] ndisc_send_rs+0x12e/0x6f0 [ 488.142703][ C1] addrconf_rs_timer+0x3ed/0x820 [ 488.145730][ C1] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 488.149929][ C1] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 488.153770][ C1] call_timer_fn+0x1a0/0x6b0 [ 488.156830][ C1] ? timer_fixup_activate+0x350/0x350 [ 488.160676][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 488.164386][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 488.168263][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 488.172008][ C1] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 488.175541][ C1] __run_timers.part.0+0x674/0xa80 [ 488.178940][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 488.182778][ C1] ? cpuacct_all_seq_show+0x520/0x520 [ 488.187179][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 488.191108][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 488.194816][ C1] run_timer_softirq+0xb3/0x1d0 [ 488.198651][ C1] __do_softirq+0x1d3/0x9c6 [ 488.202053][ C1] __irq_exit_rcu+0x123/0x180 [ 488.205956][ C1] irq_exit_rcu+0x5/0x20 [ 488.209187][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 488.213508][ C1] [ 488.215780][ C1] [ 488.218106][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 488.223120][ C1] RIP: 0010:tick_nohz_idle_enter+0x19f/0x250 [ 488.227887][ C1] Code: df 48 c1 ea 03 0f b6 04 02 48 89 ea 83 e2 07 38 d0 7f 04 84 c0 75 78 80 4b 4c 04 e8 fb 37 ec ff e8 66 86 12 00 fb 48 83 c4 08 <5b> 5d c3 e8 f9 0e 0c 00 65 8b 1d 0e 4b 93 7e 31 ff 89 de e8 a9 0b [ 488.243206][ C1] RSP: 0018:ffffc9000067fe00 EFLAGS: 00000296 [ 488.248234][ C1] RAX: 00000000005f5217 RBX: ffff88802c92ae60 RCX: 1ffffffff1bbb881 [ 488.254352][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 488.260762][ C1] RBP: ffff88802c92aeac R08: 0000000000000001 R09: 0000000000000001 [ 488.266804][ C1] R10: ffffffff8f507057 R11: 0000000000000001 R12: 0000000000000000 [ 488.273433][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 488.279656][ C1] do_idle+0x94/0x590 [ 488.282981][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 488.286263][ C1] cpu_startup_entry+0x14/0x20 [ 488.289596][ C1] start_secondary+0x21d/0x2b0 [ 488.292800][ C1] ? set_cpu_sibling_map+0x2270/0x2270 [ 488.297020][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 488.300869][ C1] [ 488.303701][ C1] Kernel Offset: disabled [ 488.306709][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:38:03 Registers: info registers vcpu 0 RAX=0000000000040000 RBX=0000000000000200 RCX=ffffc90024a48000 RDX=0000000000040000 RSI=ffffffff81709e9d RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90003b6fb10 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000000 R12=0000000000000000 R13=ffffc90003b6fbc0 R14=ffffc90003b6fb88 R15=0000000000000000 RIP=ffffffff81709d3e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f891d43f700 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200b5000 CR3=0000000075c84000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=a1a491fb1046ffbe15f3ffbfe6321841 XMM01=f4102309a4226c6555309f5af02b6884 XMM02=de9d1b9721e8f6ece11dc1ea7574643f XMM03=7e905f2ad5a77cfc046c074ce0bcb5a8 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=000000000000000000000000ddd504e2 XMM08=4c000000f8000000460000000c000000 XMM09=00000000000000000000000000000000 XMM10=ec449f11beb471008bf85254ea4a9868 XMM11=c670dead8906b266176ff5c81ca1bd97 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000ffffffff0000000000000060 XMM15=00000000000000000000000000000020 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8461424c RDI=ffffffff914810c0 RBP=ffffffff91481080 RSP=ffffc90000747d18 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff2290267 R15=dffffc0000000000 RIP=ffffffff84614273 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020327000 CR3=0000000061a7e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000316270616c XMM01=0000000000000000000000000000ffff XMM02=ffffffffffffffffffffffffffffffff XMM03=505f434c00534547415353454d5f434c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000ff0000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=6575715f6c6f72746e6f63203a732500 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=ffff88802ca2ae60 RCX=1ffff110059455db RDX=0000000000000004 RSI=ffffffff816be48b RDI=ffff88802ca2aed8 RBP=ffff88802ca2aeac RSP=ffffc9000068fdf8 R8 =0000000000000004 R9 =000000000001639e R10=000000000001639e R11=0000000000000000 R12=0000000000000000 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816f2b10 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200b3000 CR3=000000006c967000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414fffffe0000000 XMM03=32322035312e322e302e303120343331 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000010002 RDI=0000000000000000 RBP=ffff88802cb3a018 RSP=ffffc900007f8e18 R8 =ffff888044916180 R9 =0000000000000001 R10=ffffffff8f5070d7 R11=0000000000000001 R12=ffff888012536080 R13=ffff888012536af8 R14=00000000ffffffff R15=ffff88802cb3a000 RIP=ffffffff897f3df0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020a23000 CR3=0000000076cb1000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000800000100150000000c00000028 XMM01=0000000e000000010000000000000006 XMM02=00430044000100150000000000000040 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5241006e65706f5f667062203a732500 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000