[  125.426297][   T39] audit: type=1400 audit(1576655316.530:41): avc:  denied  { map } for  pid=9070 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '[localhost]:30943' (ECDSA) to the list of known hosts.
[  128.407132][   T39] audit: type=1400 audit(1576655319.510:42): avc:  denied  { map } for  pid=9082 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
2019/12/18 07:48:39 fuzzer started
2019/12/18 07:48:43 dialing manager at 10.0.2.10:46861
2019/12/18 07:48:43 syscalls: 2712
2019/12/18 07:48:43 code coverage: enabled
2019/12/18 07:48:43 comparison tracing: enabled
2019/12/18 07:48:43 extra coverage: enabled
2019/12/18 07:48:43 setuid sandbox: enabled
2019/12/18 07:48:43 namespace sandbox: enabled
2019/12/18 07:48:43 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/18 07:48:43 fault injection: enabled
2019/12/18 07:48:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/18 07:48:43 net packet injection: enabled
2019/12/18 07:48:43 net device setup: enabled
2019/12/18 07:48:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/18 07:48:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
[  138.796355][    C1] hrtimer: interrupt took 24176109 ns
07:49:23 executing program 0:
pipe(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{0x3, 0x0, 0x0, 0x0, 0x9}], "", [[]]}, 0x158)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, 0x0, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  172.725562][   T39] audit: type=1400 audit(1576655363.820:43): avc:  denied  { map } for  pid=9105 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=24176 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
07:49:24 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800)

[  173.286610][ T9106] IPVS: ftp: loaded support on port[0] = 21
[  173.308400][ T9108] IPVS: ftp: loaded support on port[0] = 21
07:49:24 executing program 2:
tkill(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x90}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  173.638094][ T9108] chnl_net:caif_netlink_parms(): no params data found
07:49:24 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))
rmdir(&(0x7f0000000040)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000400)='ch\xf7ldren\x00')

[  173.788762][ T9106] chnl_net:caif_netlink_parms(): no params data found
[  173.831006][ T9113] IPVS: ftp: loaded support on port[0] = 21
[  173.963497][ T9108] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.986479][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.008201][ T9108] device bridge_slave_0 entered promiscuous mode
[  174.061578][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.076099][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.095053][ T9108] device bridge_slave_1 entered promiscuous mode
[  174.124492][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.141463][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.157144][ T9106] device bridge_slave_0 entered promiscuous mode
[  174.178450][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.190340][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.200925][ T9106] device bridge_slave_1 entered promiscuous mode
[  174.223996][ T9108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.231507][ T9115] IPVS: ftp: loaded support on port[0] = 21
[  174.259026][ T9108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.334410][ T9106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.358777][ T9108] team0: Port device team_slave_0 added
[  174.373949][ T9108] team0: Port device team_slave_1 added
[  174.392458][ T9106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.437895][ T9106] team0: Port device team_slave_0 added
[  174.467468][ T9106] team0: Port device team_slave_1 added
[  174.555554][ T9108] device hsr_slave_0 entered promiscuous mode
[  174.610164][ T9108] device hsr_slave_1 entered promiscuous mode
[  174.912801][ T9106] device hsr_slave_0 entered promiscuous mode
[  174.959818][ T9106] device hsr_slave_1 entered promiscuous mode
[  175.009431][ T9106] debugfs: Directory 'hsr0' with parent '/' already present!
[  175.050834][ T9113] chnl_net:caif_netlink_parms(): no params data found
[  175.113502][   T39] audit: type=1400 audit(1576655366.220:44): avc:  denied  { create } for  pid=9108 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  175.152869][   T39] audit: type=1400 audit(1576655366.220:45): avc:  denied  { write } for  pid=9108 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  175.187836][   T39] audit: type=1400 audit(1576655366.220:46): avc:  denied  { read } for  pid=9108 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  175.247640][ T9108] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  175.361642][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.378776][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.396979][ T9113] device bridge_slave_0 entered promiscuous mode
[  175.419967][ T9108] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  175.502216][ T9108] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  175.624448][ T9108] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  175.745866][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.756697][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.771866][ T9113] device bridge_slave_1 entered promiscuous mode
[  175.828041][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.875785][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.910596][ T9106] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  176.012878][ T9115] chnl_net:caif_netlink_parms(): no params data found
[  176.042171][ T9113] team0: Port device team_slave_0 added
[  176.063115][ T9106] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  176.134820][ T9106] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  176.235205][ T9106] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  176.292388][ T9113] team0: Port device team_slave_1 added
[  176.392958][ T9113] device hsr_slave_0 entered promiscuous mode
[  176.451693][ T9113] device hsr_slave_1 entered promiscuous mode
[  176.519441][ T9113] debugfs: Directory 'hsr0' with parent '/' already present!
[  176.553493][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.564482][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.577728][ T9115] device bridge_slave_0 entered promiscuous mode
[  176.589039][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.598167][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.608815][ T9115] device bridge_slave_1 entered promiscuous mode
[  176.663448][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.685806][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.704353][ T9113] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  176.817435][ T9115] team0: Port device team_slave_0 added
[  176.829687][ T9115] team0: Port device team_slave_1 added
[  176.840644][ T9113] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  176.924446][ T9113] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  176.992104][ T9113] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  177.231933][ T9115] device hsr_slave_0 entered promiscuous mode
[  177.311075][ T9115] device hsr_slave_1 entered promiscuous mode
[  177.389453][ T9115] debugfs: Directory 'hsr0' with parent '/' already present!
[  177.413234][ T9106] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.466692][ T9115] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  177.536138][ T9115] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  177.602009][ T9115] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  177.705592][ T9115] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  177.810779][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.821785][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.833851][ T9108] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.848034][ T9106] 8021q: adding VLAN 0 to HW filter on device team0
[  177.872114][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.884350][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.895517][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.904728][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.934667][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.953271][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.965346][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.977927][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.993094][ T9123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.022568][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.033773][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.049789][ T9108] 8021q: adding VLAN 0 to HW filter on device team0
[  178.060978][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.080121][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.091000][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.103139][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.115264][   T18] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.126552][   T18] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.137630][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.154951][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.166989][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.195469][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.207424][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.220158][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.232014][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.244258][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.256606][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.267683][ T9123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.280091][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.294996][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.324773][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.340180][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.352937][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.367000][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.388720][ T9113] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.414940][ T9108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  178.437837][ T9108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.458595][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.477867][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.492931][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.506795][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.519682][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.532857][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.545077][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.556919][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.569760][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.587095][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.597824][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.608915][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.621489][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.652863][ T9113] 8021q: adding VLAN 0 to HW filter on device team0
[  178.674272][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.700072][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.728240][ T9106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.759078][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.792164][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.826549][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.889082][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.900647][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.921161][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.962327][   T39] audit: type=1400 audit(1576655370.070:47): avc:  denied  { associate } for  pid=9106 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[  178.987591][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.108040][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.129960][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.148624][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.167941][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.183932][ T9112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.211934][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  179.259072][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.288980][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.317987][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.335035][ T9108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.353844][ T9115] 8021q: adding VLAN 0 to HW filter on device team0
[  179.380238][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.416932][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.438673][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.470082][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.530385][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.533538][ T9127] ERROR: Domain '<kernel> /sbin/init /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /syz-fuzzer /syz-executor.0 proc:/self/fd/4' not defined.
[  179.600196][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.668658][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
07:49:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492bd3aa3d41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b5080da621807106df2858ec973328e5a2c078a3fe3b32020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e91531b5f53fd9f5520f6973c31a430506b20d1537f7e28d8ae4448fea7a36489bbbcb6bc3448ab8726f4ab24967afbe170daffc4b452dab8f027988c9e84", 0xe5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  179.768930][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.801581][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.821976][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.840041][ T9123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.868403][ T9123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.926022][ T9113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.945716][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
07:49:31 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800)

[  179.962166][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.975655][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.985702][   T23] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.993714][   T23] bridge0: port 2(bridge_slave_1) entered forwarding state
07:49:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/235, 0xeb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/18, 0x12}, {0x0}], 0x2}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e)
shutdown(r3, 0x0)
r5 = socket$inet6_sctp(0x1c, 0x3, 0x84)
recvmsg(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffffffffffff7e}], 0x8}, 0x0)
shutdown(r4, 0x0)
shutdown(r2, 0x0)

[  180.002291][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.027328][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.091403][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.105774][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.118864][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  180.135293][ T9112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  180.158284][ T9115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  180.174840][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.193273][ T9113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.201780][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.211819][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.225807][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.238383][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.257902][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.271079][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.282451][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.292063][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.302165][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
07:49:31 executing program 1:
socket$inet6(0xa, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @multicast1}, 0xc)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x1}, 0x0)
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26", 0x4e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0xff8)
r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00')

[  180.326697][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.354565][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  180.369027][   T39] audit: type=1400 audit(1576655371.470:48): avc:  denied  { map } for  pid=9153 comm="syz-executor.1" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=37760 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
[  180.374722][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.435569][   T39] audit: type=1400 audit(1576655371.480:49): avc:  denied  { open } for  pid=9153 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[  180.450781][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.495965][   T39] audit: type=1400 audit(1576655371.490:50): avc:  denied  { kernel } for  pid=9153 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[  180.633668][   T39] audit: type=1400 audit(1576655371.740:51): avc:  denied  { prog_load } for  pid=9163 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
07:49:31 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
readv(r2, &(0x7f0000002340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)

07:49:31 executing program 2:
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00')

07:49:31 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))
rmdir(&(0x7f0000000040)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000400)='ch\xf7ldren\x00')

07:49:31 executing program 1:
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x28ab)
acct(&(0x7f0000000040)='./bus\x00')

[  180.833664][ T9183] Process accounting resumed
07:49:33 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))
rmdir(&(0x7f0000000040)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000400)='ch\xf7ldren\x00')

07:49:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/235, 0xeb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
shutdown(r1, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0x1c, 0x3, 0x84)
recvmsg(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0)
shutdown(r2, 0x0)

07:49:33 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492bd3aa3d41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b5080da621807106df2858ec973328e5a2c078a3fe3b32020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e91531b5f53fd9f5520f6973c31a430506b20d1537f7e28d8ae4448fea7a36489bbbcb6bc3448ab8726f4ab24967afbe170daffc4b452dab8f027988c9e84", 0xe5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

07:49:33 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))
rmdir(&(0x7f0000000040)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000400)='ch\xf7ldren\x00')

07:49:34 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x11e)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x804, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x3, 0x4000)
socket(0x22, 0x2, 0x4)
socket$inet(0x2, 0x4000000805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x10008001, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
dup(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340), 0x8)
write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d)

07:49:34 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))
rmdir(&(0x7f0000000040)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000400)='ch\xf7ldren\x00')

07:49:34 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))
rmdir(&(0x7f0000000040)='./file0\x00')

07:49:34 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)
rt_sigaction(0x0, &(0x7f0000000080)={0xfffffffffffffffd, {0x800}, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000000))

[  182.951897][   T39] audit: type=1400 audit(1576655374.060:52): avc:  denied  { map } for  pid=9199 comm="syz-executor.3" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1
07:49:34 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x5fe59000)

07:49:34 executing program 1:
mknod(&(0x7f0000000040)='./bus\x00', 0x8004, 0x86128)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000042, 0x0)
pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="fa1204a49155ce1e0002", 0xa}], 0x1, 0x0)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="a1", 0x1}], 0x1, 0x0)
pwritev(r0, &(0x7f00000007c0)=[{&(0x7f0000000400)="3660c8190872f2bae482c24b0acc41b8d5d11cf4ca4e59ee47db531646223483c1a8ca18e2ee2aebefaca44d9881ffc84395265f72a3323ca199605f8503ea90de48b0de95a04e5f6b9a0be26b9e04241a015b0d989ec42d9288a2983dd0747f2e30fd482ca34794df8d811cd63ebdcdef31f94b068e8555bdd9675a12487c637e94", 0x82}, {&(0x7f00000004c0)="128667182c2aeb33c19a95e4009ffc8dc4a385a4927127b0a8239befc73d5f9775958ecfcea523bea56e02aa0d90a66caea61e2ca54ab90a73ce9f9553fdbdecb7309ff0c925135807d4a5367ff3e16e3c4310c1b577", 0x56}, {&(0x7f0000000540)="7676b928973f605f44b9e983cff7445f6cf8d991e176b2820efadf6e621f9b63ae168afa78428c81cc82dddabff92029ad44bc3e68c368d89eebd21e528f1d116c9f5175dcd63ebd4abb6a85c3cb2fed98d22d", 0x53}, {&(0x7f00000005c0)="74a92a1576c2d55eb55f4ac9db81f0223c62761fe0ddc6c0963dfc8e305c616be303474a4c936789d218ac81e6057180eb3794e48e2c1e5ccf9cdabb8ddcf246d2cac8238d7d9649e6d5aa79c0103959a6", 0x51}, {&(0x7f00000000c0)="8edb77930b8fcaee643f9c", 0xb}, {&(0x7f0000000180)="8a456eb711a2c4fd35863b152559e8d70940c3af4a63f697248db68ef36c1fd3a8137e3fcfbbcd4f8fe195366f024ea102afe95716d77e8323", 0x39}, {&(0x7f0000000700)="d2ceb019b46d8e45c22394a3b0c5d2ff06cb27530510ce1f2625de3a4c63985f9b3d11e5c7dd7bf75c6d6c78fb960e652c748a3611c7c1105b07d79e18dc50f0c7ef91259d80976d6e6ebaae68ec4a8132f8bcb580afa4ec2194902bcfe50e1e44495500e919ab94c6f53912da4b26cef5da7f500f4c0267b672375e7c55320e183e4083cd5aa093dc5ea776bf32eff8766addd5bd2ccd0fde725513d1815202fa3cce4425dbc0e143647e041f9b6458f5d434fdb6b7cf31ca2f", 0xba}, {&(0x7f0000001140)="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", 0x21f}], 0x8, 0x0)

07:49:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492bd3aa3d41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b5080da621807106df2858ec973328e5a2c078a3fe3b32020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e91531b5f53fd9f5520f6973c31a430506b20d1537f7e28d8ae4448fea7a36489bbbcb6bc3448ab8726f4ab24967afbe170daffc4b452dab8f027988c9e84", 0xe5}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

07:49:37 executing program 2:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00'})

[  186.660080][ T9214] snd_hda_intel 0000:00:06.0: azx_get_response timeout, switching to polling mode: last cmd=0x004a0000
[  187.699833][ T9214] snd_hda_intel 0000:00:06.0: No response from codec, disabling MSI: last cmd=0x004a0000
[  188.771451][ T9214] ------------[ cut here ]------------
[  188.783295][ T9214] snd_hda_intel 0000:00:06.0: azx_get_response timeout, switching to single_cmd mode: last cmd=0x004a0000
[  188.811387][ T9214] WARNING: CPU: 2 PID: 9214 at sound/pci/hda/hda_controller.c:886 azx_rirb_get_response+0x5d6/0x720
[  188.811387][ T9214] Kernel panic - not syncing: panic_on_warn set ...
[  188.811387][ T9214] CPU: 2 PID: 9214 Comm: syz-executor.3 Not tainted 5.5.0-rc2-syzkaller #0
[  188.811387][ T9214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  188.811387][ T9214] Call Trace:
[  188.811387][ T9214]  dump_stack+0x197/0x210
[  188.811387][ T9214]  ? azx_rirb_get_response+0x5c0/0x720
[  188.811387][ T9214]  panic+0x2e3/0x75c
[  188.811387][ T9214]  ? add_taint.cold+0x16/0x16
[  188.811387][ T9214]  ? __kasan_check_write+0x14/0x20
[  188.811387][ T9214]  ? __warn.cold+0x14/0x3e
[  188.811387][ T9214]  ? azx_rirb_get_response+0x5d6/0x720
[  188.811387][ T9214]  __warn.cold+0x2f/0x3e
[  188.811387][ T9214]  ? azx_rirb_get_response+0x5d6/0x720
[  188.811387][ T9214]  report_bug+0x289/0x300
[  188.811387][ T9214]  do_error_trap+0x11b/0x200
[  188.811387][ T9214]  do_invalid_op+0x37/0x50
[  188.811387][ T9214]  ? azx_rirb_get_response+0x5d6/0x720
[  188.811387][ T9214]  invalid_op+0x23/0x30
[  188.811387][ T9214] RIP: 0010:azx_rirb_get_response+0x5d6/0x720
[  188.811387][ T9214] Code: f6 00 00 00 49 8b 5d 00 e8 a7 42 7a fb 4c 89 ef e8 af 04 5a fe 44 89 f9 48 89 da 48 c7 c7 c0 0b ce 88 48 89 c6 e8 49 ec 4a fb <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 4d 88 48 89 ca 48 c1 ea
[  188.811387][ T9214] RSP: 0018:ffffc90002d57718 EFLAGS: 00010282
[  188.811387][ T9214] RAX: 0000000000000000 RBX: ffff888027e9c0c0 RCX: 0000000000000000
[  188.811387][ T9214] RDX: 0000000000040000 RSI: ffffffff815e8906 RDI: fffff520005aaed5
[  188.811387][ T9214] RBP: ffffc90002d57790 R08: ffff88805ca6c2c0 R09: ffffed1005a46621
[  188.811387][ T9214] R10: ffffed1005a46620 R11: ffff88802d233107 R12: ffff88807372e000
[  188.811387][ T9214] R13: ffff88807ab700b0 R14: dffffc0000000000 R15: 00000000004a0000
[  188.811387][ T9214]  ? vprintk_func+0x86/0x189
[  188.811387][ T9214]  ? azx_rirb_get_response+0x5d6/0x720
[  188.811387][ T9214]  azx_get_response+0x14c/0x180
[  188.811387][ T9214]  snd_hdac_bus_exec_verb_unlocked+0x4b5/0x950
[  188.811387][ T9214]  ? snd_hdac_bus_queue_event+0x480/0x480
[  188.811387][ T9214]  codec_exec_verb+0x13d/0x340
[  188.811387][ T9214]  ? hda_jackpoll_work+0xc0/0xc0
[  188.811387][ T9214]  snd_hdac_exec_verb+0x65/0x110
[  188.811387][ T9214]  codec_read+0xa2/0x100
[  188.811387][ T9214]  ? snd_hdac_get_connections+0x600/0x600
[  188.811387][ T9214]  snd_hdac_codec_read+0x34/0x40
[  188.811387][ T9214]  update_pcm_format.part.0+0x36/0xc0
[  188.811387][ T9214]  snd_hda_codec_setup_stream.part.0+0x355/0xa40
[  188.811387][ T9214]  snd_hda_codec_setup_stream+0x47/0x60
[  188.811387][ T9214]  capture_pcm_prepare+0x63/0x100
[  188.811387][ T9214]  ? alt_playback_pcm_prepare+0x100/0x100
[  188.811387][ T9214]  snd_hda_codec_prepare+0xa5/0x420
[  188.811387][ T9214]  ? snd_hdac_stream_setup+0x353/0x7f0
[  188.811387][ T9214]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  188.811387][ T9214]  ? snd_hdac_stream_setup+0x5a0/0x7f0
[  188.811387][ T9214]  azx_pcm_prepare+0x53f/0x950
[  188.811387][ T9214]  snd_pcm_do_prepare+0x61/0xa0
[  188.811387][ T9214]  snd_pcm_action_single+0x7a/0x130
[  188.811387][ T9214]  snd_pcm_action_nonatomic+0x9c/0xb0
[  188.811387][ T9214]  snd_pcm_prepare+0x121/0x1b0
[  188.811387][ T9214]  snd_pcm_kernel_ioctl+0x117/0x1f0
[  188.811387][ T9214]  snd_pcm_oss_prepare+0x49/0x150
[  188.811387][ T9214]  snd_pcm_oss_make_ready+0x12b/0x170
[  188.811387][ T9214]  snd_pcm_oss_sync.isra.0+0x1c4/0x7e0
[  188.811387][ T9214]  ? fcntl_setlk+0xd10/0xd10
[  188.811387][ T9214]  snd_pcm_oss_release+0x214/0x290
[  188.811387][ T9214]  __fput+0x2ff/0x890
[  188.811387][ T9214]  ? snd_pcm_oss_sync.isra.0+0x7e0/0x7e0
[  188.811387][ T9214]  ____fput+0x16/0x20
[  188.811387][ T9214]  task_work_run+0x145/0x1c0
[  188.811387][ T9214]  exit_to_usermode_loop+0x316/0x380
[  188.811387][ T9214]  do_syscall_64+0x676/0x790
[  188.811387][ T9214]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  188.811387][ T9214] RIP: 0033:0x4141b1
[  188.811387][ T9214] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  188.811387][ T9214] RSP: 002b:00007f37282b37b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  188.811387][ T9214] RAX: ffffffffffffffea RBX: 6666666666666667 RCX: 00000000004141b1
[  188.811387][ T9214] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00007f37282b3860
[  188.811387][ T9214] RBP: 00007f37282b3860 R08: 000000000000000f R09: 0000000000000000
[  188.811387][ T9214] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f37282b46d4
[  188.811387][ T9214] R13: 00000000004b1ed8 R14: 00000000006f8270 R15: 00000000ffffffff
[  188.811387][ T9214] Kernel Offset: disabled
[  188.811387][ T9214] Rebooting in 86400 seconds..