[ 37.834063] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.58' (ECDSA) to the list of known hosts. [ 43.396403] random: sshd: uninitialized urandom read (32 bytes read) 2019/07/18 18:18:29 fuzzer started [ 43.601965] audit: type=1400 audit(1563473909.667:36): avc: denied { map } for pid=7120 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.659388] random: cc1: uninitialized urandom read (8 bytes read) 2019/07/18 18:18:32 dialing manager at 10.128.0.105:43305 2019/07/18 18:18:32 syscalls: 2446 2019/07/18 18:18:32 code coverage: enabled 2019/07/18 18:18:32 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/07/18 18:18:32 extra coverage: extra coverage is not supported by the kernel 2019/07/18 18:18:32 setuid sandbox: enabled 2019/07/18 18:18:32 namespace sandbox: enabled 2019/07/18 18:18:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/18 18:18:32 fault injection: enabled 2019/07/18 18:18:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/18 18:18:32 net packet injection: enabled 2019/07/18 18:18:32 net device setup: enabled [ 48.242506] random: crng init done 18:20:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180), 0x132472) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 18:20:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x5, 0x80}, 0xc) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 18:20:18 executing program 1: msgget(0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgrp(0x0) socket$inet_smc(0x2b, 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001040)=[&(0x7f00000008c0)='TIPC\x00', &(0x7f0000000940)='system_u:object_r:pam_var_run_t:s0\x00', &(0x7f0000000980)='\r\x00', &(0x7f00000010c0)='systemuser[bdev\x00', &(0x7f0000000a00)='security.capability\x00', &(0x7f0000000a40)='security.capability\x00', &(0x7f0000000f80)='TIPC\x00', &(0x7f0000000fc0)=']\x00', &(0x7f0000001000)='em1\x00'], 0x0) 18:20:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, &(0x7f0000000180)='vfat\x00') 18:20:18 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x3c) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x18) r4 = openat$cgroup_type(r0, &(0x7f0000000280)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000002c0)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 151.947742] audit: type=1400 audit(1563474018.007:37): avc: denied { map } for pid=7120 comm="syz-fuzzer" path="/root/syzkaller-shm007630630" dev="sda1" ino=16490 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 18:20:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) [ 151.979527] audit: type=1400 audit(1563474018.037:38): avc: denied { map } for pid=7138 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13818 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 152.660241] IPVS: ftp: loaded support on port[0] = 21 [ 152.956080] chnl_net:caif_netlink_parms(): no params data found [ 152.963451] IPVS: ftp: loaded support on port[0] = 21 [ 153.020353] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.027086] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.034330] device bridge_slave_0 entered promiscuous mode [ 153.045093] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.051948] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.058897] device bridge_slave_1 entered promiscuous mode [ 153.073295] IPVS: ftp: loaded support on port[0] = 21 [ 153.087937] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.099424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.125591] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.132854] team0: Port device team_slave_0 added [ 153.144187] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.152076] team0: Port device team_slave_1 added [ 153.160157] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.167860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.232735] device hsr_slave_0 entered promiscuous mode [ 153.270422] device hsr_slave_1 entered promiscuous mode [ 153.318267] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.328029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.389335] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.395873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.402867] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.409234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.418806] chnl_net:caif_netlink_parms(): no params data found [ 153.425104] IPVS: ftp: loaded support on port[0] = 21 [ 153.547407] IPVS: ftp: loaded support on port[0] = 21 [ 153.561424] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.567844] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.575709] device bridge_slave_0 entered promiscuous mode [ 153.584237] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.590772] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.597663] device bridge_slave_1 entered promiscuous mode [ 153.604034] chnl_net:caif_netlink_parms(): no params data found [ 153.646615] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 153.672918] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.737054] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.744163] team0: Port device team_slave_0 added [ 153.749706] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.757056] team0: Port device team_slave_1 added [ 153.784505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.809031] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.815555] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.822611] device bridge_slave_0 entered promiscuous mode [ 153.829064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.836819] chnl_net:caif_netlink_parms(): no params data found [ 153.862635] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.869008] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.876263] device bridge_slave_1 entered promiscuous mode [ 153.909454] IPVS: ftp: loaded support on port[0] = 21 [ 153.943725] device hsr_slave_0 entered promiscuous mode [ 153.990884] device hsr_slave_1 entered promiscuous mode [ 154.051926] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 154.058030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.082072] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.089181] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.097442] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 154.106904] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.114501] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.131270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.159722] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.166555] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.173536] device bridge_slave_0 entered promiscuous mode [ 154.182484] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.210704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.222731] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.229113] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.236379] device bridge_slave_1 entered promiscuous mode [ 154.252549] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.259623] team0: Port device team_slave_0 added [ 154.265604] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.273127] team0: Port device team_slave_1 added [ 154.298171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.306237] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.355927] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.364182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.373592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.380542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.391265] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.399090] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 154.405422] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.417494] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.437821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.459680] chnl_net:caif_netlink_parms(): no params data found [ 154.468159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.476227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.483836] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.490225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.564274] device hsr_slave_0 entered promiscuous mode [ 154.600516] device hsr_slave_1 entered promiscuous mode [ 154.660698] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.668052] team0: Port device team_slave_0 added [ 154.691892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.717032] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 154.724353] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.732190] team0: Port device team_slave_1 added [ 154.738247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.746671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.765893] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.772328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.790713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 154.800673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.812478] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.819731] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.827201] device bridge_slave_0 entered promiscuous mode [ 154.834552] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.841366] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.848259] device bridge_slave_1 entered promiscuous mode [ 154.855848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 154.866584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.893235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.960641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.002343] device hsr_slave_0 entered promiscuous mode [ 155.040529] device hsr_slave_1 entered promiscuous mode [ 155.080925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.088140] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.106581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.115138] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.133328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.143855] chnl_net:caif_netlink_parms(): no params data found [ 155.165950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.193384] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.202165] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.208763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.217068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.227733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 155.236047] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.243387] team0: Port device team_slave_0 added [ 155.249111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 155.257025] team0: Port device team_slave_1 added [ 155.262698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 155.271423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.279151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.286997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.298160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 155.306712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 155.331281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.340547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.350519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.412393] device hsr_slave_0 entered promiscuous mode [ 155.450350] device hsr_slave_1 entered promiscuous mode [ 155.490933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.498665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 155.508294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.522138] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.528599] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.536033] device bridge_slave_0 entered promiscuous mode [ 155.543451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.553219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.560826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.571647] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 155.577695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.588484] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.595407] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.602488] device bridge_slave_1 entered promiscuous mode [ 155.626376] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.638496] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.653143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.663282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.677199] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 155.689762] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.696122] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.705389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.714067] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.729731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.741889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.749945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.758223] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.764734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.774696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.783335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.796655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.813105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.824241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.835484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.843682] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.850137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.859387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.877222] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.886227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.899160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.909271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.927445] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.936047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.945386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.952655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.960237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 155.967428] team0: Port device team_slave_0 added [ 155.975637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 155.984327] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.994358] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.005933] team0: Port device team_slave_1 added [ 156.012324] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.021282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.028977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.041283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.055243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.064117] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.071651] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.082854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.089268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.106634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.114086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.121926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.129495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.137170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.144934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.152181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.161545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 156.182502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.194493] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 156.200927] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.217960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.225828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.233470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.241634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.249207] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.255618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.263431] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 156.269822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.283080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.333978] device hsr_slave_0 entered promiscuous mode [ 156.360413] device hsr_slave_1 entered promiscuous mode [ 156.414597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.421928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.429709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.438206] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.444690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.460767] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 156.469899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.478935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.487247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.501189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.513386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.524401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.534192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.548599] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.560374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.568232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.586372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.595274] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.601701] bridge0: port 1(bridge_slave_0) entered forwarding state 18:20:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x5, 0x80}, 0xc) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 156.609581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.619533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.635035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.649515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.665513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.685189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.693396] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.699764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.706925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.720167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 156.731142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.739348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.754926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.764889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.772904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.781011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.788705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.796869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.804537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.812359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.821944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.831756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.867616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.875673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.884069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.891280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.899106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.910527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.918136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.927933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.937737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 156.949850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 18:20:23 executing program 5: 18:20:23 executing program 5: [ 156.969901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.988600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.997268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.028037] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.035170] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.043641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.058885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 18:20:23 executing program 5: 18:20:23 executing program 5: 18:20:23 executing program 5: [ 157.083203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.089370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.107545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.118655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.155198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.165694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.193202] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.199596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.227999] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.238419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.259987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.267977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:20:23 executing program 0: 18:20:23 executing program 5: [ 157.275978] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.282390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.307320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.325518] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.346707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.358083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.378700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.387261] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.393773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.409230] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.419874] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.433023] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 157.439912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.447522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.456457] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 157.462876] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.473097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.481281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.489518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.496528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.504639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.512920] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.519380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.526432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.536714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.552151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.561021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.568015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.580570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.588396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.597294] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.603720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.611085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.627432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.636747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.645617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.655564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.663771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.674793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.682892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.689920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.701614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.715026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.725615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 157.736946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.747127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.754749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.765169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 157.775648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.784333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.792472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.800197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.807780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.818566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.828672] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 157.835063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.842318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.849538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.857606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.878900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 18:20:24 executing program 1: [ 157.909710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.925794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.957057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 157.975316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.985528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.994664] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.007314] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.015610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.035298] 8021q: adding VLAN 0 to HW filter on device batadv0 18:20:24 executing program 2: [ 158.056940] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 158.101573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.318726] hrtimer: interrupt took 45359 ns 18:20:25 executing program 5: 18:20:25 executing program 1: 18:20:25 executing program 0: 18:20:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x187, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0xffff80fe]}}, 0x1c) 18:20:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) 18:20:25 executing program 2: 18:20:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000340)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) 18:20:25 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x69e}}], 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') 18:20:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0xcf, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x9}) 18:20:25 executing program 2: 18:20:25 executing program 3: 18:20:25 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xa6}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:20:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x334, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="02000f000a000200aaaaaaaaaaba0000bd"], 0x42e}}, 0x0) 18:20:25 executing program 3: io_setup(0x14, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00\x02\x00\x97\x00\x00\x00\x03\x00\x00\xf6\xff\x00', 0x9012}) io_submit(r0, 0x8, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000080), 0x200001cd}]) 18:20:25 executing program 1: r0 = memfd_create(&(0x7f0000000280)='#g\x04\x00\x00\x00\x10r\xe9\xdf\xb1\xb9a\xb7\x11\x98\xdb\xabT\xf0\xd4#\xc8\xcfr\xe2 \xfe\x15\xd2G\xa4\xf1\xb7\xd27\xe0N\x11\x86i\x80\xaeI\x9b\xcfAd8\x03\x11O9\xe7!8\x82\xeag!\xb6\xbb\x06\xc0P\x99L', 0x0) write(r0, &(0x7f00000001c0)='$', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{}], 0x1, 0x0) 18:20:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000340)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) 18:20:25 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) dup2(r0, r1) [ 159.649368] bridge_slave_0: FDB only supports static addresses 18:20:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x3d, &(0x7f0000b67000), &(0x7f0000000000)=0xfffffffffffffff5) 18:20:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x2da, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0xfffffe9c) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) [ 159.721489] audit: type=1400 audit(1563474025.787:39): avc: denied { map } for pid=7306 comm="syz-executor.1" path=2F6D656D66643A236704202864656C6574656429 dev="tmpfs" ino=26709 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 18:20:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000340)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) 18:20:25 executing program 1: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0x80}, {0x0, 0x1}, {0x0, 0x0, 0x800}], 0x3) 18:20:25 executing program 2: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0x80}, {0x0, 0x1}, {0x0, 0x8001}], 0x3) 18:20:25 executing program 1: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0x80}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8001}], 0x4) 18:20:26 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x220141042, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x3ed) ftruncate(r1, 0x28007a) sendfile(r0, r1, 0x0, 0x7fffffff) 18:20:26 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) 18:20:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) 18:20:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff84}}, &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) sendto$inet(r0, &(0x7f00000009c0)=' ', 0x1, 0x0, 0x0, 0x0) 18:20:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x0, 0x0, r2}) 18:20:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x6, 0x2, r2}) [ 160.057209] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:20:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) 18:20:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) 18:20:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000180007041dfffd946f6105000a00000a1f0000070028080008001e0004001000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 18:20:26 executing program 0: r0 = socket$inet6(0xa, 0x200000006, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = accept(r1, 0x0, &(0x7f0000000300)) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000380)={0x4, 0x2b5, 0x1, 0x6, 0xffffffffffffffe0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 18:20:26 executing program 1: r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 18:20:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="c4fabe2310fa3d24533fdb6b2f3c5338dcdbfc0142c89bfd73dd5b6395559dc2e6cf28266468e0f55ca138e19f201566c743bd5fa80963059a83847b7e89ea6833958880bd54fdb3d3adfcad4fc64c", 0x4f}], 0x1, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/101, 0x65}], 0x1}}], 0x2, 0x0, 0x0) [ 160.367611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.378711] audit: type=1400 audit(1563474026.437:40): avc: denied { name_bind } for pid=7370 comm="syz-executor.0" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 160.503424] audit: type=1400 audit(1563474026.437:41): avc: denied { node_bind } for pid=7370 comm="syz-executor.0" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 160.577197] audit: type=1400 audit(1563474026.447:42): avc: denied { create } for pid=7370 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 160.606529] audit: type=1400 audit(1563474026.447:43): avc: denied { write } for pid=7370 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 160.631162] audit: type=1400 audit(1563474026.527:44): avc: denied { read } for pid=7370 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:20:26 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) 18:20:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) 18:20:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003a0081aee4050cecdb4cb9040a485e510befccdf7f3e9cf0758ef900e1cf3aebb1cb4c100c0003720000", 0x2e}], 0x1}, 0x0) 18:20:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001300)={@local, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) 18:20:26 executing program 3: 18:20:26 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0xf00) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 18:20:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) dup3(r1, r0, 0x0) 18:20:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae05, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 160.935223] mmap: syz-executor.2 (7407) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 18:20:27 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="3a88534a97a8762a515dec93baf4a98161978016df6ec750ae029bc63789b59ee60ceccefa40735c25107d52d18753", 0x2f}], 0x4}}], 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:20:27 executing program 5: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00000000c0)="1f0000000104ff007d4354c007110040f305010008000100010423daffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000010d10200cf", 0x1f) 18:20:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r3}, {r1}], 0x2, 0x0) [ 161.124350] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 161.157578] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 161.184156] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:20:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) close(r0) 18:20:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:27 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0xf00) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) 18:20:27 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040200000000006cf8078d2d6855ab8c3f5ab465587d4ff839a2695d11724399ef7d7b7f6d18cb66431515abb5cbb8c21fb289727ff05a01adbd47e8e41118bdaf6c26f99f5223248ab1f62daa454fd58a83a0f02fd78bdb4b179f07371280a8429d20832e934b830052988ed5037103e1c1e1e0f004d00d4fbb5bda000bbed1df121dde2055f03c34b227590f6e92aef23231fe264966063417a25d7e51342e354b3b"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r1, 0x4) 18:20:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000240)) 18:20:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) close(r0) 18:20:27 executing program 2: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 18:20:30 executing program 1: 18:20:30 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040200000000006cf8078d2d6855ab8c3f5ab465587d4ff839a2695d11724399ef7d7b7f6d18cb66431515abb5cbb8c21fb289727ff05a01adbd47e8e41118bdaf6c26f99f5223248ab1f62daa454fd58a83a0f02fd78bdb4b179f07371280a8429d20832e934b830052988ed5037103e1c1e1e0f004d00d4fbb5bda000bbed1df121dde2055f03c34b227590f6e92aef23231fe264966063417a25d7e51342e354b3b"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480), 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 18:20:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x5, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 18:20:30 executing program 4: 18:20:30 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 1: 18:20:30 executing program 3: 18:20:30 executing program 4: 18:20:30 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 1: 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 4: 18:20:30 executing program 3: 18:20:30 executing program 2: 18:20:30 executing program 0: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 1: 18:20:30 executing program 4: 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 2: 18:20:30 executing program 3: 18:20:30 executing program 0: r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 4: 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 1: 18:20:30 executing program 2: 18:20:30 executing program 4: 18:20:30 executing program 0: r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 3: 18:20:30 executing program 2: 18:20:30 executing program 1: 18:20:30 executing program 2: 18:20:30 executing program 0: r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 3: 18:20:30 executing program 4: 18:20:30 executing program 1: 18:20:30 executing program 4: 18:20:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 1: 18:20:30 executing program 2: 18:20:30 executing program 3: 18:20:30 executing program 4: 18:20:30 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:30 executing program 1: 18:20:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:30 executing program 2: 18:20:30 executing program 4: 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:31 executing program 4: 18:20:31 executing program 2: 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 4: 18:20:31 executing program 2: 18:20:31 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 4: 18:20:31 executing program 2: 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:31 executing program 2: 18:20:31 executing program 4: 18:20:31 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 1: 18:20:31 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:31 executing program 3: 18:20:31 executing program 2: 18:20:31 executing program 4: 18:20:31 executing program 1: 18:20:31 executing program 3: 18:20:31 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) 18:20:31 executing program 1: 18:20:31 executing program 4: 18:20:31 executing program 2: 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) 18:20:31 executing program 4: 18:20:31 executing program 3: 18:20:31 executing program 2: 18:20:31 executing program 1: 18:20:31 executing program 4: 18:20:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) 18:20:31 executing program 2: 18:20:31 executing program 4: 18:20:31 executing program 2: 18:20:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:31 executing program 3: 18:20:31 executing program 1: 18:20:31 executing program 4: 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:32 executing program 1: 18:20:32 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:32 executing program 3: 18:20:32 executing program 2: 18:20:32 executing program 4: 18:20:32 executing program 3: 18:20:32 executing program 1: 18:20:32 executing program 3: 18:20:32 executing program 5: syz_open_dev$vcsa(0x0, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:32 executing program 2: 18:20:32 executing program 1: 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:32 executing program 4: 18:20:32 executing program 3: 18:20:32 executing program 5: syz_open_dev$vcsa(0x0, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:32 executing program 2: 18:20:32 executing program 1: 18:20:32 executing program 4: 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, [], &(0x7f00000000c0)={0x980903, 0x0, [], @p_u8=0x0}}) 18:20:32 executing program 2: 18:20:32 executing program 3: 18:20:32 executing program 1: 18:20:32 executing program 4: 18:20:32 executing program 5: syz_open_dev$vcsa(0x0, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], 0x0}) 18:20:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x80000001) 18:20:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x15, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="096310400000400000000000000000000000000200"], 0x0, 0x48, 0x0}) 18:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001e0007041dfffd946f610500020000001f00000000000800400016000400ff7e", 0x24}], 0x1}, 0x0) 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], 0x0}) 18:20:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="126348400000400000000000000000000000000200000000000000f7ffffff000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="852a7470"], @ANYPTR=&(0x7f0000000280)=ANY=[]], 0x1f, 0x48, 0x0}) [ 166.467177] binder: 7749:7754 unknown command 0 18:20:32 executing program 2: 18:20:32 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 166.504267] binder: 7749:7754 ioctl c0306201 20000600 returned -22 18:20:32 executing program 1: 18:20:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], 0x0}) 18:20:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000b65000/0x4000)=nil, 0x3) [ 166.591806] binder: 7758:7764 ioctl c0306201 20000600 returned -14 18:20:32 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:32 executing program 4: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='statfs_quantum=0x0000000000000004,suiddir,nosuiddir,nosuiddir,acl,quota,commit=0x00000000000001ff,spectator']) 18:20:32 executing program 1: fanotify_init(0x8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x0, 0x0, [], @p_u8=0x0}}) 18:20:32 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x0, 0x401, 0x4, {0xb, @vbi={0x0, 0x8}}}) 18:20:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x3f00) 18:20:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x8}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffdaf) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 18:20:32 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x91nm\xe0/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x2, 0x0, [], &(0x7f00000000c0)={0x0, 0x0, [], @p_u8=0x0}}) [ 166.797243] gfs2: not a GFS2 filesystem [ 166.844491] kasan: CONFIG_KASAN_INLINE enabled [ 166.859363] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 166.884528] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 166.890807] Modules linked in: [ 166.894002] CPU: 0 PID: 7790 Comm: syz-executor.2 Not tainted 4.14.133 #28 [ 166.896002] kobject: 'loop5' (ffff8880a4b333a0): kobject_uevent_env [ 166.901007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.901013] task: ffff88808f56e280 task.stack: ffff88808a500000 [ 166.901026] RIP: 0010:refcount_sub_and_test+0x2b/0xf0 [ 166.901029] RSP: 0018:ffff88808a507b98 EFLAGS: 00010202 [ 166.901035] RAX: dffffc0000000000 RBX: ffff88809c03e500 RCX: ffffffff8424e600 18:20:32 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 166.901039] RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001 [ 166.901043] RBP: ffff88808a507bc0 R08: 0000000096a752e1 R09: ffff88808f56eb48 [ 166.901046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 [ 166.901050] R13: 0000000000000001 R14: ffff88809c03e514 R15: 0000000000000000 [ 166.901055] FS: 0000000001da8940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 166.901059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.901064] CR2: 00007fc6e2830e00 CR3: 000000009de39000 CR4: 00000000001406f0 [ 166.901069] Call Trace: [ 166.901080] refcount_dec_and_test+0x1b/0x20 [ 166.901088] vb2_vmalloc_put+0x18/0x70 [ 166.901099] __vb2_buf_mem_free+0x103/0x1e0 [ 166.914218] kobject: 'loop5' (ffff8880a4b333a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 166.916860] ? vb2_vmalloc_dmabuf_ops_attach+0x3f0/0x3f0 [ 166.916872] __vb2_queue_free+0x634/0x7d0 [ 166.935292] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 166.940755] vb2_core_queue_release+0x64/0x80 [ 166.940764] _vb2_fop_release+0x1cf/0x2a0 18:20:33 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 166.940771] vb2_fop_release+0x75/0xc0 [ 166.940779] vivid_fop_release+0x180/0x3f0 [ 166.940785] ? vivid_remove+0x3d0/0x3d0 [ 166.940791] ? dev_debug_store+0xe0/0xe0 [ 166.940802] v4l2_release+0xf9/0x190 [ 167.064552] __fput+0x275/0x7a0 [ 167.064564] ____fput+0x16/0x20 [ 167.071126] task_work_run+0x114/0x190 [ 167.075013] exit_to_usermode_loop+0x1da/0x220 [ 167.079597] do_syscall_64+0x4bc/0x640 [ 167.080963] kobject: 'loop5' (ffff8880a4b333a0): kobject_uevent_env [ 167.083503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.083516] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 167.083523] RIP: 0033:0x413501 [ 167.083530] RSP: 002b:00007ffc3089d2e0 EFLAGS: 00000293 [ 167.093689] kobject: 'loop5' (ffff8880a4b333a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 167.094837] ORIG_RAX: 0000000000000003 [ 167.094842] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413501 [ 167.094846] RDX: 0000001b32120000 RSI: 0000000000000000 RDI: 0000000000000003 [ 167.094850] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf 18:20:33 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) r0 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 18:20:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 167.094854] R10: 00007ffc3089d3c0 R11: 0000000000000293 R12: 000000000075bf20 [ 167.094858] R13: 0000000000028bb9 R14: 00000000007608e0 R15: ffffffffffffffff [ 167.094868] Code: 55 48 89 e5 41 56 41 55 41 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 66 b1 85 fe 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 167.170822] kobject: 'loop5' (ffff8880a4b333a0): kobject_uevent_env [ 167.177954] RIP: refcount_sub_and_test+0x2b/0xf0 RSP: ffff88808a507b98 [ 167.204663] syz-executor.1 (7808) used greatest stack depth: 23880 bytes left [ 167.207040] kobject: 'loop4' (ffff8880a4af8aa0): kobject_uevent_env [ 167.223880] ---[ end trace 8a5438bcce5e7f47 ]--- [ 167.229132] kobject: 'loop5' (ffff8880a4b333a0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 167.229465] kobject: 'loop4' (ffff8880a4af8aa0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 167.238694] Kernel panic - not syncing: Fatal exception [ 167.239693] Kernel Offset: disabled [ 167.258071] Rebooting in 86400 seconds..