Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c[ 37.213521] audit: type=1800 audit(1568244911.301:33): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 . [ 37.237238] audit: type=1800 audit(1568244911.301:34): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.821625] audit: type=1400 audit(1568244915.911:35): avc: denied { map } for pid=7476 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.249' (ECDSA) to the list of known hosts. 2019/09/11 23:35:22 fuzzer started [ 48.338961] audit: type=1400 audit(1568244922.421:36): avc: denied { map } for pid=7485 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/11 23:35:23 dialing manager at 10.128.0.105:33995 2019/09/11 23:35:24 syscalls: 2482 2019/09/11 23:35:24 code coverage: enabled 2019/09/11 23:35:24 comparison tracing: enabled 2019/09/11 23:35:24 extra coverage: extra coverage is not supported by the kernel 2019/09/11 23:35:24 setuid sandbox: enabled 2019/09/11 23:35:24 namespace sandbox: enabled 2019/09/11 23:35:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/11 23:35:24 fault injection: enabled 2019/09/11 23:35:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/11 23:35:24 net packet injection: enabled 2019/09/11 23:35:24 net device setup: enabled 23:37:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) [ 195.099086] audit: type=1400 audit(1568245069.181:37): avc: denied { map } for pid=7502 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1158 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 195.179599] IPVS: ftp: loaded support on port[0] = 21 [ 195.280750] chnl_net:caif_netlink_parms(): no params data found 23:37:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x831000, 0x0) [ 195.327824] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.336918] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.344811] device bridge_slave_0 entered promiscuous mode [ 195.372465] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.378940] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.390955] device bridge_slave_1 entered promiscuous mode [ 195.433704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.442936] IPVS: ftp: loaded support on port[0] = 21 [ 195.454379] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.502910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.511305] team0: Port device team_slave_0 added [ 195.527889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.536393] team0: Port device team_slave_1 added [ 195.553915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.561746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 23:37:49 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00\x85wj\x06>\x19\xac\xd0\xaa\x18ps\xf3\x17\xe9,\xfc', 0x0, 0x0) [ 195.651934] device hsr_slave_0 entered promiscuous mode [ 195.689347] device hsr_slave_1 entered promiscuous mode [ 195.750036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.757101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.778952] chnl_net:caif_netlink_parms(): no params data found 23:37:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2a, 0x0, 0x0) [ 195.795953] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.802506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.809522] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.813040] IPVS: ftp: loaded support on port[0] = 21 [ 195.816000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.936069] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.949092] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.956331] device bridge_slave_0 entered promiscuous mode [ 195.982191] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.988568] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.008827] device bridge_slave_1 entered promiscuous mode [ 196.043331] IPVS: ftp: loaded support on port[0] = 21 23:37:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001f40)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) socket$xdp(0x2c, 0x3, 0x0) [ 196.101449] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 196.107564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.120984] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.150719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.174029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.239475] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 196.246133] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.258169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.267452] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.285434] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.293353] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 196.308743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.318209] team0: Port device team_slave_0 added [ 196.351747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.361570] team0: Port device team_slave_1 added [ 196.367449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.377993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.391155] chnl_net:caif_netlink_parms(): no params data found [ 196.405497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.415577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.417637] IPVS: ftp: loaded support on port[0] = 21 [ 196.427085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 196.443577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:37:50 executing program 5: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./bus\x00', 0x6, 0x0) [ 196.455855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.467462] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.473934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.484550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.492774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.503345] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.509988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.517222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.545738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 196.568649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.631076] device hsr_slave_0 entered promiscuous mode [ 196.689508] device hsr_slave_1 entered promiscuous mode [ 196.729882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 196.749198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 196.767941] IPVS: ftp: loaded support on port[0] = 21 [ 196.778934] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 196.789464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.797483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.805343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.818384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.838656] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.846371] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.854109] device bridge_slave_0 entered promiscuous mode [ 196.861449] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.867891] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.875453] device bridge_slave_1 entered promiscuous mode [ 196.890146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.898113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.910520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 196.943471] chnl_net:caif_netlink_parms(): no params data found [ 196.957756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.967109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.977529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 196.991954] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.004087] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.022847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.033021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.044880] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.075571] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.081830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.122787] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.131318] team0: Port device team_slave_0 added [ 197.137301] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.144892] team0: Port device team_slave_1 added [ 197.164282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.176024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.200432] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.206839] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.214693] device bridge_slave_0 entered promiscuous mode [ 197.222395] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.228816] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.236254] device bridge_slave_1 entered promiscuous mode [ 197.259632] chnl_net:caif_netlink_parms(): no params data found [ 197.311442] device hsr_slave_0 entered promiscuous mode [ 197.349568] device hsr_slave_1 entered promiscuous mode [ 197.390395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.398066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.416628] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.429214] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 197.453049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.474059] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.481585] team0: Port device team_slave_0 added [ 197.487479] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.495040] team0: Port device team_slave_1 added [ 197.513893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.525723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.533632] audit: type=1400 audit(1568245071.611:38): avc: denied { associate } for pid=7503 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 197.599667] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.606257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.642853] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.650938] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.664702] device bridge_slave_0 entered promiscuous mode [ 197.676798] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.683554] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.691024] device bridge_slave_1 entered promiscuous mode [ 197.722229] device hsr_slave_0 entered promiscuous mode [ 197.759664] device hsr_slave_1 entered promiscuous mode 23:37:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt(r3, 0x0, 0x0, 0x0, 0x0) [ 197.802568] chnl_net:caif_netlink_parms(): no params data found [ 197.838224] bond0: Enslaving bond_slave_0 as an active interface with an up link 23:37:52 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\x84\x0e\x13s\xf1\xb5\x05\xe2qO\xb8\x893\x81`\xd2\x99\x96\x01\x00\x00\x00\x00\x00\x00\x00\x1c\a\xd0#\x05%\x18\x17Z\xa2gS\xc1\xe0\v\xcb\t\xe6\xe6*\xe9\xa3\xdc\x91', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) clone(0x402102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x1000) r2 = dup3(r1, r0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) [ 197.858520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.870920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.888288] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.931064] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.948499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.959967] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.975861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.984812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.992476] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.000783] team0: Port device team_slave_0 added [ 198.011371] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.017445] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.031117] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.038016] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.045503] device bridge_slave_0 entered promiscuous mode [ 198.053094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.060740] team0: Port device team_slave_1 added [ 198.066201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.074082] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.080597] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.089328] device bridge_slave_1 entered promiscuous mode [ 198.101192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.125946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.190884] device hsr_slave_0 entered promiscuous mode [ 198.229304] device hsr_slave_1 entered promiscuous mode [ 198.270111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.279685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.287524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.295366] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.301753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.309314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.318167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.329937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.338361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.355859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.362474] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.372440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.380588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.388312] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.394820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.404119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.412318] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.422002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.431998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.452918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.461545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.468869] team0: Port device team_slave_0 added [ 198.475904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.485689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.492980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.500361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.510620] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.516708] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.523904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.532905] team0: Port device team_slave_1 added [ 198.538822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.554348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.561971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.571132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.579162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.587174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.595204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.602899] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.609294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.618077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.625604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.634971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.644977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.653269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.662026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.671798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.679819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.687291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.696803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.707367] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.722483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.732026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.742269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.759186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.767057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 23:37:52 executing program 0: [ 198.775360] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.781780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.789644] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.795677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:37:52 executing program 0: [ 198.819988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 23:37:52 executing program 0: 23:37:53 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\x84\x0e\x13s\xf1\xb5\x05\xe2qO\xb8\x893\x81`\xd2\x99\x96\x01\x00\x00\x00\x00\x00\x00\x00\x1c\a\xd0#\x05%\x18\x17Z\xa2gS\xc1\xe0\v\xcb\t\xe6\xe6*\xe9\xa3\xdc\x91', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) clone(0x402102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) [ 198.871857] device hsr_slave_0 entered promiscuous mode [ 198.910465] device hsr_slave_1 entered promiscuous mode [ 198.959866] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.966975] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.984142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.995223] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.012318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.021085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.036577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.047001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.065811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.082650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.094931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.109675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.117593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.126215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.135558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.146366] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.161971] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.176788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.187883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.196039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.204922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.215692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.223749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.237163] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.244244] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.263357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.281464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.290920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.298687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.307839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.316291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.324170] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.330579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.339649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.356158] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.363421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.373164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.386629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.394158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.402592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.410756] bridge0: port 2(bridge_slave_1) entered blocking state 23:37:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0300fc0010000b400c000200053582c137153e370900018004081700d1bd", 0x2e}], 0x1}, 0x0) [ 199.417142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.427782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.445010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.457991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.471613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.478579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.487275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.503490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.513908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.522218] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.532067] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.541974] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.542764] audit: type=1400 audit(1568245073.631:39): avc: denied { create } for pid=7565 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 199.575320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.575893] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 199.588135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.605865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.613991] audit: type=1400 audit(1568245073.661:40): avc: denied { write } for pid=7565 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 199.616941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.649746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.657678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.668332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.676686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.684684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.692403] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.698767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.705825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.713647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.721602] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.727947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.735150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.742370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.754801] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.762359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 23:37:53 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xffffff23) clone(0xf102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) read(r3, &(0x7f0000000200)=""/101, 0x65) dup3(r1, r3, 0x0) tkill(r2, 0x1000400000013) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') [ 199.774685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.783386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.810359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.817446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.852796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.868061] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.878692] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.889408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.906854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.916035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.939396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.947409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.961497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.973377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.989676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.010620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.018366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.026349] Error parsing options; rc = [-22] [ 200.043907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:37:54 executing program 2: [ 200.060930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.081079] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.087545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.102337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.113342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.136307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.148283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.164403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.176996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.194638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.209926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.217136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.226614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.234509] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.240924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.248667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.257117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.268532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.276864] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.287285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.298296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.311688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.321458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.335708] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 200.342603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.356830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.364965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.379831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.389376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.398893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.414688] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.421895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.434858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.444901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.453076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.463737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.485206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.494235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.507976] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 200.515268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.523424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.533396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.547531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.562219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.575760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.584648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.598842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.610465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.620365] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.626422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:37:54 executing program 3: [ 200.665903] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 200.716308] 8021q: adding VLAN 0 to HW filter on device batadv0 23:37:54 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, 0x0) 23:37:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r4, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) 23:37:54 executing program 0: 23:37:54 executing program 2: 23:37:54 executing program 1: 23:37:54 executing program 3: 23:37:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$rose(r5, 0x104, 0x0, 0x0, &(0x7f0000000000)=0xfffffdbe) 23:37:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet6_opts(r1, 0x29, 0x1d, 0x0, &(0x7f0000000080)) 23:37:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000684e6750000"], 0x8) 23:37:55 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="5500000018007f5f00fe02b2a4a280930206030000040001000000103900090035000c021400000019000540a8000600000022dc1338d54600009b84016ef75afb83de4411001220c47eb8220000060cec4fab91d4", 0x55}], 0x1, 0x0, 0x97}, 0x0) r0 = socket(0x10, 0x400000100080003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924af, 0x0) [ 200.931434] audit: type=1400 audit(1568245075.021:41): avc: denied { read } for pid=7615 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.977553] hrtimer: interrupt took 26279 ns 23:37:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)) 23:37:55 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, 0x0) 23:37:55 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r1, 0x0, r3, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x5, 0x0, 0x0) 23:37:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x304}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 23:37:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07005607080002000000070600000ee60000bf050000000000003d630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:37:55 executing program 2: unshare(0x24020400) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xffffffffffffff80}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 23:37:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)) [ 201.258110] audit: type=1400 audit(1568245075.331:42): avc: denied { prog_load } for pid=7649 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 23:37:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001f40)="11dca50d5e0bcfe47bf070") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84180) 23:37:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x8455d1a1, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="780000002c00010700"/20, @ANYRES32=r1, @ANYBLOB="00000000000000000600000008000100627066004c00020008000600", @ANYRES32, @ANYBLOB="400002003c000100020000000006000000000000000000000000000003000000000000003f00"/64], 0x78}}, 0x0) 23:37:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07005606070002000000070600000ee60000bf050000000000003d630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:37:55 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @gre}}}}, 0x0) 23:37:55 executing program 2: bind$llc(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:37:55 executing program 4: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x2f4}], 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, &(0x7f00000000c0)) 23:37:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) [ 201.567963] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:37:55 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={[], 0x0}, 0x0, 'dummy0\x00'}) 23:37:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) 23:37:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0xd, 0x0, 0x0) 23:37:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x13, 0x0, 0x0) 23:37:56 executing program 4: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x2f4}], 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, &(0x7f00000000c0)) 23:37:56 executing program 0: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x2f4}], 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, &(0x7f00000000c0)) 23:37:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x8, 0x0, 0x0) 23:37:56 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") fcntl$lock(r0, 0x400000007, &(0x7f0000000080)={0x0, 0x0, 0x3f, 0xfffffffffffffffd}) 23:37:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07001506080002000000070600000ee60000bf050000000000003d630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:37:56 executing program 1: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000040)='./file0\x00', 0x1145, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff10e) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ptrace(0x11, r0) 23:37:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 23:37:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x5, 0x0, &(0x7f00000000c0)) [ 202.228353] audit: type=1400 audit(1568245076.311:43): avc: denied { prog_run } for pid=7720 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 23:37:56 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x2f4}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8120000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) 23:37:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x14, 0x0, 0x0) 23:37:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07001506080002000000070600000ee60000bf050000000000003d630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:37:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07001506080002000000070600000ee60000bf050000000000003d630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:37:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000053125c5f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 23:37:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca570286f7dc47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x14, 0x0, 0x0) 23:37:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07001506080002000000070600000ee60000bf050000000000003d630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:37:57 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1) [ 307.249078] rcu: INFO: rcu_preempt self-detected stall on CPU [ 307.255258] rcu: 1-...!: (10500 ticks this GP) idle=332/1/0x4000000000000002 softirq=11750/11750 fqs=0 [ 307.265200] rcu: (t=10500 jiffies g=6773 q=1139) [ 307.270141] rcu: rcu_preempt kthread starved for 10500 jiffies! g6773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 307.280704] rcu: RCU grace-period kthread stack dump: [ 307.285889] rcu_preempt I29424 10 2 0x80000000 [ 307.291518] Call Trace: [ 307.294211] __schedule+0x866/0x1dc0 [ 307.297924] ? pci_mmcfg_check_reserved+0x170/0x170 [ 307.303093] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 307.308276] ? lockdep_hardirqs_on+0x415/0x5d0 [ 307.313013] ? trace_hardirqs_on+0x67/0x220 [ 307.317333] schedule+0x92/0x1c0 [ 307.320697] schedule_timeout+0x4db/0xfc0 [ 307.324838] ? usleep_range+0x170/0x170 [ 307.328801] ? trace_hardirqs_on+0x67/0x220 [ 307.333173] ? kasan_check_read+0x11/0x20 [ 307.337339] ? __next_timer_interrupt+0x1a0/0x1a0 [ 307.342204] ? prepare_to_swait_exclusive+0x120/0x120 [ 307.347411] rcu_gp_kthread+0xd5c/0x2190 [ 307.351482] ? rcu_blocking_is_gp+0x90/0x90 [ 307.355792] ? trace_hardirqs_on+0x67/0x220 [ 307.360103] ? kasan_check_read+0x11/0x20 [ 307.364250] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 307.369412] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 307.374994] ? __kthread_parkme+0xfb/0x1b0 [ 307.379224] kthread+0x354/0x420 [ 307.382578] ? rcu_blocking_is_gp+0x90/0x90 [ 307.386895] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 307.392426] ret_from_fork+0x24/0x30 [ 307.396210] NMI backtrace for cpu 1 [ 307.399855] CPU: 1 PID: 7725 Comm: syz-executor.5 Not tainted 4.19.72 #0 [ 307.406698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.416038] Call Trace: [ 307.418607] [ 307.420768] dump_stack+0x172/0x1f0 [ 307.424389] nmi_cpu_backtrace.cold+0x63/0xa4 [ 307.428927] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 307.433847] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 307.439114] arch_trigger_cpumask_backtrace+0x14/0x20 [ 307.444292] rcu_dump_cpu_stacks+0x189/0x1d5 [ 307.448716] ? wake_up_process+0x10/0x20 [ 307.452796] rcu_check_callbacks.cold+0x5e3/0xd90 [ 307.457640] ? trace_hardirqs_off+0x62/0x220 [ 307.462091] update_process_times+0x32/0x80 [ 307.466435] tick_sched_handle+0xa2/0x190 [ 307.470580] tick_sched_timer+0x47/0x130 [ 307.474628] __hrtimer_run_queues+0x33b/0xdc0 [ 307.479118] ? tick_sched_do_timer+0x1b0/0x1b0 [ 307.483729] ? hrtimer_fixup_activate+0x30/0x30 [ 307.488553] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 307.493560] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 307.498920] hrtimer_interrupt+0x314/0x770 [ 307.503160] smp_apic_timer_interrupt+0x111/0x550 [ 307.508024] apic_timer_interrupt+0xf/0x20 [ 307.512243] [ 307.514555] RIP: 0010:hhf_dequeue+0x615/0xa00 [ 307.519041] Code: 49 8d 7f 08 4c 8b 73 08 48 89 fa 48 c1 ea 03 42 80 3c 22 00 0f 85 9f 03 00 00 4c 89 f2 4d 89 77 08 48 c1 ea 03 42 80 3c 22 00 <0f> 85 7c 03 00 00 4d 89 3e e8 3d d8 dc fb 4d 8d b5 58 03 00 00 4c [ 307.537931] RSP: 0018:ffff88805491f358 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 307.545634] RAX: 1ffff110130393b7 RBX: ffff8880981c9db8 RCX: ffffc900108cc000 [ 307.552902] RDX: 1ffff110130393ca RSI: ffffffff858e7df0 RDI: ffff8880981c9e58 [ 307.560166] RBP: ffff88805491f3a8 R08: ffff888054912440 R09: 0000000000000003 [ 307.567606] R10: ffff888054912d38 R11: 0000000003c770bf R12: dffffc0000000000 [ 307.574863] R13: ffff8880981c9b00 R14: ffff8880981c9e50 R15: ffff8880981c9e50 [ 307.582136] ? hhf_dequeue+0x5c0/0xa00 [ 307.586019] ? hhf_dequeue+0x5c0/0xa00 [ 307.589969] __qdisc_run+0x1e7/0x1960 [ 307.593811] __dev_queue_xmit+0x165c/0x2fe0 [ 307.598124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.603724] ? netdev_pick_tx+0x300/0x300 [ 307.607990] ? __copy_skb_header+0x33d/0x560 [ 307.612390] ? skb_checksum+0xc0/0xc0 [ 307.616183] ? rcu_read_lock_sched_held+0x110/0x130 [ 307.621284] ? kasan_check_write+0x14/0x20 [ 307.625508] ? __skb_clone+0x613/0x870 [ 307.629395] dev_queue_xmit+0x18/0x20 [ 307.633207] ? dev_queue_xmit+0x18/0x20 [ 307.637263] netlink_deliver_tap+0x910/0xc20 [ 307.641675] __netlink_sendskb+0x68/0xc0 [ 307.645746] netlink_unicast+0x616/0x720 [ 307.649812] ? netlink_attachskb+0x770/0x770 [ 307.654219] netlink_ack+0x645/0xb30 [ 307.657927] ? netlink_sendmsg+0xd70/0xd70 [ 307.662153] ? netlink_deliver_tap+0x22d/0xc20 [ 307.666725] ? find_held_lock+0x35/0x130 [ 307.670779] netlink_rcv_skb+0x382/0x460 [ 307.674879] ? rtnetlink_put_metrics+0x560/0x560 [ 307.679724] ? netlink_ack+0xb30/0xb30 [ 307.683651] ? kasan_check_read+0x11/0x20 [ 307.687809] ? netlink_deliver_tap+0x254/0xc20 [ 307.692493] rtnetlink_rcv+0x1d/0x30 [ 307.696205] netlink_unicast+0x537/0x720 [ 307.700264] ? netlink_attachskb+0x770/0x770 [ 307.704667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.710211] netlink_sendmsg+0x8ae/0xd70 [ 307.714269] ? netlink_unicast+0x720/0x720 [ 307.718571] ? selinux_socket_sendmsg+0x36/0x40 [ 307.723228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.728755] ? security_socket_sendmsg+0x8d/0xc0 [ 307.733505] ? netlink_unicast+0x720/0x720 [ 307.737857] sock_sendmsg+0xd7/0x130 [ 307.741574] ___sys_sendmsg+0x803/0x920 [ 307.745554] ? copy_msghdr_from_user+0x430/0x430 [ 307.750317] ? lock_downgrade+0x810/0x810 [ 307.754460] ? kasan_check_read+0x11/0x20 [ 307.758663] ? __fget+0x367/0x540 [ 307.762112] ? iterate_fd+0x360/0x360 [ 307.765902] ? lock_downgrade+0x810/0x810 [ 307.770040] ? __fget_light+0x1a9/0x230 [ 307.774007] ? __fdget+0x1b/0x20 [ 307.777363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.782891] __sys_sendmsg+0x105/0x1d0 [ 307.786766] ? __ia32_sys_shutdown+0x80/0x80 [ 307.791214] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.795993] ? do_syscall_64+0x26/0x620 [ 307.799970] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.805325] ? do_syscall_64+0x26/0x620 [ 307.809366] __x64_sys_sendmsg+0x78/0xb0 [ 307.813437] do_syscall_64+0xfd/0x620 [ 307.817252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.822440] RIP: 0033:0x4598e9 [ 307.825645] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.844540] RSP: 002b:00007fb1abc94c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.852258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 307.859518] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 307.868649] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.875956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1abc956d4 [ 307.883214] R13: 00000000004c77fb R14: 00000000004dd098 R15: 00000000ffffffff