[ 44.182653][ T39] audit: type=1400 audit(1662039663.777:74): avc: denied { write } for pid=3583 comm="sh" path="pipe:[3006]" dev="pipefs" ino=3006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:64391' (ECDSA) to the list of known hosts. [ 47.043277][ T39] audit: type=1400 audit(1662039666.657:75): avc: denied { execute } for pid=3612 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.059665][ T39] audit: type=1400 audit(1662039666.657:76): avc: denied { execute_no_trans } for pid=3612 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/09/01 13:41:06 fuzzer started 2022/09/01 13:41:07 dialing manager at localhost:41573 [ 51.241959][ T39] audit: type=1400 audit(1662039670.857:77): avc: denied { mounton } for pid=3687 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.248861][ T3687] cgroup: Unknown subsys name 'net' [ 51.257330][ T39] audit: type=1400 audit(1662039670.857:78): avc: denied { mount } for pid=3687 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.274780][ T39] audit: type=1400 audit(1662039670.877:79): avc: denied { unmount } for pid=3687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.451707][ T3687] cgroup: Unknown subsys name 'rlimit' [ 51.571713][ T39] audit: type=1400 audit(1662039671.187:80): avc: denied { mounton } for pid=3687 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/09/01 13:41:11 syscalls: 3774 2022/09/01 13:41:11 code coverage: enabled 2022/09/01 13:41:11 comparison tracing: enabled 2022/09/01 13:41:11 extra coverage: enabled 2022/09/01 13:41:11 delay kcov mmap: enabled 2022/09/01 13:41:11 setuid sandbox: enabled 2022/09/01 13:41:11 namespace sandbox: enabled 2022/09/01 13:41:11 Android sandbox: enabled 2022/09/01 13:41:11 fault injection: enabled 2022/09/01 13:41:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/09/01 13:41:11 net packet injection: enabled 2022/09/01 13:41:11 net device setup: enabled 2022/09/01 13:41:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/01 13:41:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/01 13:41:11 USB emulation: enabled 2022/09/01 13:41:11 hci packet injection: enabled 2022/09/01 13:41:11 wifi device emulation: failed to parse kernel version (6.0.0-rc3-syzkaller-00031-gc5e4d5e99162) 2022/09/01 13:41:11 802.15.4 emulation: enabled 2022/09/01 13:41:11 fetching corpus: 0, signal 0/2000 (executing program) [ 51.588578][ T39] audit: type=1400 audit(1662039671.187:81): avc: denied { mount } for pid=3687 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.606934][ T39] audit: type=1400 audit(1662039671.197:82): avc: denied { setattr } for pid=3687 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.623078][ T39] audit: type=1400 audit(1662039671.197:83): avc: denied { create } for pid=3687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.637894][ T39] audit: type=1400 audit(1662039671.197:84): avc: denied { write } for pid=3687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.653478][ T39] audit: type=1400 audit(1662039671.197:85): avc: denied { read } for pid=3687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/09/01 13:41:11 fetching corpus: 50, signal 52676/56050 (executing program) 2022/09/01 13:41:11 fetching corpus: 100, signal 65976/70792 (executing program) 2022/09/01 13:41:11 fetching corpus: 150, signal 78210/84351 (executing program) 2022/09/01 13:41:12 fetching corpus: 200, signal 88314/95685 (executing program) 2022/09/01 13:41:12 fetching corpus: 250, signal 94709/103391 (executing program) 2022/09/01 13:41:12 fetching corpus: 300, signal 102392/112215 (executing program) 2022/09/01 13:41:12 fetching corpus: 350, signal 109206/120130 (executing program) 2022/09/01 13:41:12 fetching corpus: 400, signal 112401/124583 (executing program) 2022/09/01 13:41:13 fetching corpus: 450, signal 118377/131583 (executing program) 2022/09/01 13:41:13 fetching corpus: 500, signal 124292/138443 (executing program) 2022/09/01 13:41:13 fetching corpus: 550, signal 127782/142984 (executing program) 2022/09/01 13:41:13 fetching corpus: 600, signal 133167/149178 (executing program) 2022/09/01 13:41:13 fetching corpus: 650, signal 137147/154056 (executing program) 2022/09/01 13:41:13 fetching corpus: 700, signal 141322/159099 (executing program) 2022/09/01 13:41:14 fetching corpus: 750, signal 147399/165840 (executing program) 2022/09/01 13:41:14 fetching corpus: 800, signal 150426/169772 (executing program) 2022/09/01 13:41:14 fetching corpus: 850, signal 155004/175042 (executing program) 2022/09/01 13:41:14 fetching corpus: 900, signal 158537/179330 (executing program) 2022/09/01 13:41:14 fetching corpus: 950, signal 163192/184587 (executing program) 2022/09/01 13:41:15 fetching corpus: 1000, signal 166271/188386 (executing program) 2022/09/01 13:41:15 fetching corpus: 1050, signal 170363/193017 (executing program) 2022/09/01 13:41:15 fetching corpus: 1100, signal 173461/196760 (executing program) 2022/09/01 13:41:15 fetching corpus: 1150, signal 175784/199765 (executing program) 2022/09/01 13:41:16 fetching corpus: 1200, signal 180968/205202 (executing program) 2022/09/01 13:41:16 fetching corpus: 1250, signal 183438/208304 (executing program) 2022/09/01 13:41:16 fetching corpus: 1300, signal 187006/212245 (executing program) 2022/09/01 13:41:16 fetching corpus: 1350, signal 190157/215793 (executing program) 2022/09/01 13:41:17 fetching corpus: 1400, signal 192930/219060 (executing program) 2022/09/01 13:41:17 fetching corpus: 1450, signal 195853/222361 (executing program) 2022/09/01 13:41:17 fetching corpus: 1500, signal 198577/225514 (executing program) 2022/09/01 13:41:17 fetching corpus: 1550, signal 200537/227974 (executing program) 2022/09/01 13:41:18 fetching corpus: 1600, signal 202349/230328 (executing program) 2022/09/01 13:41:18 fetching corpus: 1650, signal 204664/233045 (executing program) 2022/09/01 13:41:18 fetching corpus: 1700, signal 206487/235338 (executing program) 2022/09/01 13:41:18 fetching corpus: 1750, signal 209180/238300 (executing program) 2022/09/01 13:41:18 fetching corpus: 1800, signal 210842/240440 (executing program) 2022/09/01 13:41:18 fetching corpus: 1850, signal 212920/242872 (executing program) 2022/09/01 13:41:19 fetching corpus: 1900, signal 214836/245150 (executing program) 2022/09/01 13:41:19 fetching corpus: 1950, signal 216834/247427 (executing program) 2022/09/01 13:41:19 fetching corpus: 2000, signal 218668/249628 (executing program) 2022/09/01 13:41:19 fetching corpus: 2050, signal 220740/251964 (executing program) 2022/09/01 13:41:20 fetching corpus: 2100, signal 223725/254919 (executing program) 2022/09/01 13:41:20 fetching corpus: 2150, signal 225633/257123 (executing program) 2022/09/01 13:41:20 fetching corpus: 2200, signal 226957/258818 (executing program) 2022/09/01 13:41:20 fetching corpus: 2250, signal 228766/260873 (executing program) 2022/09/01 13:41:20 fetching corpus: 2300, signal 230218/262641 (executing program) 2022/09/01 13:41:21 fetching corpus: 2350, signal 232046/264646 (executing program) 2022/09/01 13:41:21 fetching corpus: 2400, signal 233855/266599 (executing program) 2022/09/01 13:41:21 fetching corpus: 2450, signal 235780/268635 (executing program) 2022/09/01 13:41:21 fetching corpus: 2500, signal 237196/270288 (executing program) 2022/09/01 13:41:21 fetching corpus: 2550, signal 238852/272066 (executing program) 2022/09/01 13:41:22 fetching corpus: 2600, signal 240509/273864 (executing program) 2022/09/01 13:41:22 fetching corpus: 2649, signal 242180/275689 (executing program) 2022/09/01 13:41:22 fetching corpus: 2699, signal 243682/277382 (executing program) 2022/09/01 13:41:22 fetching corpus: 2749, signal 244995/278901 (executing program) 2022/09/01 13:41:22 fetching corpus: 2799, signal 246474/280528 (executing program) 2022/09/01 13:41:23 fetching corpus: 2849, signal 248619/282602 (executing program) 2022/09/01 13:41:23 fetching corpus: 2899, signal 250349/284383 (executing program) 2022/09/01 13:41:23 fetching corpus: 2949, signal 252213/286193 (executing program) 2022/09/01 13:41:23 fetching corpus: 2999, signal 253332/287471 (executing program) 2022/09/01 13:41:23 fetching corpus: 3049, signal 254795/288961 (executing program) 2022/09/01 13:41:23 fetching corpus: 3099, signal 256599/290668 (executing program) 2022/09/01 13:41:24 fetching corpus: 3149, signal 258461/292388 (executing program) 2022/09/01 13:41:24 fetching corpus: 3199, signal 260475/294187 (executing program) 2022/09/01 13:41:24 fetching corpus: 3249, signal 261572/295368 (executing program) 2022/09/01 13:41:24 fetching corpus: 3299, signal 262589/296497 (executing program) 2022/09/01 13:41:24 fetching corpus: 3349, signal 263696/297709 (executing program) 2022/09/01 13:41:24 fetching corpus: 3399, signal 265094/299073 (executing program) 2022/09/01 13:41:25 fetching corpus: 3449, signal 266112/300176 (executing program) 2022/09/01 13:41:25 fetching corpus: 3499, signal 267035/301192 (executing program) 2022/09/01 13:41:25 fetching corpus: 3549, signal 268252/302383 (executing program) 2022/09/01 13:41:25 fetching corpus: 3599, signal 269626/303652 (executing program) 2022/09/01 13:41:25 fetching corpus: 3649, signal 271183/305046 (executing program) 2022/09/01 13:41:25 fetching corpus: 3699, signal 272210/306114 (executing program) 2022/09/01 13:41:26 fetching corpus: 3749, signal 273439/307247 (executing program) 2022/09/01 13:41:26 fetching corpus: 3799, signal 275129/308648 (executing program) 2022/09/01 13:41:26 fetching corpus: 3849, signal 276138/309674 (executing program) 2022/09/01 13:41:26 fetching corpus: 3899, signal 277936/311102 (executing program) 2022/09/01 13:41:27 fetching corpus: 3949, signal 279225/312209 (executing program) 2022/09/01 13:41:27 fetching corpus: 3999, signal 280513/313327 (executing program) 2022/09/01 13:41:27 fetching corpus: 4049, signal 281628/314351 (executing program) 2022/09/01 13:41:27 fetching corpus: 4099, signal 282967/315443 (executing program) 2022/09/01 13:41:28 fetching corpus: 4149, signal 283907/316298 (executing program) 2022/09/01 13:41:28 fetching corpus: 4199, signal 285999/317776 (executing program) 2022/09/01 13:41:28 fetching corpus: 4249, signal 286731/318530 (executing program) 2022/09/01 13:41:29 fetching corpus: 4299, signal 287960/319518 (executing program) 2022/09/01 13:41:29 fetching corpus: 4349, signal 289045/320443 (executing program) 2022/09/01 13:41:29 fetching corpus: 4399, signal 290055/321266 (executing program) 2022/09/01 13:41:30 fetching corpus: 4449, signal 291609/322344 (executing program) 2022/09/01 13:41:30 fetching corpus: 4499, signal 292758/323227 (executing program) 2022/09/01 13:41:30 fetching corpus: 4549, signal 293581/323983 (executing program) 2022/09/01 13:41:30 fetching corpus: 4599, signal 294273/324603 (executing program) 2022/09/01 13:41:30 fetching corpus: 4649, signal 295526/325528 (executing program) 2022/09/01 13:41:31 fetching corpus: 4699, signal 296321/326160 (executing program) 2022/09/01 13:41:31 fetching corpus: 4749, signal 297052/326816 (executing program) 2022/09/01 13:41:31 fetching corpus: 4799, signal 297955/327560 (executing program) 2022/09/01 13:41:32 fetching corpus: 4849, signal 301258/329293 (executing program) 2022/09/01 13:41:32 fetching corpus: 4899, signal 302432/330073 (executing program) 2022/09/01 13:41:32 fetching corpus: 4949, signal 303394/330734 (executing program) 2022/09/01 13:41:32 fetching corpus: 4999, signal 304346/331426 (executing program) 2022/09/01 13:41:33 fetching corpus: 5049, signal 305092/332027 (executing program) 2022/09/01 13:41:33 fetching corpus: 5099, signal 305764/332568 (executing program) 2022/09/01 13:41:33 fetching corpus: 5149, signal 306524/333124 (executing program) 2022/09/01 13:41:33 fetching corpus: 5197, signal 307204/333664 (executing program) 2022/09/01 13:41:34 fetching corpus: 5247, signal 308615/334464 (executing program) 2022/09/01 13:41:34 fetching corpus: 5297, signal 309312/334975 (executing program) 2022/09/01 13:41:34 fetching corpus: 5347, signal 310531/335698 (executing program) 2022/09/01 13:41:35 fetching corpus: 5397, signal 311792/336429 (executing program) 2022/09/01 13:41:35 fetching corpus: 5447, signal 312432/336899 (executing program) 2022/09/01 13:41:35 fetching corpus: 5497, signal 314417/337854 (executing program) 2022/09/01 13:41:36 fetching corpus: 5547, signal 315440/338430 (executing program) 2022/09/01 13:41:36 fetching corpus: 5597, signal 316285/338911 (executing program) 2022/09/01 13:41:36 fetching corpus: 5647, signal 317608/339595 (executing program) [ 77.070834][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.077703][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 2022/09/01 13:41:36 fetching corpus: 5697, signal 318365/340052 (executing program) 2022/09/01 13:41:36 fetching corpus: 5747, signal 318960/340439 (executing program) 2022/09/01 13:41:37 fetching corpus: 5797, signal 320244/341067 (executing program) 2022/09/01 13:41:37 fetching corpus: 5847, signal 321212/341570 (executing program) 2022/09/01 13:41:37 fetching corpus: 5897, signal 322053/341989 (executing program) 2022/09/01 13:41:37 fetching corpus: 5947, signal 322719/342364 (executing program) 2022/09/01 13:41:37 fetching corpus: 5997, signal 323617/342849 (executing program) 2022/09/01 13:41:38 fetching corpus: 6047, signal 324821/343403 (executing program) 2022/09/01 13:41:38 fetching corpus: 6097, signal 325610/343799 (executing program) 2022/09/01 13:41:38 fetching corpus: 6147, signal 326474/344241 (executing program) 2022/09/01 13:41:38 fetching corpus: 6197, signal 327431/344663 (executing program) 2022/09/01 13:41:38 fetching corpus: 6247, signal 328368/345069 (executing program) 2022/09/01 13:41:38 fetching corpus: 6297, signal 329098/345379 (executing program) 2022/09/01 13:41:39 fetching corpus: 6347, signal 329893/345721 (executing program) 2022/09/01 13:41:39 fetching corpus: 6397, signal 330843/346092 (executing program) 2022/09/01 13:41:39 fetching corpus: 6447, signal 331802/346439 (executing program) 2022/09/01 13:41:39 fetching corpus: 6497, signal 332340/346667 (executing program) 2022/09/01 13:41:39 fetching corpus: 6546, signal 333065/346953 (executing program) 2022/09/01 13:41:39 fetching corpus: 6596, signal 333726/347233 (executing program) 2022/09/01 13:41:40 fetching corpus: 6646, signal 334688/347576 (executing program) 2022/09/01 13:41:40 fetching corpus: 6696, signal 335645/347901 (executing program) 2022/09/01 13:41:40 fetching corpus: 6746, signal 336385/348158 (executing program) 2022/09/01 13:41:40 fetching corpus: 6796, signal 337055/348384 (executing program) 2022/09/01 13:41:41 fetching corpus: 6846, signal 338121/348730 (executing program) 2022/09/01 13:41:41 fetching corpus: 6896, signal 339067/348998 (executing program) 2022/09/01 13:41:41 fetching corpus: 6946, signal 339658/349204 (executing program) 2022/09/01 13:41:41 fetching corpus: 6996, signal 340296/349394 (executing program) 2022/09/01 13:41:41 fetching corpus: 7045, signal 340824/349561 (executing program) 2022/09/01 13:41:42 fetching corpus: 7094, signal 341542/349736 (executing program) 2022/09/01 13:41:42 fetching corpus: 7144, signal 342237/349907 (executing program) 2022/09/01 13:41:42 fetching corpus: 7194, signal 342961/350090 (executing program) 2022/09/01 13:41:42 fetching corpus: 7244, signal 343763/350283 (executing program) 2022/09/01 13:41:42 fetching corpus: 7294, signal 344454/350430 (executing program) 2022/09/01 13:41:42 fetching corpus: 7344, signal 345218/350569 (executing program) 2022/09/01 13:41:43 fetching corpus: 7394, signal 346049/350731 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350781 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350815 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350839 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350860 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350891 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350924 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350956 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/350982 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351009 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351038 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351066 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351091 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351116 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351152 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351189 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351222 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351252 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351281 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351314 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351342 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351377 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351411 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351444 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351478 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351506 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351539 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351566 (executing program) 2022/09/01 13:41:43 fetching corpus: 7406, signal 346165/351566 (executing program) [ 87.311467][ T41] cfg80211: failed to load regulatory.db 2022/09/01 13:41:47 starting 4 fuzzer processes 13:41:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0}) 13:41:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) 13:41:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) [ 87.441595][ T39] audit: type=1400 audit(1662039707.057:86): avc: denied { execmem } for pid=3693 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.639393][ T39] audit: type=1400 audit(1662039707.257:87): avc: denied { mounton } for pid=3701 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 87.655506][ T39] audit: type=1400 audit(1662039707.257:88): avc: denied { mount } for pid=3701 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.669291][ T39] audit: type=1400 audit(1662039707.257:89): avc: denied { create } for pid=3701 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.681410][ T39] audit: type=1400 audit(1662039707.257:90): avc: denied { read write } for pid=3701 comm="syz-executor.0" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.695876][ T39] audit: type=1400 audit(1662039707.257:91): avc: denied { open } for pid=3701 comm="syz-executor.0" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.682524][ T39] audit: type=1400 audit(1662039708.297:92): avc: denied { ioctl } for pid=3701 comm="syz-executor.0" path="socket:[29219]" dev="sockfs" ino=29219 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.695231][ T3706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.705923][ T3706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.711441][ T3705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.718065][ T3706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.724181][ T3706] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.731407][ T3706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.746448][ T39] audit: type=1400 audit(1662039708.357:93): avc: denied { read } for pid=3701 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.754281][ T3706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.764151][ T39] audit: type=1400 audit(1662039708.357:94): avc: denied { open } for pid=3701 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.776236][ T3709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.792851][ T3709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.794255][ T3712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.795936][ T39] audit: type=1400 audit(1662039708.367:95): avc: denied { mounton } for pid=3701 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 88.798591][ T3709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.805507][ T3715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.818595][ T3709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.824025][ T3715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.827176][ T3709] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.832363][ T3715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.835814][ T3714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.836794][ T3709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.837451][ T3714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.838419][ T3714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.838924][ T3714] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.839314][ T3714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.844082][ T3715] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.881093][ T3715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.105384][ T3701] chnl_net:caif_netlink_parms(): no params data found [ 89.148489][ T3702] chnl_net:caif_netlink_parms(): no params data found [ 89.390813][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.396201][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.403022][ T3701] device bridge_slave_0 entered promiscuous mode [ 89.447649][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.452146][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.457633][ T3701] device bridge_slave_1 entered promiscuous mode [ 89.483772][ T3703] chnl_net:caif_netlink_parms(): no params data found [ 89.495442][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.500303][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.505792][ T3702] device bridge_slave_0 entered promiscuous mode [ 89.512127][ T3704] chnl_net:caif_netlink_parms(): no params data found [ 89.551412][ T3701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.558808][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.565528][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.571048][ T3702] device bridge_slave_1 entered promiscuous mode [ 89.585401][ T3701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.691030][ T3701] team0: Port device team_slave_0 added [ 89.740566][ T3701] team0: Port device team_slave_1 added [ 89.783904][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.846719][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.883912][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.890018][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.909635][ T3701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.021262][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.025644][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.041579][ T3701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.066611][ T3702] team0: Port device team_slave_0 added [ 90.070619][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.075304][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.080955][ T3704] device bridge_slave_0 entered promiscuous mode [ 90.088362][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.093313][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.100376][ T3703] device bridge_slave_0 entered promiscuous mode [ 90.107433][ T3702] team0: Port device team_slave_1 added [ 90.128003][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.133439][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.139449][ T3704] device bridge_slave_1 entered promiscuous mode [ 90.174440][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.179217][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.184572][ T3703] device bridge_slave_1 entered promiscuous mode [ 90.254032][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.258783][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.275337][ T3702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.302336][ T3704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.330315][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.334732][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.351712][ T3702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.362629][ T3701] device hsr_slave_0 entered promiscuous mode [ 90.367581][ T3701] device hsr_slave_1 entered promiscuous mode [ 90.374115][ T3704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.382199][ T3703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.389940][ T3703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.500059][ T3704] team0: Port device team_slave_0 added [ 90.510689][ T3704] team0: Port device team_slave_1 added [ 90.532032][ T3703] team0: Port device team_slave_0 added [ 90.542691][ T3702] device hsr_slave_0 entered promiscuous mode [ 90.548635][ T3702] device hsr_slave_1 entered promiscuous mode [ 90.554731][ T3702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.561324][ T3702] Cannot create hsr debugfs directory [ 90.599221][ T3703] team0: Port device team_slave_1 added [ 90.673559][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.679219][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.698750][ T3704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.730647][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.734845][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.755656][ T3703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.763324][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.767828][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.786098][ T3704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.805515][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.814502][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.833116][ T3703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.837301][ T171] Bluetooth: hci0: command 0x0409 tx timeout [ 90.898250][ T3704] device hsr_slave_0 entered promiscuous mode [ 90.903211][ T3704] device hsr_slave_1 entered promiscuous mode [ 90.909575][ T24] Bluetooth: hci1: command 0x0409 tx timeout [ 90.913480][ T24] Bluetooth: hci3: command 0x0409 tx timeout [ 90.918668][ T3704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.923842][ T3704] Cannot create hsr debugfs directory [ 90.986534][ T15] Bluetooth: hci2: command 0x0409 tx timeout [ 91.036515][ T3703] device hsr_slave_0 entered promiscuous mode [ 91.041343][ T3703] device hsr_slave_1 entered promiscuous mode [ 91.045790][ T3703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.050823][ T3703] Cannot create hsr debugfs directory [ 91.319573][ T3701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.330501][ T3701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.338398][ T3701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.345772][ T3701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.402645][ T3702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.412697][ T3702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.421681][ T3702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.430153][ T3702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.481693][ T3704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.489208][ T3704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.496577][ T3704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.506518][ T3704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.561660][ T3701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.578968][ T3703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.589215][ T3703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.601333][ T3703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.615075][ T3703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.629312][ T3701] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.635627][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.644244][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.674423][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.681745][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.687704][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.692319][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.712608][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.717995][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.723645][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.730326][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.734598][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.739663][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.745403][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.765232][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.774533][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.781248][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.807329][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.812947][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.823427][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.842803][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.849395][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.877102][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.883338][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.898201][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.905045][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.911916][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.929758][ T3702] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.941918][ T3704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.964454][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.972433][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.979347][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.983787][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.999482][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.021108][ T3704] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.029143][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.037411][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.043369][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.048439][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.054821][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.060494][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.078830][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.084768][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.090909][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.096913][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.102924][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.122863][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.130448][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.137130][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.142038][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.147786][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.152769][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.158536][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.165508][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.173049][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.178245][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.183888][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.191055][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.210027][ T3701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.215364][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.221161][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.238933][ T3703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.251625][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.259590][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.265220][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.271334][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.278090][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.288545][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.305671][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.315846][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.322523][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.328762][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.335338][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.341972][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.348415][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.359358][ T3703] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.374722][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.381588][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.389396][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.394785][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.400936][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.418720][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.424471][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.431120][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.440865][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.447017][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.451840][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.460719][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.466895][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.472513][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.486583][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.507610][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.513795][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.521468][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.531439][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.539195][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.561641][ T3702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.567390][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.572964][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.579113][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.595055][ T3703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.603394][ T3703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.613950][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.620418][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.627577][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.633928][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.640187][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.645782][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.662272][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.681823][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.687877][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.693572][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.699663][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.714300][ T3703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.724765][ T3701] device veth0_vlan entered promiscuous mode [ 92.730278][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.736236][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.743162][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.749879][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.762712][ T3701] device veth1_vlan entered promiscuous mode [ 92.774957][ T3704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.801819][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.809278][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.816004][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.825418][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.836877][ T3701] device veth0_macvtap entered promiscuous mode [ 92.851320][ T3701] device veth1_macvtap entered promiscuous mode [ 92.878727][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.885216][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.892493][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.900347][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.912034][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.917458][ T3741] Bluetooth: hci0: command 0x041b tx timeout [ 92.922677][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.929465][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.940283][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.961482][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.967288][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.972773][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.978872][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.987062][ T3739] Bluetooth: hci3: command 0x041b tx timeout [ 92.989112][ T3701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.997118][ T3741] Bluetooth: hci1: command 0x041b tx timeout [ 92.997161][ T3701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.007232][ T3701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012958][ T3701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.032614][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.038449][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.043623][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.049028][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.064938][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.071769][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.076798][ T15] Bluetooth: hci2: command 0x041b tx timeout [ 93.077908][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.089251][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.095409][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.100864][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.109367][ T3703] device veth0_vlan entered promiscuous mode [ 93.123759][ T3702] device veth0_vlan entered promiscuous mode [ 93.161737][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.164101][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 93.164114][ T39] audit: type=1400 audit(1662039712.777:98): avc: denied { mounton } for pid=3701 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.167269][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.170454][ T39] audit: type=1400 audit(1662039712.787:99): avc: denied { mount } for pid=3701 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.185126][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.208722][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.217439][ T3702] device veth1_vlan entered promiscuous mode [ 93.224014][ T3704] device veth0_vlan entered promiscuous mode [ 93.230792][ T3703] device veth1_vlan entered promiscuous mode [ 93.257630][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.263653][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.270224][ T39] audit: type=1400 audit(1662039712.887:100): avc: denied { read write } for pid=3701 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.270742][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.288589][ T39] audit: type=1400 audit(1662039712.887:101): avc: denied { open } for pid=3701 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.302120][ T3768] binder: 3767:3768 unknown command 0 [ 93.317202][ T39] audit: type=1400 audit(1662039712.887:102): avc: denied { ioctl } for pid=3701 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.321314][ T3768] binder: 3767:3768 ioctl c0306201 20000100 returned -22 [ 93.321643][ T3704] device veth1_vlan entered promiscuous mode 13:41:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0}) [ 93.340429][ T39] audit: type=1400 audit(1662039712.907:103): avc: denied { read } for pid=3767 comm="syz-executor.0" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.349929][ T3703] device veth0_macvtap entered promiscuous mode [ 93.358210][ T39] audit: type=1400 audit(1662039712.907:104): avc: denied { open } for pid=3767 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.373469][ T3770] binder: 3769:3770 unknown command 0 [ 93.380823][ T39] audit: type=1400 audit(1662039712.907:105): avc: denied { ioctl } for pid=3767 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.383446][ T3770] binder: 3769:3770 ioctl c0306201 20000100 returned -22 [ 93.405479][ T39] audit: type=1400 audit(1662039713.027:106): avc: denied { read } for pid=3115 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.414304][ T3702] device veth0_macvtap entered promiscuous mode 13:41:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0}) [ 93.430739][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.447282][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.448048][ T3772] binder: 3771:3772 unknown command 0 [ 93.453551][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.456252][ T3772] binder: 3771:3772 ioctl c0306201 20000100 returned -22 [ 93.462418][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.471656][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 13:41:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0}) [ 93.477315][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.483560][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.488986][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.497412][ T3704] device veth0_macvtap entered promiscuous mode [ 93.497638][ T3774] binder: 3773:3774 unknown command 0 [ 93.505197][ T3774] binder: 3773:3774 ioctl c0306201 20000100 returned -22 [ 93.507777][ T3703] device veth1_macvtap entered promiscuous mode [ 93.519734][ T3702] device veth1_macvtap entered promiscuous mode 13:41:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) [ 93.535264][ T3704] device veth1_macvtap entered promiscuous mode [ 93.544035][ T39] audit: type=1400 audit(1662039713.157:107): avc: denied { create } for pid=3775 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.559695][ T3702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:41:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) [ 93.570381][ T3702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.579686][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.598083][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.603368][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.610740][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.615943][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.622072][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.629558][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.636842][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.643427][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.650231][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.656792][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.663573][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.670384][ T3702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.677309][ T3702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.685410][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.695589][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.701674][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.708478][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.714091][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.721273][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.733825][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.742327][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.750786][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.760139][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.766620][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.773250][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.779893][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.786130][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.792408][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 93.798878][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.807114][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.819348][ T3702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.825800][ T3702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.833099][ T3702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840508][ T3702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.848337][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.854782][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.861307][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.867746][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.875417][ T3703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.881684][ T3703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894685][ T3703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.902684][ T3703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938437][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.944744][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.951506][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.958020][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.964064][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 93.971082][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.979562][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.996676][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.002704][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.017512][ T3704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.024052][ T3704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.030281][ T3704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.036174][ T3704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.117623][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) 13:41:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) 13:41:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) [ 94.302010][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 13:41:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) 13:41:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) [ 94.347792][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 13:41:53 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) [ 94.423245][ T3808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:54 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) 13:41:54 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) [ 94.508065][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) [ 94.549252][ T3821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x200}, 0x8) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100060000000000000020c70000000000000000000000000000000000000000000000000000b3a8d7d715d78a9e778a721dd1f60b755cc339b14903fa8de9fd62cdb7519b45c349633d66fd82b08425a2944d347a73d258e40ed23806150f20ac9f11eeb82d59521ad1296842e48abc47b00849f61c2d82e482062c34370094a5daeb8e162f1622e38cba620d3c90b4c81b0954119704a91f23bf699907fed5d6637552555cdab056f0a4c01e504a1019bd59c251ad0b2d10ec01631d53857b8aa45a2a1e5b17e9cbc76dae7aab0797186876dcd8ee1c101bafea58fb393a"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x12, 0x0, 0x0, 0x0) [ 94.584503][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) 13:41:54 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) 13:41:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)=""/43, &(0x7f00000001c0)=0x28) 13:41:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0xffffffffffffffb5}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x40000000009, 0x0) 13:41:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='qdisc_reset\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 13:41:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) [ 94.895280][ T3858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:41:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='qdisc_reset\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 13:41:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) [ 94.978008][ T3863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.986751][ T3741] Bluetooth: hci0: command 0x040f tx timeout 13:41:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) [ 95.067968][ T972] Bluetooth: hci3: command 0x040f tx timeout [ 95.069209][ T3741] Bluetooth: hci1: command 0x040f tx timeout 13:41:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='qdisc_reset\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 95.131101][ T3874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.158071][ T3779] Bluetooth: hci2: command 0x040f tx timeout 13:41:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='qdisc_reset\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 13:41:54 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 13:41:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r1, 0x11c, 0x2, &(0x7f0000002080)=""/4111, &(0x7f0000000000)=0x100f) 13:41:54 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 13:41:55 executing program 2: syz_mount_image$iso9660(&(0x7f00000018c0), &(0x7f0000001900)='./file1\x00', 0x100000000, 0x0, &(0x7f00000019c0), 0x10006, &(0x7f0000001a00)={[{}, {@check_strict}, {@nocompress}]}) 13:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) 13:41:55 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 13:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) [ 95.436095][ T3897] loop2: detected capacity change from 0 to 264192 13:41:55 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 13:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) [ 95.514099][ T3897] ISOFS: Unable to identify CD-ROM format. 13:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) 13:41:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) 13:41:55 executing program 2: syz_mount_image$iso9660(&(0x7f00000018c0), &(0x7f0000001900)='./file1\x00', 0x100000000, 0x0, &(0x7f00000019c0), 0x10006, &(0x7f0000001a00)={[{}, {@check_strict}, {@nocompress}]}) 13:41:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) 13:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x10, 0x2c, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {}, {}, {0x50}}, [@TCA_CHAIN={0x32}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xe44, 0x2, [@TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0x98, 0x0, 0x0, 0x0, {{}, "d8e9c06a29ec563288f6f338f635ef120102137695005c2f1ae11464af0c262ed88a4cad9bff68420764a692fcd84bdea4908ba43be3f24896ddb983d70dfbf1a4d48cc636bb33034191b9234cea14be0c363c74726611ac9f58f63863761cb35d0080283207d3bfbc5d66095b4423c87740c8539ae84a266b20eeb0224614684a40c3fe55e996ee47"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x9, 0x0, "3bde9edbf88a41bcc3"}}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "c33b3906fd"}}}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x0, 0x0, 0x0, {{}, "fe6a5d5703ad73542920ce7de3724ea31ef2f23f20eab105a3cf40ea8f410e0ce7101239e965fa685b725118a70951f8d09ce4111981cf86dc1bc44368c34e70fa39e6928f1a0e33d277b9fdbc"}}]}]}, @TCA_CGROUP_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0xe84}}, 0x0) 13:41:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) 13:41:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffffe0}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000500)="93a745710b01619b9a2be11a88a8", 0xe, 0x0, 0x0, 0x0) [ 95.608158][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 [ 95.608982][ T3915] loop2: detected capacity change from 0 to 264192 [ 95.617080][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 [ 95.631073][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 [ 95.640037][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 13:41:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) [ 95.649205][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 [ 95.660724][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 13:41:55 executing program 3: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) 13:41:55 executing program 3: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) [ 95.696029][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3914 comm=syz-executor.1 [ 95.696444][ T3915] ISOFS: Unable to identify CD-ROM format. [ 95.796700][ C2] ================================================================== [ 95.802718][ C2] BUG: KASAN: use-after-free in decode_session6+0xfc3/0x17f0 13:41:55 executing program 2: syz_mount_image$iso9660(&(0x7f00000018c0), &(0x7f0000001900)='./file1\x00', 0x100000000, 0x0, &(0x7f00000019c0), 0x10006, &(0x7f0000001a00)={[{}, {@check_strict}, {@nocompress}]}) 13:41:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) 13:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x10, 0x2c, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {}, {}, {0x50}}, [@TCA_CHAIN={0x32}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xe44, 0x2, [@TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0x98, 0x0, 0x0, 0x0, {{}, "d8e9c06a29ec563288f6f338f635ef120102137695005c2f1ae11464af0c262ed88a4cad9bff68420764a692fcd84bdea4908ba43be3f24896ddb983d70dfbf1a4d48cc636bb33034191b9234cea14be0c363c74726611ac9f58f63863761cb35d0080283207d3bfbc5d66095b4423c87740c8539ae84a266b20eeb0224614684a40c3fe55e996ee47"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x9, 0x0, "3bde9edbf88a41bcc3"}}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "c33b3906fd"}}}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x0, 0x0, 0x0, {{}, "fe6a5d5703ad73542920ce7de3724ea31ef2f23f20eab105a3cf40ea8f410e0ce7101239e965fa685b725118a70951f8d09ce4111981cf86dc1bc44368c34e70fa39e6928f1a0e33d277b9fdbc"}}]}]}, @TCA_CGROUP_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0xe84}}, 0x0) 13:41:55 executing program 3: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) [ 95.808245][ C2] Read of size 1 at addr ffff88801d950169 by task udevd/3133 [ 95.816809][ C2] [ 95.818267][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz-executor.1 [ 95.818329][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz-executor.1 [ 95.826768][ C2] CPU: 2 PID: 3133 Comm: udevd Not tainted 6.0.0-rc3-syzkaller-00031-gc5e4d5e99162 #0 [ 95.826801][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 95.826826][ C2] Call Trace: [ 95.834692][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz-executor.1 [ 95.842836][ C2] [ 95.842852][ C2] dump_stack_lvl+0xcd/0x134 [ 95.866844][ C2] print_report.cold+0x2ba/0x6e9 [ 95.870560][ C2] ? decode_session6+0xfc3/0x17f0 13:41:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, 0x0, 0x0) 13:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x10, 0x2c, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {}, {}, {0x50}}, [@TCA_CHAIN={0x32}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xe44, 0x2, [@TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0x98, 0x0, 0x0, 0x0, {{}, "d8e9c06a29ec563288f6f338f635ef120102137695005c2f1ae11464af0c262ed88a4cad9bff68420764a692fcd84bdea4908ba43be3f24896ddb983d70dfbf1a4d48cc636bb33034191b9234cea14be0c363c74726611ac9f58f63863761cb35d0080283207d3bfbc5d66095b4423c87740c8539ae84a266b20eeb0224614684a40c3fe55e996ee47"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x9, 0x0, "3bde9edbf88a41bcc3"}}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "c33b3906fd"}}}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x0, 0x0, 0x0, {{}, "fe6a5d5703ad73542920ce7de3724ea31ef2f23f20eab105a3cf40ea8f410e0ce7101239e965fa685b725118a70951f8d09ce4111981cf86dc1bc44368c34e70fa39e6928f1a0e33d277b9fdbc"}}]}]}, @TCA_CGROUP_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0xe84}}, 0x0) [ 95.871695][ T3936] loop2: detected capacity change from 0 to 264192 [ 95.874446][ C2] kasan_report+0xb1/0x1e0 [ 95.882351][ C2] ? decode_session6+0xfc3/0x17f0 [ 95.886363][ C2] decode_session6+0xfc3/0x17f0 [ 95.890330][ C2] ? __lock_acquire+0x166e/0x56d0 [ 95.894579][ C2] __xfrm_decode_session+0x50/0xb0 [ 95.898842][ C2] vti6_tnl_xmit+0x419/0x1f90 [ 95.902967][ C2] ? find_held_lock+0x2d/0x110 [ 95.907058][ C2] ? vti6_exit_batch_net+0x670/0x670 [ 95.910548][ C2] dev_hard_start_xmit+0x183/0x880 [ 95.914243][ C2] sch_direct_xmit+0x19f/0xbe0 [ 95.916104][ T3936] ISOFS: Unable to identify CD-ROM format. [ 95.917481][ C2] ? sfb_enqueue+0x95a/0x2020 [ 95.917527][ C2] ? dev_watchdog+0x8f0/0x8f0 [ 95.917541][ C2] __qdisc_run+0x4bb/0x1710 [ 95.917554][ C2] ? rcu_read_lock_sched_held+0x3a/0x70 [ 95.917587][ C2] __dev_queue_xmit+0x2299/0x3ad0 [ 95.917602][ C2] ? netdev_core_pick_tx+0x2e0/0x2e0 13:41:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x10, 0x2c, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {}, {}, {0x50}}, [@TCA_CHAIN={0x32}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xe44, 0x2, [@TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c}, @TCF_EM_CONTAINER={0x98, 0x0, 0x0, 0x0, {{}, "d8e9c06a29ec563288f6f338f635ef120102137695005c2f1ae11464af0c262ed88a4cad9bff68420764a692fcd84bdea4908ba43be3f24896ddb983d70dfbf1a4d48cc636bb33034191b9234cea14be0c363c74726611ac9f58f63863761cb35d0080283207d3bfbc5d66095b4423c87740c8539ae84a266b20eeb0224614684a40c3fe55e996ee47"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x9, 0x0, "3bde9edbf88a41bcc3"}}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "c33b3906fd"}}}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x0, 0x0, 0x0, {{}, "fe6a5d5703ad73542920ce7de3724ea31ef2f23f20eab105a3cf40ea8f410e0ce7101239e965fa685b725118a70951f8d09ce4111981cf86dc1bc44368c34e70fa39e6928f1a0e33d277b9fdbc"}}]}]}, @TCA_CGROUP_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0xe84}}, 0x0) [ 95.917615][ C2] ? find_held_lock+0x2d/0x110 [ 95.943362][ C2] ? ip6_finish_output2+0x564/0x1520 [ 95.947054][ C2] ? mark_held_locks+0x9f/0xe0 [ 95.950221][ C2] ? neigh_connected_output+0x41a/0x520 [ 95.953775][ C2] ? neigh_connected_output+0x41a/0x520 [ 95.957321][ C2] neigh_connected_output+0x3c0/0x520 [ 95.960665][ C2] ip6_finish_output2+0x564/0x1520 [ 95.963951][ C2] ip6_finish_output+0x690/0x1160 [ 95.967122][ C2] ip6_output+0x1ed/0x540 [ 95.969777][ C2] ndisc_send_skb+0xa5f/0x1730 [ 95.972775][ C2] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 95.976569][ C2] ? ndisc_net_init+0x220/0x220 [ 95.979501][ C2] ? memset+0x20/0x40 [ 95.981932][ C2] ndisc_send_rs+0x12e/0x6f0 [ 95.984764][ C2] addrconf_rs_timer+0x3ed/0x820 [ 95.987639][ C2] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 95.990490][ C2] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 95.993612][ C2] call_timer_fn+0x1a0/0x6b0 [ 95.996553][ C2] ? timer_fixup_activate+0x350/0x350 [ 95.999848][ C2] ? lock_downgrade+0x6e0/0x6e0 [ 96.002884][ C2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.006137][ C2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.009279][ C2] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 96.012155][ C2] __run_timers.part.0+0x674/0xa80 [ 96.015156][ C2] ? call_timer_fn+0x6b0/0x6b0 [ 96.018172][ C2] ? cpuacct_all_seq_show+0x520/0x520 [ 96.021561][ C2] ? kvm_sched_clock_read+0x14/0x40 [ 96.024952][ C2] ? sched_clock_cpu+0x69/0x2b0 [ 96.028216][ C2] run_timer_softirq+0xb3/0x1d0 [ 96.031164][ C2] __do_softirq+0x1d3/0x9c6 [ 96.033733][ C2] __irq_exit_rcu+0x123/0x180 [ 96.037318][ C2] irq_exit_rcu+0x5/0x20 [ 96.040656][ C2] sysvec_apic_timer_interrupt+0x45/0xc0 [ 96.044410][ C2] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.048533][ C2] RIP: 0033:0x7f018032a467 [ 96.052263][ C2] Code: 44 00 00 48 8b 15 11 aa 0c 00 f7 d8 64 89 02 b8 ff ff ff ff eb bc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 e1 a9 0c 00 f7 d8 64 89 02 b8 [ 96.065419][ C2] RSP: 002b:00007ffd3ebf66c8 EFLAGS: 00000202 [ 96.070045][ C2] RAX: 0000000000000000 RBX: 000056153bf2f130 RCX: 00007f018032a467 [ 96.075235][ C2] RDX: 00007f01803f1780 RSI: 000056153bf3e5e0 RDI: 000000000000000c [ 96.079976][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f01803f5a60 [ 96.085013][ C2] R10: 000056153bf3f5e0 R11: 0000000000000202 R12: 00007f01803f2380 [ 96.089805][ C2] R13: 000056153bf2c410 R14: 0000000000000000 R15: 0000000000000000 [ 96.094738][ C2] [ 96.096731][ C2] [ 96.098289][ C2] The buggy address belongs to the physical page: [ 96.102577][ C2] page:ffffea0000765400 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x1d950 [ 96.109163][ C2] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.113832][ C2] raw: 00fff00000000000 ffffea0000765448 ffffea0000764f48 0000000000000000 [ 96.119936][ C2] raw: 0000000000000003 ffff88801d950000 00000000ffffffff 0000000000000000 [ 96.125922][ C2] page dumped because: kasan: bad access detected [ 96.129659][ C2] page_owner tracks the page as freed [ 96.133694][ C2] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x242220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 0, tgid 0 (swapper/2), ts 71970204561, free_ts 88778521860 [ 96.146671][ C2] get_page_from_freelist+0x109b/0x2ce0 [ 96.150964][ C2] __alloc_pages_slowpath.constprop.0+0x2d7/0x2240 [ 96.156803][ C2] __alloc_pages+0x43d/0x510 [ 96.161075][ C2] cache_grow_begin+0x75/0x360 [ 96.164800][ C2] cache_alloc_refill+0x27f/0x380 [ 96.168735][ C2] kmem_cache_alloc_bulk+0x333/0x470 [ 96.172920][ C2] napi_skb_cache_get+0xeb/0x170 [ 96.176532][ C2] __alloc_skb+0x96/0x2f0 [ 96.180004][ C2] __napi_alloc_skb+0x93/0x340 [ 96.183760][ C2] e1000_clean_rx_irq+0x6ff/0x1080 [ 96.188389][ C2] e1000_clean+0x961/0x1c40 [ 96.191904][ C2] __napi_poll+0xb3/0x6d0 [ 96.195183][ C2] net_rx_action+0x9c1/0xd90 [ 96.198118][ C2] __do_softirq+0x1d3/0x9c6 [ 96.201037][ C2] page last free stack trace: [ 96.204063][ C2] free_pcp_prepare+0x5e4/0xd20 [ 96.207162][ C2] free_unref_page+0x19/0x4d0 [ 96.210004][ C2] slabs_destroy+0x89/0xc0 [ 96.212707][ C2] ___cache_free+0x2a8/0x3d0 [ 96.216081][ C2] qlist_free_all+0x4f/0x1b0 [ 96.219026][ C2] kasan_quarantine_reduce+0x180/0x200 [ 96.222433][ C2] __kasan_slab_alloc+0x97/0xb0 [ 96.225482][ C2] kmem_cache_alloc_trace+0x212/0x460 [ 96.229195][ C2] kernfs_fop_open+0x2fa/0xfd0 [ 96.232749][ C2] do_dentry_open+0x4a4/0x13a0 [ 96.236711][ C2] path_openat+0x1c92/0x28f0 [ 96.239966][ C2] do_filp_open+0x1b6/0x400 [ 96.242882][ C2] do_sys_openat2+0x16d/0x4c0 [ 96.246059][ C2] __x64_sys_openat+0x13f/0x1f0 [ 96.249588][ C2] do_syscall_64+0x35/0xb0 [ 96.252911][ C2] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.257126][ C2] [ 96.258953][ C2] Memory state around the buggy address: [ 96.263597][ C2] ffff88801d950000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.269487][ C2] ffff88801d950080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.274679][ C2] >ffff88801d950100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.279632][ C2] ^ [ 96.284652][ C2] ffff88801d950180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.290620][ C2] ffff88801d950200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.296108][ C2] ================================================================== [ 96.301672][ C2] Kernel panic - not syncing: panic_on_warn set ... [ 96.306718][ C2] CPU: 2 PID: 3133 Comm: udevd Not tainted 6.0.0-rc3-syzkaller-00031-gc5e4d5e99162 #0 [ 96.313873][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 96.319392][ C2] Call Trace: [ 96.321593][ C2] [ 96.323511][ C2] dump_stack_lvl+0xcd/0x134 [ 96.326752][ C2] panic+0x2c8/0x627 [ 96.329151][ C2] ? panic_print_sys_info.part.0+0x10b/0x10b [ 96.333204][ C2] ? asm_common_interrupt+0x22/0x40 [ 96.337198][ C2] ? decode_session6+0xfc3/0x17f0 [ 96.341527][ C2] end_report.part.0+0x3f/0x7c [ 96.344844][ C2] kasan_report.cold+0xa/0xf [ 96.348149][ C2] ? decode_session6+0xfc3/0x17f0 [ 96.351795][ C2] decode_session6+0xfc3/0x17f0 [ 96.354903][ C2] ? __lock_acquire+0x166e/0x56d0 [ 96.358283][ C2] __xfrm_decode_session+0x50/0xb0 [ 96.361462][ C2] vti6_tnl_xmit+0x419/0x1f90 [ 96.364764][ C2] ? find_held_lock+0x2d/0x110 [ 96.368019][ C2] ? vti6_exit_batch_net+0x670/0x670 [ 96.371931][ C2] dev_hard_start_xmit+0x183/0x880 [ 96.375096][ C2] sch_direct_xmit+0x19f/0xbe0 [ 96.378048][ C2] ? sfb_enqueue+0x95a/0x2020 [ 96.380998][ C2] ? dev_watchdog+0x8f0/0x8f0 [ 96.383795][ C2] __qdisc_run+0x4bb/0x1710 [ 96.386788][ C2] ? rcu_read_lock_sched_held+0x3a/0x70 [ 96.390298][ C2] __dev_queue_xmit+0x2299/0x3ad0 [ 96.394024][ C2] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 96.397843][ C2] ? find_held_lock+0x2d/0x110 [ 96.401101][ C2] ? ip6_finish_output2+0x564/0x1520 [ 96.405481][ C2] ? mark_held_locks+0x9f/0xe0 [ 96.408603][ C2] ? neigh_connected_output+0x41a/0x520 [ 96.411815][ C2] ? neigh_connected_output+0x41a/0x520 [ 96.415428][ C2] neigh_connected_output+0x3c0/0x520 [ 96.418666][ C2] ip6_finish_output2+0x564/0x1520 [ 96.421766][ C2] ip6_finish_output+0x690/0x1160 [ 96.424915][ C2] ip6_output+0x1ed/0x540 [ 96.427734][ C2] ndisc_send_skb+0xa5f/0x1730 [ 96.430564][ C2] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 96.434324][ C2] ? ndisc_net_init+0x220/0x220 [ 96.437616][ C2] ? memset+0x20/0x40 [ 96.440355][ C2] ndisc_send_rs+0x12e/0x6f0 [ 96.443377][ C2] addrconf_rs_timer+0x3ed/0x820 [ 96.446647][ C2] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 96.449683][ C2] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 96.452724][ C2] call_timer_fn+0x1a0/0x6b0 [ 96.455689][ C2] ? timer_fixup_activate+0x350/0x350 [ 96.459080][ C2] ? lock_downgrade+0x6e0/0x6e0 [ 96.462067][ C2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.466100][ C2] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.470103][ C2] ? ipv6_get_lladdr+0x4a0/0x4a0 [ 96.473748][ C2] __run_timers.part.0+0x674/0xa80 [ 96.477615][ C2] ? call_timer_fn+0x6b0/0x6b0 [ 96.480593][ C2] ? cpuacct_all_seq_show+0x520/0x520 [ 96.483953][ C2] ? kvm_sched_clock_read+0x14/0x40 [ 96.487301][ C2] ? sched_clock_cpu+0x69/0x2b0 [ 96.491190][ C2] run_timer_softirq+0xb3/0x1d0 [ 96.495477][ C2] __do_softirq+0x1d3/0x9c6 [ 96.498760][ C2] __irq_exit_rcu+0x123/0x180 [ 96.501389][ C2] irq_exit_rcu+0x5/0x20 [ 96.504372][ C2] sysvec_apic_timer_interrupt+0x45/0xc0 [ 96.509415][ C2] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.514459][ C2] RIP: 0033:0x7f018032a467 [ 96.517893][ C2] Code: 44 00 00 48 8b 15 11 aa 0c 00 f7 d8 64 89 02 b8 ff ff ff ff eb bc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 e1 a9 0c 00 f7 d8 64 89 02 b8 [ 96.531559][ C2] RSP: 002b:00007ffd3ebf66c8 EFLAGS: 00000202 [ 96.536729][ C2] RAX: 0000000000000000 RBX: 000056153bf2f130 RCX: 00007f018032a467 [ 96.541939][ C2] RDX: 00007f01803f1780 RSI: 000056153bf3e5e0 RDI: 000000000000000c [ 96.547080][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f01803f5a60 [ 96.551907][ C2] R10: 000056153bf3f5e0 R11: 0000000000000202 R12: 00007f01803f2380 [ 96.557828][ C2] R13: 000056153bf2c410 R14: 0000000000000000 R15: 0000000000000000 [ 96.562904][ C2] [ 96.565887][ C2] Kernel Offset: disabled [ 96.569334][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:41:55 Registers: info registers vcpu 0 RAX=ffffffff908f8220 RBX=0000000000000030 RCX=ffffffff90b01f58 RDX=00000000000003dd RSI=1ffffffff211f04d RDI=ffffffff908f826c RBP=ffffffff815dbf80 RSP=ffffc90002edf238 R8 =ffffffff908efe50 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000066 R12=ffffc90002edf388 R13=ffffffff90b01f68 R14=dffffc0000000000 R15=ffffffff90b01f58 RIP=ffffffff815de71b RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555e4c400 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555e5d888 CR3=0000000062e78000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000001edf91286802941c XMM02=00000000000000005931608782dc365e XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000000002b RCX=ffffffff815e4953 RDX=1ffff1100ca56560 RSI=0000000000000008 RDI=ffffffff908da940 RBP=0000000000000000 RSP=ffffc9000320fbf0 R8 =0000000000000000 R9 =ffffffff908da977 R10=fffffbfff211b52e R11=0000000000000001 R12=ffff8880652b2ae0 R13=ffff8880652b2040 R14=ffff8880652b2ab8 R15=0000000000000000 RIP=ffffffff81c6e476 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555f0e400 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555f0f808 CR3=00000000429df000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff846135d1 RDI=ffffffff914810c0 RBP=ffffffff91481080 RSP=ffffc9000291ecb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84613570 R15=0000000000000000 RIP=ffffffff846135fb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f018069b840 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd3ebe99f8 CR3=000000001df65000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000000000ff00 XMM02=0000ff00000000000000000000000000 XMM03=0000000000ff0000000000ff00000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff00000000ff00ffff000000000000 XMM06=ffffffffffffff00ffffffffffffffff XMM07=00000000000000000000000000000000 XMM08=65770075253a7325202773252720676e XMM09=00000000000000000000000000000000 XMM10=20202000002020202020202020202020 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffffea00014fa700 RSI=ffff888000000000 RDI=ffff888053e9d000 RBP=ffffea00014fa700 RSP=ffffc90000ed7820 R8 =0000160000000000 R9 =ffffea00014fa740 R10=fffff9400029f4e6 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff84246ef9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555707f400 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd1f3d952f8 CR3=0000000066ba5000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd1f3d717c000007fd1f3d717c8 XMM02=00007fd1f3d717e000007fd1f3d717c0 XMM03=00007fd1f3d717c800007fd1f3d717c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000