[ 146.237063][ T41] audit: type=1400 audit(1593929771.273:41): avc: denied { map } for pid=9241 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:21781' (ECDSA) to the list of known hosts. [ 149.598762][ T41] audit: type=1400 audit(1593929774.633:42): avc: denied { map } for pid=9253 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/07/05 06:16:14 fuzzer started 2020/07/05 06:16:15 dialing manager at 10.0.2.10:32807 2020/07/05 06:16:15 syscalls: 3122 2020/07/05 06:16:15 code coverage: enabled 2020/07/05 06:16:15 comparison tracing: enabled 2020/07/05 06:16:15 extra coverage: enabled 2020/07/05 06:16:15 setuid sandbox: enabled 2020/07/05 06:16:15 namespace sandbox: enabled 2020/07/05 06:16:15 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/05 06:16:15 fault injection: enabled 2020/07/05 06:16:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/05 06:16:15 net packet injection: enabled 2020/07/05 06:16:15 net device setup: enabled 2020/07/05 06:16:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/05 06:16:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/05 06:16:15 USB emulation: enabled [ 150.134251][ T41] audit: type=1400 audit(1593929775.173:43): avc: denied { integrity } for pid=9270 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 06:16:53 executing program 0: 06:16:53 executing program 1: [ 188.275702][ T41] audit: type=1400 audit(1593929813.303:44): avc: denied { map } for pid=9275 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=76 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 06:16:53 executing program 2: 06:16:53 executing program 3: [ 189.055149][ T9280] IPVS: ftp: loaded support on port[0] = 21 [ 189.055387][ T9278] IPVS: ftp: loaded support on port[0] = 21 [ 189.055435][ T9277] IPVS: ftp: loaded support on port[0] = 21 [ 189.356878][ T9282] IPVS: ftp: loaded support on port[0] = 21 [ 189.685210][ T9278] chnl_net:caif_netlink_parms(): no params data found [ 189.826408][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 189.878733][ T9280] chnl_net:caif_netlink_parms(): no params data found [ 189.979883][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.002998][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.032506][ T9278] device bridge_slave_0 entered promiscuous mode [ 190.095376][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.114488][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.134573][ T9278] device bridge_slave_1 entered promiscuous mode [ 190.246376][ T9278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.287145][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 190.328919][ T9278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.377422][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.390432][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.411354][ T9280] device bridge_slave_0 entered promiscuous mode [ 190.436645][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.455683][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.469418][ T9277] device bridge_slave_0 entered promiscuous mode [ 190.491085][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.519893][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.556157][ T9280] device bridge_slave_1 entered promiscuous mode [ 190.592239][ T9278] team0: Port device team_slave_0 added [ 190.617147][ T9278] team0: Port device team_slave_1 added [ 190.640970][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.664238][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.686328][ T9277] device bridge_slave_1 entered promiscuous mode [ 190.722875][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.806664][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.832617][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.852404][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.934108][ T9278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.974071][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.994233][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.063715][ T9278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.104854][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.131425][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.183111][ T9280] team0: Port device team_slave_0 added [ 191.227118][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.246669][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.263128][ T9282] device bridge_slave_0 entered promiscuous mode [ 191.287600][ T9280] team0: Port device team_slave_1 added [ 191.306120][ T9277] team0: Port device team_slave_0 added [ 191.384827][ T9278] device hsr_slave_0 entered promiscuous mode [ 191.451626][ T9278] device hsr_slave_1 entered promiscuous mode [ 191.522977][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.542415][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.560471][ T9282] device bridge_slave_1 entered promiscuous mode [ 191.586609][ T9277] team0: Port device team_slave_1 added [ 191.632629][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.666788][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.687477][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.701371][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.769480][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.796087][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.811729][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.858112][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.910747][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.923725][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.976419][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.002849][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.018264][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.084733][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.141800][ T9282] team0: Port device team_slave_0 added [ 192.176018][ T9282] team0: Port device team_slave_1 added [ 192.293596][ T9280] device hsr_slave_0 entered promiscuous mode [ 192.350469][ T9280] device hsr_slave_1 entered promiscuous mode [ 192.430691][ T9280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.450460][ T9280] Cannot create hsr debugfs directory [ 192.522733][ T9277] device hsr_slave_0 entered promiscuous mode [ 192.600552][ T9277] device hsr_slave_1 entered promiscuous mode [ 192.700280][ T9277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.724686][ T9277] Cannot create hsr debugfs directory [ 192.741683][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.762050][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.834109][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.864627][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.883771][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.946740][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.092682][ T9282] device hsr_slave_0 entered promiscuous mode [ 193.160552][ T9282] device hsr_slave_1 entered promiscuous mode [ 193.240198][ T9282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.253850][ T9282] Cannot create hsr debugfs directory [ 193.455160][ T41] audit: type=1400 audit(1593929818.493:45): avc: denied { create } for pid=9278 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.477438][ T9278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.522267][ T41] audit: type=1400 audit(1593929818.503:46): avc: denied { write } for pid=9278 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.655914][ T41] audit: type=1400 audit(1593929818.503:47): avc: denied { read } for pid=9278 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 193.805252][ T9278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.876642][ T9278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.958596][ T9278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.148023][ T9277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.217018][ T9277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.314099][ T9277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.400871][ T9277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.484882][ T9280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.563212][ T9280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.652751][ T9280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.726255][ T9280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.889408][ T9282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.044204][ T9282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.153827][ T9282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.253373][ T9282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.445044][ T9278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.530977][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.590894][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.674268][ T9278] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.717595][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.742188][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.785586][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.829900][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.865899][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.915231][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.988578][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.038952][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.084343][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.117852][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.167740][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.223426][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.262150][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.309141][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.332340][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.362575][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.383437][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.426159][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.468079][ T9277] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.501148][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.539077][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.583692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.618251][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.655973][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.703753][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.752637][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.799035][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.851432][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.903613][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.989691][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.027977][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.067124][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.113122][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.179103][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.227974][ T9280] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.288698][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.296628][ T41] audit: type=1400 audit(1593929822.323:48): avc: denied { map } for pid=9306 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 197.321906][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.434903][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.451773][ T9283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.475080][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.506938][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.535279][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.556560][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.574833][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.590645][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.611378][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.630811][ T9283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.653160][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.673220][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.689475][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.704189][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.744271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.763135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.792662][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.816049][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.841555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.869475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.897701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.926763][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.956234][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.981047][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.010696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.054245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.097874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.143788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.186874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.233403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.291198][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.335576][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.371661][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.410913][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.452279][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.494572][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.532070][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.562271][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.593303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.648269][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.682973][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.714165][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.774320][ T9280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.822733][ T9280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.876146][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.903347][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.929282][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.956374][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.988275][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.015336][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.043489][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.069793][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.094177][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.118456][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.187168][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.242916][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.305767][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.343566][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.381535][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.415248][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.454924][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.479072][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.503131][ T9282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.535499][ T9277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.560614][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.574524][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.598447][ T9278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.636785][ T9280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.659368][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.685718][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.710891][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.737864][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.772019][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.818766][ T9277] device veth0_vlan entered promiscuous mode [ 199.846318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.870477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.896773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.919628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.943681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.965765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.995823][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.026640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.069173][ T9280] device veth0_vlan entered promiscuous mode [ 200.099462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.114843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.135729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.157172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.178971][ T9277] device veth1_vlan entered promiscuous mode [ 200.204634][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.222555][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.242547][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.260891][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.277478][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.292906][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.310070][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.325759][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.356926][ T9278] device veth0_vlan entered promiscuous mode [ 200.373571][ T9280] device veth1_vlan entered promiscuous mode [ 200.406618][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.656108][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.676304][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.731500][ T9277] device veth0_macvtap entered promiscuous mode [ 200.821668][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.878679][ T9282] device veth0_vlan entered promiscuous mode [ 200.903046][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.921541][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.939063][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.959003][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.989436][ T9277] device veth1_macvtap entered promiscuous mode [ 201.017200][ T9278] device veth1_vlan entered promiscuous mode [ 201.076517][ T9282] device veth1_vlan entered promiscuous mode [ 201.106894][ T9277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.125854][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.146970][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.164846][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.180857][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.195437][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.217029][ T9280] device veth0_macvtap entered promiscuous mode [ 201.235231][ T9277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.255674][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.277747][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.323138][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.422723][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.466907][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.486209][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.516538][ T9280] device veth1_macvtap entered promiscuous mode [ 201.547435][ T9278] device veth0_macvtap entered promiscuous mode [ 201.604051][ T9278] device veth1_macvtap entered promiscuous mode [ 201.850557][ T9280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 201.873391][ T9280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.895218][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.912835][ T9280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.929594][ T9280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.948512][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.972729][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.989261][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.006334][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.019095][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.034550][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.049308][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.074358][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.095046][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.115062][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.198708][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.211995][ T41] audit: type=1400 audit(1593929827.243:49): avc: denied { associate } for pid=9277 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 202.261753][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.337273][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.372746][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.415243][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.444825][ T9282] device veth0_macvtap entered promiscuous mode [ 202.463296][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.485496][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.503969][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.535265][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.558648][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.575637][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.593895][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.611668][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.708630][ T9277] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 202.853162][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.884234][ T9308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.945197][ T9282] device veth1_macvtap entered promiscuous mode 06:17:08 executing program 0: [ 203.285427][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:17:08 executing program 0: [ 203.325258][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.360377][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:17:08 executing program 0: [ 203.393179][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.423099][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:17:08 executing program 0: [ 203.455943][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.493055][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_0 06:17:08 executing program 0: [ 203.519216][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.537521][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.616261][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.657779][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 06:17:08 executing program 1: [ 203.690859][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.756456][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.784982][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.803528][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.832270][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.854274][ T9309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.872023][ T9309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:17:09 executing program 2: 06:17:09 executing program 3: 06:17:09 executing program 0: 06:17:09 executing program 1: 06:17:09 executing program 2: 06:17:09 executing program 0: 06:17:09 executing program 2: 06:17:09 executing program 1: 06:17:09 executing program 3: 06:17:09 executing program 0: 06:17:09 executing program 2: 06:17:09 executing program 1: 06:17:09 executing program 3: 06:17:09 executing program 0: 06:17:09 executing program 1: 06:17:09 executing program 3: 06:17:09 executing program 2: 06:17:09 executing program 0: 06:17:09 executing program 2: 06:17:09 executing program 0: 06:17:09 executing program 3: 06:17:09 executing program 1: 06:17:09 executing program 3: 06:17:09 executing program 2: 06:17:09 executing program 0: 06:17:09 executing program 1: 06:17:09 executing program 3: 06:17:09 executing program 0: 06:17:09 executing program 2: 06:17:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:09 executing program 1: 06:17:09 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) [ 204.886560][ T41] audit: type=1400 audit(1593929829.923:50): avc: denied { map } for pid=9382 comm="syz-executor.2" path=2F6D656D66643A73797374656D656D306D643573756D24202864656C6574656429 dev="tmpfs" ino=41424 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 204.999609][ T41] audit: type=1400 audit(1593929830.033:51): avc: denied { map } for pid=9387 comm="syz-executor.1" path="/dev/adsp1" dev="devtmpfs" ino=27242 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 06:17:10 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:12 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:12 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:12 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:13 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:15 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:16 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:16 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:18 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:20 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:20 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:20 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:23 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:23 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68734ca53367f05f4ad6142134b62f11e931e7d62ead037c7fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e000000000000007b5ffeb514f774cb38c322ae5a570db5a9d73185cfc1427b7902f7448f6854cf79a25423fc32be1ccbaf6c73d11ad0a33853b1", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:23 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:23 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:23 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:23 executing program 2: memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:23 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:26 executing program 2: memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:26 executing program 2: memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:26 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x4000) 06:17:26 executing program 2: mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:26 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x4000) 06:17:26 executing program 2: mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:26 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x4000) 06:17:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:29 executing program 2: mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 06:17:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:29 executing program 2: r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:29 executing program 2: r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:32 executing program 2: r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0), 0x4) 06:17:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x4000) 06:17:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000007a1a3f0037451222c47e2008"], 0x78) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x23}], 0x1) 06:17:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x111}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 227.230278][ C2] traps: PANIC: double fault, error_code: 0x0 [ 227.230278][ C2] double fault: 0000 [#1] PREEMPT SMP KASAN [ 227.230278][ C2] CPU: 2 PID: 9585 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 227.230278][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 227.230278][ C2] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 227.230278][ C2] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 227.230278][ C2] RSP: 0018:fffffe000006bfb8 EFLAGS: 00010086 [ 227.230278][ C2] RAX: 0000000000000000 RBX: fffffe000006bfb8 RCX: ffffffff88000e87 [ 227.230278][ C2] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 227.230278][ C2] RBP: fffffe000006c120 R08: 0000000000000000 R09: 0000000000000000 [ 227.230278][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 227.230278][ C2] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.230278][ C2] FS: 00007ffaa57b2700(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000 [ 227.230278][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.230278][ C2] CR2: fffffe000006bfa8 CR3: 000000005e79c000 CR4: 0000000000340ee0 [ 227.230278][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.230278][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.230278][ C2] Call Trace: [ 227.230278][ C2] [ 227.230278][ C2] error_entry+0xb8/0xc0 [ 227.230278][ C2] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 227.230278][ C2] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 227.230278][ C2] RSP: 0018:fffffe000006c1d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000000 [ 227.230278][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 227.230278][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 227.230278][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.230278][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 227.230278][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.230278][ C2] ? asm_exc_general_protection+0x8/0x30 [ 227.230278][ C2] RIP: 0033:0x273c050000075366 [ 227.230278][ C2] Code: Bad RIP value. [ 227.230278][ C2] RSP: 002b:00007ffaa57b1c78 EFLAGS: 00000346 [ 227.230278][ C2] Modules linked in: [ 228.080220][ C2] ---[ end trace b85ebf5aee1f303d ]--- [ 228.080220][ C2] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 228.080220][ C2] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 228.080220][ C2] RSP: 0018:fffffe000006bfb8 EFLAGS: 00010086 [ 228.080220][ C2] RAX: 0000000000000000 RBX: fffffe000006bfb8 RCX: ffffffff88000e87 [ 228.080220][ C2] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 228.080220][ C2] RBP: fffffe000006c120 R08: 0000000000000000 R09: 0000000000000000 [ 228.080220][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 228.080220][ C2] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.080220][ C2] FS: 00007ffaa57b2700(0000) GS:ffff88802d000000(0000) knlGS:0000000000000000 [ 228.080220][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.080220][ C2] CR2: fffffe000006bfa8 CR3: 000000005e79c000 CR4: 0000000000340ee0 [ 228.080220][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.080220][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.080220][ C2] Kernel panic - not syncing: Fatal exception in interrupt [ 228.080220][ C2] Kernel Offset: disabled